Abstract: A mechanism is provided that enables hiding identities of a target subscriber that is to be subject of lawful interception, LI, when the intercept access point, IAP, is outside the network operator part of the LI domain. Monitoring of data traffic such as over-the-top, OTT, services is enabled while at the same time hiding LI target identities to a network element, NE, containing the IAP. A secure memory area in the NE is dedicated to the LI functionality necessary to intercept and report interception data to the operator part of the LI domain. The interface between the NE and the operator part of the LI domain is the use of a secure injection channel via which the necessary LI software and target information are conveyed between the NE and the operator part of the LI domain.

Abstract: A mechanism is provided that enables hiding identities of a target subscriber that is to be subject of lawful interception, LI, when the intercept access point, IAP, is outside the network operator part of the LI domain. Monitoring of data traffic such as over-the-top, OTT, services is enabled while at the same time hiding LI target identities to a network element, NE, containing the IAP. A secure memory area in the NE is dedicated to the LI functionality necessary to intercept and report interception data to the operator part of the LI domain. The interface between the NE and the operator part of the LI domain is the use of a secure injection channel via which the necessary LI software and target information are conveyed between the NE and the operator part of the LI domain.

Abstract: A Lawful Intercept (LI) system and a method in a LI system comprising at least one Intercept Access Point (IAP) for intercepting communication traffic using User Datagram Protocol (UDP) and Transmission Control Protocol (TCP) packets in one or more communications networks. The IAP delivers the communication traffic as Communication Content (CC) to a Law Enforcement Agency (LEA) via a mediation functionality controlled by an administration functionality. The method comprises receiving CC as UDP and TCP; storing UDP and TCP CC in a buffer arrangement; and forwarding TCP CC or UDP CC via a first CC handover interface or via a second CC handover interface, separated from the first CC handover interface, to the LEA. A synchronization mechanism is provided in order to retransmit all IP packets lost over the new interface and a buffer capacity process.

Abstract: A Lawful Intercept, (LI) system and a method in a LI system comprising at least one Intercept Access Point, (IAP) for intercepting communication traffic using User Datagram Protocol, (UDP) and Transmission Control Protocol (TCP) packets in one or more communications networks. The IAP delivers the communication traffic as Communication Content (CC) to a Law Enforcement Agency (LEA) via a mediation functionality controlled by an administration functionality. The method comprises receiving CC as UDP and TCP; storing UDP and TCP CC in a buffer arrangement; and forwarding TCP CC or UDP CC via a first CC handover interface or via a second CC handover interface separated from the first CC handover interface, to the LEA. A synchronization mechanism is provided in order to retransmit all IP packets lost over the new interface and a buffer capacity process.

Abstract: A method and arrangements providing QoS-aware routing of received session flows of separate communication sessions comprising Communication Content achieved and received from Lawful Interception of target sessions. The method comprises sorting each separate communication session into one of two groups, a first routing group and a second routing group, according to certain criteria wherein QoS is at least one of the criteria. Further, the method comprises routing communication sessions sorted into the first routing group via a regular handover interface and routing communication sessions sorted into the second routing group via an additional handover interface to a Law Enforcement Agency.

Abstract: Methods and arrangements are provided for maintaining a wanted Quality of Service transmission level of Lawful Interception (LI) payload data to a Law Enforcement Agency (LEA) via an HI3 interface in a LI system. The data is acquired from an intercepted IP packet flow and belongs to one or more target identities using a specific Internet communications service. The method, which is performed by the arrangement, includes monitoring the state of congestion of IP packets in the HI3 interface in relation to a first threshold level T1 and a second threshold level T2. The first threshold level T1 corresponds to a lower level of congestion than the second threshold level T2. The transmission of LI payload data is controlled based on the monitoring and a priority classification assigned to the LI payload data to be transmitted.

Abstract: A method and arrangements providing QoS-aware routing of received session flows of separate communication sessions comprising Communication Content achieved and received from Lawful Interception of target sessions. The method comprises sorting each separate communication session into one of two groups, a first routing group and a second routing group, according to certain criteria wherein QoS is at least one of the criteria. Further, the method comprises routing communication sessions sorted into the first routing group via a regular handover interface and routing communication sessions sorted into the second routing group via an additional handover interface to a Law Enforcement Agency.

Abstract: Methods and arrangements are provided for maintaining a wanted Quality of Service transmission level of Lawful Interception (LI) payload data to a Law Enforcement Agency (LEA) via an HI3 interface in a LI system. The data is acquired from an intercepted IP packet flow and belongs to one or more target identities using a specific Internet communications service. The method, which is performed by the arrangement, includes monitoring the state of congestion of IP packets in the HI3 interface in relation to a first threshold level T1 and a second threshold level T2. The first threshold level T1 corresponds to a lower level of congestion than the second threshold level T2. The transmission of LI payload data is controlled based on the monitoring and a priority classification assigned to the LI payload data to be transmitted.