Telefonaktiebolaget Lm Ericsson (publ)

Amedeo Imbimbo

Francesco Attanasio

Enrico De Luca

Raffaele De Santis

Francesca Marfia

Salvatore Loreto

Alessandro Mordacci

Giuseppe Amato

Mario Ascione

Giuseppe Carnevale

Maurizio Iovieno

Guido Gehlen

Lorenzo Fiorillo

Biagio Maione

Luciano Orabona

Tom Sesnic

Maurizio La Rocca

Maurizio Iov'eno

Laura Pappacena

Romina Pancione

Pompeo Santoro

A determination is made that an identity of a non-target communicating entity () with which a target communicating entity () is communicating, is to be obfuscated in any report of lawful interception of the target communicating entity () to a law enforcement agency (). Lawful interception is performed of the target communicating entity () and information pertaining to the lawful interception of the target communicating entity () is reported to the law enforcement agency (). The reported information comprises non-obfuscated identity information of the target communicating entity () and obfuscated identity information of the non-target communicating entity ().

Managing lawful interception information

A permissioned blockchain is used in a lawful interception, LI, context. Participants include a law enforcement agency, LEA, function, a LI mediation and delivery function, MF/DF, and an intercepting network function. A smart contract registered in the blockchain includes conditions associated with intercept related information, IRI, and/or communication content, CC, transactions. Registration is made in the blockchain of IRI and/or CC transactions performed by the participants during LI of a communication between two entities in a telecommunication network. The registered IRI and/or CC transactions are propagated among the participants and the smart contract is executed to verify whether or not the registered IRI and/or CC transactions are compliant with the smart contract. The participants are then informed about whether or not the registered IRI and/or CC transactions are compliant with the smart contract.

Verification of lawful interception data

Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Lawful interception chain in service providing networks

A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Lawful interception manifesto

The present invention relates to a method for handling response times in a communication system comprising at least one data retention system having at least one storage space for retained data. The at least one storage space has a defined response time (high, medium, low) for delivering retained data. The method comprises the following steps: &#x2014;Receiving a request for retained data from an authorized organization to the at least one data retention system, which request comprises a specified data type and a retention time range &#x2014;Dividing in the at least one data retention system, the received retention time range into at least one time segment each corresponding to one defined response time &#x2014;Delivering an acknowledge message from the at least one data retention system to the authorized organization, which message comprises response and identification information corresponding to the at least one divided time segment.

Retained data handling at differentiated response times

The present invention relates to methods and Validity securing arrangement and embodiments thereof for effectively securing validity of a target database in a node in a Lawful Interception Network. Said target database is intended to be identical to a source target database. The arrangement comprises a processing means being adapted to send a request for a target database checksum to the node comprising the target database, to receive a response comprising the target database checksum from the requested node, to compare the received target database checksum to a source target database checksum determined for the corresponding source target database, and to send an order to start an audit and synchronisation process if the two compared checksums differ.

Method and system for synchronization of two databases in a lawful interception network by comparing checksum values

A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Lawful interception in an IP multimedia subsystem network

A method and apparatus for handling a data object accessible by more than one node. A server in a communication network stores information relating to the data object stored at a first node. The server then receives a subscription request message from a second node. This subscription request message subscribes to updates relating to the data object stored at the first node. A copy of the data object is accessible by the second node. The server subsequently receives a publication message relating to a change to the data object stored at the first node and which indicates an identity of the data object and an indication of the changes. The server sends a notification message relating to the change to the data object towards the second node, which is usable by the second node to make corresponding changes to the copy of the data object accessible by the second node.

Handling a shared data object in a communication network

The method provides a Law Enforcement Agency LEA with retention or interception data related to a target user. At a data retention source node or at an interception control element of a telecommunications network, traffic packets involving the target user are inspected and a plurality of usage data records based on the inspected traffic packets are generated. Each record comprises information relating to a certain service class and to a respective communications stack layer. For each communications session involving a plurality of different communications stack layers, at the data retention source node or, respectively, the interception control element, the plurality of usage data records are provided with a same correlation identity number for correlating the data at the different communications stack layers. Then, the usage data records comprising the correlation identity number to the LEA are sent, for instance to the LI system or the data Retention System, respectively.

Apparatuses, methods, and computer program products for data retention and lawful intercept for law enforcement agencies

The present invention relates to methods and arrangements in a telecommunication system to override current access rights. The telecommunication system comprises an Access Point IAP; MSC, SGSN associated with a Configuration Unit ICU. The method comprises receiving to the Access Point IAP; MSC, SGSN from the Configuration Unit ICU, a request to monitor a system member MS, SIM. The method further comprises receiving to the Access Point from the Configuration Unit, a request to override deprived access rights for the system member MS, SIM. The method further comprises overriding in the Access Point IAP; MSC, SGSN, the deprived access rights for the member.

Lawful interception of unauthorized subscribers and equipments

A validation method for validating IP information header in data packets from user equipment connected to a mobile telecommunications network () and accessing an IP network () through a proxy. In the method trusted location information of the user equipment () from a trusted source of the telecommunications network is requested (). Then, the trusted location information is inserted into the IP information header of a message () to be sent to a location based function ().

Mobile radio access information validation

A control device () for controlling communication in an Internet Protocol Multimedia Subsystem IMS () coupling a user equipment () and an application provider () providing an application, the control device () comprising a receiving unit () adapted for receiving location information indicative of a location of the user equipment (), a verification unit () adapted for verifying if the received location information matches a spatial area and a spatial condition in relation to the spatial area, wherein the spatial area and the spatial condition are part of a control criterion being associated with the application of the application provider (), and a control unit () adapted for controlling a provisioning of the application to the user equipment () according to a result of the verification unit ().

Method and device for controlling communication in an internet protocol multimedia subsystem IMS

The invention relates to the use of mobile networks () in a telematics environment. A method embodiment of the invention performed by an application server () accessible via the mobile network () comprises the steps of receiving setting information () via a radio interface () of the mobile network, wherein the setting information indicates an environment setting of an environment in which a user terminal () is deployed; and controlling an application () hosted by the application server according to the received setting information.

Provision of telematics services via a mobile network

The present invention relates to methods and arrangements to perform monitoring-continuity in case of number portability in a telecommunication system. The method comprises a step wherein a monitored user (B) requires number portability from an operator of a donor network (DNW) to an operator of a recipient network (RNW). The method further comprises the receiving of a number portability event&#x2014;temporary address (NPE) to an agency controlled receiving entity (LEMF, ADRS), which event (NPE) comprises information related to the user's ported identity and the user's new identity.

Growing community of inventors

Caivano, Italy

Amedeo Imbimbo