Lawful intercept reporting in wireless networks using public safety relays

Patent metadata

Field	Value
Publication number	US-10756804-B2
Application number	US-201514671728-A
Country	US
Kind code	B2
Filing date	Mar 27, 2015
Priority date	May 8, 2014
Publication date	Aug 25, 2020
Grant date	Aug 25, 2020

Abstract

A relay device assists in enabling lawful intercept (LI) by reporting, to a LI entity associated with the cellular network, authenticated identities of remote UEs (such as remote UEs connected via proximity services) and identification information that may allow the LI entity to monitor traffic (and/or control statistics related to the traffic) associated with the remote UEs. The authentication of the remote UEs may be performed using a technique that does not require involvement of the cellular network.

First claim

What is claimed is:

1. User Equipment (UE) comprising:
a non-transitory computer-readable medium containing program instructions; and
one or more processors to execute the program instructions to:
connect with a second UE using a first radio interface that is not connected to a cellular network;
connect with the cellular network using a second radio interface;
authenticate, via the first radio interface, an identity of the second UE received from the second UE, wherein the authentication of the identity of the second UE is based on information previously received, from the cellular network, by the UE and the second UE, and the authentication is performed without requiring communications over the cellular network;
act as a wireless relay, to the cellular network, for the second UE to forward communications from the second UE to the cellular network, wherein acting as a wireless relay includes performing a Network Address Translation (NAT) procedure for the second UE including
associating an Internet Protocol version 4 (IPv4) address, which is used by the UE when communicating with the cellular network, with the second UE and
associating a port number with the second UE; and

report, to a lawful intercept device associated with the cellular network, the authenticated identity of the second UE and identification information relating to the second UE, the identification information including information that identifies traffic flows of the second UE,
wherein the identification information that identifies the traffic flows of the second UE includes the IPv4 address and the port number.

2. The UE of claim 1 , wherein the acting as a wireless relay is performed as Layer-3 forwarding of Internet Protocol (IP) packets between the second UE and the cellular network.

3. The UE of claim 2 , wherein the first radio interface includes an Wireless Local Area Network (WLAN) direct connection.

4. The UE of claim 2 , wherein the first radio interface includes an Evolved Universal Terrestrial Radio Access (E-UTRA) direct connection.

5. The UE of claim 1 , wherein the authentication is based on a digital signature received from the second UE and is performed using Elliptic Curve-Based Certificateless Signatures for Identity-Based Encryption (ECCSI) techniques or certificate based techniques in which the authentication does not require real-time communication with a common node of trust.

6. The UE of claim 1 , wherein, when the lawful intercept device includes a device operating in the user plane of the cellular network, the program instructions to further cause the one or more processors to: report the identification information and the authenticated identity of the second UE via a user plane hypertext transfer protocol (HTTP).

7. The UE of claim 1 , wherein the lawful intercept device includes a mobility management entity (MME) or packet data network gateway (PGW) in a control plane of the cellular network.

8. The UE of claim 1 , wherein:
when the lawful intercept device includes a device operating in the user plane of the cellular network, the program instructions further cause the one or more processors to: report the identification information and the authenticated identity of the second UE via a user plane of the cellular network, and
when the lawful intercept device includes a mobility management entity (MME) or packet data network gateway (PGW), the program instructions further cause the one or more processors to: report the identification information and the authenticated identity of the second UE via the control plane of the cellular network.

9. User Equipment (UE) comprising:
a first radio interface;
a second radio interface;
a computer-readable medium to store processor executable instructions; and processing circuitry to execute the processor executable instructions to:
connect, via the first radio interface, with a second UE, in proximity of the UE, to provide proximity services (ProSe) to the second UE,
authenticate an identity of the second UE received, via the first radio interface, from the second UE, wherein the authentication of the identity of the second UE is based on information previously received, from a wireless network that is connected to the UE via the second radio interface, by the UE and the second UE, and the authentication is performed without requiring communications over the cellular network,
relay communications received from the second UE, over the first radio interface, to the wireless network, and
report, to a lawful intercept entity associated with the wireless network, identification information that identifies network traffic of the second UE, wherein the identification information includes an Internet Protocol version 4 (IPv4) address associated with the UE and a port number that is assigned to the second UE.

10. The UE of claim 9 , wherein the authentication of the identity of the second UE is performed based on a digital signature received from the second UE, without requiring real-time communications to a common node of trust.

11. The UE of claim 9 , wherein the authentication is performed using Elliptic Curve-Based Certificateless Signatures for Identity-Based Encryption (ECCSI) techniques or certificate based techniques.

12. The UE of claim 9 , wherein the reporting further includes reporting the authenticated identity of the second UE.

13. The UE of claim 9 , wherein, when the lawful intercept entity includes a device operating in a user plane of the wireless network, the reporting further including reporting the identification information via a user plane protocol.

Assignees

• Intel Ip Corp
• Apple Inc

Inventors

• Stojanovski Alexandre
• Venkatachalam Muthaiah

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04B7/15507

  Relay station based processing for cell extension or control of coverage area, (network planning with network coordinated processing with regard to cell extension H04W16/26; network topologies using dedicated repeater stations H04W84/047; terminal devices adapted for relaying to or from an other terminal H04W88/04) · CPC title

• H04B7/155 Primary

  Ground-based stations (H04B7/204 takes precedence) · CPC title

• H04W88/182

  Network node acting on behalf of an other network entity, e.g. proxy · CPC title

• H04W80/045

  involving different protocol versions, e.g. MIPv4 and MIPv6 · CPC title