CN101150448A - Method and system for legal monitoring for public service of IP multimedia subsystem - Google Patents

Method and system for legal monitoring for public service of IP multimedia subsystem Download PDF

Info

Publication number
CN101150448A
CN101150448A CNA2006101278429A CN200610127842A CN101150448A CN 101150448 A CN101150448 A CN 101150448A CN A2006101278429 A CNA2006101278429 A CN A2006101278429A CN 200610127842 A CN200610127842 A CN 200610127842A CN 101150448 A CN101150448 A CN 101150448A
Authority
CN
China
Prior art keywords
message
monitoring
cscf
session
snoop agents
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2006101278429A
Other languages
Chinese (zh)
Other versions
CN100561951C (en
Inventor
郝振武
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CNB2006101278429A priority Critical patent/CN100561951C/en
Publication of CN101150448A publication Critical patent/CN101150448A/en
Application granted granted Critical
Publication of CN100561951C publication Critical patent/CN100561951C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention provides a method and a system for legally monitoring the public service on an IP multimedia subsystem. A monitoring agent contained in the system provides communications interfaces to an ADMF (Administration Function) module, a DF2 (Delivery Function) module and an AS (Application Server). The method consists of the following steps: the LEMF (Law Enforcement Monitoring Facility) in a monitoring center sends a request for monitoring the public service to the ADMF, and the request contains a PSI (Public Service Identification); the ADMF sends the monitoring request to the monitoring agent the PSI belonging to; the monitoring agent registers the PSI in the request into a monitoring recording area, starts the monitoring on the session and returns a confirming message to the LEMF through the ADMF; and when receiving a message from an S-CSCF (Service Call Session Control Function), an I-CSCF (Inquiring Call Session Control Function) or the AS, if the message is in accordance with the monitoring term through the judgment, the monitoring agent forwards the message according to the normal service flow and at the same time, forwards the message to the DF2.

Description

The IP Multimedia System common service is carried out the method and system of Lawful Interception
Technical field
The present invention relates to IP Multimedia System (IP Multimedia Subsystem, IMS) legal monitoring business in relates in particular in the IP Multimedia System method and system that the Intercept related information of the common service represented with public service identity is carried out Lawful Interception.
Background technology
In order to protect public interest and national security, the law of various countries stipulates that all telecom operators must can provide legal monitoring service.Legal monitoring business belongs to control type business, be meant (Law Enforcement Agency according to state's laws actuator, LEA) requirement, Content of Communication (the Content of Communication of the intercept communications business that provides to LEA is provided communication network, CC) and Intercept related information (Intercept Related Information, ability IRI).Content of Communication CC refers to the practical communication content in the user conversation process, as voice, Media Stream, and the carrying content of other type, Intercept related information IRI refers to the information relevant with intercepted user and session, comprises contents such as user profile, current state, communication signaling.The present invention only relates to Intercept related information IRI.
The object of Lawful Interception has two classes: terminal use and common service.The terminal use refers to domestic consumer, uses telephone number or public service identity PUI (Public User Identity) to identify; The business that provided by service provider or content supplier is provided common service, identify by some specific telephone numbers or public service identity PSI (Public Service Identity), comprise meeting, chatroom, wireless talkback business, present business such as business.
In legacy network, (comprise circuit-switched network and flexible exchanging network), adopt central controlled mode, provide unified conversation control function by core net, terminal use and common service are all controlled by core net, therefore identical to the monitor method of terminal use and common service, all finish the monitoring of Content of Communication CC and Intercept related information IRI by core net.
But IP Multimedia System adopts professional mode of separating with control, and core net is finished session control, and application server AS (Application Server) management and control are professional.Come to realize user's monitoring by core net, but have defective and deficiency when common service Intercept related information IRI monitored.
According to " 3GPP TS33.107:3G security; Lawful interception architecture andfunctions " definition, by P-CSCF (Proxy Call Session Control Function, Proxy Call Session Control Function) and/or S-CSCF (Serving Call Session Control Function, service call conversation control function) monitors IP Multimedia System, promptly realize to monitoring the Lawful Interception of related content IRI, referring to " Figure of description " Fig. 1 by the equipment of core net.
In IP Multimedia System, introduced public service identity PSI, be used to define common service, business such as can represent meeting, conversation group, chatroom, present, for example the business of a chat type can use the method for PSI (sip:chatlist_X@example.com) to identify.These PSI are created and management by AS, and the business that they identified also is responsible for execution by AS, and the IMS system provides the ability of carrying out the message route by PSI.Need carry out Lawful Interception to common service in some occasion, as monitor the session of certain chatroom, certain meeting, certain wireless talkback service group,, at this moment need common service to be monitored by PSI because the user who participates in has uncertainty.
Because it is uncertain using the user of common service, access is by way of also uncertain, the user may be from the P-CSCF visit common service of local network or other network, and therefore there is defective in monitoring to common service by P-CSCF, can't realize the complete monitoring of common service.
In IP Multimedia System, S-CSCF can provide professional ownership place service, but since very flexible to the routing mode of PSI, by S-CSCF common service is monitored also existing problems, and this can be found out by following analysis.
According to " 3GPP TS 23.228:Technical Specification Group Services and SystemAspects; IP Multimedia Subsystem (IMS) ", PSI route principle there are following 7 kinds of modes:
(1) origination side S-CSCF forwards the SIP request on the application server AS of control PSI to according to the rule that is provided with.
(2) HSS of termination side is the assignation information of PSI user management S-CSCF, will be asked directly to be transferred to the AS of control PSI by corresponding S-CSCF.
(3) HSS of termination side is the AS address information of PSI user management control corresponding PSI, will be asked directly to be transferred to the AS of control PSI by I-CSCF (enquiry call conversation control function).
(4) for the PSI based on subdomain, initial S-CSCF utilizes the mechanism of DNS inside, and PSI is resolved to the actual address of AS, and will ask directly to be transferred to the AS of control PSI.
(5) for the PSI based on subdomain, termination side I-CSCF utilizes the mechanism of DNS inside, and PSI is resolved to the actual address of AS, and will ask directly to be transferred to the AS of control PSI.
(6) request of the AS initiation of control PSI, AS can request directly forward objective network to.
(7) if PSI has distributed S-CSCF, the request that the AS of control PSI initiates forwards this S-CSCF to.
In upper type, (2) and the sip message of (7) session through S-CSCF, can carry out common service is carried out the monitoring of IRI by S-CSCF, and other 5 kinds of routing modes, because sip message is uncertain without the S-CSCF of S-CSCF or process, causes to carry out IRI by S-CSCF to common service and monitor.
From top analysis as can be seen, because IP Multimedia System has adopted the professional framework that separates with control, simultaneously more flexible with the routing mode of the relevant signaling of common service, the simple agreement of formulating according to 3GPP can't satisfy monitoring to common service by equipment of the core network (P-CSCF and S-CSCF).
The Intercept related information IRI that the present invention proposes the common service that in IP Multimedia System PSI is identified carries out the system and method and the system of Lawful Interception, can address the above problem.
Summary of the invention
The technical problem to be solved in the present invention provides in IP Multimedia System the method and system that the Intercept related information IRI of the common service of PSI sign is carried out Lawful Interception, can be applied to the monitoring under the PSI routing mechanisms different in the IP Multimedia System.
In order to solve the problems of the technologies described above, the invention provides a kind of method of the common service Lawful Interception to IP Multimedia System, the snoop agents that has a common service in this IP Multimedia System, this snoop agents is an independently logic entity, have and management of monitor functional module ADMF, transmitting function module DF2, and the communication interface of one or more application server AS, this method may further comprise the steps:
(a) listening center audiomonitor LEMF is to the interception request of ADMF transmission to common service, and request comprises eavesdropping target's public service identity;
(b) after described ADMF receives this interception request,, determine the snoop agents that this PSI belongs to, and send interception request to this snoop agents according to the PSI of eavesdropping target in the message;
(c) described snoop agents is registered the PSI in this request in the monitor log district, starts the monitoring to this session, returns confirmation by ADMF to LEMF then;
When (d) described snoop agents is received from message that service call conversation control function S-CSCF, enquiry call conversation control function I-CSCF or AS send, as judge that it meets the monitoring condition, then when transmitting this message, transmit this message to DF2 by the regular traffic flow process.
Further, said method also can have following characteristics: described step (d) is further comprising the steps of afterwards:
(e) when keeper cancellation during to the monitoring of specified services, LEMF sends the cancellation request by ADMF to snoop agents, comprises the PSI that will cancel monitoring service;
(f) after described snoop agents is received this request, from monitor log, delete the registration data of the PSI in this request, and return acknowledge message to LEMF by ADMF.
Further, said method also can have following characteristics: described ADMF has disposed routing resolution rule to PSI according to monitoring the network planning, and in the described step (b), ADMF determines the AS that the PSI business is belonged to according to this rule.
Further, said method also can have following characteristics: in the described step (c), described snoop agents is also checked the session whether this PSI has been arranged on this equipment, if exist, then changing this session listening state is state of activation; In the described step (f), snoop agents is also checked the session whether this PSI has been arranged on this equipment, if exist, then the listening state with this session changes deactivated state into.
Further, said method also can have following characteristics: in the described step (d), snoop agents may further comprise the steps the processing of the message that S-CSCF or I-CSCF send:
(d1) after snoop agents is received the message that S-CSCF or I-CSCF send, check by snoop agents whether this message is conversation establishing message, if conversation establishing message, execution in step (d2), otherwise, execution in step (d3);
(d2) snoop agents checks whether the PSI of this session registers in the monitor log district, if it is registered, this session listening state of snoop agents is set to state of activation, and will oneself add in the routed path, snoop agents is transmitted this conversation establishing message to DF2, and snoop agents sends a message to AS, by AS according to this message of business logic processing; If unregistered, snoop agents sends a message to AS, by AS according to this message of business logic processing;
(d3) if not conversation establishing message, snoop agents checks whether the listening state of this session is in state of activation; If be in state of activation, snoop agents is transmitted this message to DF2 and AS simultaneously; If be not in state of activation, then snoop agents only sends a message to AS, by AS according to this message of business logic processing.
Further, said method also can have following characteristics: in the described step (d), snoop agents may further comprise the steps the Message Processing that AS sends:
The message of sending for AS, snoop agents judges according to the PSI of this session in the message whether the listening state of this session is state of activation, if snoop agents is transmitted this message simultaneously to DF2 and S-CSCF or I-CSCF, otherwise, only transmit this message to S-CSCF or I-CSCF.
Further, said method also can have following characteristics: in the described step (a), described LEMF sends to by ADMF in the interception request of described snoop agents except that the PSI of the session that will monitor, also comprise the information of monitoring termination condition, when described snoop agents satisfies at this termination condition, automatically stop monitoring, and send the notification message that this session of cancellation is monitored to LEMF by ADMF to this session.
Further, said method also can have following characteristics: in the described step (c), if the PSI of this session of described snoop agents does not register in the monitor log district, snoop agents inspection configuration, if require subsequent message to continue through snoop agents, then oneself adding in the routed path, the assurance subsequent message must be passed through snoop agents to snoop agents again.
A kind of system of the common service Lawful Interception to IP Multimedia System, comprise listening center LEMF, the management of monitor functional module ADMF that links to each other with this listening center and transmitting function module DF2, proxy call session control function module P-CSCF, service call conversation control function module S-CSCF and application server AS, it is characterized in that, also comprise snoop agents, this snoop agents is between S-CSCF or intercommunication CSCF I-CSCF and AS, further comprise monitoring and set up the unit and monitor processing unit, wherein:
Described monitoring is set up the unit and is used to receive the interception request message that ADMF sends, and the public service identity in the message is registered to the monitor log district, starts the monitoring to this session, and returns confirmation to ADMF;
Described monitoring processing unit is used to monitor the message from S-CSCF or I-CSCF, as meets the monitoring condition then when the AS Service Processing Module is transmitted this message, transmits this message to DF2; For message, as meet the monitoring condition and then this message is forwarded to simultaneously S-CSCF or I-CSCF and DF2 from the AS Service Processing Module.
Further, said system also can have following characteristics: described snoop agents also comprises monitors the cancellation unit:
Described monitoring cancellation unit is used to receive the monitoring cancellation request that ADMF sends, and deletes the public service identity of corresponding session according to the public service identity in the message in the monitor log district, stops the monitoring to this session, and returns confirmation to ADMF.
Further, said system also can have following characteristics: described monitoring is set up the unit after receiving interception request message, also checks the session whether this public service identity has been arranged on this equipment, if exist, then changing this session listening state is state of activation; The session whether this public service identity has been arranged on this equipment is also checked in described monitoring cancellation unit after receiving that monitoring cancellation asks, if exist, then the listening state with this session changes deactivated state into.
Further, said system also can have following characteristics: described monitoring processing unit further comprises:
First subelement, be used for after receiving the message that the AS Service Processing Module is sent, whether the listening state of judging this session according to the public service identity of this session in the message is state of activation, if, transmit this message simultaneously to DF2 and S-CSCF or I-CSCF, otherwise, only transmit this message to S-CSCF or I-CSCF;
Second subelement is used for after receiving the message that S-CSCF or I-CSCF send, and judges its whether conversation establishing message:
If conversation establishing message, check then whether the public service identity of this session registers in the monitor log district, as registered, with this session listening state for being set to state of activation, and will oneself add in the routed path, simultaneously transmit this message,, then only transmit this message to the AS Service Processing Module as unregistered to DF2 and AS Service Processing Module;
If not conversation establishing message, snoop agents checks whether the listening state of this session is in state of activation, if be in state of activation, transmits this message to DF2 and AS Service Processing Module simultaneously, otherwise, only transmit this message to the AS Service Processing Module.
Further, said system also can have following characteristics: the monitoring termination condition information in the interception request is also preserved in described monitoring cancellation unit, and when this termination condition satisfies, stop monitoring automatically, and return the notification message that this session of cancellation is monitored to ADMF to this session.
Compared with prior art, the present invention introduces the independently mode of snoop agents in IP Multimedia System, reached under different PSI routing mechanisms concentrating with the common service of PSI sign and the effect of complete monitoring, avoided the defective and the deficiency of the mode that the 3GPP related protocol defines.Can dispose not influencing under the very little situation of network or influence simultaneously, have good exploitativeness and autgmentability.The snoop agents mode can independently be disposed, and also can be deployed on other equipment, adopts the mode of Transparent Proxy, very little to monitoring web influence, and simplified the structure of monitoring network, AS does not need to develop monitor function simultaneously, reduce the AS development difficulty, reduced the construction cost of AS.
Description of drawings
Fig. 1 is the structure chart of the IP Multimedia System IRI Lawful Interception of 3GPP definition.
Fig. 2 is the structure chart that adopts the common service snoop agents.
Fig. 3 is the graph of a relation between snoop agents and the miscellaneous equipment.
Fig. 4 is the interaction figure of snoop procedure.
Fig. 5 is that snoop agents is monitored the flow chart that activates.
Fig. 6 is that the message of snoop agents is monitored flow chart.
Fig. 7 is the flow chart that snoop agents is monitored cancellation.
Embodiment
The IP Multimedia System common service is monitored the implementation method that related news carry out Lawful Interception elaborate present embodiment is a kind of below in conjunction with accompanying drawing.
Fig. 1 is the structure chart of the IP Multimedia System IRI Lawful Interception of 3GPP definition, show network element and the annexation related with the IRI Lawful Interception, comprise LEMF 11 (Law EnforcementMonitoring Facility, the listening center audiomonitor), ADMF 12 (Administration Function, the management of monitor functional module), DF2 13 (Delivery Function 2, the transmitting function module), P-CSCF/S-CSCF 14 (Proxy CSCF/Serving CSCF, proxy CSCF/serving CSCF).LEMF 11 sends interception request by the HI1 interface to ADMF 12, ADMF 12 controls DF2 13 and P-CSCF/S-CSCF 14 respectively by X1-1 and X1-2 internal interface, when monitoring activation, P-CSCF/S-CSCF 14 sends to DF2 13 with the information that listens to by the X2 internal interface, and is transmitted to LEMF 11 by DF2 13 by HI2.
Fig. 2 is the structure chart that adopts the common service snoop agents, show snoop agents 25 the position and and audiomonitor between annexation, on the basis of Fig. 1, increase snoop agents, finish Lawful Interception to the Intercept related information IRI of the AS26 that comes in and goes out.Snoop agents receives the management control command of ADMF22 by the X1-1 interface, the monitoring information that sends common service to DF2 23 by X2 interface.
Snoop agents further comprises: monitors and sets up the unit, monitors the cancellation unit and monitor processing unit, wherein:
Described monitoring is set up the unit and is used to receive the interception request message that management of monitor functional module 22 is sent, public service identity in the message is registered to the monitor log district, startup is to the monitoring of this session, and whether the session of this public service identity arranged on this equipment of inspection, if exist, then changing this session listening state is state of activation, returns confirmation to management of monitor function 22 modules then;
Described monitoring processing unit is used to monitor the message of discrepancy application server, and the message that will meet the monitoring condition sends to transmitting function module 23, further comprises:
First subelement, be used for after receiving the message that the application server Service Processing Module is sent, whether the listening state of judging this session according to the public service identity of this session in the message is state of activation, if, transmit this message simultaneously to transmitting function module 23 and service call conversation control function S-CSCF or intercommunication CSCF I-CSCF 24 (S-CSCF or I-CSCF), otherwise, only transmit this message to S-CSCF or I-CSCF 24;
Second subelement is used for after receiving the message that S-CSCF or I-CSCF 24 send, and judges its whether conversation establishing message:
If conversation establishing message, check then whether the public service identity of this session registers in the monitor log district, as registered, with this session listening state for being set to state of activation, simultaneously transmit this message to transmitting function module 23 and application server Service Processing Module, as unregistered, then only transmit this message to the application server Service Processing Module;
If not conversation establishing message, snoop agents checks whether the listening state of this session is in state of activation, if be in state of activation, simultaneously transmit this message to transmitting function module 23 and application server Service Processing Module, otherwise, only transmit this message to the application server Service Processing Module.
Described monitoring cancellation unit is used to receive the monitoring cancellation request that LEMF 21 sends to management of monitor functional module 22, delete the public service identity of corresponding session in the monitor log district according to the public service identity in the message, also check the session whether this public service identity has been arranged on this equipment, if exist, then the listening state with this session changes deactivated state into, stop monitoring then, and return confirmation to the management of monitor functional module to this session.
Fig. 3 further shows the relation between snoop agents and the IP Multimedia System miscellaneous equipment, snoop agents is a sip message agency, when transmitting sip message between I-CSCF or S-CSCF and AS, mutual with audiomonitor, finish monitor function to message.A snoop agents can provide monitoring service for a plurality of AS simultaneously.
Fig. 4 is the interaction figure of AS snoop procedure, has described the snoop procedure to professional related news on the whole, and this flow process may further comprise the steps:
Step 401, snoop agents and ADMF establish a connection, according to monitoring the network planning, disposed routing resolution rule at management of monitor functional module elements ADMF to PSI, wherein said resolution rules can use ripe routing resolution rules such as local profile, DNS configuration neatly.According to this rule, ADMF can determine the listening point of PSI business, i.e. snoop agents under the PSI, for snoop procedure ready;
Step 402, the monitoring that ADMF receives listening center equipment LEMF activates request, resolves the PSI of monitoring service, sends the request of activation of monitoring according to analysis result to the listening point snoop agents;
Step 403, snoop agents receive the request of activation of monitoring, and start the monitoring to corresponding service, send to ADMF and monitor the activation confirmation response;
Step 404, S-CSCF or I-CSCF send session to snoop agents and set up request according to the service identification PSI in user's request;
Dispose the routing relation of service identification PSI and snoop agents among S-CSCF or the I-CSCF.
Step 405, snoop agents is transmitted this message to AS;
Step 406 in step 405, is checked the PSI of the service identification of asking in the request message, monitors if desired, sends this message to DF2;
Step 407, AS returns session to snoop agents and sets up response;
Step 408, snoop agents is set up response message to S-CSCF or I-CSCF forwarding session;
Step 409, in step 408, snoop agents sends session to DF2 and sets up response message, and DF2 sends it to LEMF;
Step 410 continues to handle other session information and monitor processing;
Step 411, when keeper cancellation during to the monitoring of specified services, ADMF receives the monitoring cancellation request of listening center equipment, sends the deactivation request of monitoring to snoop agents;
Step 412, snoop agents stop the monitoring to corresponding service, and send monitoring deactivation affirmation response to ADMF, and ADMF returns this acknowledge message to listening center again.
So, finished from setting up snoop procedure, sending all processes that monitoring information is monitored to cancellation.
In Fig. 5, Fig. 6 and Fig. 7, introduce respectively below and monitor activation, snoop agents the monitoring of message and the detailed process of cancelling monitoring.
Fig. 5 is that concrete snoop agents is monitored the flow chart that activates, and has described the detailed process of the activation of monitoring, and may further comprise the steps:
Step 501, according to the keeper of monitoring agency requirement, listening center LEMF sends to ADMF and monitors the request of activation, comprises the sign PSI that wants monitoring service in the request;
Step 502, ADMF determines the particular location of listening point snoop agents according to the listening point of routing configuration analysis PSI;
Step 503, the snoop agents that ADMF determines to step 502 sends the request of activation of monitoring;
Step 504, snoop agents are checked the session whether this PSI has been arranged on this equipment, if exist, forward step 505 to, otherwise jump to step 506;
The listening state that step 505, snoop agents change this session is a state of activation, and registers this PSI in the monitor log district, and forwards step 507 to;
Step 506, snoop agents be this PSI of registration in the monitor log district just, and forwards step 507 to;
Step 507, snoop agents are returned to ADMF and are monitored the activation confirmation response;
Step 508, ADMF returns to listening center and monitors the activation confirmation response.
Above snoop agents is optionally to the inspection whether this PSI session has been arranged on this equipment, and the real-time of monitoring when less demanding, can not carried out yet.
Fig. 6 is that the message of snoop agents is monitored flow chart, has described the processing procedure of snoop agents to message, may further comprise the steps:
Step 601, snoop agents receive the message from I-CSCF or S-CSCF or AS;
In I-CSCF or S-CSCF, dispose, require the initial session request of setting up is routed to snoop agents, when snoop agents is handled this request, can determine whether oneself is added in the processing path of subsequent message.
Step 602, whether the snoop agents inspection is conversation establishing message, if change step 603 over to, otherwise jump to step 609;
Step 603, snoop agents check that the PSI of this session whether in the registration of monitor log district, if registered, changes step 604 over to, otherwise jumps to step 607;
Step 604, this session listening state of snoop agents is set to state of activation;
Step 605, snoop agents will oneself be added in the routed path, and the assurance subsequent message must be passed through snoop agents;
Step 606, snoop agents is transmitted this conversation establishing information to DF2, and jumps to step 611;
Step 607 is according to carrier policy, if require subsequent message to continue to forward step 608 to, otherwise jump to step 611 through snoop agents;
Step 608, snoop agents is oneself adding in the routed path, and the assurance subsequent message must be passed through snoop agents, forwards step 611 to;
Step 609, snoop agents check whether this session is in the monitoring state of activation, if forward step 610 to, otherwise jump to step 611;
Step 610, snoop agents are transmitted the information of this message to DF2;
Step 611 according to the purpose route of message, is transmitted message to AS or S-CSCF/I-CSCF.
Except that conversation establishing message, for the message from S-CSCF or I-CSCF, snoop agents judges according to PSI whether the listening state of this session is activated, if activate, snoop agents is transmitted this message to DF2 when AS transmits this message, otherwise, just forward the message to AS.For the message from AS, snoop agents judges according to PSI whether the listening state of this session is activated equally, if activate, this message is forwarded to S-CSCF or I-CSCF and DF2 simultaneously, otherwise, only be forwarded to S-CSCF or I-CSCF.
Fig. 7 is the flow chart that snoop agents is monitored cancellation, has described the cancellation process of monitoring, and may further comprise the steps:
Step 701, when keeper cancellation during to the monitoring of specified services, LEMF sends to ADMF and monitors the cancellation request, comprises the sign PSI that will cancel monitoring service in the request;
Step 702, ADMF sends the cancellation request of monitoring to snoop agents;
Step 703, snoop agents are nullified this PSI in the monitor log district;
Step 704, snoop agents are checked the session whether this PSI has been arranged on this equipment, if exist, forward step 705 to, otherwise jump to step 706;
Step 705, it is deactivated state that snoop agents changes the session listening state;
Step 706, snoop agents stop professional monitoring, return to ADMF and monitor cancellation affirmation response;
Step 707, ADMF returns to LEMF and monitors the cancellation response.
Above snoop agents also is optional to the inspection whether session of this PSI has been arranged on this equipment.
In another embodiment, described listening center sends to by the management of monitor functional module in the interception request of described snoop agents except that the public service identity of the session that will monitor, also comprise the information of monitoring termination condition, when described snoop agents satisfies at this termination condition, automatically stop monitoring, and return the notification message that this session of cancellation is monitored to listening center by ADMF to this session.This monitoring termination condition can maybe need time period of monitoring for the duration of monitoring.

Claims (13)

1. method to the common service Lawful Interception of IP Multimedia System, the snoop agents that has a common service in this IP Multimedia System, this snoop agents is an independently logic entity, have and management of monitor functional module ADMF, transmitting function module DF2, and the communication interface of one or more application server AS, this method may further comprise the steps:
(a) listening center audiomonitor LEMF is to the interception request of ADMF transmission to common service, and request comprises eavesdropping target's public service identity PSI;
(b) after described ADMF receives this interception request,, determine the snoop agents that this PSI belongs to, and send interception request to this snoop agents according to the PSI of eavesdropping target in the message;
(c) described snoop agents is registered the PSI in this request in the monitor log district, starts the monitoring to this session, returns confirmation by ADMF to LEMF then;
When (d) described snoop agents is received from message that service call conversation control function S-CSCF, enquiry call conversation control function I-CSCF or AS send, as judge that it meets the monitoring condition, then when transmitting this message, transmit this message to DF2 by the regular traffic flow process.
2. method according to claim 1, it is characterized in that: described step (d) is further comprising the steps of afterwards:
(e) when keeper cancellation during to the monitoring of specified services, LEMF sends the cancellation request by ADMF to snoop agents, comprises the PSI that will cancel monitoring service;
(f) after described snoop agents is received this request, from monitor log, delete the registration data of the PSI in this request, and return acknowledge message to LEMF by ADMF.
3. method according to claim 1 is characterized in that:
Described ADMF has disposed routing resolution rule to PSI according to monitoring the network planning, and in the described step (b), ADMF determines the AS that the PSI business is belonged to according to this rule.
4. method as claimed in claim 1 or 2 is characterized in that:
In the described step (c), described snoop agents is also checked the session whether this PSI has been arranged on this equipment, if exist, then changing this session listening state is state of activation; In the described step (f), snoop agents is also checked the session whether this PSI has been arranged on this equipment, if exist, then the listening state with this session changes deactivated state into.
5. method according to claim 1 is characterized in that, in the described step (d), snoop agents may further comprise the steps the processing of the message that S-CSCF or I-CSCF send:
(d1) after snoop agents is received the message that S-CSCF or I-CSCF send, check by snoop agents whether this message is conversation establishing message, if conversation establishing message, execution in step (d2), otherwise, execution in step (d3);
(d2) snoop agents checks whether the PSI of this session registers in the monitor log district, if it is registered, this session listening state of snoop agents is set to state of activation, and will oneself add in the routed path, snoop agents is transmitted this conversation establishing message to DF2, and snoop agents sends a message to AS, by AS according to this message of business logic processing; If unregistered, snoop agents sends a message to AS, by AS according to this message of business logic processing;
(d3) if not conversation establishing message, snoop agents checks whether the listening state of this session is in state of activation; If be in state of activation, snoop agents is transmitted this message to DF2 and AS simultaneously; If be not in state of activation, then snoop agents only sends a message to AS, by AS according to this message of business logic processing.
6. method according to claim 1 is characterized in that in the described step (d), snoop agents may further comprise the steps the Message Processing that AS sends:
The message of sending for AS, snoop agents judges according to the PSI of this session in the message whether the listening state of this session is state of activation, if snoop agents is transmitted this message simultaneously to DF2 and S-CSCF or I-CSCF, otherwise, only transmit this message to S-CSCF or I-CSCF.
7. method according to claim 1, it is characterized in that, in the described step (a), described LEMF sends to by ADMF in the interception request of described snoop agents except that the PSI of the session that will monitor, also comprise the information of monitoring termination condition, when described snoop agents satisfies at this termination condition, stop monitoring automatically, and send the notification message that this session of cancellation is monitored to LEMF by ADMF to this session.
8. method according to claim 1, it is characterized in that, in the described step (c), if the PSI of this session of described snoop agents does not register in the monitor log district, snoop agents inspection configuration, if require subsequent message to continue through snoop agents, then oneself adding in the routed path, the assurance subsequent message must be passed through snoop agents to snoop agents again.
9. system to the common service Lawful Interception of IP Multimedia System, comprise listening center LEMF, the management of monitor functional module ADMF that links to each other with this listening center and transmitting function module DF2, proxy call session control function module P-CSCF, service call conversation control function module S-CSCF and application server AS, it is characterized in that, also comprise snoop agents, this snoop agents is between S-CSCF or intercommunication CSCF I-CSCF and AS, further comprise monitoring and set up the unit and monitor processing unit, wherein:
Described monitoring is set up the unit and is used to receive the interception request message that ADMF sends, and the public service identity in the message is registered to the monitor log district, starts the monitoring to this session, and returns confirmation to ADMF;
Described monitoring processing unit is used to monitor the message from S-CSCF or I-CSCF, as meets the monitoring condition then when the AS Service Processing Module is transmitted this message, transmits this message to DF2; For message, as meet the monitoring condition and then this message is forwarded to simultaneously S-CSCF or I-CSCF and DF2 from the AS Service Processing Module.
10. as system as described in the claim 9, it is characterized in that: described snoop agents also comprises monitors the cancellation unit:
Described monitoring cancellation unit is used to receive the monitoring cancellation request that ADMF sends, and deletes the public service identity of corresponding session according to the public service identity in the message in the monitor log district, stops the monitoring to this session, and returns confirmation to ADMF.
11. system as claimed in claim 9 is characterized in that, described monitoring is set up the unit after receiving interception request message, also checks the session whether this public service identity has been arranged on this equipment, if exist, then changing this session listening state is state of activation; The session whether this public service identity has been arranged on this equipment is also checked in described monitoring cancellation unit after receiving that monitoring cancellation asks, if exist, then the listening state with this session changes deactivated state into.
12. system as claimed in claim 9 is characterized in that, described monitoring processing unit further comprises:
First subelement, be used for after receiving the message that the AS Service Processing Module is sent, whether the listening state of judging this session according to the public service identity of this session in the message is state of activation, if, transmit this message simultaneously to DF2 and S-CSCF or I-CSCF, otherwise, only transmit this message to S-CSCF or I-CSCF;
Second subelement is used for after receiving the message that S-CSCF or I-CSCF send, and judges its whether conversation establishing message:
If conversation establishing message, check then whether the public service identity of this session registers in the monitor log district, as registered, with this session listening state for being set to state of activation, and will oneself add in the routed path, simultaneously transmit this message,, then only transmit this message to the AS Service Processing Module as unregistered to DF2 and AS Service Processing Module;
If not conversation establishing message, snoop agents checks whether the listening state of this session is in state of activation, if be in state of activation, transmits this message to DF2 and AS Service Processing Module simultaneously, otherwise, only transmit this message to the AS Service Processing Module.
13. system as claimed in claim 10, it is characterized in that the monitoring termination condition information in the interception request is also preserved in described monitoring cancellation unit, and when this termination condition satisfies, automatically stop monitoring, and return the notification message that this session of cancellation is monitored to ADMF to this session.
CNB2006101278429A 2006-09-22 2006-09-22 The IP Multimedia System common service is carried out the method and system of Lawful Interception Expired - Fee Related CN100561951C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2006101278429A CN100561951C (en) 2006-09-22 2006-09-22 The IP Multimedia System common service is carried out the method and system of Lawful Interception

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2006101278429A CN100561951C (en) 2006-09-22 2006-09-22 The IP Multimedia System common service is carried out the method and system of Lawful Interception

Publications (2)

Publication Number Publication Date
CN101150448A true CN101150448A (en) 2008-03-26
CN100561951C CN100561951C (en) 2009-11-18

Family

ID=39250799

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2006101278429A Expired - Fee Related CN100561951C (en) 2006-09-22 2006-09-22 The IP Multimedia System common service is carried out the method and system of Lawful Interception

Country Status (1)

Country Link
CN (1) CN100561951C (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8320363B2 (en) 2008-12-01 2012-11-27 Huawei Technologies Co., Ltd. Implementation method, system and device of IMS interception
CN106161357A (en) * 2015-04-02 2016-11-23 中兴通讯股份有限公司 IMS network realizes the method for Lawful Interception, device and application server
CN113724735A (en) * 2021-09-01 2021-11-30 广州博冠信息科技有限公司 Voice stream processing method and device, computer readable storage medium and electronic equipment

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8320363B2 (en) 2008-12-01 2012-11-27 Huawei Technologies Co., Ltd. Implementation method, system and device of IMS interception
CN106161357A (en) * 2015-04-02 2016-11-23 中兴通讯股份有限公司 IMS network realizes the method for Lawful Interception, device and application server
CN106161357B (en) * 2015-04-02 2019-12-13 中兴通讯股份有限公司 method, device and application server for realizing lawful interception in IMS network
CN113724735A (en) * 2021-09-01 2021-11-30 广州博冠信息科技有限公司 Voice stream processing method and device, computer readable storage medium and electronic equipment

Also Published As

Publication number Publication date
CN100561951C (en) 2009-11-18

Similar Documents

Publication Publication Date Title
US9973541B2 (en) Lawful interception in an IP multimedia subsystem network
US20100086119A1 (en) Lawful interception in wireline broadband networks
CN101218785B (en) Monitoring method and apparatus in telecommunication system
CN100531074C (en) Method and system for legally monitoring IP multimedia subsystem network
US9549076B2 (en) Method for lawful interception during call forwarding in a packet-oriented telecommunications network
CN101189849B (en) Lawful interception method and architecture for transparent transmission of interception information
US20110149750A1 (en) Subscriber fallback/migration mechanisms in ims geographic redundant networks
WO2007120195A2 (en) Providing sip signaling data for third party surveillance
EP1665851B1 (en) Monitoring in a telecommunication network
US20150150076A1 (en) Method and device for instructing and implementing communication monitoring
CN100450024C (en) Method for monitoring multi-medium sub-system domain
EP1665638B1 (en) Monitoring in a telecommunication network
CN100561951C (en) The IP Multimedia System common service is carried out the method and system of Lawful Interception
CN100414895C (en) System and method for realizing legally monitoring
EP2301232B1 (en) Lawful interception of bearer traffic
CN102047627A (en) Lawful access data retention DIAMETER application
CN100518101C (en) Method and system for legal monitoring of public service in IP multimedia subsystem
CN100428700C (en) Reporting method and system of using server, monitoring correlation event using it
CN101150447A (en) Monitoring agent device for legal monitoring for public service of IP multimedia subsystem
CN101237660B (en) A monitoring system and method for next generation network
CN101237615B (en) Dynamic control activation system and realization method for media network element
Tompros et al. A strategy for harmonised QoS manipulation in heterogeneous IMS networks
CN100583786C (en) Legal listening system, method, and application server
Yang et al. Implementation and performance of VoIP interception based on SIP session border controller
CN101267428B (en) A method for indication and prevention in related message

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20091118

Termination date: 20190922

CF01 Termination of patent right due to non-payment of annual fee