CN102333101A - Lawful interception method and equipment - Google Patents
Lawful interception method and equipment Download PDFInfo
- Publication number
- CN102333101A CN102333101A CN201110336646A CN201110336646A CN102333101A CN 102333101 A CN102333101 A CN 102333101A CN 201110336646 A CN201110336646 A CN 201110336646A CN 201110336646 A CN201110336646 A CN 201110336646A CN 102333101 A CN102333101 A CN 102333101A
- Authority
- CN
- China
- Prior art keywords
- message
- sequence
- interface board
- data
- data message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a lawful interception method and equipment, which are applied to a distributed content interception access point (IAP) comprising a plurality of interface boards. When the interface boards of the distributed content IAP package intercepted data messages meeting interception rules, identifiers of the interface boards are packaged in the data messages, thereby enabling gateway equipment to integrate the data messages with the same identifiers of the interface boards into data streams and providing a solution for realizing lawful interception by the distributed content IAP.
Description
Technical field
The present invention relates to communication technical field, particularly relate to a kind of Lawful Interception implementation method and equipment.
Background technology
Lawful Interception is " legal " and monitors, and is meant through judicial authority's mandate, by the monitoring of relevant law enforcement agency of government to public communication network.On fixed network, speech network such as wireless; The Lawful Interception function has had clear and definite standard and long implementation experience; Nowadays public IP network, for example, metropolitan area network, the Internet; Become the important channel that people transmit both privately and publicly owned's information, so be inevitable demand for the Lawful Interception of public ip network.
Below in conjunction with monitoring system framework shown in Figure 1, the Lawful Interception flow process that prior art provides is described:
Audiomonitor (Content IAP) 11 is arranged in carrier network, and the user data of being monitored is in this device forwards.Monitor function is through (Mediation Device, MD) 12 collaborative (for monitoring system, MD equipment is gateway device) of accomplishing are accomplished the mutual of data through interface d, f between audiomonitor 11 and the gateway device 12 with third party device.Interface d is through SNMPv3 (Simple Network Management Protocol; Simple Network Management Protocol) communicates, give audiomonitor 11 with MD information and monitoring instruction notification through one group of Proprietary MIB (Management Information Base, management information bank); Audiomonitor 11 is checked the data flow of flowing through according to the rule that MD is provided with; After finding legal data flow, this data flow replication is a, and as UDP (User Datagram Protocol; User Datagram Protocol) data of message encapsulate; Send to MD through interface f then, former data flow continues to handle by normal flow, and the behavior of audiomonitor 11 copy datas is not discovered by the user.MD integrates this UDP message after receiving the UDP message after audiomonitor 11 encapsulation.
Existing unicast message is as shown in Figure 2 according to monitoring the encapsulation signal of rule on audiomonitor; The Identifier field of UDP message is since 1; Audiomonitor whenever listens to a message, and the Identifier field value increases progressively 1 successively, and a series of message can pass through audiomonitor and send on the MD; MD makes up a series of messages according to the sequencing of Identifier field and Timestamp (timestamp) field, obtains complete data flow.Identifier is unrepeatable, guarantees that thus MD integrates the accuracy of message.
Distributed audiomonitor has a plurality of interface boards; Listen to different data flow on the distinct interface plate; Because the Identifier field value of different pieces of information stream packet is calculated respectively by each interface board; The Identifier field value of the different data streams that calculates on the distinct interface plate might repeat, and this just makes MD to carry out integration processing to the message that receives.
Summary of the invention
The embodiment of the invention provides a kind of Lawful Interception implementation method and equipment, in order to realize Lawful Interception to distributed audiomonitor.
For this reason, the embodiment of the invention adopts following technical scheme:
The embodiment of the invention provides a kind of Lawful Interception implementation method, is applied to comprise the distributed audiomonitor of several interface boards, and this method comprises:
The interface board of audiomonitor duplicates said data message after listening to and meeting the data message of monitoring rule, and for duplicating the data message assignment message sequence number that obtains;
Said interface board will duplicate the data message that obtains and encapsulate, and carry the sign of said interface board in the data message after the encapsulation and the sequence of message that distributes for this data message number;
Data message after said interface board will encapsulate sends to gateway device.
The embodiment of the invention provides a kind of Lawful Interception implementation method, and this method comprises:
Gateway device receives the data message that audiomonitor sends;
Said gateway device is resolved the sequence of message that wherein carried number and interface board sign according to the data message that receives;
Said gateway device identifies identical data message according to the interface board that carries in data message sign and sequence of message number with interface board, number carries out the data integration processing according to sequence of message.
The embodiment of the invention provides a kind of distributed audiomonitor, comprises several interface boards, comprises on each interface board:
The message receiver module is used for receiving data packets;
The message monitoring module is used for through monitoring the data message that said message receiver module receives, and obtains meeting the data message of monitoring rule;
Message processing module (MPM) is used for the data message of monitoring rule that meets that said message monitoring module listens to is duplicated, and for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry the sign of this interface board in the data message after encapsulation and the sequence of message that distributes for this data message number;
The message sending module is used for the data message after the said message processing module (MPM) encapsulation is sent to gateway device.
The embodiment of the invention provides a kind of gateway device, comprising:
The message receiver module is used to receive the data message that audiomonitor sends;
The packet parsing module is used for the data message that receives according to said message receiver module, resolves the sequence of message that wherein carried number and interface board sign;
Message processing module (MPM), the interface board that is used for obtaining according to said packet parsing module parses sign and sequence of message number identify identical data message with interface board, number carry out the data integration processing according to sequence of message.
Compared with prior art, the above embodiment of the present invention has following useful technique effect:
In the above embodiment of the present invention; The interface board of distributed audiomonitor is when encapsulating the data message that meets the monitoring rule that listens to; The sign of this interface board is encapsulated in wherein; Thereby make gateway device can the data message of the sign with same-interface plate be integrated into data flow, the solution that realizes Lawful Interception to distributed audiomonitor is provided.
The embodiment of the invention provides another kind of Lawful Interception implementation method; Be applied to comprise the distributed audiomonitor of several interface boards; Each interface board is provided with sequence of message initial value and sequence of message increment size, and the sequence of message initial value on each interface board has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical; This increment size is not less than the quantity of said audiomonitor interface board, and this method comprises:
The interface board of audiomonitor duplicates said data message after listening to and meeting the data message of monitoring rule, and for duplicating the data message assignment message sequence number that obtains; Wherein, number to be this interface board increase said sequence of message increment size to the sequence of message that is distributed on the basis of the sequence of message of preceding sub-distribution number obtain;
Said interface board will duplicate the data message that obtains and encapsulate, and carry sequence of message that said interface board distributes for this message number in the data message after encapsulation;
Data message after said interface board will encapsulate sends to gateway device.
The embodiment of the invention provides another kind of Lawful Interception implementation method, and this method comprises:
Gateway device receives the data message that audiomonitor sends;
Said gateway device is resolved the sequence of message that wherein carried number according to the data message that receives;
Said gateway device is according to the sequence of message that carries in the data message number; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, and the data message that same interface board is sent number carries out the data integration processing according to said sequence of message; Wherein, the sequence of message initial value on each interface board of audiomonitor has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.
The embodiment of the invention provides another kind of distributed audiomonitor; Comprise several interface boards; Each interface board is provided with sequence of message initial value and sequence of message increment size, and the sequence of message initial value on each interface board has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical; This increment size is not less than the quantity of said audiomonitor interface board, and this equipment comprises:
The message receiver module is used for receiving data packets;
The message monitoring module is used for through monitoring the data message that said message receiver module receives, and obtains meeting the data message of monitoring rule;
Message processing module (MPM); Be used for the data message of monitoring rule that meets that said message monitoring module listens to is duplicated; And for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry sequence of message that this interface board distributes for this message number in the data message after encapsulation; Wherein, the sequence of message that is distributed number is on the basis of this interface board at the sequence of message of preceding sub-distribution number, to increase said sequence of message increment size to obtain;
The message sending module is used for the data message after the said message processing module (MPM) encapsulation is sent to gateway device.
The embodiment of the invention provides another kind of gateway device, comprising:
The message receiver module is used to receive the data message that audiomonitor sends;
The packet parsing module is used for the data message that receives according to said message receiver module, resolves the sequence of message that wherein carried number;
Message processing module (MPM); The sequence of message that is used for obtaining number according to the packet parsing module parses; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, the data message that same interface board is sent number carries out the data integration processing according to said sequence of message; Wherein, the sequence of message initial value on each interface board of audiomonitor has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.
In the above embodiment of the present invention; Sequence of message initial value and sequence of message increment size are set on each interface board of distributed audiomonitor; And the sequence of message initial value on each interface board has nothing in common with each other; The sequence of message increment size that is provided with on each interface board is identical; This increment size is not less than the quantity of said audiomonitor interface board, when interface board be duplicate obtain meet the message assignment message sequence number of monitoring rule the time, distribute according to the sequence of message initial value and the sequence of message increment size of each interface board; Thereby the sequence of message that makes each interface board number does not have repetition; And then make gateway device can identify the interface board that message is originated according to identical rule, thereby the data message that same interface board is sent number is integrated into data flow according to said sequence of message, and the solution that realizes Lawful Interception to distributed audiomonitor is provided.
Description of drawings
Fig. 1 is the system architecture sketch map of audiomonitor of the prior art;
Fig. 2 is the encapsulation sketch map of unicast message of the prior art on audiomonitor;
Fig. 3 is the sketch map of the data message monitoring system framework in the embodiment of the invention;
The schematic flow sheet of the Lawful Interception that Fig. 4 provides for the embodiment of the invention one;
What Fig. 5 provided for the embodiment of the invention one carries out the sketch map that UDP encapsulates to the data message;
The schematic flow sheet of the Lawful Interception that Fig. 6 provides for the embodiment of the invention two;
One of structural representation of the distributed audiomonitor that Fig. 7 provides for the embodiment of the invention;
One of structural representation of the gateway device that Fig. 8 provides for the embodiment of the invention;
Two of the structural representation of the distributed audiomonitor that Fig. 9 provides for the embodiment of the invention;
Two of the structural representation of the gateway device that Figure 10 provides for the embodiment of the invention.
Embodiment
To combine the accompanying drawing among the present invention below, the technical scheme among the present invention is carried out clear, complete description, obviously, described embodiment is a part of embodiment of the present invention, rather than whole embodiment.Based on the embodiment among the present invention, the every other embodiment that those of ordinary skills are obtained under the prerequisite of not making creative work belongs to the scope that the present invention protects.
Referring to shown in Figure 3, be the legal interception system configuration diagram that the embodiment of the invention was suitable for.As shown in the figure, this legal interception system comprises distributed audiomonitor 31 and a plurality of gateway devices 32, and distributed audiomonitor 31 comprises a plurality of monitoring interface boards, carries out data interaction through interface d, f between each interface board and each gateway device 32.Wherein, can be one also can be a plurality of to gateway device 32.The data flow of need the monitoring distributed audiomonitor 31 of flowing through, and through this device forwards.
Each interface board is monitored the data flow of flowing through according to monitoring rule, and after listening to the data message that meets the monitoring rule, this data message is duplicated the encapsulation with UDP, sends to gateway device 32 then.
The data message that distributed audiomonitor is monitored can be TCP message or UDP message etc., and type of message can comprise unicast message or multicast message.The whole embodiment of the present invention are that example describes with the UDP message.
Embodiment one
Based on legal interception system framework shown in Figure 3, the flow process that a kind of distributed audiomonitor that Fig. 4 shows the embodiment of the invention to be provided is monitored the data message, as shown in Figure 4, this flow process comprises:
Concrete, each interface board of audiomonitor can be monitored different data flow respectively, as can on interface board, disposing ACL (Access Control List, ACL), so that each interface board is monitored the data flow message of different IP addresses section.
Monitoring rule can be provided with by the user as required voluntarily, and sends to each interface board through gateway device, and each interface board carries out message monitoring according to this monitoring rule.Gateway device can be provided with identical monitoring rule for each interface board, also can be according to need different monitoring rules being set for each interface board.
In snoop procedure, audiomonitor uses the data message of monitoring the indicated message characteristic value of rule and receiving to mate, if this data message and this message characteristic value coupling, then this data message is to meet the data message of monitoring rule.
Concrete; After interface board listens to and meets the data message of monitoring rule; This data message is duplicated portion, and for duplicating the data message assignment message sequence number that obtains, the initial data message is handled by normal flow; Continue to be sent out through other ports of interface board, the behavior of audiomonitor copy data message is not discovered by the user.Interface board is to duplicate the sequence of message that data message distributed that obtains number, the data message that the unique identification interface board duplicates, that is and, the sequence of message of each data message of same data flow number has nothing in common with each other.Preferably, interface board is by numerical values recited order assignment sequence of message number.
Concrete, be example with the UDP message, the UDP message format is as shown in table 1:
Table 1
| Original?IP?Header(20bytes) |
| …… |
| …… |
| …… |
| …… |
| Original?UDP?Header(8bytes) |
| …… |
| Original?Payload(arbitrary?length) |
| …… |
Audiomonitor carries out the UDP encapsulation to duplicating the data message that obtains, and the data that will be listened to are added in the back of UDP heading as the data division in the UDP message, and the data load part message format after the encapsulation is as shown in table 2:
Table 2
| Identifier(4bytes) |
| Timestamp(8bytes) |
| …… |
| Intercepted?Information(arbitrary?length) |
The data message that is listened to comprises: fields such as Identifier, Timestamp, Intercepted Information; Wherein, The Identifier field is the sequence of message number of one 4 byte, is used for the order of the data message that gateway device identification listened to.Mail to the data message of same gateway equipment, the sequence of message of Identifier field is number not reproducible, mails to the message of different gateway devices, and the sequence of message of Identifier field number can be identical; The Timestamp field is the timestamp of one 8 byte, and form is the time format of NTP (Network Time Protocol, NTP).
It is as shown in Figure 5 that interface board will duplicate the UDP message that the data message that obtains encapsulates, and wherein, the Identifier field of 32bits (4 byte) is divided into slot territory and test serial number territory.Present embodiment is that example is explained with the slot territory of high-order 4bits and the test serial number territory of 28bits, and wherein, the slot territory is used to write down the sign of monitoring interface board; Can support the distributed audiomonitor of 16 interface boards; Be applicable to present most distributed apparatus, certainly, those skilled in the art can know; The length in slot territory can be decided according to the interface board quantity in the distributed audiomonitor, is not limited to 4bit; The test serial number territory is used for the record data sequence number of message, and expression listens to the sequencing of data message, the data message that this interface board of unique identification duplicates.Preferably, the sign of interface board can be the slot number of interface board.
Interface board is by numerical values recited order assignment sequence of message number; The sequence of message that was last time distributed when interface board number reaches sequence of message and number goes up in limited time; Interface board begins from the initial value of sequence of message number, is this data message assignment message sequence number that duplicates, and realizes sequence of message number upset.Through sequence of message number upset, can enlarge the capacity of monitored data message, realize monitoring to the data flow that comprises more data message.
Preferably, the sequence of message that was last time distributed when interface board number reaches sequence of message number to be gone up in limited time, and sequence of message number upset is realized from 1 opening entry in the test serial number territory.Wherein, the upper limit of sequence of message number determines (to be 2 in the present embodiment according to the length in test serial number territory
28).
Gateway device is according to the data message that receives, resolves the sequence of message that wherein carried number and interface board sign, and interface board is identified identical data message, number carries out the data integration processing according to sequence of message.Concrete, gateway device according to interface board sign specified data message institute from interface board, the data message that derives from same interface board is assembled according to sequence of message number order.
Concrete, because sequence of message number may overturn, cause occurrence sequence number identical data message, at this moment, gateway device is further integrated the data message according to the sequencing of the Timestamp in the data message.
The Lawful Interception implementation method that embodiments of the invention one provide; Through duplicating, encapsulate the data message of monitoring rule that meets that listens to; Carry the sign of interface board in the data message after encapsulation; The data message that will have the sign of same-interface plate is integrated into data flow, thereby makes gateway device correctly to integrate multicast message, and the solution that realizes Lawful Interception to distributed audiomonitor is provided.Especially for multicast message; Cause owing to its source, purpose IP address are identical distinguishing under the situation which interface board message derive from; Pass through present embodiment; Can make gateway device identify this data message and come from which interface board, thereby can realize monitoring, enlarge the scope of monitoring multicast message according to the interface board identification information that carries in the message.
Embodiment two
Based on legal interception system framework shown in Figure 3, the flow process that a kind of distributed audiomonitor that Fig. 6 shows the embodiment of the invention to be provided is monitored the data message.Wherein, Each interface board is provided with sequence of message initial value and sequence of message increment size; Sequence of message initial value on each interface board has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.As shown in Figure 6, this flow process comprises:
Step 60, the interface board of audiomonitor is monitored the data message of flowing through.Concrete implementation method is with the corresponding steps of embodiment one.
Step 61, the interface board of audiomonitor are duplicated said data message after listening to and meeting the data message of monitoring rule, and for duplicating the data message assignment message sequence number that obtains; Wherein, the sequence of message that is distributed number is on the basis of this interface board at the sequence of message of preceding sub-distribution number, to increase said sequence of message increment size to obtain.
Concrete; After the interface board of audiomonitor listens to and meets the data message of monitoring rule; This data message is duplicated portion, and for duplicating the data message assignment message sequence number that obtains, the initial data message is handled by normal flow; Continue to be sent out through other ports of interface board, the behavior of audiomonitor copy data message is not discovered by the user.
During interface board assignment message sequence number; The sequence number of first data message that the sequence of message initial value on this interface board is listened to as this interface board, the sequence number of subsequent packet increases progressively by identical sequence of message increment size on the basis of the sequence of message of preceding sub-distribution number successively.Below to equal interface board quantity with increment size be that example describes.For example, interface board quantity is 4, and the sequence of message increment size also is 4, and the sequence of message initial value that is provided with on each interface board is respectively: 1,2,3,4, therefore; The sequence of message that each interface board distributed number is followed successively by (1,5,9,13 ...), (2,6; 10,14 ...), (3,7,11,15 ...), (4; 8,12,16 ...), through above rule sequence of message number is set, make gateway device to determine the message that receives and come from which interface board through respective algorithms.
Step 62, interface board will duplicate the data message that obtains and encapsulate, and carry sequence of message that interface board distributes for this message number in the data message after encapsulation.
Interface board will duplicate process that the data message that obtains encapsulates as previously mentioned; Present embodiment is with the difference of embodiment one in the data message encapsulation process, and the entire I dentifier field (32bits) of the data message of present embodiment is used to identify sequence of message number.
Further; The data message sequence number that was last time distributed when interface board reaches the sequence of message of this interface board and number goes up in limited time; Said interface board begins from the initial value for the sequence of message of this interface board setting number; Be this data message assignment message sequence number that duplicates, realize sequence of message number upset.Wherein, the upper limit of sequence of message number determines (to be 2 in the present embodiment according to the length of Identifier field
32).
Step 63, the data message after interface board will encapsulate sends to gateway device.
The sequence of message initial value and the increment size that are disposed on each interface board of distributed audiomonitor are known for gateway device.Gateway device receives the data message that audiomonitor sends; Resolve the sequence of message that wherein carried number according to the data message that receives; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, the data message that same interface board is sent number carries out the data integration processing according to said sequence of message.
Concrete, because sequence of message number may overturn, cause occurrence sequence number identical data message, at this moment, gateway device is further integrated the data message according to the sequencing of the Timestamp in the data message.
The Lawful Interception implementation method that embodiments of the invention two provide; For each interface board of audiomonitor is provided with sequence of message initial value and sequence of message increment size; The sequence number of the data message that last time duplicated is increased the sequence of message increment size; Obtain encapsulating behind the sequence of message number of this data message that duplicates, gateway device is determined the interface board that sends this message, and the data message that same interface board is sent number is integrated into data flow according to said sequence of message; Thereby make gateway device correctly to integrate multicast message, the solution that realizes Lawful Interception to distributed audiomonitor is provided.Especially for multicast message; Cause owing to its source, purpose IP address are identical distinguishing under the situation which interface board message derive from; Pass through present embodiment; Can make gateway device identify this data message and come from which interface board, thereby can realize monitoring, enlarge the scope of monitoring multicast message according to the interface board identification information that carries in the message.
Based on the technical conceive identical with embodiment one, the embodiment of the invention also provides a kind of distributed audiomonitor, and its structure is as shown in Figure 7, and this equipment comprises several interface boards, comprises on each interface board:
Message receiver module 71 is used for receiving data packets.
Packet forwarding module 75, the data message that the receiver module 71 that is used to E-Packet receives.
Message monitoring module 72 is used for obtaining meeting the data message of monitoring rule through monitoring the data message that message receiver module 71 receives.Concrete, this module can be monitored according to the message monitoring rule of gateway device configuration.
Message processing module (MPM) 73 is used for the data message of monitoring rule that meets that message monitoring module 72 listens to is duplicated, and for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry the sign of this interface board in the data message after encapsulation and the sequence of message that distributes for this data message number.Preferably, the slot number that is designated interface board of the interface board of audiomonitor.Message processing module (MPM) 73 is for duplicating the sequence of message that data message distributed that obtains number, the data message that this interface board of unique identification duplicates.
Message sending module 74 is used for the data message after message processing module (MPM) 73 encapsulation is sent to gateway device.
Concrete, the interface board of audiomonitor is by numerical values recited order assignment sequence of message number.Accordingly, message processing module (MPM) 73 also is used for, and the sequence of message of current sub-distribution number reaches sequence of message number to be gone up in limited time, begins the data message assignment message sequence number that duplicates for this from the initial value of sequence of message number.
Based on the technical conceive identical with embodiment one, the embodiment of the invention also provides a kind of gateway device, and its structure is as shown in Figure 8, and this gateway device comprises:
Message processing module (MPM) 83; Be used for resolving the interface board sign that obtains and sequence of message number according to packet parsing module 82; Interface board is identified identical data message, number carry out the data integration processing according to sequence of message, concrete; Message processing module (MPM) 83 according to interface board sign specified data message institute from interface board, the data message that derives from same interface board is assembled according to sequence of message number order.
Based on the technical conceive identical with embodiment two, the embodiment of the invention also provides a kind of distributed audiomonitor, and its structure is as shown in Figure 9; This equipment comprises several interface boards; Each interface board is provided with sequence of message initial value and sequence of message increment size, and the sequence of message initial value on each interface board has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical; This increment size is not less than the quantity of said audiomonitor interface board, and this equipment comprises:
Message processing module (MPM) 93; Be used for the data message of monitoring rule that meets that message monitoring module 92 listens to is duplicated; And for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry sequence of message that this interface board distributes for this message number in the data message after the encapsulation; Wherein, the sequence of message that is distributed number is on the basis of this interface board at the sequence of message of preceding sub-distribution number, to increase said sequence of message increment size to obtain.
Concrete, said message processing module (MPM) 93 also is used for, and number goes up in limited time when the data message sequence number that was last time distributed reaches sequence of message, begins from the initial value for the sequence of message of this interface board setting number, is this data message assignment message sequence number that duplicates.
Based on the technical conceive identical with embodiment two, the embodiment of the invention also provides a kind of gateway device, and its structure is shown in figure 10, and this gateway device comprises:
Message receiver module 101 is used to receive the data message that audiomonitor sends.
Packet parsing module 102 is used for the data message that receives according to message receiver module 101, resolves the sequence of message that wherein carried number.
Message processing module (MPM) 103; Be used for resolving the sequence of message that obtains number according to packet parsing module 102; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, the data message that same interface board is sent number carries out the data integration processing according to said sequence of message; Wherein, the sequence of message initial value on each interface board of audiomonitor has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.Concrete, message processing module (MPM) 103 according to sequence of message specified data message institute from interface board, the data message that derives from same interface board is assembled according to sequence of message number order.
It will be appreciated by those skilled in the art that the module in the device among the embodiment can be distributed in the device of embodiment according to the embodiment description, also can carry out respective change and be arranged in the one or more devices that are different from present embodiment.The module of the foregoing description can be merged into a module, also can further split into a plurality of submodules.
Through the description of above execution mode, those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential general hardware platform, can certainly pass through hardware, but the former is better execution mode under a lot of situation.Based on such understanding; The part that technical scheme of the present invention contributes to prior art in essence in other words can be come out with the embodied of software product; This computer software product is stored in the storage medium, comprise some instructions with so that a station terminal equipment (can be mobile phone, personal computer; Server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.
The above only is a preferred implementation of the present invention; Should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; Can also make some improvement and retouching, these improvement and retouching also should be looked protection scope of the present invention.
Claims (18)
1. Lawful Interception implementation method is applied to comprise the distributed audiomonitor of several interface boards, it is characterized in that this method comprises:
The interface board of audiomonitor duplicates said data message after listening to and meeting the data message of monitoring rule, and for duplicating the data message assignment message sequence number that obtains;
Said interface board will duplicate the data message that obtains and encapsulate, and carry the sign of said interface board in the data message after the encapsulation and the sequence of message that distributes for this data message number;
Data message after said interface board will encapsulate sends to gateway device.
2. the method for claim 1 is characterized in that, said interface board is to duplicate the sequence of message that data message distributed that obtains number, the data message that this interface board of unique identification duplicates.
3. method as claimed in claim 2 is characterized in that, interface board is by numerical values recited order assignment sequence of message number; This method also comprises:
The sequence of message that was last time distributed when interface board number reaches sequence of message number to be gone up in limited time, and said interface board begins from the initial value of sequence of message number, is this data message assignment message sequence number that duplicates.
4. like the described method of one of claim 1-3, it is characterized in that the slot number that is designated interface board of said interface board.
5. method as claimed in claim 4 is characterized in that the data message that the interface board of said audiomonitor listens to comprises unicast message or multicast message.
6. a Lawful Interception implementation method is characterized in that, this method comprises:
Gateway device receives the data message that audiomonitor sends;
Said gateway device is resolved the sequence of message that wherein carried number and interface board sign according to the data message that receives;
Said gateway device identifies identical data message according to the interface board that carries in data message sign and sequence of message number with interface board, number carries out the data integration processing according to sequence of message.
7. a distributed audiomonitor comprises several interface boards, it is characterized in that, comprises on each interface board:
The message receiver module is used for receiving data packets;
The message monitoring module is used for through monitoring the data message that said message receiver module receives, and obtains meeting the data message of monitoring rule;
Message processing module (MPM) is used for the data message of monitoring rule that meets that said message monitoring module listens to is duplicated, and for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry the sign of this interface board in the data message after encapsulation and the sequence of message that distributes for this data message number;
The message sending module is used for the data message after the said message processing module (MPM) encapsulation is sent to gateway device.
8. equipment as claimed in claim 7 is characterized in that said message processing module (MPM) specifically is used for, for duplicating the sequence of message that data message distributed that obtains number, the data message that this interface board of unique identification duplicates.
9. equipment as claimed in claim 8 is characterized in that, said message processing module (MPM) is by numerical values recited order assignment sequence of message number;
Said message processing module (MPM) also is used for, and the sequence of message of current sub-distribution number reaches sequence of message number to be gone up in limited time, begins the data message assignment message sequence number that duplicates for this from the initial value of sequence of message number.
10. like the described equipment of one of claim 7-9, it is characterized in that the slot number that is designated interface board of said interface board.
11. a gateway device is characterized in that, comprising:
The message receiver module is used to receive the data message that audiomonitor sends;
The packet parsing module is used for the data message that receives according to said message receiver module, resolves the sequence of message that wherein carried number and interface board sign;
Message processing module (MPM), the interface board that is used for obtaining according to said packet parsing module parses sign and sequence of message number identify identical data message with interface board, number carry out the data integration processing according to sequence of message.
12. Lawful Interception implementation method; Be applied to comprise the distributed audiomonitor of several interface boards, it is characterized in that, each interface board is provided with sequence of message initial value and sequence of message increment size; Sequence of message initial value on each interface board has nothing in common with each other; The sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board, and this method comprises:
The interface board of audiomonitor duplicates said data message after listening to and meeting the data message of monitoring rule, and for duplicating the data message assignment message sequence number that obtains; Wherein, number to be this interface board increase said sequence of message increment size to the sequence of message that is distributed on the basis of the sequence of message of preceding sub-distribution number obtain;
Said interface board will duplicate the data message that obtains and encapsulate, and carry sequence of message that said interface board distributes for this message number in the data message after encapsulation;
Data message after said interface board will encapsulate sends to gateway device.
13. method as claimed in claim 12 is characterized in that, this method also comprises:
The data message sequence number that was last time distributed when interface board reaches the sequence of message of this interface board number to be gone up in limited time, and said interface board begins from the initial value for the sequence of message of this interface board setting number, is this data message assignment message sequence number that duplicates.
14., it is characterized in that the data message that the interface board of said audiomonitor listens to comprises unicast message or multicast message like claim 12 or 13 described methods.
15. a Lawful Interception implementation method is characterized in that, this method comprises:
Gateway device receives the data message that audiomonitor sends;
Said gateway device is resolved the sequence of message that wherein carried number according to the data message that receives;
Said gateway device is according to the sequence of message that carries in the data message number; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, and the data message that same interface board is sent number carries out the data integration processing according to said sequence of message; Wherein, the sequence of message initial value on each interface board of audiomonitor has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.
16. distributed audiomonitor; Comprise several interface boards, it is characterized in that, each interface board is provided with sequence of message initial value and sequence of message increment size; Sequence of message initial value on each interface board has nothing in common with each other; The sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board, and this equipment comprises:
The message receiver module is used for receiving data packets;
The message monitoring module is used for through monitoring the data message that said message receiver module receives, and obtains meeting the data message of monitoring rule;
Message processing module (MPM); Be used for the data message of monitoring rule that meets that said message monitoring module listens to is duplicated; And for duplicating the data message assignment message sequence number that obtains; And, encapsulate duplicating the data message that obtains, carry sequence of message that this interface board distributes for this message number in the data message after encapsulation; Wherein, the sequence of message that is distributed number is on the basis of this interface board at the sequence of message of preceding sub-distribution number, to increase said sequence of message increment size to obtain;
The message sending module is used for the data message after the said message processing module (MPM) encapsulation is sent to gateway device.
17. equipment as claimed in claim 16; It is characterized in that; Said message processing module (MPM) also is used for; Go up in limited time when the data message sequence number that was last time distributed reaches sequence of message number, begin, be this data message assignment message sequence number that duplicates from initial value for the sequence of message of this interface board setting number.
18. a gateway device is characterized in that, comprising:
The message receiver module is used to receive the data message that audiomonitor sends;
The packet parsing module is used for the data message that receives according to said message receiver module, resolves the sequence of message that wherein carried number;
Message processing module (MPM); The sequence of message that is used for obtaining number according to the packet parsing module parses; And be set sequence of message initial value of each interface board of audiomonitor and sequence of message increment size; Confirm to send the interface board of this message, the data message that same interface board is sent number carries out the data integration processing according to said sequence of message; Wherein, the sequence of message initial value on each interface board of audiomonitor has nothing in common with each other, and the sequence of message increment size that is provided with on each interface board is identical, and this increment size is not less than the quantity of said audiomonitor interface board.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110336646A CN102333101A (en) | 2011-10-31 | 2011-10-31 | Lawful interception method and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201110336646A CN102333101A (en) | 2011-10-31 | 2011-10-31 | Lawful interception method and equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102333101A true CN102333101A (en) | 2012-01-25 |
Family
ID=45484705
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201110336646A Pending CN102333101A (en) | 2011-10-31 | 2011-10-31 | Lawful interception method and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102333101A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103905398A (en) * | 2012-12-27 | 2014-07-02 | 华为技术有限公司 | Distributed monitoring method and system, proxy monitoring apparatus, and monitoring control apparatus |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1764152A (en) * | 2004-10-21 | 2006-04-26 | 中兴通讯股份有限公司 | Point-to-point communication method on Ethernet |
| CN1819560A (en) * | 2006-03-14 | 2006-08-16 | 杭州华为三康技术有限公司 | Message serial number inspection and inspector with multi-unit transmission |
| CN101296270A (en) * | 2007-04-28 | 2008-10-29 | 华为技术有限公司 | Legal monitoring method, communication system, router and monitoring gateway |
-
2011
- 2011-10-31 CN CN201110336646A patent/CN102333101A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1764152A (en) * | 2004-10-21 | 2006-04-26 | 中兴通讯股份有限公司 | Point-to-point communication method on Ethernet |
| CN1819560A (en) * | 2006-03-14 | 2006-08-16 | 杭州华为三康技术有限公司 | Message serial number inspection and inspector with multi-unit transmission |
| CN101296270A (en) * | 2007-04-28 | 2008-10-29 | 华为技术有限公司 | Legal monitoring method, communication system, router and monitoring gateway |
Non-Patent Citations (1)
| Title |
|---|
| F. BAKER ET.AL: "《Network Working Group， Request for Comments：3924》", 31 October 2004 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103905398A (en) * | 2012-12-27 | 2014-07-02 | 华为技术有限公司 | Distributed monitoring method and system, proxy monitoring apparatus, and monitoring control apparatus |
| CN103905398B (en) * | 2012-12-27 | 2018-01-23 | 华为技术有限公司 | Distributed monitor method, act on behalf of monitoring device, interception control device and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105049495B (en) | Method for discovering equipment, apparatus and system | |
| EP2712216B1 (en) | Method, relevant device and system for pushing and receiving service information | |
| CN101179495B (en) | Relay device, wireless communication system and multicast relay method | |
| US9439094B2 (en) | Monitoring probe for identifying a user plane identifier of a user device | |
| EP2992727B1 (en) | Multicast group reuse in cellular network multicast transport | |
| CN101965014B (en) | Distribution method and distribution control device for Gn interface data | |
| EP3131320B1 (en) | Information push management method and device | |
| EP3301956B1 (en) | Signaling of service definition for embms services using different bearers in different areas | |
| US9402172B2 (en) | Message combination method and device | |
| CN106656869A (en) | Information synchronization method and system in frame type device | |
| WO2017088508A1 (en) | Multimedia broadcast and multicast service processing method, network element and system | |
| US9270561B2 (en) | Method and apparatus for applying uniform hashing to wireless traffic | |
| US20120155255A1 (en) | Method and apparatus for managing a degree of parallelism of streams | |
| CN113132170A (en) | Data management method and system, associated subsystem and computer readable medium | |
| CN102984175A (en) | Front-end monitoring equipment without IP and agent device | |
| US9652372B2 (en) | Method and apparatus for improving non-uniform memory access | |
| CN104796340A (en) | Multicast data transmission method and device | |
| CN109327810A (en) | A kind of subway PIS business method of multicasting and device based on the cluster communication of the broadband LTE | |
| CN102333101A (en) | Lawful interception method and equipment | |
| CN104780587A (en) | AP (access point) accessing method and system for WiFi (wireless fidelity) equipment in Internet of Things | |
| CN101610187B (en) | Alarming processing method and device for mixed structure | |
| CN101572695A (en) | Method, system and device for switching transmission stream paths | |
| CN103634365A (en) | Third party application platform in wireless access network and communication method thereof | |
| WO2016061931A1 (en) | Method and system for tracing multicast path by user equipment | |
| CN103945333B (en) | A kind of transmission method of group-calling service data |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20120125 |