Lawful interception for 2G/3G equipment interworking with evolved packet system

Patent metadata

Field	Value
Publication number	US-9042388-B2
Application number	US-200813055021-A
Country	US
Kind code	B2
Filing date	Jul 24, 2008
Priority date	Jul 24, 2008
Publication date	May 26, 2015
Grant date	May 26, 2015

Abstract

A method, system, and a computer program product for reducing consumption of resources for lawful interception or retention data related to traffic concerning a 2G/3G target mobile connected to a telecommunications network interworking with Evolved Packet System is provided. At least a first parameter value in data for which lawful interception or data retention has been activated is detected at a first node. Based on at least the first parameter value, whether the traffic is intercepted or retained at a second node crossed by the traffic in the same network is evaluated. If the second node is located downstream of the first node, lawful interception requests or intercepted data are filtered out.

First claim

The invention claimed is:

1. A method for reducing consumption of resources for lawful interception or retention data related to traffic concerning a 2G/3G target mobile connected to a telecommunications network interworking with Evolved Packet System, comprising the steps of:
at a first node, detecting at least a parameter value in data for which lawful interception or data retention has been activated;
based on said at least one parameter value, evaluating whether said traffic is going to be intercepted or retained at a second node crossed by said traffic, the second node being in the same network as and downstream from the first node; and
filtering out lawful interception requests or intercepted data when said traffic is going to be intercepted or retained at the second node; and
fulfilling the lawful interception requests when said traffic is not going to be intercepted or retained at the second node.

2. The method of claim 1 wherein said parameter value is an Access Point Name.

3. The method of claim 1 wherein said first node is a Serving GPRS Support Node and said second node is a Serving Gateway.

4. The method of claim 1 wherein said first node is a Serving Gateway and said second node is a Packet Data Network Gateway.

5. The method of claim 1 wherein said first node is a Serving GPRS Support Node and said second node is a Packet Data Network Gateway.

6. The method of claim 4 wherein said Packet Data Network Gateway is located in the same network and in the same country as said first node.

7. The method according to claim 1 , wherein said step of filtering out lawful interception requests includes discarding lawful interception requests before data interception or data retention is applied.

8. The method according to claim 7 , wherein said step of discarding lawful interception requests before data interception or data retention is applied is based on whether said Access Point Name requests use of the S4 track.

9. The method according to claim 1 , wherein said step of filtering out lawful interception requests includes discarding intercepted data.

10. The method according to claim 9 , wherein said step of discarding intercepted data includes:
verifying Intercept Related Information received at a DF 2 /MF 2 function;
if said traffic is intercepted or retained at a second node crossed by said traffic in the same network as the first node: discarding said IRIs and discarding corresponding Content of Communication received at a DF 3 /MF 3 function.

11. A Lawful Interception system for interception or retention of data related to traffic associated with a target user equipment in a 2G/3G telecommunications network interworking with Evolved Packet System, the system comprising:
a first node; and
a second node located downstream from the first node,
wherein the first and second nodes are configured to operate as Intercepting Control Elements or Data Retention sources, and
wherein said first node is configured to detect at least a parameter value in data for which lawful interception or data retention has been activated and, based on said at least one parameter value:
evaluate whether said traffic is going to be intercepted or retained at the second node,
filter out lawful interception requests or intercepted data when said traffic is going to be intercepted or retained at the second node, and
fulfill the lawful interception requests when said traffic is not going to be intercepted or retained at the second node.

12. The Lawful Interception system of claim 11 wherein said parameter value is an Access Point Name.

13. The Lawful Interception system of claim 11 wherein said first node is a Serving GPRS Support Node and said second node is a Serving Gateway.

14. The Lawful Interception system of claim 11 wherein said first node is a Serving Gateway and said second node is a Packet Data Network Gateway.

15. The Lawful Interception system of claim 11 wherein said first node is a Serving GPRS Support Node and said second node is a Packet Data Network Gateway.

16. The Lawful Interception system of claim 11 wherein said Packet Data Network Gateway is located in the same network and in the same country as said first node.

17. A Serving GPRS Support Node configured to operate as Intercepting Control Element or Data Retention source for a Lawful Interception system, wherein said Serving GPRS Support Node is configured to:
detect at least a parameter value in data for which lawful interception or data retention has been activated; and
based on said at least one parameter value:
evaluate whether said traffic is going to be intercepted or retained at a second node crossed by said traffic in the same network as the Serving GPRS Support Node,
filter out lawful interception requests or intercepted data when said traffic is going to be intercepted or retained at the second node, and
fulfill the lawful interception requests when said traffic is not going to be intercepted or retained at the second node.

18. A Service Gateway configured to operate as Intercepting Control Element or Data Retention source for a Lawful Interception system, wherein said Service Gateway is configured to:
detect at least a parameter value in data for which lawful interception or data retention has been activated; and
based on said at least one parameter value:
evaluate whether said traffic is going to be intercepted or retained at a second node crossed by said traffic in the same network as the Serving Gateway,
filter out lawful interception requests or intercepted data when said traffic is going to be intercepted or retained at the second node, and
fulfill the lawful interception requests when said traffic is not going to be intercepted or retained at the second node.

19. A telecommunications network comprising a Law Enforcement system according to claim 11 .

20. A computer readable storage medium containing instructions that, when run in at least one of a Serving GPRS Support Node or a Serving Gateway, cause said at least one of a Serving GPRS Support Node or Serving Gateway to operate as Intercepting Control Element or Data retention source operable in a Lawful Interception system, so that said Serving GPRS Support Node or said Serving Gateway, when executing the instructions, performs the steps of:
detecting at least a parameter value in data for which lawful interception or data retention has been activated,
based on said at least one parameter value, evaluating whether said traffic is going to be intercepted or retained at a second node crossed by said traffic in the same network as said Serving GPRS Support Node or Serving Gateway;
filtering out lawful interception requests or intercepted data when said traffic is going to be intercepted or retained at the second node; and
fulfilling the lawful interception requests when said traffic is not going to be intercepted or retained at the second node.

Assignees

• Iovieno Maurizio
• De Santis Raffaele
• Ericsson Telefon Ab L M

Inventors

• Iovieno Maurizio
• De Santis Raffaele

Classifications

• H04L63/304 Primary

  intercepting circuit switched data communications (lawful interception of wireless network communications H04W12/02) · CPC title

• H04L47/32

  by discarding or delaying data units, e.g. packets or frames · CPC title

• H04M3/2281

  Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls · CPC title

• H04W28/10

  Flow control {between communication endpoints} · CPC title

• H04L63/00 Primary

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title