Abstract: In one embodiment, a packet filter (or “trap”) is installed on one or more interfaces of a router, switch (intermediary) or other node in an IP network that identifies multimedia packets for a particular media stream. A packet replicator (or “cloner”) duplicates the identified packets allowing the original packets to continue through the IP network. A forwarder (“tunneler”) encapsulates and sends the cloned media packets to a central facility where the tunneled media stream is further analyzed.

Abstract: Surveillance of IP telephony may be performed through the use of conventional telephone equipment, according to principles of the invention while preventing giving indication to the monitored phone by alerting the user of the monitoring phone to such surveillance use prior to pick up by an agent for engagement of the monitoring phone in response to the alert. Such alerts may assume many forms such as ringing, visual indicators, data readouts, activating ancillary equipment, various flags, etc. This alert prior to surveillance is distinct from alerts used for normal non-surveillance calls, which the monitoring phone is capable of receiving.

Abstract: A method of analyzing the performance of a modem connection. The method includes connecting a line interface to a communication link carrying signals of a modem connection, between a pair of end modems, collecting signals passing on the communication link, between the end modems, through the line interface, determining quality or transmission characteristics regarding the modem connection, responsive to signals collected through the line interface, and displaying information on the determined characteristics.

Abstract: A method of locating a cellular phone on an aircraft includes detecting a cellular phone transmission of a passenger on an aircraft, logging a subscriber number and a serial number of the phone, transmitting the subscriber number and the serial number of the phone to a common carrier for caller identification information, attempting to match the caller identification information with a database, displaying a name and a seat number of the passenger if a match was found between the caller identification information and the database, and recording all information related to the cellular phone transmission.

Abstract: In an example embodiment, a method for dynamically troubleshooting voice quality. The method comprises generating a request to intercept a predetermined data stream on a network, acquiring a replicated copy of the intercepted data stream responsive to the request and analyzing the replicated copy of the intercepted data stream.

Abstract: Included are systems and methods for capturing screen data. At least one embodiment of a method includes receiving an indication of a communications session, wherein the communication session is associated with screen data and determining screen data to capture. Some embodiments include capturing data related to the screen data and uploading the captured data to a remote location.

Abstract: A method, system, and program for telephony based remote location monitoring are provided. A telephone network receives the caller request to listen only to a remote location telephony device. The telephone network allocates a listen only channel between the caller telephony device and the remote location telephony device. The telephone network activates a microphone at the remote location telephony device via the listen only channel. Then, audio detected at the microphone is streamed via the listen only channel to the caller telephony device, such that the telephone network enables a caller to monitor a remote location through the remote location telephony device with minimized allocation of telephone network resources.

Abstract: Methods, systems, and computer program products for surveillance of messaging service messages in a communications network are disclosed. According to one aspect, a system is provided for intercepting a messaging service message in a communications network. The system can include a communication module for receiving and sending messaging service messages from a communications network. Further, the system can include a subscriber surveillance database for maintaining a listing of subscribers that have been placed under surveillance. The system can also include a surveillance function for receiving a messaging service message, extracting a subscriber identifier from the messaging service message, performing a lookup in the surveillance database using the subscriber identifier, and performing a surveillance action in response to locating a matching entry in the database.

Abstract: Disclosed are systems and methods which provide a centralized architecture for call processing. Embodiments utilize voice over Internet protocols (VoIP) to carry calls from a location at which calling services are provided to a centralized call processing platform providing call processing functionality, such as calling party identification, call validation, call routing, and connection to the public switched telephone network (PSTN). Call processing gateways may be utilized to provide plain old telephone service (POTS) analog line interfaces for use with a plurality of telephone sets disposed for use at a location and at least one wide area network (WAN) interface for providing high speed data communication to a centralized call processing platform. PSTN interfacing by a call processing platform may be provided as a VoIP connection to the PSTN and/or as POTS trunking. Call processing platforms may provide for data sharing, aggregation, and/or analysis across multiple facilities served.

Abstract: The invention relates to a method of providing call- or service-related information to a Lawful Interception (LI) system or to a Data Retention (DR) system in a telecommunications network. In the method, a node is provided, which is in communication with an interception requesting element of the LI/DR system. At the node, a record relating to a communication involving a target user is generated and finally sent to the interception requesting element. Before sending the record, at the node it is checked whether a unique reference univocally identifying the communication involving the target user is already available to the node and, if not, such unique reference is generated by the node. Finally, the unique reference is included in the record, which can then be sent to the interception requesting element.

Abstract: A system and methods of detecting a loop in a network having at least one access point with a first interface and a second interface, at least one switch with multiple ports, and at least one client with a first interface and a second interface, including: the access point first interface intermittently transmitting a loop check packet to the switch; the switch receiving the loop check packet at one of the ports and transmitting the loop check packet to the client through another one of the ports; the client first interface receiving the loop check packet; the client second interface retransmitting the loop check packet to the access point; and the access point second interface being configured to receive the retransmitted loop check packet. The access point detects a loop when the access point second interface receives the retransmitted loop check packet. Other embodiments eliminate the loops in various ways.

Abstract: A method and apparatus for automating test procedures to determine if non-emergency signaling message processing errors impact emergency calls, e.g., E911 calls, are disclosed. In one embodiment, the present method alerts network engineers so that crankback procedures to alternative routes can be instituted when these E911 call impacting error conditions are detected in a network.

Abstract: An exemplary circuit for preventing unauthorized access to a phone includes three transistors, a zener diode, and a rectifier comprising two input terminals for receiving an AC voltage from the telecommunication office, a negative output terminal connected to the phone via a first resistor, and a positive output terminal connected to the phone. The anode and the cathode of the zener diode are respectively connected to the positive output terminal and the base of the first transistor. The collectors of the first and third transistors are connected to the base of the second transistor, which is connected to the positive and negative output terminals respectively via two capacitors. The collectors of the first and second transistors are connected to the positive output terminal respectively via a second resistor and a buzzer. Emitters of the three transistors are connected to the negative output terminal of the rectifier.

Abstract: A system is provided for intercepting signals transmitted between a target served by a fiber optic network and a subscriber. A network is described having a phone switch at a central office configured to receive signals for transmission to and from a target, such as the target of a criminal investigation. A signal received at the central office is assigned to an analog circuit, and a monitoring device configured to intercept and monitor the signal is installed along the analog circuit at a location that allows the monitoring of communications without notifying the target that he is under surveillance. After the signal has been monitored, it is converted to a digital signal for transmission. A method is also provided for intercepting a signal transmitted between the target served by a fiber optic network and a subscriber, such that a monitoring device may be installed without alerting the target.

Abstract: A method and apparatus for providing useful packet data to a CALEA/Legal Intercept collection function. At an access point to a network such as the Internet, sources and destinations of data connections are examined to determine whether any of the bearer messages should also be routed to a CALEA/Legal Intercept monitoring system. If this condition is recognized, the bearer messages and corresponding signaling control messages are correlated in a call packet delivery application server and then delivered to a CALEA/Legal Intercept monitoring system. Advantageously, the monitoring receives as a bundled message set the bearer message and the control messages used to route and otherwise process these bearer messages.

Abstract: A method, system and computer program for assisting law enforcement surveillance of a telephone call in accordance with the requirements of is presented. The method includes, but is not limited to, the steps of: receiving an indication of a call that is placed with a pre-identified telephonic unit that uses an internet packet protocol for transmission, wherein the pre-identified telephonic unit has been selected for telephone call surveillance; converting the call into a converted call that is in analog form; and redirecting the converted call to an analog switching station that is capable of performing surveillance of the call.

Abstract: The invention relates to a method of listening in to calls between two or more subscribers of a communications network comprising one or more IP networks as well as to a listening server, a call control server, and an IP router for carrying out the method. When the listening server detects a request to monitor one of the subscribers, it determines at least one call control server assigned to the subscriber. Further, at least one IP router is determined which is responsible for a network access point of the subscriber to the IP network or IP networks. The listening server causes the at least one determined call control server to acquire call data associated with calls in which the subscriber is involved. Further, the at least one determined IP router is caused to acquire contents data associated with calls in which the subscriber is involved.

Abstract: The invention is directed to techniques for initiating lawful intercept of packets associated with subscriber sessions on a network device of a service provider network based on identification triggers. A law enforcement agency may send an intercept request for a subscriber to an administration device of the service provider network. The administration device may then configure one or more identification triggers for the subscriber based on the intercept request. The techniques described herein initiate lawful intercept when one or more subscriber sessions on a network device match the one or more identification triggers. The techniques described herein include configuring trigger rules that include identification triggers for subscribers on a network device via a command line interface (CLI) of the network device. In addition, the techniques described herein include configuring identification triggers in a subscriber profile on an authentication device connected to a network device.

Abstract: A system and method for monitoring individuals using voice print matching to match previously stored unidentified speech samples with known voice prints is disclosed. Voice prints of unidentified individuals are obtained and stored in a central repository for use by authorized agencies or other entities that monitor voice communications, such as, for example, if the conversation being monitored causes the monitor, based on their predetermined alert criteria, to suspect the speakers of illegal activity, such as, for example, terrorism, or otherwise cause the monitor to seek additional information about the speakers. Voice prints of known individuals are taken by authorized agencies based on predetermined criteria. When these known voice prints are being obtained, they are compared to the unidentified voice prints in the database, and if a match is found, the monitor is notified, and put in communication with the agency taking the voice print for further action as appropriate.

Abstract: A method of remotely monitoring an Internet session includes participating in a first Internet session at a first Internet protocol (IP) address. Concurrent with the first Internet session, another Internet session is initiated at another IP address. Data associated with the first Internet session is automatically transferred to the other IP address via the other Internet session.

Abstract: The present invention enables packet-switched network providers, e.g., VoIP network providers, to use commonly deployed components and capabilities to support surveillance services, e.g., CALEA services. Specifically, signaling and media streams that flow through Border Elements can be forked and simultaneously redirected to a surveillance server, a CALEA Server in addition to the terminating endpoint. Additionally, a Media Server (MS) can unobtrusively join a third leg to a communication media path between the CALEA Server and the two, calling party and called party, endpoints. A CALEA Server provides the ability to identify and collect content of voice telephone calls traversing the VoIP Network, as mandated by the Communications Assistance for Law Enforcement Act.

Abstract: Various systems and methods for intercepting transmissions are disclosed. In one embodiment, a system is disclosed that includes a media gateway communicably coupled to a soft switch and an acquisition facility. A first processor and a first computer readable medium is associated with the soft switch. The computer readable medium includes instructions executable by the processor to receive a transmission originating from a first communicator and indicating at least a second communicator, and to direct the transmission to the acquisition facility via the media gateway. A second processor and second computer readable medium are included, and the second computer readable medium includes instructions executable by the second processor to direct the transmission from the media gateway to the second communicator such that direction of the transmission to an acquisition facility is obscured from at least the second communicator. Various other systems and methods are also disclosed.

Abstract: A method and apparatus for surveillance of voice over Internet protocol (VoIP) communications is provided. A server (112) associated with a network provider receives information to identify communications associated with a party under surveillance (200). The server uses the information to direct communications associated with the party under surveillance to a surveillance server (130) (202). The communications are analyzed to identify any initial VoIP data (204). If initial VoIP data is detected, identifiers for subsequent related VoIP communications are determined from the initial VoIP data (206). The identifiers for subsequent VoIP communications are used to identify subsequent VoIP packets. Those subsequent VoIP packets are then stored and analyzed as needed by an agency conducting surveillance.

Abstract: A module for use in a communications network in which a plurality of signals are transmitted between respective first and second nodes, the module having an engine for receiving the plurality of signals over the network, for extracting protocol data therefrom and for providing the extracted protocol data to an analyser; and a processor for controlling operation of the engine and analyser. The invention also provides an apparatus for generating communications, systems including the module and/or the apparatus, and corresponding methods.

Abstract: A call control component of an apparatus in one example employs one or more criteria to select one or more internet protocol calls from a plurality of internet protocol calls in an internet protocol network. The call control component sends a copy of one or more portions of the one or more internet protocol calls to one or more eavesdrop components to monitor the one or more portions of the one or more internet protocol calls.

Abstract: Methods and apparatus for call surveillance in Internet protocol communication networks are disclosed. An example method to perform call surveillance in a communication network disclosed herein comprises determining an overall path delay measurement associated with using a first media server to perform surveillance of a call between a first user device and a second user device in an Internet Protocol Multimedia Subsystem network, and determining whether to perform surveillance of the call with one of the first media server or a second media server based on the overall path delay measurement.

Abstract: Methods, systems, and computer program products for detecting and mitigating a ping call event in a communications system is described. In one embodiment, the method includes receiving a plurality of call signaling messages. The plurality of call signaling messages are analyzed and a determination is made as to whether at least a portion of the plurality of call signaling messages indicates a ping call event. In response to determining that the at least a plurality of call signaling messages indicates a ping call event, a mitigating action is performed.

Abstract: Methods and apparatus are provided for preventing a third party from listening to a conversation between at least two participants on a telephone. The telephone generates an audio stimulus signal that is presented through a secondary speaker. The audio stimulus signal may be, for example, pseudorandom noise or a cancellation signal. According to one aspect of the invention, the telephone ensures that the audio stimulus signal does not significantly impair the conversation for the at least two participants. To prevent the third party from listening to the local portion of the conversation, the audio stimulus signal is subtracted from the received signal prior to presenting the received signal to the user. To prevent the third party from listening to the remote portion of the conversation, the audio stimulus signal is subtracted from the received signal.

Abstract: A method and apparatus for automating test procedures to determine if non-emergency signaling message processing errors impact emergency calls, e.g., E911 calls, are disclosed. In one embodiment, the present method alerts network engineers so that crankback procedures to alternative routes can be instituted when these E911 call impacting error conditions are detected in a network.

Abstract: Surveillance of IP telephony may be performed through the use of conventional telephone equipment, according to principles of the invention while preventing giving indication to the monitored phone by alerting the user of the monitoring phone to such surveillance use prior to pick up by an agent for engagement of the monitoring phone in response to the alert. Such alerts may assume many forms such as ringing, visual indicators, data readouts, activating ancillary equipment, various flags, etc. This alert prior to surveillance is distinct from alerts used for normal non-surveillance calls, which the monitoring phone is capable of receiving.

Abstract: The invention relates to a gas-insulated bus bar component comprising a grounded housing that is filled with protective gas and at least one bus bar conductor, which extends in the longitudinal direction of the housing and is supported on said housing by means of insulating bus bar supports. According to the invention, each bus bar conductor is connected to a disconnecting switch that is insulated by protective gas. The aim of the invention is to provide a component of this type, which can be simply connected to and disconnected from an air-insulated conductor, even when operational. To achieve this, the disconnecting switch is located in an outdoor bushing that is fixed to the housing.

Abstract: A method and apparatus for web based mail lawful interception. The method and apparatus enable the detection and automatic analysis of web based mail interactions out of all intercepted web pages. The method and apparatus use and possibly generate scripts for identifying a web page as comprising a web mail message, and scripts for analyzing the web mail messages.

Abstract: Data generated at a telecommunications network switching node is selectively delivered to one or more data receiving device (e.g., data “collection box”) connected to the network, and command and control signaling is transmitted from the data receiving device to the switching node. This bi-directional communication is carried out in a manner compatible with voice grade lines. In an exemplary application, call identifying information, referred to in the TIA/EIA Standard as CDC (Call Data Channel) Messages, is delivered from an Intercept Access Point (IAP) switch that provides telephone service to a subject of an authorized surveillance order, to a law enforcement data collection box, utilizing Frequency Shift Keying (FSK) signals. Control signals are sent from the data collection box to the IAP switch utilizing Dual Tone Multi-Frequency (DTMF) signaling.

Abstract: A method for protecting a data entry device from eavesdropping includes masking a signature of entry resulting from entry of data by a user of the data entry device so as to reduce the detectability of the signature by eavesdropping. The signature may include a temperature differential in the data entry device from data entry by the user and the masking may include controlling the external temperature of the data entry device to reduce temperature differentials left in the data entry device by the user. Alternatively, the signature may include sound waves emitted from the data entry device and the masking may include masking sound waves emitted from the data entry device to reduce the detectability of the sound waves. A system may also be employed for protecting data entry to a data entry device from eavesdropping.

Abstract: A method for lawful interception of communication related information is disclosed. In the preferred embodiment, the method includes detecting the occurrence of an event in a packet data network. The method also includes collecting communication related information of a communication in the packet data network in response to the detection of the event based at least in part on the detected event and providing the collected communication related information to one or more law enforcement agencies.

Abstract: By selecting access points specific to the various components of call-content of a call, a monitoring agency is ensured of obtaining the call-content of each participant in telephone call irrespective of call transfers and network reconfiguration. Devices in the telecommunications system such as network devices can provide appropriate access. Examples of suitable network devices may include gateway, an access gateways, trunk gateways, portals, ATM switches, routers, and border elements.

Abstract: The invention relates to a method for carrying out monitoring in packet-oriented telecommunication networks and data networks. The method makes it possible to reduce the processor performance required to carry out legal monitoring of telecommunication subscribers in switching nodes of packet-oriented telecommunication and data networks. To reduce the high number of comparably short data packets which must be respectively compared with the full list of subscriber connections which are to be monitored throughout the network and the computer power resulting therefrom required to carry out the tasks in each network node, the method is based on a reduced individual node list which is automatically generated and maintained and the number of individual verifications is kept to a minimum within a network node.

Abstract: A method, system, and program for telephony based remote location monitoring are provided. A telephone network receives the caller request to listen only to a remote location telephony device. The telephone network allocates a listen only channel between the caller telephony device and the remote location telephony device. The telephone network activates a microphone at the remote location telephony device via the listen only channel. Then, audio detected at the microphone is streamed via the listen only channel to the caller telephony device, such that the telephone network enables a caller to monitor a remote location through the remote location telephony device with minimized allocation of telephone network resources.

Abstract: A system and a method for providing a service begins when a customer establishes a communication link, such as a telecommunications link, with a service provider, such as directory assistance. An exchange of information occurs, and a service, such as a telephone number or catalog order, is provided by the service provider at least in part via the communication link. Before the customer terminates the communication link, he or she is requested to provide feedback, which preferably relates to the quality of the service provided. In another embodiment, the exchange of information is monitored, and an action, such as notifying a supervisor, is taken if a predetermined condition is detected, such as usage of unacceptable language by a call handling agent.

Abstract: The invention provides for a communications recording and analysis system including means for recording one or more communication streams, means for identifying the recorded stream, means for retrieving the content of said recordings by identifier tags, and wherein additional real-time information is inferred from analysis, in real-time or later, of keystrokes entered at a computer/terminal handling the interaction, and/or computer mouse actions, and/or internet traffic emanating from, or terminating at, any one or more of a number of computers/terminals handling the interaction, and/or the words and/or prosody spoken during the interaction is recorded. Furthermore graphical display means are provided such that the presentation of call flow recording is in the form of a direct graph showing the progress of the calls through the various states and transitions.

Abstract: The invention relates to the control of access of various appliances of an installation which are connected to a telephone line. The appliances have a priority level. There is provision for the dispatching, on the request of an appliance performing a line seizure operation, to the other appliances, of an off-hook signal representative of the priority level of the appliance, when this level is higher than that of at least one other appliance of the installation. The signal is dispatched on the occasion of the line seizure operation and for the duration of the connection of the appliance to the line, if no off-hook signal of a higher priority level is dispatched. There is also provision for a disconnection of the line for any appliance which receives an off-hook signal dispatched for an appliance having a higher priority level.

Abstract: A system and method of analyzing communications between a calling party and a called party is disclosed. In an embodiment of a method of the present invention, the method includes receiving a communication at a service provider network, recording the communication, analyzing a voice content portion of the recorded communication to determine if the voice content portion contains a keyword stored in a database, and forwarding the recorded communication to a law enforcement agency if the keyword is detected in the voice content portion. In an embodiment of a system of the present invention, the system includes a buffer memory for receiving a recorded communication from a service provider network and a content analysis system coupled to the buffer memory.

Abstract: Methods and systems for intelligent signaling-router-based surveillance are disclosed. A surveillance and signaling router receives call signaling messages, identifies call signaling messages associated with users under surveillance and determines a surveillance type for the call signaling messages. If the surveillance type is content-related, the surveillance and signaling router forwards the message to a call server. The call server replaces parameters in the message and in subsequent messages so that the call is transparently set up through a media proxy server. The media proxy server copies the media stream to a delivery function. If the surveillance type is non-content-related, the surveillance and signaling router sends a copy of the message or information extracted from the message to an external device.

Abstract: A communication network for transporting calls, where a service provision entity adds user identification information to call data of a call being set up by a non-dialable virtual subscription such that the subscriber behind the call being set up by the non-dialable virtual subscription may be identified at the network switching layer. This increases the manageability of the network and provides advantages for call interception.

Abstract: Methods and systems for providing lawful intercept of a media stream in a media gateway include establishing a call context between a first termination and a second termination and establishing a tap context with at least one tap termination, which refer to the first termination. The call context defines a call media stream between the first and second terminations associated with a call between first and second end users. The tap context defines at least one tap media stream from the first termination to the at least one tap termination. The tap media stream is a one-way media stream that carries either the mouth portion of the call media stream, the ear portion of the media stream, or a combination of the mouth and ear portions of the media stream from the first termination to the at least one tap termination. Multiple tap contexts can be created to support the lawful intercept of the call by multiple law enforcement agencies.

Abstract: A method and apparatus for providing inmate security threat group information includes correlating inmate identification records from a plurality of correctional facilities in a central database with call detail records from inmate telephone activities together with security threat group data comprising inmate affiliations and telephone numbers associated with security threats and security threat groups.

Abstract: A variety of methods and systems can be used to achieve electronic surveillance when a call is directed to a destination as a result of service processing. For example, in a system involving a redirecting switch and a service platform switch, correlation between calling party identities for outgoing and incoming call legs can be done to identify a hairpin loop scenario. Upon detection of such a scenario, an appropriate electronic surveillance message can be sent to a monitoring device indicating the call's destination. Correlation information can be collected from available call setup signaling parameters. The methods and systems can be applied, for example, to systems involving directory assistance call completion, voice-activated dialing, voicemail callback, and prepaid services.

Abstract: In a pipeline network processor, a packet intercept feature determines whether a packet is to be intercepted based on the inbound and outbound port through which the packet travels and based on the source and destination of the packet. When a packet enters the pipeline network processor, a determination is made as to whether the inbound and outbound ports are enabled for packet intercept. If so, a source and/or destination media access control address is compared to a list of configured intercept addresses. If a match is found, a copy of the packet is diverted to an intercept receiver and the original packet is forwarded to its intended destination.

Abstract: A method and apparatus for discovery of inmate-employee fraternization includes correlating inmate identification records and employee information data from a plurality of correctional facilities in a central database with call detail records from inmate telephone activities.

Abstract: The present invention provides for a system and method for blocking leakage signals and uncoupling connections in a communication system. A leakage signal (LS) blocking splitter employs a high-pass filter which effectively blocks the lower frequency leakage signal. The high-pass filter (an LS filter) has a cut-off frequency selected to fall between the upper range of the leakage signal (which is approximately 4 KHz in the preferred embodiment) and the low-end frequency of a data signal. A detect and terminate function detects service on the communication connection to which each one of the leakage signal (LS) filters are coupled to. The detect and terminate function detects service on the communication connection to ensure that each LS blocking splitter is coupled to an in-service communication connection.