Abstract: Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Abstract: Methods and devices overcome the issue caused when target’s location is not known at the beginning of a location dependent interception thereby being not possible to determine whether the target is in a law enforcement’s agency jurisdiction. The network operator delivers lawful interception data encrypted to the law enforcement agency and provides the decryption information when jurisdiction is confirmed.

Abstract: A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Abstract: Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Abstract: A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Abstract: A permissioned blockchain is used in a lawful interception, LI, context. Participants include a law enforcement agency, LEA, function, a LI mediation and delivery function, MF/DF, and an intercepting network function. A smart contract registered in the blockchain includes conditions associated with intercept related information, IRI, and/or communication content, CC, transactions. Registration is made in the blockchain of IRI and/or CC transactions performed by the participants during LI of a communication between two entities in a telecommunication network. The registered IRI and/or CC transactions are propagated among the participants and the smart contract is executed to verify whether or not the registered IRI and/or CC transactions are compliant with the smart contract. The participants are then informed about whether or not the registered IRI and/or CC transactions are compliant with the smart contract.

Abstract: The present invention relates to a method for handling response times in a communication system comprising at least one data retention system having at least one storage space for retained data. The at least one storage space has a defined response time (high, medium, low) for delivering retained data. The method comprises the following steps: —Receiving a request for retained data from an authorized organization to the at least one data retention system, which request comprises a specified data type and a retention time range —Dividing in the at least one data retention system, the received retention time range into at least one time segment each corresponding to one defined response time —Delivering an acknowledge message from the at least one data retention system to the authorized organization, which message comprises response and identification information corresponding to the at least one divided time segment.

Abstract: The present invention relates to methods and Validity securing arrangement and embodiments thereof for effectively securing validity of a target database in a node in a Lawful Interception Network. Said target database is intended to be identical to a source target database. The arrangement comprises a processing means being adapted to send a request for a target database checksum to the node comprising the target database, to receive a response comprising the target database checksum from the requested node, to compare the received target database checksum to a source target database checksum determined for the corresponding source target database, and to send an order to start an audit and synchronisation process if the two compared checksums differ.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: A method and apparatus for handling a data object accessible by more than one node. A server in a communication network stores information relating to the data object stored at a first node. The server then receives a subscription request message from a second node. This subscription request message subscribes to updates relating to the data object stored at the first node. A copy of the data object is accessible by the second node. The server subsequently receives a publication message relating to a change to the data object stored at the first node and which indicates an identity of the data object and an indication of the changes. The server sends a notification message relating to the change to the data object towards the second node, which is usable by the second node to make corresponding changes to the copy of the data object accessible by the second node.

Abstract: The present invention relates to methods and Validity securing arrangement and embodiments thereof for effectively securing validity of a target database in a node in a Lawful Interception Network. Said target database is intended to be identical to a source target database. The arrangement comprises a processing means being adapted to send a request for a target database checksum to the node comprising the target database, to receive a response comprising the target database checksum from the requested node, to compare the received target database checksum to a source target database checksum determined for the corresponding source target database, and to send an order to start an audit and synchronisation process if the two compared checksums differ.

Abstract: The method provides a Law Enforcement Agency LEA with retention or interception data related to a target user. At a data retention source node or at an interception control element of a telecommunications network, traffic packets involving the target user are inspected and a plurality of usage data records based on the inspected traffic packets are generated. Each record comprises information relating to a certain service class and to a respective communications stack layer. For each communications session involving a plurality of different communications stack layers, at the data retention source node or, respectively, the interception control element, the plurality of usage data records are provided with a same correlation identity number for correlating the data at the different communications stack layers. Then, the usage data records comprising the correlation identity number to the LEA are sent, for instance to the LI system or the data Retention System, respectively.

Abstract: The present invention relates to methods and arrangements in a telecommunication system to override current access rights. The telecommunication system comprises an Access Point IAP; MSC, SGSN associated with a Configuration Unit ICU. The method comprises receiving to the Access Point IAP; MSC, SGSN from the Configuration Unit ICU, a request to monitor a system member MS, SIM. The method further comprises receiving to the Access Point from the Configuration Unit, a request to override deprived access rights for the system member MS, SIM. The method further comprises overriding in the Access Point IAP; MSC, SGSN, the deprived access rights for the member.

Abstract: A validation method for validating IP information header in data packets from user equipment connected to a mobile telecommunications network (1) and accessing an IP network (5) through a proxy. In the method trusted location information of the user equipment (2) from a trusted source of the telecommunications network is requested (109). Then, the trusted location information is inserted into the IP information header of a message (112) to be sent to a location based function (17).

Abstract: A method and apparatus for handling a data object accessible by more than one node. A server in a communication network stores information relating to the data object stored at a first node. The server then receives a subscription request message from a second node. This subscription request message subscribes to updates relating to the data object stored at the first node. A copy of the data object is accessible by the second node. The server subsequently receives a publication message relating to a change to the data object stored at the first node and which indicates an identity of the data object and an indication of the changes. The server sends a notification message relating to the change to the data object towards the second node, which is usable by the second node to make corresponding changes to the copy of the data object accessible by the second node.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: A method and apparatus for providing lawful interception in an IMS network. A first node in an IMS network receives a message from a Lawful Intercept mediation system node instructing the first node to perform lawful interception on a target. The first node sends a subscribe request message towards a second node located in an IMS core network. The subscribe request message includes at least an identity of a service type to be monitored. The first node subsequently receives a notify message from the second node, the notify message including session information from which intercept related information can be derived. The first node then sends intercept related information towards the Lawful Intercept mediation system node.

Abstract: A control device (104) for controlling communication in an Internet Protocol Multimedia Subsystem IMS (150) coupling a user equipment (160, 162, 164) and an application provider (170, 172, 174) providing an application, the control device (104) comprising a receiving unit (190) adapted for receiving location information indicative of a location of the user equipment (160, 162, 164), a verification unit (192) adapted for verifying if the received location information matches a spatial area and a spatial condition in relation to the spatial area, wherein the spatial area and the spatial condition are part of a control criterion being associated with the application of the application provider (170, 172, 174), and a control unit (194) adapted for controlling a provisioning of the application to the user equipment (160, 162, 164) according to a result of the verification unit (192).

Abstract: The present invention relates to a method for handling response times in a communication system comprising at least one data retention system (2;2,22,23) having at least one storage space (6A, 6B, 6C) for retained data. The at least one storage space (6A, 6B, 6C) has a defined response time (high, medium, low) for delivering retained data. The method comprises the following steps:—Receiving (31) a request for retained data from an authorized organization (3) to the at least one data retention system (2;2,22,23), which request comprises a specified data type and a retention time range—Dividing (37) in the at least one data retention system, the received retention time range into a least one time segment each corresponding to one defined response time (high, medium, low).—Delivering (32) an acknowledge message from the at least one data retention system to the authorized organization, which message comprises response and identification information corresponding to the at least one divided time segment.

Abstract: The invention relates to the use of mobile networks (110) in a telematics environment. A method embodiment of the invention performed by an application server (108) accessible via the mobile network (110) comprises the steps of receiving setting information (124) via a radio interface (126) of the mobile network, wherein the setting information indicates an environment setting of an environment in which a user terminal (106) is deployed; and controlling an application (109) hosted by the application server according to the received setting information.