Abstract: The present invention relates to problems how to generate information related to access and use of a directory object in a database. The problems are solved by methods and arrangements in a communication system to generate information related to use of the monitored directory object in a database. An interception Access Point (IAP) provides information to an Intercept Configuration Unit (ICU), The information is associated to the monitored directory object. The method comprises receiving to the IAP a request to monitor the directory object in the database; detection of use of the monitored directory object in the IAP; and, delivering information related to said use from the IAP to the Intercept Configuration Unit ICU.

Abstract: The present invention relates to methods and arrangements to perform monitoring-continuity in case of number portability in a telecommunication system. The method comprises a step wherein a monitored user (B) requires number portability from an operator of a donor network (DNW) to an operator of a recipient network (RNW). The method further comprises the receiving of a number portability event—temporary address (NPE1) to an agency controlled receiving entity (LEMF, ADRS), which event (NPE1) comprises information related to the user's ported identity and the user's new identity.

Abstract: The present invention relates to methods and arrangements in a telecommunication system to generate Interception Related Information IRI related to Virtual Private Network VPN calls, which telecommunication system provides Virtual Private Network services to at least one integrated exchange LE-C; in the system. The exchange LE-C is associated with an Intercept Configuration Unit ICU. The method comprises the following steps:—Sending from the Intercept Configuration Unit ICU to the exchange LE-C, a request REQ to monitor Virtual Private Network calls involving a defined Corporate Network CN-A.—Receiving by the exchange LE-C, a call message SETUP; IAM in Virtual Private Network context comprising an identification field identifying the defined Corporate Network CN-A.—Sending from the exchange LE-C to the Intercept Configuration Unit ICU, Interception Related Information IRI related to the call.

Abstract: The present invention relates to method and arrangements to provide information related to user devices in a telecommunication system (TS). The system comprises at least one network domain (HPLMN, WCDMA) that is associated with a central database (DCR). The method comprises identification in the central database (DCR) of a first request (REQ1, REQI1) to provide to at least one data analysis function, user identity information related to all user devices that notifies attachment to the at least one network domain (HPLMN, WCDMA). Attachment notification from a requested user device (A, B) to the network domain is then detected in the central database.

Abstract: The present invention relates to methods and arrangements in a telecommunication system to monitor information related to specified services in a service unaware node. The node handles Content of Communication associated with services. The system comprises a Delivery Function to which Content of Communication related to a target is received from the node. The method comprises the following steps: Receiving from a requesting entity to the Delivery Function a request to delimit the received Content of Communication according to not desired services. Parsing the received Content of Communication according to not desired services by a Packet Inspection Feature associated with the Delivery Function. Forwarding Control Information related to the not desired services to the requesting entity.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: Systems and methods are provided for encryption allowing partial matching searches to retrieve data that is retained in a database. A user identification number or other characteristic is stored in unencrypted form such that a wildcard search may be performed to retrieve one or more encrypted indexes associated with the unencrypted user identification. These encrypted indexes are then unencrypted by use of a key to determined their associated unencrypted index and corresponding targeted retained data. The targeted retained data may then be accessed by an authorized entity such as a law enforcement agency.

Abstract: A system, method, and gateway in a telecommunication network for providing intercepted Content of Communications (CC) information from an Intercepting Control Element (ICE) to a Law Enforcement Monitoring Facility (LEMF). The system splits the intercepted CC information into CC control and CC payload information. A control point receives the control information and controls the gateway in accordance with the control information. The gateway receives the payload information and routes it to the LEMF over a payload Handover Interface.

Abstract: A control device (104) for controlling communication in an Internet Protocol Multimedia Subsystem IMS (150) coupling a user equipment (160, 162, 164) and an application provider (170, 172, 174) providing an application, the control device (104) comprising a receiving unit (190) adapted for receiving location information indicative of a location of the user equipment (160, 162, 164), a verification unit (192) adapted for verifying if the received location information matches a spatial area and a spatial condition in relation to the spatial area, wherein the spatial area and the spatial condition are part of a control criterion being associated with the application of the application provider (170, 172, 174), and a control unit (194) adapted for controlling a provisioning of the application to the user equipment (160, 162, 164) according to a result of the verification unit (192).

Abstract: Methods and apparatuses to enhance delivery capacity for traffic in a communication network are disclosed. Traffic is received to a Delivery Function with originally coded Quality of Services (QoS). A specification of requested QoS is received to the Delivery Function. The originally coded QoS is established to be higher than the requested QoS. The received traffic is transcoded into requested QoS. Optionally, the traffic is buffered with originally coded QoS and at request, the buffered traffic is retrieved.

Abstract: The present invention relates to a method for supervising log activities in a Communication Service Provider's domain (CSP) comprising a monitoring system (DR, LI) and a Log System. The method comprises steps of sending a request for log activities and receiving a result via standard defined interfaces (HIXA, HIXB, HIA, HIB; HIX1, HIX2, HI1, HI2) between a public authority (RA, LEMF) and the Provider's domain (CSP).

Abstract: A validation method for validating IP information header in data packets from user equipment connected to a mobile telecommunications network (1) and accessing an IP network (5) through a proxy. In the method trusted location information of the user equipment (2) from a trusted source of the telecommunications network is requested (109). Then, the trusted location information is inserted into the IP information header of a message (112) to be sent to a location based function (17).

Abstract: A method is proposed for managing requests from Law Enforcement Agencies for interception or retention of data relating to a target user. The method detects a request of interception or retention on the target user and verifies whether an electronic warrant is activated with respect to the user.

Abstract: The present invention relates to methods and arrangements for monitoring translation activities in an intermediate node NAT/PAT between a local network and a public network in a communication system. The intermediate node NAT/PAT rewrites addresses related to traffic sent between the networks. The method comprises steps of configuring the intermediate node NAT/PAT to operate as Intercepting Control Element ICE or Data Retention source, and steps of requesting translation information, and reporting translation information to a requesting authority.

Abstract: The present invention relates to methods and arrangements to perform monitoring-continuity in case of number portability in a telecommunication The method comprises a step wherein a monitored user (B) requires number portability from an operator of a donor network (DNW) to an operator of a recipient network (RNW). The method further comprises the receiving of a number portability event—temporary address (NPE1) to an agency controlled receiving entity (LEMF, ADRS), which event (NPE1) to an agency controlled receiving (NPE1) comprises information related to the user's ported identity and the user's new identity.

Abstract: A telecommunications network having at least one Data Retention Source and a Data Retention system adapted to communicate with the Data Retention Source and with a lawful requesting authority. The Data Retention Source is configured as a Diameter client and the Data Retention system is configured as a Diameter server. The Data Retention Source comprises means for generating at least one report containing data related to a communication session and means for sending such report to the Data Retention system as a Diameter message using a Data Retention Diameter application protocol.

Abstract: The invention relates to the use of mobile networks (110) in a telematics environment. A method embodiment of the invention performed by an application server (108) accessible via the mobile network (110) comprises the steps of receiving setting information (124) via a radio interface (126) of the mobile network, wherein the setting information indicates an environment setting of an environment in which a user terminal (106) is deployed; and controlling an application (109) hosted by the application server according to the received setting information.

Abstract: The method provides a Law Enforcement Agency LEA with retention or interception data related to a target user. At a data retention source node or at an interception control element of a telecommunications network, traffic packets involving the target user are inspected and a plurality of usage data records based on the inspected traffic packets are generated. Each record comprises information relating to a certain service class and to a respective communications stack layer. For each communications session involving a plurality of different communications stack layers, at the data retention source node or, respectively, the interception control element, the plurality of usage data records are provided with a same correlation identity number for correlating the data at the different communications stack layers. Then, the usage data records comprising the correlation identity number to the LEA are sent, for instance to the LI system or the data Retention System, respectively.

Abstract: The invention relates to a method of providing call- or service-related information to a Lawful Interception (LI) system or to a Data Retention (DR) system in a telecommunications network. In the method, a node is provided, which is in communication with an interception requesting element of the LI/DR system. At the node, a record relating to a communication involving a target user is generated and finally sent to the interception requesting element. Before sending the record, at the node it is checked whether a unique reference univocally identifying the communication involving the target user is already available to the node and, if not, such unique reference is generated by the node. Finally, the unique reference is included in the record, which can then be sent to the interception requesting element.

Abstract: A method in a telecommunication system for monitoring a communication by a Law Enforcement Monitoring Facility (LEMF). The LEMF sends a request for monitoring of a first party to a Call Session Control Function (CSCF) in a service domain of the telecommunication system. When the CSCF detects a SIP session event due to a setup of a media-flow connection between the monitored party and a second party, the CSCF sends Interception Related Information (IRI) toward the LEMF, and sends a resource setup message to a Multimedia Resource Function (MRF), also in the service domain. A Gateway GPRS Support Node (GGSN) routes the Communication Content (CC) to the MRF. The MRF copies the CC and routes one copy back to the GGSN and routes the other copy to the LEMF via a Delivery Function utilizing a SIP session with the LEMF.