Lawful interception chain in service providing networks
Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.
1. A method performed by a network operator providing a lawful interception, LI, service to a law enforcement agency, LEA, the method comprising:
determining a chain identifier, chainID, based on a target type related to an LI target, a target identifier related to the LI target, a Lawful Interception Identifier uniquely associated with an intercept request, and a correlation number for a service session of the LI target; and
transmitting packets related to the service session to the LEA as a unique chain, each packet including a chain header and at least one of intercept related information, IRI, and content of communication, CC,
wherein the chain header includes the chainID, a timestamp and a sequence number, which is a packet counter, and wherein the chain header of a first packet transmitted for the service session also includes the target type, the target identifier, the Lawful Interception Identifier, and the correlation number.
2. The method of claim 1 , wherein at least one of the packets is configured to include both IRI and CC.
3. The method of claim 1 , wherein different physical devices perform the determining of the chainID and the transmitting of the packets.
4. The method of claim 1 , wherein the method is executed on hardware operating and organized according to a 5G type of lawful interception architecture.
5. The method of claim 1 , further comprising:
receiving IRI and CC from different interfaces, wherein the transmitting uses a single interface.
6. A network operator device configured to provide a lawful interception, LI, service to a law enforcement agency, LEA, the device including:
an interface configured to acquire intercept related information, IRI, and contents of communication, CC, related to an LI target and a service session of the LI target; and
a data processing unit connected to the interface, the data processing unit configured
to determine or cause determining a chain identifier, chainID, based on a target type related to the LI target, a target identifier related to the LI target, a Lawful Interception Identifier uniquely associated with an intercept request, and a correlation number for the service session; and
to control the interface to transmit packets related to the service session to the LEA as a unique chain, each packet including a chain header and at least one of intercept related information, IRI, and contents of communication, CC,
wherein the chain header includes the chainID, a timestamp and a sequence number, which is a packet counter, and wherein the chain header of a first packet transmitted for the service session also includes the target type, the target identifier, the Lawful Interception Identifier, and the correlation number.
7. The device of claim 6 , wherein at least one of the packets is configured to include both IRI and CC.
8. The device of claim 6 , wherein another network device determines the chainID which is then received via the interface.
9. The device of claim 6 , wherein the network device is connected to network operator hardware and software operating and organized according to a 5G type of lawful interception architecture.
10. The device of claim 6 , further comprising a non-transitory computer readable medium storing executable codes which, when executed by the data processing unit, make the data processing unit to determine or to cause determining the chainID, and to control the communication interface to transmit the packets related to the service session to the LEA.