Multi LI Site Database for Lawful Interception Network Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a Cloud-NFV environment, Lawful Interception (LI) systems face challenges in managing multiple Law Enforcement Agencies (LEAs) with different legal jurisdictions, as existing solutions do not allow for separate mediation functionalities across international networks, leading to interference among LEAs connected to the same LI site.
Innovation Solution
A node, referred to as the Multi LI Site Database (mLSDB) node, is introduced to connect multiple LI sites to the same Physical or Virtual Networks Functions, enabling each LEA to have its own LI site by using a Triggering Control Function (TCF) and virtualized Point Of Interception (vPOI), with a multi-site database managing warrants and intercept data across LEAs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple LEAs are connected to the same LI site, then resource sharing and cost efficiency are improved, but interference and security isolation between LEAs deteriorates
Solution Approach 1:
The patent introduces separate mediation functionality for each LEA by creating distinct mediation paths through the PNF. Each LEA has its own mediation instance that is independently configured and managed, allowing simultaneous resource sharing while maintaining security isolation. The mediation function is segmented per LEA rather than shared collectively.
Solution Approach 2:
The patent introduces a mediation function as an intermediary component between LEAs and the PNF. This mediator selectively forwards traffic based on LEA-specific criteria, enabling controlled access and data sharing while preventing unauthorized interference between different LEAs. The mediation function acts as a security boundary that maintains isolation.
2Device complexity
If a single LI site is used for all LEAs, then system simplicity is maintained, but flexibility for international networks and different legal jurisdictions deteriorates
Solution Approach 1:
The patent implements dynamic configuration capabilities where the mediation function can be adapted to different LEAs with different legal requirements. The system can dynamically create, modify, and terminate mediation instances based on real-time needs of different LEAs and jurisdictions, providing flexibility without requiring complete system redesign.
Solution Approach 2:
The patent creates a universal LI site infrastructure that can serve multiple LEAs with different national and international requirements through a single platform. The system provides multi-functionality by supporting various mediation modes, legal jurisdiction compliance, and network configurations within the same unified architecture.
3Reliability
If separate mediation functionality is provided for each LEA, then LEA separation and security are improved, but system complexity and resource requirements deteriorate
Solution Approach 1:
The patent merges the mediation functionality for multiple LEAs into a single integrated mediation instance that manages all LEAs simultaneously. Rather than creating completely separate independent systems, the mediation function combines multiple LEA requirements into one coordinated operation, reducing overall system complexity while maintaining separation.
Solution Approach 2:
The patent introduces a new dimensional approach by organizing LEAs in a hierarchical structure with a root mediation function and child mediation functions. This dimensional organization allows efficient management of multiple LEAs through parent-child relationships, inheritance of configurations, and centralized control mechanisms that reduce complexity.
Data Source
AI summary
The present disclosure provide a node and method performed in the node for connecting at least two Lawful Interception (LI) sites (110) to the same Physical Networks Function (PNF) comprising a Point Of Interception (POI) or Virtual Networks Function (VNF) (140) comprising a virtualised Point Of Interception (vPOI) (142) controlled by a Triggering Control Function (TCF) (146), for lawful interception of the data communication sessions of targets defined by warrants comprising information identifying the targets, wherein said node (200) is adapted to configure the POIs/vPOIs/TCFs according to LI sites requests and policy requirements for each LI site, the node comprises a multi LI Site Database, mLSDB, (212) enabling the POI or vPOI/TCF to serve more than one LI site at the same time.