Abstract: Network equipment (10) is configured for use in a wireless communication network (12). The network equipment (10) is configured to receive, over an interface (22) with radio equipment (14), a request (24) for information (26) based on which is determinable an unobfuscated identifier (20) associated with a target (16) being tracked by the radio equipment (14). The unobfuscated identifier (20) may be obfuscated by an obfuscating identifier (18) associated with the target (16). The network equipment (10) is also configured to send, from the network equipment (10) to the radio equipment (14), a response (28) that includes the requested information (26).

Abstract: A first lawful interception (LI) function transmits, to a second LI function in a virtualized network function, VNF, a request for random number generator, RNG, data, characterizing a random number generator in the second LI function. The RNG data is tested, resulting in a randomness test result that is indicative of randomness of numbers generated by the RNG in the second LI function. If the randomness is below a first threshold, mitigation takes place of any undesired effect associated with the randomness being less than the threshold value. A corresponding method is performed by the second LI function, receiving the request for RNG data, obtaining and transmitting the RNG data to the first LI function. Verification can thereby be made whether a LI function in a VNF has a proper level of entropy source for use by its cryptographic operations and, if not, perform mitigation.

Abstract: A lawful interception administrative function (LI ADMF) provides a virtual network function (VNF) implemented (i.e. implemented in a cloud infrastructure) LI intercept access point (IAP) only with one-way encrypted targets instead of clear-text targets while keeping the lawful interception triggering capability of the IAP unaffected. The ADMF, being external to the cloud infrastructure in which the IAP is running, executes hashing of targets before the targets are provided to the IAP. The IAP will never receive targets in clear text and thereby greatly reducing the LI security risks.

Abstract: A first lawful interception (LI) function transmits, to a second LI function in a virtualized network function, VNF, a request for random number generator, RNG, data, characterizing a random number generator in the second LI function. The RNG data is tested, resulting in a randomness test result that is indicative of randomness of numbers generated by the RNG in the second LI function. If the randomness is below a first threshold, mitigation takes place of any undesired effect associated with the randomness being less than the threshold value. A corresponding method is performed by the second LI function, receiving the request for RNG data, obtaining and transmitting the RNG data to the first LI function. Verification can thereby be made whether a LI function in a VNF has a proper level of entropy source for use by its cryptographic operations and, if not, perform mitigation.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: Method and arrangement in a mediating function (204) for supporting detection of fraud in a network, when a network security function (200) is employed for analyzing activities in the network in view of predefined alert criteria, and a fraud detection function (202) is employed for analyzing e.g. charging information of users. When a first alert is received from a first one of the network security function and the fraud detection function, indicating that the predefined alert criteria of said first function have been satisfied, the alert criteria of the second one of said network security function and fraud detection function are modified based on the received first alert. Thereby, the network security and fraud detection functions can be correlated and made more efficient regarding accuracy and/or speed in detecting fraud.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: Method and arrangement in a mediating function (204) for supporting detection of fraud in a network, when a network security function (200) is employed for analysing activities in the network in view of predefined alert criteria, and a fraud detection function (202) is employed for analysing e.g. charging information of users. When a first alert is received from a first one of the network security function and the fraud detection function, indicating that the predefined alert criteria of said first function have been satisfied, the alert criteria of the second one of said network security function and fraud detection function are modified based on the received first alert. Thereby, the network security and fraud detection functions can be correlated and made more efficient regarding accuracy and/or speed in detecting fraud.