Abstract: A method includes implementing, through a server of a Fifth Generation (5G) mobile network, a pseudo-Authentication Server Function (AUSF) component as a component of an architecture of a core mobile network of the 5G mobile network distinct from an existing AUSF module thereof executing on the server, and automatically routing a request for identity resolution of a User Equipment (UE) connectable to the 5G mobile network to the pseudo-AUSF component instead of the existing AUSF module, with the request including a concealed identifier of the UE. The method also includes automatically resolving the concealed identifier into a permanent identifier of the UE utilizing an existing Unified Data Management (UDM) module of the core mobile network based on communication between the pseudo-AUSF component and the existing UDM module, and automatically providing, through the existing UDM module and the pseudo-AUSF component, the permanent identifier of the UE to address the request.

Abstract: A system, method, and apparatus for collecting data streams, such as data packets, on a network, such as the Internet, are disclosed. A metadata portion of at least one of the data streams is analyzed on the network and evaluated using a metadata processing engine to identify a relationship between at least two of the plurality of data streams, e.g., a relationship between multiple users of a network, regardless of whether the users are currently of interest or if they are not of interest. An interface manager can receive an information of a new user of interest, evaluate the new user of interest for redundancy against existing known users of interest of the NMS; then communicate the information of the new user of interest to at least one access device to collect data streams associated with the new user of interest.

Abstract: A system, method, and apparatus for collecting data streams, such as data packets, on a network, such as the Internet, are disclosed. A metadata portion of at least one of the data streams is analyzed on the network and evaluated using a metadata processing engine to identify a relationship between at least two of the plurality of data streams, e.g., a relationship between multiple users of a network, regardless of whether the users are currently of interest or if they are not of interest. An interface manager can receive an information of a new user of interest, evaluate the new user of interest for redundancy against existing known users of interest of the NMS; then communicate the information of the new user of interest to at least one access device to collect data streams associated with the new user of interest.

Abstract: A system, method, and apparatus for intercepting data streams such as packets on a network. In one embodiment, the method includes: receiving at a network surveillance system (NSS), a target to be intercepted on the network; creating a target identification (target ID) for the target, wherein the target ID is unique to the NSS in order to track data streams of the target during subsequent processing, such as extraction of content and metadata, in the NSS; intercepting the data streams of the target on the network; tagging the data streams of the target that are intercepted from the network with a respective target ID; transmitting the data streams of the target to the NSS for subsequent analysis; and distributing the data streams across a scalable quantity of data processing engines in the NSS.