Lawful Interception in Mobile Connect Identity Gateway

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Law enforcement agencies face difficulties in performing lawful interception in mobile connect contexts due to the lack of immediate access to personal data associated with technical target identities, requiring manual investigations and limited information availability.

Innovation Solution

A method involving an LI intercept access point function in an MC identity gateway that detects authentication and authorization procedures to obtain and provide personal data to a LI mediation and delivery function, facilitating the provision of personal data to law enforcement agencies during specified lawful interception intervals.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual investigation in proprietary databases is used to obtain personal data, then data privacy is protected, but law enforcement productivity and investigation speed deteriorate

Engineering Contradiction:
Improvedata privacy protectionVSAvoidlaw enforcement investigation speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent introduces an intermediary system that acts as a mediator between the secure personal data storage and law enforcement access requirements. This intermediary enables automated provision of personal data to law enforcement while maintaining privacy protections through controlled access mechanisms, thereby resolving the contradiction between data privacy protection and investigation speed.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If only technical target identities are provided to law enforcement, then system security is maintained, but measurement precision of target identification deteriorates

Engineering Contradiction:
Improvesystem securityVSAvoidtarget identification accuracy
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent implements preliminary actions by pre-establishing secure access mechanisms and authorization frameworks before law enforcement requests are made. This allows personal data to be rapidly provided when needed, improving target identification accuracy without compromising system security, as the security framework is already in place and does not require real-time negotiation.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If personal data is immediately available to law enforcement, then investigation efficiency improves, but data security and access control may deteriorate

Engineering Contradiction:
Improveinvestigation efficiencyVSAvoiddata security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements feedback mechanisms that continuously monitor and control access to personal data. The system provides feedback on authorization status, access requests, and data retrieval operations, enabling efficient investigation while maintaining security through real-time validation and control. This feedback loop ensures that productivity gains do not compromise data security.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11832108B2Lawful interception in mobile connect
Publication Date: 2023.11.28 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
  • US11832108B2 patent drawing
  • US11832108B2 patent drawing
  • US11832108B2 patent drawing

AI summary

A lawful interception, LI, intercept access point, IAP, function (135) in a mobile connect, MC, identity gateway, ID GW, function (107) receives, from a LI administrative function, ADMF (108), a request for activation of LI for a target identity, A, during a specified LI time interval. A detection is made, during the LI time interval, that the ID GW function (107) has at least started an authentication and authorization procedure for a service that the target identity, A, has requested and as a consequence of the detection obtaining, from the ID GW function (107), personal data pertaining to the target identity, A, and providing the obtained personal data pertaining to the target identity, A, to a LI mediation and delivery 10 function MF/DF (132), for example via an X2 interface.