Abstract: Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Abstract: Automatic preparation of data related to session initiation protocol (SIP) based traffic flows in a lawful interception (LI) scenario is disclosed. The dataset that is obtained may, e.g., be used for machine learning-based (ML) and artificial intelligence (AI) tools that can identify lawfully intercepted SIP-based traffic cases. Such preparation of data reduces the 5 risk of misunderstandings between a communications service provider (CSP) and a law enforcement agency (LEA), which reduces the time dedicated by both parties in understanding the correctness of LI data provided by the CSP to the LEA.

Abstract: Methods and apparatuses in the field of network slice management are disclosed. A method of managing, by means of an activation code management server (100), a plurality of activation codes (511 562) in a network includes steps of: providing (S31), for each of a plurality of network slices, a network slice identifier (570) in correspondence with a network slice; providing (S32) at least one VNF-product identifier (580), each VNF-product identifier (580) being in correspondence with a VNF; providing (S33) a plurality of activation code indicators (510, 520, 530, 540, 550, 560), each activation code indicator (510, 520, 530, 540, 550, 560 being indicative of one or more of the plurality of activation codes (511 562); and associating each of the plurality of activation code indicators (510, 520, 530, 540, 550, 560) with a corresponding network slice identifier (570) and a corresponding VNF-product identifier (580).

Abstract: A mechanism is provided that enables hiding identities of a target subscriber that is to be subject of lawful interception, LI, when the intercept access point, IAP, is outside the network operator part of the LI domain. Monitoring of data traffic such as over-the-top, OTT, services is enabled while at the same time hiding LI target identities to a network element, NE, containing the IAP. A secure memory area in the NE is dedicated to the LI functionality necessary to intercept and report interception data to the operator part of the LI domain. The interface between the NE and the operator part of the LI domain is the use of a secure injection channel via which the necessary LI software and target information are conveyed between the NE and the operator part of the LI domain.

Abstract: Methods and devices provide service-specific information besides LI data extracted from communications of LI targets, which receive services via the network and interact with a core function of the network. LI data includes at least one of IRI and CC. This approach is particularly useful if LI at application/service level is unavailable.

Abstract: Methods and apparatuses in the field of network slice management are disclosed. A method of managing, by means of an activation code management server (100), a plurality of activation codes (511 562) in a network includes steps of: providing (S31), for each of a plurality of network slices, a network slice identifier (570) in correspondence with a network slice; providing (S32) at least one VNF-product identifier (580), each VNF-product identifier (580) being in correspondence with a VNF; providing (S33) a plurality of activation code indicators (510, 520, 530, 540, 550, 560), each activation code indicator (510, 520, 530, 540, 550, 560 being indicative of one or more of the plurality of activation codes (511 562); and associating each of the plurality of activation code indicators (510, 520, 530, 540, 550, 560) with a corresponding network slice identifier (570) and a corresponding VNF-product identifier (580).

Abstract: A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Abstract: Automatic preparation of data related to session initiation protocol (SIP) based traffic flows in a lawful interception (LI) scenario is disclosed. The dataset that is obtained may, e.g., be used for machine learning-based (ML) and artificial intelligence (AI) tools that can identify lawfully intercepted SIP-based traffic cases. Such preparation of data reduces the 5 risk of misunderstandings between a communications service provider (CSP) and a law enforcement agency (LEA), which reduces the time dedicated by both parties in understanding the correctness of LI data provided by the CSP to the LEA.

Abstract: The disclosure relates to a method in a Lawful Intercept, LI, management system for removing redundant content of communication, CC flows. Said LI management system is capable of receiving and handling one or more CC flows generated from intercepted target communication sessions. Each CC flow comprises a flow of data packets, each data packet comprising a flow identity of the CC flow. The flow identity comprises an address of a sending intercept access point, IAP, at least one target identifier, TID, and a communication session Correlation Identifier, CI. The method enables the LI management system to forward only one CC flow of CC flows having identical TID and CI, respectively, but different sending intercept access points.

Abstract: This disclosure relates to a method S100 and a device for correlating in a Lawful Intercept Mediation system, LIMS, received Intercept Related Information, IRI, and, Communications Content, CC, data packets of a 5 targets lawfully intercepted session for deliverance over HI2 and HI3 interfaces, respectively, by means of a session-specific Correlation Identification Number, CIN.

Abstract: Methods and devices employed in providing lawful interception (LI) by products related to a service session of an LI target as a unique chain. The packets sent to a legal enforcement agency are chained and have shorter headers. The number of packets is reduced by including both intercept-related information (IRI) and content of communications (CC) in the same packet if time-wise appropriate.

Abstract: A mechanism is provided that enables hiding identities of a target subscriber that is to be subject of lawful interception, LI, when the intercept access point, IAP, is outside the network operator part of the LI domain. Monitoring of data traffic such as over-the-top, OTT, services is enabled while at the same time hiding LI target identities to a network element, NE, containing the IAP. A secure memory area in the NE is dedicated to the LI functionality necessary to intercept and report interception data to the operator part of the LI domain. The interface between the NE and the operator part of the LI domain is the use of a secure injection channel via which the necessary LI software and target information are conveyed between the NE and the operator part of the LI domain.

Abstract: A declarative mechanism is provided in the context of lawful interception (LI). A manifesto with information that specifies LI of a communication service or application is created and declared by a service or application provider who, is subject to LI. The declaration takes place in that the manifesto is provided from a first LI function to other LI functions in a communication system. LI data (e.g., call data record, intercept related information and call content) is subsequently generated during LI according to the manifesto by a point of interception within the service or application. The point of interception delivers the LI data to a mediation and delivery function that then forwards it to a law enforcement agency. The law enforcement agency knows how to read and manage the LI data from the manifesto.

Abstract: This disclosure relates to a method S100 and a device for correlating in a Lawful Intercept Mediation system, LIMS, received Intercept Related Information, IRI, and, Communications Content, CC, data packets of a 5 targets lawfully intercepted session for deliverance over HI2 and HI3 interfaces, respectively, by means of a session-specific Correlation Identification Number, CIN.

Abstract: The disclosure relates to a method in a Lawful Intercept, LI, management system for removing redundant content of communication, CC flows. Said LI management system is capable of receiving and handling one or more CC flows generated from intercepted target communication sessions. Each CC flow comprises a flow of data packets, each data packet comprising a flow identity of the CC flow. The flow identity comprises an address of a sending intercept access point, IAP, at least one target identifier, TID, and a communication session Correlation Identifier, CI. The method enables the LI management system to forward only one CC flow of CC flows having identical TID and CI, respectively, but different sending intercept access points.

Abstract: A method and arrangements providing QoS-aware routing of received session flows of separate communication sessions comprising Communication Content achieved and received from Lawful Interception of target sessions. The method comprises sorting each separate communication session into one of two groups, a first routing group and a second routing group, according to certain criteria wherein QoS is at least one of the criteria. Further, the method comprises routing communication sessions sorted into the first routing group via a regular handover interface and routing communication sessions sorted into the second routing group via an additional handover interface to a Law Enforcement Agency.

Abstract: Presented are a method and a node in a Lawful Interception (LI) network, in which the node is configured to provide a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) of data traffic in a digital communications network. The IRI and CC are forwarded to an Intercept Mediation and Delivery unit node (IMDU) of the LI network, wherein the IMDU is configured to sample the content of communications according a certain sampling rate to achieve one or more samples of the CC, and to forward the generated one or more samples to the Law Enforcement Agency.

Abstract: A method and arrangements providing QoS-aware routing of received session flows of separate communication sessions comprising Communication Content achieved and received from Lawful Interception of target sessions. The method comprises sorting each separate communication session into one of two groups, a first routing group and a second routing group, according to certain criteria wherein QoS is at least one of the criteria. Further, the method comprises routing communication sessions sorted into the first routing group via a regular handover interface and routing communication sessions sorted into the second routing group via an additional handover interface to a Law Enforcement Agency.

Abstract: Presented are a method and a node in a Lawful Interception (LI) network, in which the node is configured to provide a Law Enforcement Agency with Intercept Related Information (IRI) and Content of Communications (CC) of data traffic in a digital communications network. The IRI and CC are forwarded to an Intercept Mediation and Delivery unit node (IMDU) of the LI network, wherein the IMDU is configured to sample the content of communications according a certain sampling rate to achieve one or more samples of the CC, and to forward the generated one or more samples to the Law Enforcement Agency.