Apparatuses, methods, and computer program products for data retention and lawful intercept for law enforcement agencies

Patent metadata

Field	Value
Publication number	US-9204293-B2
Application number	US-91861108-A
Country	US
Kind code	B2
Filing date	Feb 21, 2008
Priority date	Feb 21, 2008
Publication date	Dec 1, 2015
Grant date	Dec 1, 2015

Abstract

The method provides a Law Enforcement Agency LEA with retention or interception data related to a target user. At a data retention source node or at an interception control element of a telecommunications network, traffic packets involving the target user are inspected and a plurality of usage data records based on the inspected traffic packets are generated. Each record comprises information relating to a certain service class and to a respective communications stack layer. For each communications session involving a plurality of different communications stack layers, at the data retention source node or, respectively, the interception control element, the plurality of usage data records are provided with a same correlation identity number for correlating the data at the different communications stack layers. Then, the usage data records comprising the correlation identity number to the LEA are sent, for instance to the LI system or the data Retention System, respectively.

First claim

The invention claimed is:

1. A method performed in a network node for providing a Law Enforcement Agency LEA with retention or interception data related to a target user over a telecommunications network, the method comprising steps of:
the network node inspecting traffic packets transmitted over the telecommunications network involving the target user;
the network node generating a plurality of usage data records based on the inspected traffic packets, each record comprising information relating to a certain service class and to a respective communications stack layer;
for each communications session involving a plurality of different communications stack layers, the network node providing said plurality of usage data records with a same correlation identity number for correlating the data at said different communications stack layers;
the network node sending, over the telecommunications network to the LEA, a usage data record for each communication stack layer included in the plurality of different communications stack layers, each usage data record comprising the correlation identity number,
wherein the correlation identity number is a unique Communications Identity Number (CIN) identifying the lowest communications stack layer of said plurality of different communications stack layers,
wherein each usage data record comprises a session CIN identifying a respective session in a respective communications stack layer, and
wherein the usage data records sent from the network node to the LEA include:
at least one usage data record comprising application layer information, the unique CIN and the session CIN used to correlate the data for the application layer,
at least one usage data record comprising transport layer information, the unique CIN and the session CIN used to correlate the data for the transport layer,
at least one usage data record comprising network layer information for IP services, the unique CIN and the session CIN used to correlate the data for the network layer, and
at least one usage data record comprising data link layer information, the unique CIN and the session CIN used to correlate the data for the data link layer.

2. The method of claim 1 , wherein the session CIN is assigned to the respective communications session in the lowest communications stack layer.

3. The method of claim 2 , wherein the network node is a data retention source node, wherein said telecommunications network comprises a Data Retention system connected to said LEA and to said data retention source node and comprising a Mediation Function, a Delivery Function and a storage, and wherein said sending step further includes transferring the usage data records from the data retention source node to the Mediation and Delivery Functions, wherein each of the layer information included in the usage data records is for IP services, and
said usage data records being mediated by said Mediation Function after having been received from the data retention source node and being transferred from the Mediation and Delivery Functions to the storage.

4. The method of claim 3 , further comprising the step of sending, by the LEA to the Data Retention system, a request for IP services retained data related to the target user, retrieving the said mediated usage data records from said storage and correlating said usage data records by means of said unique CIN.

5. The method of claim 2 , wherein said network node is an interception node, wherein said telecommunications network comprises a Lawful Interception system connected to said LEA and to said interception node and comprising a Mediation Function and a Delivery Function, wherein said usage data records are Intercept Related Information IRI and wherein said sending step further includes transferring the IRI from the interception node to the Mediation and Delivery Functions, wherein the information in the IRI for the data link layer is for IP services, and
each one of said IRIs being mediated by said Mediation Function after having been received from the interception node and being transferred from the Mediation and Delivery Function to the LEA.

6. The method of claim 1 , wherein said network node is a Service Aware Support Node SASN.

7. A data retention source node in communication with a Data Retention system comprising:
a memory; and
a processor, wherein said processor is configured to:
generate a plurality of usage data records based on inspected traffic packets transmitted over a telecommunications network, each record comprising information relating to a certain service class and to a respective communications stack layer,
for each communications session involving a plurality of different communications stack layers, provide said plurality of usage data records with a same correlation identity number for correlating the data at said different communications stack layers, and
send, over the telecommunications network to the Data Retention system, a usage data record for each communication stack layer included in the plurality of different communications stack layers, each usage data record comprising the correlation identity number,
wherein the correlation identity number is a unique Communications Identity Number (CIN) identifying the lowest communications stack layer of said plurality of different communications stack layers,
wherein each usage data record comprises a session CIN identifying a respective session in a respective communications stack layer, and
wherein the usage data records sent from the data retention source node to the Data Retention System include:
at least one usage data record comprising application layer information, the unique CIN and the session CIN used to correlate the data for the application layer,
at least one usage data record comprising transport layer information, the unique CIN and the session CIN used to correlate the data for the transport layer,
at least one usage data record comprising network layer information for IP services, the unique CIN and the session CIN used to correlate the data for the network layer, and
at least one usage data record comprising data link layer information, the unique CIN and the session CIN used to correlate the data for the data link layer.

8. The data retention source node of claim 7 , wherein the session CIN is assigned to the communications session in the lowest communications stack layer.

9. A telecommunications network having data retention functionalities, the telecommunications network comprising a data retention source node according to claim 8 , a Law Enforcement Agency LEA and a Data Retention system connected to said LEA and to said data retention source node, said Data Retention system comprising a Mediation Function, a Delivery Function and a storage, wherein said processor configured to send said usage data records is further configured to transfer the usage records from the data retention source node to the Mediation and Delivery Functions, wherein each of the layer information included in the usage data records is for IP services, and
said Mediation Function being configured to receive from the data retention source node said usage data records and to mediate said received usage data records, and said Delivery Function being configured to transfer said mediated usage data records to the storage, said Delivery Function being further configured to transfer said mediated usage data records from said storage to said LEA via a Handover Interface HI-B.

10. The telecommunications network of claim 9 , wherein the Data Retention system is configured to receive from the LEA via a Handover Interface HI-A a request for IP services retained data related to the target user, to retrieve said med

Assignees

• Imbimbo Amedeo
• Attanasio Francesco
• Ericsson Telefon Ab L M

Inventors

• Imbimbo Amedeo
• Attanasio Francesco

Classifications

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04L63/306 Primary

  intercepting packet switched data communications, e.g. Web, Internet or IMS communications · CPC title

• H04M7/006

  Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer (H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42) · CPC title

• H04L43/026

  using flow identification · CPC title

• H04L47/2441

  relying on flow classification, e.g. using integrated services [IntServ] · CPC title