Telefonaktiebolaget Lm Ericsson (publ)

Francesca Marfia

Amedeo Imbimbo

Lorenzo Fiorillo

Paolo D'Amora

Mario Ascione

Francesco Toro

Vincenzo Paparo

Dario De Vito

Vincenzo Cuniato

Antonio Buonocunto

Elio Barese

Claudio Carotenuto

Andrea Formica

Francesco Conte

Fabio Ronca

Gianluca Avagliano

Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Lawful interception chain in service providing networks

Automatic preparation of data related to session initiation protocol (SIP) based traffic flows in a lawful interception (LI) scenario is disclosed. The dataset that is obtained may, e.g., be used for machine learning-based (ML) and artificial intelligence (AI) tools that can identify lawfully intercepted SIP-based traffic cases. Such preparation of data reduces the 5 risk of misunderstandings between a communications service provider (CSP) and a law enforcement agency (LEA), which reduces the time dedicated by both parties in understanding the correctness of LI data provided by the CSP to the LEA.

Handling of lawfully intercepted SIP messages

Methods and apparatuses in the field of network slice management are disclosed. A method of managing, by means of an activation code management server (), a plurality of activation codes () in a network includes steps of: providing (S), for each of a plurality of network slices, a network slice identifier () in correspondence with a network slice; providing (S) at least one VNF-product identifier (), each VNF-product identifier () being in correspondence with a VNF; providing (S) a plurality of activation code indicators (), each activation code indicator (being indicative of one or more of the plurality of activation codes (); and associating each of the plurality of activation code indicators () with a corresponding network slice identifier () and a corresponding VNF-product identifier ().

Code activation management method for network slicing solutions, and corresponding entity, server and computer program

A mechanism is provided that enables hiding identities of a target subscriber that is to be subject of lawful interception, LI, when the intercept access point, IAP, is outside the network operator part of the LI domain. Monitoring of data traffic such as over-the-top, OTT, services is enabled while at the same time hiding LI target identities to a network element, NE, containing the IAP. A secure memory area in the NE is dedicated to the LI functionality necessary to intercept and report interception data to the operator part of the LI domain. The interface between the NE and the operator part of the LI domain is the use of a secure injection channel via which the necessary LI software and target information are conveyed between the NE and the operator part of the LI domain.

Secure lawful interception in network elements

A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Lawful interception manifesto

The disclosure relates to a method in a Lawful Intercept, LI, management system for removing redundant content of communication, CC flows. Said LI management system is capable of receiving and handling one or more CC flows generated from intercepted target communication sessions. Each CC flow comprises a flow of data packets, each data packet comprising a flow identity of the CC flow. The flow identity comprises an address of a sending intercept access point, IAP, at least one target identifier, TID, and a communication session Correlation Identifier, CI. The method enables the LI management system to forward only one CC flow of CC flows having identical TID and CI, respectively, but different sending intercept access points.

Method and system for removing redundant received data flows of interception in IMS domains

This disclosure relates to a method Sand a device for correlating in a Lawful Intercept Mediation system, LIMS, received Intercept Related Information, IRI, and, Communications Content, CC, data packets of a 5 targets lawfully intercepted session for deliverance over HI2 and HI3 interfaces, respectively, by means of a session-specific Correlation Identification Number, CIN.

Method and device for correlating in a lawful intercept mediation system

A method and arrangements providing QoS-aware routing of received session flows of separate communication sessions comprising Communication Content achieved and received from Lawful Interception of target sessions. The method comprises sorting each separate communication session into one of two groups, a first routing group and a second routing group, according to certain criteria wherein QoS is at least one of the criteria. Further, the method comprises routing communication sessions sorted into the first routing group via a regular handover interface and routing communication sessions sorted into the second routing group via an additional handover interface to a Law Enforcement Agency.

Method and arrangements for QoS-aware routing in a LI system

Presented are a method and a node in a Lawful Interception (LI) network, in which the node is configured to provide a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) of data traffic in a digital communications network. The IRI and CC are forwarded to an Intercept Mediation and Delivery unit node (IMDU) of the LI network, wherein the IMDU is configured to sample the content of communications according a certain sampling rate to achieve one or more samples of the CC, and to forward the generated one or more samples to the Law Enforcement Agency.

Growing community of inventors

Auburn Hills, MI, United States of America

Francesca Marfia