Abstract:
The present technique relates to a Mediation Device (200) and a method for correlating lawful intercepted IMS signalling of a session involving a target UE registered in a first radio coverage area wherein the UE is supported by LTE Radio Access Technology at a session set-up. One object is to offer a technique and technology to overcome the problem for a LEA to correlate SIP signalling related to the original call with the SIP signalling generated during the Single Radio Voice Call Continuity, SRVCC, service execution. The object is achieved by providing the same correlation number CIN before and after SRVCC procedure. This can be accomplished by the Mediation Device and a method therein by checking the whole SIP signaling, from the UE REGISTER to the SRVCC INVITE message.
Abstract:
Techniques for improving the operation of computing systems are described. Some implementations include a computer-implemented method. The method can include intercepting, at an intermediary computing system, messages communicated between a web server system and one or more client computing devices. A subset of the intercepted messages can be selected that are determined to commonly relate to a particular web transaction. The method can identify an expression pattern that occurs in the subset of the intercepted messages, and can determine that the identified expression pattern matches a first pre-defined expression pattern from among a plurality of different pre-defined expression patterns. A status of the particular web transaction can be determined based on the first pre-defined expression pattern that matches the identified expression pattern occurring in the subset of the intercepted messages. Information can be stored that indicates the determined status of the particular web transaction.
Abstract:
Techniques for communication session recording are described. According to various embodiments, communication policies are evaluated to ascertain whether a communication session is permitted and whether the communication session is to be recorded. According to various embodiments, a communication session is recorded by routing the communication session to a recording service.
Abstract:
Systems and methods for scalable and iterative deep packet inspection for communication networks are disclosed. According to one embodiment, a system comprises a home network and a visitor network in communication with the home network over an Internetwork packet exchange. The visitor network may have an intercept area with an intercept probe, a local packet data network gateway (PGW) and a local proxy-call session control function (P-CSCF). The system further includes a diameter edge agent that monitors signaling traffic in the visitor network passing to and from the home network. The system also has a targeting system in communication with the diameter edge agent that redirects the signaling traffic from the home PGW to the visiting PGW.
Abstract:
The present invention relates to a Lawful Intercept, LI, system and a method (S100) in a LI system comprising at least one Intercept Access Point, IAP, for intercepting communication traffic using User Datagram Protocol, UDP, and Transmission Control Protocol, TCP, packets in one or more communications networks. The IAP delivers said communication traffic as Communication Content, CC,to a Law Enforcement Agency, LEA, via a mediation functionality controlled by an administration functionality. The method comprises: - receiving (S110) CC as UDP and TCP; - storing (S120) UDP and TCP CC in a buffer arrangement; - forwarding (S130) TCP CC or UDP CC via a first CC handover interface HI3 or via a second CC handover interface HI4 separated from the first CC handover interface HI3 to the LEA. It is further provided a synchronization mechanism in order to retransmit all IP packets lost over the new interface HI4 and a buffer capacity process.
Abstract:
It is provided a method, comprising checking if a value of a main correlation identifier comprised in a first correlation message received from a first node and a value of the main correlation identifier comprised in a second correlation message received from a second node different from the first node are the same, wherein the first correlation message additionally comprises a first secondary correlation identifier, and the second correlation message additionally comprises a second secondary correlation identifier; and the method further comprises generating, if the value of the main correlation identifier comprised in the first correlation message and the value of the main correlation identifier comprised in the second correlation message are the same, a main correlation message comprising the first secondary correlation identifier.
Abstract:
There are provided methods in D2D Device of Logging the Information, Reporting the Logged Information, methods in a Network Node of Checking/Verifying the Logged Information, Requesting the Information, detecting specific LI events, reporting LI information to the LEMF, and method for Logging/Reporting Transmission Parameters, Requesting Decryption Keys, and for Data Relay. There are provided apparatuses and means arranged to perform the methods, and computer programs for implementing the methods.
Abstract:
The present invention relates to methods, systems, LI systems and nodes in a telecommunication network for providing bandwidth optimization by means of a tokenizer functionality and a restore functionality. It is further provided a token-content-synch process for synchronizing the tokenizer functionality and the restore functionality.
Abstract:
The following invention relates to methods and nodes for performing Lawful Intercept, LI, when service related content is stored in a Radio Access Network, RAN or a wireless User Equipment, UE, where conventional LI techniques are not applicable or operable when a user is activating and using a service application which content is distributed to a RAN 160 or the UE 170. The described and provided solution is an uplink LI notification functionality comprising a main content functionality in a first node 130 co-operating through signalling with a distributed content functionality of a node of a RAN and/or UE. The main content functionality is implemented as a main content functionality means 132 in the first node. The distributed content functionality means is implemented as distributed content functionality means 162, 172 in the RAN or the UE.