Abstract:
The present technique relates to a Mediation Device (200) and a method for correlating lawful intercepted IMS signalling of a session involving a target UE registered in a first radio coverage area wherein the UE is supported by LTE Radio Access Technology at a session set-up. One object is to offer a technique and technology to overcome the problem for a LEA to correlate SIP signalling related to the original call with the SIP signalling generated during the Single Radio Voice Call Continuity, SRVCC, service execution. The object is achieved by providing the same correlation number CIN before and after SRVCC procedure. This can be accomplished by the Mediation Device and a method therein by checking the whole SIP signaling, from the UE REGISTER to the SRVCC INVITE message.
Abstract:
The present invention relates to Lawful interception and the problem how to notify a LEA about whether hand-over occurred between different radio access technologies, e.g. from LTE to Wi-Fi, and vice versa, or from LTE to 3G. The proposed solution aims to introduce, while intercepting only on service level i.e. in IMS domain, a mechanism to report to the LEAs an indication about what access type is serving the UE. The introduced mechanism relies on the "Access-type" field as received within the SIP P- Access-Network-Info header in case of LTE – WiFi handover and on the analysis of "SRVCC related" SIP signaling in case of LTE- 3G handover.
Abstract:
A mediation function receives intercepted signaling and media payload messages from an IP Multimedia Subsystem, IMS. Local correlation numbers (304) are calculated and a table (300) comprising correlation numbers (304) and media payload mapping information (306) is maintained in order to enable the mediation function to provide a law enforcement agency, LEA, with intercepted media payload together with information that enables the LEA to decode the media payload in real-time.
Abstract:
The following disclosure relates a method and mediation device (100) in a Lawful Interception (LI) system for detecting and correlating copies of SIP and RTP flows, from different domains EPS or IMS, said method comprising to determine a unique IMS Communication Identity Number, IMS CIN, and a corresponding correlation set of identifiers, storing each unique IMS CIN together with its correlation set for an intercepted communication session, correlating a SIP or RTP flow received from one domain to the same SIP or RTP flows of the same communication session received from the other domain by comparing the flow identity information of the received flow to the stored correlation sets for identifying a matching correlation set and its unique IMS CIN and sending to a LEA requesting for LI of the target said received SIP or RTP flow comprising said identified unique IMS CIN for a matching correlation set.
Abstract:
A lawful interception administrative function (LI ADMF) provides a virtual network function (VNF) implemented (i.e. implemented in a cloud infrastructure) LI intercept access point (IAP) only with one-way encrypted targets instead of clear-text targets while keeping the lawful interception triggering capability of the IAP unaffected. The ADMF, being external to the cloud infrastructure in which the IAP is running, executes hashing of targets before the targets are provided to the IAP. The IAP will never receive targets in clear text and thereby greatly reducing the LI security risks.
Abstract:
The present disclosure relates to the problem to deliver correlation information, CN, in case of CC delivery in TDM format to a Monitoring Centers, MC in a circuit switched network and achieving a minimal impact to MCs and/or no impact on the operator network at all. Said problem is solved by using the extension field of calling or called party number for providing the correlation number to a MC from a Mediation Function entity.
Abstract:
A network device running a lawful intercept mediation function in an IMS obtains intercepted-user's location information from a device running the policy and charging rules function, and forwards the information to a legal interception agent.
Abstract translation:在IMS中运行合法侦听仲裁功能的网络设备从运行策略和计费规则功能的设备获取被拦截用户的位置信息,并将该信息转发给合法监听代理。 p >