VOIP Intercept Encryption Over Public Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The widespread adoption of VOIP technology has increased the complexity and cost for VOIP providers to comply with CALEA requirements, as they need to maintain dedicated communications links with law enforcement agencies for intercepting and transmitting voice over Internet Protocol (VOIP) calls, which is expensive and cumbersome.

Innovation Solution

The method involves securely transmitting intercepted VOIP data over a public data network, such as the Internet, using encryption techniques to reduce the need for dedicated communications links, thereby lowering costs and simplifying compliance with CALEA requirements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VOIP providers maintain dedicated communications links with law enforcement agencies for intercepting and transmitting VOIP calls, then security and reliability of intercepted data transmission is improved, but cost and device complexity increase

Engineering Contradiction:
Improvesecurity of intercepted data transmissionVSAvoidcomplexity of maintaining dedicated communications links
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces encryption as an intermediary mechanism that enables secure data transmission over public networks without requiring dedicated physical links. The encryption component acts as a mediator between the VOIP provider and law enforcement agencies, transforming plaintext intercepted data into encrypted form that can be safely transmitted over standard public infrastructure, thus eliminating the need for complex dedicated communications links while maintaining security

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical/physical system of dedicated communications links with an information-theoretic system based on encryption. Instead of relying on physical isolation and dedicated infrastructure, the solution uses cryptographic algorithms to provide security, substituting complex physical infrastructure with software-based encryption mechanisms that operate over standard public networks

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If VOIP providers maintain dedicated communications links with law enforcement agencies for intercepting and transmitting VOIP calls, then security and reliability of intercepted data transmission is improved, but cost increases

Engineering Contradiction:
Improvesecurity of intercepted data transmissionVSAvoidcost of maintaining dedicated communications links
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

Encryption serves as an intermediary that eliminates the need for expensive dedicated infrastructure. By introducing cryptographic protection, the system can use existing public network infrastructure instead of building and maintaining costly dedicated communications links, thereby reducing operational costs while preserving security requirements

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the fundamental parameter of transmission medium from dedicated physical links to public networks with encryption. This parameter change transforms the cost structure by allowing use of existing public infrastructure rather than requiring investment in and maintenance of dedicated private infrastructure, significantly reducing operational expenses

Inventive Principle:
Principle #35Parameter changes

3Device complexity

If VOIP providers use public data networks for transmitting intercepted VOIP data, then cost and complexity are reduced, but security of data transmission deteriorates

Engineering Contradiction:
Improvecomplexity of managing communications linksVSAvoidsecurity of data transmission
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent substitutes physical security measures (dedicated links) with cryptographic security measures (encryption). This allows use of public networks while maintaining security through mathematical protection mechanisms rather than physical isolation, achieving both simplicity and security simultaneously

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

Encryption acts as an intermediary layer between the transmitted data and the public network infrastructure. This intermediary protects the data from potential security threats in public networks while allowing use of the simplified public infrastructure, thus resolving the contradiction between simplicity and security

Inventive Principle:
Principle #24Intermediary (Mediator)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach reduces the costs and complexity associated with managing dedicated communications links by using standard encryption methods to securely transmit VOIP data over the Internet, ensuring compliance with CALEA while providing flexible and secure communication channels for law enforcement agencies.

Implementation Method 1

encrypting the intercepted VOIP data with an encryption technique

Methodology Applied
Scientific EffectEncryption:

Data Source

PatentUS9456009B2Method and apparatus for securely transmitting lawfully intercepted VOIP data
Publication Date: 2016.09.27 CENTURYLINK INTELLECTUAL PROPERTY LLC
  • US9456009B2 patent drawing
  • US9456009B2 patent drawing
  • US9456009B2 patent drawing

AI summary

A method, apparatus, and computer usable program product for transmitting intercepted VOIP data are provided in the illustrative embodiments. A VOIP call is intercepted in response to a lawful request for intercept by a law enforcement agency. VOIP data associated with the intercepted VOIP call is encrypted. The encryption may use a virtual private network an encryption using a key of a specific length, bit stuffing, or other encryption methods. The encrypted VOIP data is transmitted to the law enforcement agency using a public data network either during the VOIP call or after the VOIP call. The intercept request may be made during the VOIP call, or before the VOIP call. Furthermore, the VOIP data of the VOIP call may be stored before transmitting to the law enforcement agency, and archived based on archiving rules. The request for the intercept may be queued for processing according to queuing rules. Notifications based on the request for intercept, VOIP call characteristics, or characteristics of the VOIP data may be sent to one or more law enforcement agencies, and may also be encrypted.