Lawful intercept management modules and methods for LI-configuration of an internal interception function in a cloud based network

1. A method in a Lawful Intercept (LI) management module for LI configuration of an Internal Interception Function (IIF) hosted by a Virtual Network Function (VNF) in a cloud based network and for keeping a LI administration mediation function (ADMF) in a LI system updated regarding the current LI configuration in the cloud based network, the method comprising:

receiving a notification comprising a VNF and its VNF characteristics;

making LI configuration decisions based on VNF characteristics and a LI policy from a LI policy database;

performing LI configuration of the VNF and the IIF (VNF/IIF) in accordance with the LI configuration decisions;

storing VNF/IIF characteristics in the LI policy database, if configuration was successful; and

updating the LI ADMF about a new LI configuration of the cloud based network.

2. The method according to claim 1 , wherein performing LI configuration of the VNF/IIF further comprises deciding

to start LI configuration of the VNF if LI is needed and allowed.

3. The method according to claim 1 , wherein performing LI configuration of the VNF/IIF further comprises:

checking if the IIF is embedded in a VNF node; and

ordering an orchestrator of the cloud based network to create a new VNF/IIF.

4. The method according to claim 1 , wherein the method further comprises checking if configuration of the VNF/IIF is OK or not.

5. The method according to claim 1 , wherein the notification is received from an OSS/BSS.

6. The method according to claim 3 , wherein the notification is received from the cloud orchestrator.

7. A Lawful Intercept (LI) system comprising:

a LI administration mediation function (ADMF);

a LI policy database;

a LI management module for LI configuration of an Internal Interception Function (IIF) hosted by Virtual Network Function (VNF) in a cloud based network and for keeping a LI ADMF updated regarding the current LI configuration in the cloud based network, the LI management module comprising a processing circuitry configured to:

receive a notification comprising a VNF and its VNF characteristics;

make LI configuration decisions based on the VNF characteristics and a LI policy from the LI policy database;

perform LI configuration of the VNF and the IIF (VNF/IIF) in accordance with the LI configuration decisions;

store VNF/IIF characteristics in the LI policy database, if configuration was successful; and

update the LI ADMF about a new LI configuration of the cloud based network.

8. The LI system according to claim 7 , wherein performing LI configuration of the VNF/IIF further comprises:

deciding to start LI configuration of the VNF if LI is needed and allowed.

9. The LI system according to claim 7 , wherein performing LI configuration of the VNF/IIF further comprises:

checking if IIF is embedded in the VNF node; and

ordering an orchestrator of the cloud based network to create a new VNF/IIF.

10. The LI system according to claim 7 , wherein performing LI configuration of the VNF/IIF further comprises:

checking if configuration of VNF/IIF is OK or not.

11. The LI system according to claim 7 , wherein the notification is received from an OSS/BSS.

12. The LI system according to claim 9 , wherein the notification is received from the cloud orchestrator.