Network discovery in a lawful intercept system
Disclosure are techniques for allocating aggregation devices in a lawful intercept system. In an embodiment, a method includes maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions; receiving a lawful intercept (LI) request; querying the NRF to determine a respective PAG function; and associating a point of interception (POI) function with the respective PAG function.
1. A method comprising:
maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions;
receiving a lawful intercept request for a target user equipment (UE);
identifying a user plane function (UPF) handling data traffic for the target UE;
querying the NRF to determine a respective PAG function based on one or more properties of the UPF and the lawful intercept request; and
associating a point of interception (POI) function with the respective PAG function.
2. The method of claim 1 , wherein maintaining a list of PAG functions comprises:
detecting an instantiation of a given PAG function; and
transmitting a notification to the NRF in response to the instantiation.
3. The method of claim 2 , wherein transmitting the notification to the NRF comprises transmitting a profile describing the given PAG function, the profile including one or more of a geographic location, one or more associated user plane function (UPF) identifiers, one or more PAG capabilities, one or more UPF location identifiers, a service type, an Internet Protocol (IP) address, one or more slice identifiers, or a traffic load type.
4. The method of claim 1 , wherein querying the NRF to determine the respective PAG function comprises issuing, by a user plane function (UPF), a query to the NRF in response to a lawful intercept (LI) message.
5. The method of claim 4 , wherein the UPF receives an identification of the respective PAG function from the NRF in response to the query, and the UPF transmits intercepted data to the respective PAG function.
6. The method of claim 1 , wherein querying the NRF to determine the respective PAG function comprises issuing, by a session management function (SMF), a query to the NRF in response to a session initialization message.
7. The method of claim 6 , wherein the SMF receives an identification of the respective PAG function from the NRF in response to the query and transmits the identification of the respective PAG function to a UPF prior to the UPF establishing a data session.
8. The method of claim 1 , wherein querying the NRF to determine the respective PAG function comprises issuing, by an administrative function (ADMF), a query to the NRF prior to establishing an intercept.
9. The method of claim 1 , wherein querying the NRF to determine a respective PAG function based on a location of a UPF.
10. A non-transitory computer-readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining steps of:
maintaining a list of point of interception aggregation (PAG) functions in a network function repository function (NRF) of a cellular network upon instantiation of the PAG functions;
receiving a lawful intercept request for a target user equipment (UE);
identifying a user plane function (UPF) handling data traffic for the target UE;
querying the NRF to determine a respective PAG function; and
associating a point of interception (POI) function with the respective PAG function.
11. The non-transitory computer-readable storage medium of claim 10 , wherein maintaining a list of PAG functions comprises:
detecting an instantiation of a given PAG function; and
transmitting a notification to the NRF in response to the instantiation, the notification including a profile describing the given PAG function, the profile including one or more of a geographic location, one or more associated user plane function (UPF) identifiers, one or more PAG capabilities, one or more UPF location identifiers, a service type, an Internet Protocol (IP) address, one or more slice identifiers, or a traffic load type.
12. The non-transitory computer-readable storage medium of claim 10 , wherein querying the NRF to determine the respective PAG function comprises issuing, by a user plane function (UPF), a query to the NRF in response to a lawful intercept (LI) message.
13. The non-transitory computer-readable storage medium of claim 12 , wherein the UPF receives an identification of the respective PAG function from the NRF in response to the query, and the UPF transmits intercepted data to the respective PAG function.
14. The non-transitory computer-readable storage medium of claim 10 , wherein querying the NRF to determine the respective PAG function comprises issuing, by a session management function (SMF), a query to the NRF in response to a session initialization message.
15. The non-transitory computer-readable storage medium of claim 14 , wherein the SMF receives an identification of the respective PAG function from the NRF in response to the query and transmits the identification of the respective PAG function to a UPF prior to the UPF establishing a data session.
16. A device comprising:
a processor configured to:
receive a lawful intercept request for a target user equipment (UE);
identify a user plane function (UPF) handling data traffic for the target UE;
query a network function repository function (NRF) of a cellular network to determine a respective PAG function based on one or more properties of the UPF and the lawful intercept request, the NRF configured to maintain a list of point of interception aggregation (PAG) functions in the cellular network upon instantiation of the PAG functions; and
associate a point of interception (POI) function with the respective PAG function.
17. The device of claim 16 , wherein querying the NRF to determine the respective PAG function comprises issuing a query to the NRF in response to receiving a message from an SMF.
18. The device of claim 17 , the processor further configured to receive an identification of the respective PAG function from the NRF in response to the query and transmit intercepted data to the respective PAG function.
19. The device of claim 16 , wherein querying the NRF to determine the respective PAG function comprises issuing a query to the NRF in response to receiving a message from an ADMF.
20. The device of claim 19 , the processor further configured to receive an identification of the respective PAG function from the NRF in response to the query and transmit the identification of the respective PAG function to a UPF prior to the UPF establishing a data session.