Method and switch for lawful interception

Patent metadata

Field	Value
Publication number	US-10230769-B2
Application number	US-201314785221-A
Country	US
Kind code	B2
Filing date	Apr 19, 2013
Priority date	Apr 19, 2013
Publication date	Mar 12, 2019
Grant date	Mar 12, 2019

Abstract

The present disclosure relates to methods and devices, of activating lawful interception. According to the present disclosure, a gateway comprises a controller for controlling, using a flow control protocol, the flow of packets through a switch controlled by the gateway. The switch receives (S11), from the controller, a lawful interception activation request, comprising a target identity; activates (S12), in response to said request, lawful interception on a target identified by the target identity; duplicates (S13), in the switch, packets targeting the target; encapsulates (S14) the duplicated packets with an additional header; and forwards (S15) duplicates from the switch directly to the lawful interception service provider entity (1) for further distribution to a Lawful interception Agency.

First claim

The invention claimed is:

1. A method, executed in a gateway, of activating lawful interception, wherein said gateway comprises a controller for controlling, using a flow control protocol, the flow of packets through an external switch controlled by the gateway, wherein the external switch is external to the gateway, the method comprising:
the gateway receiving an instruction on lawful interception activation transmitted by a lawful interception service provider (LISP) entity, wherein the instruction comprises target information identifying a target;
after receiving the instruction, the gateway sending, via a network link, to the external switch a lawful interception activation request comprising the target information, wherein the external switch is configured to duplicate packets addressed to the target and forward the duplicated packets to the LISP entity such that the gateway is offloaded from handling packets to be lawfully intercepted;
the gateway redirecting to the external switch all packets targeting said target; and
the gateway sending an acknowledge to the LISP entity.

2. The method of claim 1 , wherein the flow control protocol is extended to comprise lawful interception information.

3. The method of claim 1 , wherein the LISP entity comprises an administration function (ADMF), a delivery function two and a delivery function three.

4. The method of claim 1 , wherein the method further comprises the step of:
the gateway sending interception related information to delivery function two.

5. The method of claim 3 , wherein the lawful interception activation request further comprises the delivery function three port number and IP address.

6. The method of claim 1 , wherein the flow control protocol is openflow.

7. The method of claim 6 , wherein the lawful interception activation request comprises a flow table modification request.

8. The method of claim 1 , wherein the gateway is located in a core network in a cellular communication system.

9. The method of claim 1 , wherein the gateway is a Serving Gateway, SGW, a Packet Data Network Gateway, PGW, a Serving GPRS Support Node, SGSN, a Gateway GPRS Support Node, GGSN, a Packet Data Serving Node, PDSN or a Broadband Remote Access Server, BRAS.

10. A method, in an external switch, of providing lawful interception, wherein said external switch is controlled by a gateway comprising a controller for controlling the flow of packets through said external switch using a flow control protocol, wherein the external switch is external to the gateway, the method comprising the steps of:
the external switch receiving a lawful interception activation request transmitted by the gateway, wherein the lawful interception activation request comprises target information identifying a target;
the external switch activating lawful interception on a target identified by the target identity in response to the lawful interception activation request;
the external switch receiving packets addressed to the target;
the external switch duplicating the packets addressed to the target;
the external switch encapsulating the duplicated packets with an additional header; and
the external switch forwarding the duplicated packets directly to a lawful interception service provider (LISP) entity for further distribution to a Lawful interception Agency.

11. The method of claim 10 , wherein the flow control protocol is extended to comprise lawful interception information.

12. The method of claim 10 , wherein the LISP entity comprises an administration function, a delivery function two and a delivery function three, and wherein the duplicated packets are forwarded to delivery function three.

13. The method of claim 12 , wherein the additional header comprises the delivery function three port number and IP address.

14. The method of claim 12 , wherein the lawful interception activation request further comprises the delivery function three port number.

15. The method of claim 10 , wherein the flow control protocol further comprises a message indicating that a node supports lawful interception.

16. The method of claim 10 , wherein the external switch is an openflow external switch and the flow control protocol is openflow.

17. The method of claim 16 , wherein the lawful interception activation request comprises a flow table modification request on the targeted port.

18. The method of claim 10 , wherein the external switch is located in a core network in a cellular communication system.

19. The method of claim 18 , wherein the external switch is located in connection with a gateway in the core network and wherein the external switch is used to offload the forwarding function in the gateway.

20. The method of claim 19 , wherein the gateway is a Serving Gateway, SGW, a Packet Data Network Gateway, PGW, a Serving GPRS Support Node, SGSN, a Gateway GPRS Support Node, GGSN, a Packet Data Serving Node, PDSN or a Broadband Remote Access Server, BRAS.

21. An external switch, implemented using a flow control protocol for controlling the forwarding of packets through said external switch, wherein the external switch is controlled by a gateway comprising a controller and the external switch is external to the gateway, wherein the external switch comprises:
a receiver;
a transmitter;
memory; and
a processor coupled to the receiver, transmitter, and memory, the processor configured to:
employ the receiver to receive a lawful interception activation request transmitted by the gateway, wherein the lawful interception activation request comprises target information identifying a target;
activate lawful interception on a target identified by the target identity in response to the lawful interception activation request;
employ the receiver to receive packets addressed to the target;
duplicate the packets addressed to the target;
encapsulate the duplicated packets with an additional header; and
employ the transmitter to forward the duplicated packets directly to a lawful interception service provider (LISP) entity for further distribution to a Lawful interception Agency.

22. A gateway, configured to control, using a flow control protocol, the forwarding of packets through an external switch controlled by the gateway, wherein the external switch is external to the gateway and the gateway comprises:
a network communication unit;
a processor; and
a memory storing computer program code which, when run in the processor, causes the gateway to:
employ the network communication unit to receive an instruction on lawful interception activation transmitted by a lawful interception service provider (LISP) entity, wherein the instruction comprises target information identifying a target;
after receiving the instruction, employ the network communication unit to send to the external switch a lawful interception activation request comprising the target information, wherein the external switch is configured to duplicate packets addressed to the target and forward the duplicated packets to the LISP entity;
redirecting to the external switch all packets targeting said target; and
employing the network communication unit to send an acknowledge to the LISP entity.

23. A computer program product comprising a non-transitory computer readable medium storing instructions that, when run on a gateway comprising a controller for controlling, using a flow control protocol, a flow of packets through an external switch controlled by the gateway, wherein the exter

Assignees

• Ericsson Telefon Ab L M

Inventors

• Zhang Jiangtao
• Johansson Bengt
• Olsson Lasse
• Pettersson Sten

Classifications

• H04L63/0281 Primary

  Proxies · CPC title

• H04L63/306

  intercepting packet switched data communications, e.g. Web, Internet or IMS communications · CPC title

• H04L63/0254

  Stateful filtering · CPC title

• H04L63/30 Primary

  for supporting lawful interception, monitoring or retaining of communications or communication related information (circuit switched telephony call monitoring H04M3/2281) · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title