CN102487521A - Method and device for monitoring media content in IMS (IP (Internet Protocol) Multimedia Subsystem) - Google Patents

Method and device for monitoring media content in IMS (IP (Internet Protocol) Multimedia Subsystem) Download PDF

Info

Publication number
CN102487521A
CN102487521A CN2010105714885A CN201010571488A CN102487521A CN 102487521 A CN102487521 A CN 102487521A CN 2010105714885 A CN2010105714885 A CN 2010105714885A CN 201010571488 A CN201010571488 A CN 201010571488A CN 102487521 A CN102487521 A CN 102487521A
Authority
CN
China
Prior art keywords
ims
ibcf
monitored object
access gateway
sends
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2010105714885A
Other languages
Chinese (zh)
Other versions
CN102487521B (en
Inventor
周蓝粢
高扬
梁文娟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201010571488.5A priority Critical patent/CN102487521B/en
Priority to PCT/CN2011/075610 priority patent/WO2012071875A1/en
Publication of CN102487521A publication Critical patent/CN102487521A/en
Application granted granted Critical
Publication of CN102487521B publication Critical patent/CN102487521B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/10Architectures or entities
    • H04L65/1016IP multimedia subsystem [IMS]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/30Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information
    • H04L63/306Network architectures or network communication protocols for network security for supporting lawful interception, monitoring or retaining of communications or communication related information intercepting packet switched data communications, e.g. Web, Internet or IMS communications

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Technology Law (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a method for monitoring media content in an IMS (IP (Internet Protocol) Multimedia Subsystem). The IMS is connected with a carrier network through an IMS-access gateway/IBCF (Interconnection Border Control Function) entity. The method comprises the following steps that: after receiving a monitoring request of a monitored object, the IMS sends the information of the monitored object to the IMS-access gateway/IBCF; and when determining that the current access user is the monitored object, the IMS-access gateway/IBCF reports the CC (Communication Content) of the session of the monitored objected to a DF3 (Delivery Function 3). The invention simultaneously discloses a device for monitoring media content in the IMS, wherein the device can be used for monitoring media contents in the IMS. According to the invention, session monitoring can be realized without greatly changing an existing IMS network; and as the IMS-access gateway/IBCF is arranged, various carrier networks can be compatible.

Description

Method and device for monitoring media content in IP multimedia subsystem
Technical Field
The present invention relates to a monitoring technology in an IP Multimedia Subsystem (IMS) network architecture, and in particular, to a method and an apparatus for monitoring media content in an IP Multimedia Subsystem.
Background
The internet protocol Multimedia Subsystem (IMS) is the developing direction of future Multimedia communication and is the most important component of next generation networks. It is a subsystem supporting IP multimedia service proposed by the Third Generation Partnership Project (3 GPP), and its notable feature is that it adopts Session Initiation Protocol (SIP) system, and the communication is independent of access mode, and it can possess multiple multimedia service control functions and multiple capabilities of bearing capacity separation, call and Session separation, application and service separation, service and network separation, and mobile network and Internet service fusion.
As communication technology becomes more and more powerful, it is getting deeper into various aspects of society and life, and the situation of using communication technology to engage in illegal criminal activities is becoming more and more serious. Legal monitoring technology becomes a powerful weapon for security departments of various countries to fight against criminal activities. Lawful interception is that a safety organization sets a specific interception target on communication equipment for law enforcement, and intercepts session events and communication contents of the interception target, which is an essential function in the communication field. Standards organizations such as the European Telecommunications Standards Institute (ETSI), 3GPP, etc., have established Standards related to lawful interception. Lawful interception in the IMS network domain also forms the corresponding standard and can guide the specific implementation.
Fig. 1 is a schematic diagram of a lawful interception architecture of 3GPP Packet switching, and as shown in fig. 1, 3GPP proposes a lawful interception standard in the field of IMS Packet Switching (PS) networks. Wherein, the monitoring is based on the following three interfaces:
the HI1 interface is used for realizing control management;
an HI2 interface, configured to report monitoring related information (IRI, Intercept related information) of monitored target communication;
an HI3 interface for outputting Communication Content (CC) of a target to be listened to;
the HI1 is used for respectively controlling the bearing layer network, HI2 interface information is output to Control layer equipment such as a Call Session Control Function (CSCF), and HI3 communication content is output to the bearing layer network. In the figure, X1 to X3 are interfaces corresponding to HI1 to HI3 interfaces, respectively, for IMS and GSN connections.
The standard can be applied to a monitoring System including a Law Enforcement Monitoring Facility (LEMF), an Administration Function entity (ADMF), a data transfer Function 2(DF2, Delivery Function2), a data transfer Function 3(DF3, Delivery Function3), and a monitoring device gigabit System Network (GSN, gigabit System Network).
The LEMF informs the monitoring request to the ADMF through the HI1, and the request message carries information such as the identity identifier of the monitored object; the ADMF sends the monitoring request message to a bearing layer network GSN through an X1_1, and the monitoring request message carries information such as the identity identification of a monitored object; in the IMS domain, the ADMF sends the monitoring request message to a Proxy Call Session Control Function (P-CSCF)/a Serving-Call Session Control Function (S-CSCF); the ADMF sends the monitoring request message to DF3 through X1_3, and carries the information such as the identity of the monitored object; monitoring a monitored object according to a monitoring object identifier when a session request is routed to a P-CSCF/S-CSCF through a GSN in an IMS domain during the period from the session start to the session end and the P-CSCF/S-CSCF judges that the user is monitored; the P-CSCF/S-CSCF reports the IRI in the session process to the DF2 through the X2; the GSN reports the CC in the session process to DF3 through X3; DF2 reports the received IRI to LEMF through HI2 after MF processing according to the monitoring request from ADMF; DF3 reports the CC after MF processing to LEMF through HI3 according to the monitoring request from ADMF.
In practical applications, in next generation Networks with IMS as a core, bearer layer Networks are rich in types, including Wireless Local Area Networks (WLAN), Local Area Networks (LAN), and the like. Therefore, legal monitoring in the field of IMS network is difficult to adapt to various different bearing layer networks. Meanwhile, a plurality of bearing layer devices are required to realize the monitoring function, which is difficult to realize in reality. Many devices may not be able to provide the listening function in the existing network, which may render the listening function unusable.
Disclosure of Invention
In view of this, the main objective of the present invention is to provide a method and an apparatus for monitoring media content in an IP multimedia subsystem, which can directly report CC of a session of a monitored object to DF3 through an IMS access gateway/IBCF.
In order to achieve the purpose, the technical scheme of the invention is realized as follows:
a method for monitoring media content in IP multimedia subsystem, IP multimedia subsystem IMS is connected with bearing layer network through IMS access gateway/interconnection border control function entity IBCF; the method comprises the following steps:
after receiving a monitoring request for a monitored object, the IMS sends the monitored object information to an IMS access gateway/border control function entity (IBCF);
and when the IMS access gateway/IBCF confirms that the current access user is the monitored object, reporting the communication content CC of the conversation of the monitored object to the DF 3.
Preferably, after receiving the monitoring request for the monitored object, the IMS sends the monitored object information to the IMS access gateway/border control function entity IBCF specifically:
and after receiving the monitoring request sent by the ADMF, the IMS sends the identification information of the monitored object to the IMS access gateway/IBCF through a Call Content Control Interface (CCCI).
Preferably, the reporting of the communication content CC of the session of the monitored object to the DF3 specifically includes:
the IMS access gateway/IBCF sends a CC to the DF3 through a fixed port of the DF 3;
or, when the DF3 is a media gateway MGW/media gateway control function entity MGCF, the IMS access gateway/IBCF sends a CC to the DF3 through a CC receiving port of the DF3 acquired from the IMS.
Preferably, the bearer layer network is at least one of the following networks: gigabit system network GSN, wireless local area network WLAN, local area network LAN.
A media content monitoring device in an IP multimedia subsystem is applied to a system in which an IMS is connected with a bearing layer network through an IMS access gateway/IBCF, and comprises a receiving unit and a sending unit which are arranged in the IMS, and a confirming unit and a reporting unit which are arranged in the IMS access gateway/IBCF; wherein,
a receiving unit, configured to receive a monitoring request for a monitored object;
a sending unit, configured to send the monitored object information to an IMS access gateway/border control function entity IBCF;
the confirming unit is used for triggering the reporting unit when confirming that the current access user is a monitored object;
and the reporting unit is used for reporting the CC of the session of the monitored object to the DF 3.
Preferably, the sending unit sends the identification information of the monitored object to the IMS access gateway/IBCF through CCCI.
Preferably, the reporting unit sends a CC to the DF3 through a fixed port of the DF 3;
or, when the DF3 is a MGW/MGCF, the reporting unit sends a CC to the DF3 through a CC receiving port of the DF3 obtained from the IMS.
Preferably, the bearer layer network is at least one of the following networks: GSN, WLAN, LAN.
In the invention, after receiving a monitoring request sent by ADMF, IMS notifies the IMS access gateway/IBCF of the relevant information such as the identification information of the monitored object, so that the IMS access gateway/IBCF can realize the deployment and control of the monitored user, and when the current accessed user is determined to be the monitored user, the session CC of the monitored user is reported to DF3, thereby realizing the monitoring of the monitored user. The IMS access gateway/IBCF is informed of the relevant information of the monitored user through the IMS, so that the IMS access gateway/IBCF has the deployment and control capability. The invention can realize the monitoring of the session without greatly changing the existing IMS network, and can be compatible with various bearing layer networks because of the arrangement of the IMS access gateway/IBCF.
Drawings
FIG. 1 is a diagram of a 3GPP packet-switched lawful interception architecture;
FIG. 2 is a diagram illustrating an IMS network lawful interception architecture according to the present invention;
fig. 3 is a schematic diagram of the structure of a device for monitoring media content in an IP multimedia subsystem according to the present invention.
Detailed Description
The basic idea of the present invention is that after receiving a monitoring request sent by ADMF, IMS notifies the IMS access gateway/IBCF of relevant information such as identification information of a monitored object, so that the IMS access gateway/IBCF can implement deployment control of a monitored user, and when it is determined that a currently accessed user is a monitored user, a session CC of the monitored user is reported to DF3, thereby implementing monitoring of the monitored user.
Fig. 2 is a schematic diagram of an IMS network lawful interception architecture according to the present invention, as shown in fig. 2, compared with the 3GPP packet switching lawful interception architecture shown in fig. 1, in the IMS network lawful interception architecture of the present invention, a bearer network (GSN, WLAN, LAN, etc.) is connected to the IMS through an IMS access gateway/IBCF, and an application environment of the present invention is that the IMS access gateway/IBCF and the IMS do not support network deployment. The following describes each network element and the information interaction manner between them in detail.
The LEMF informs the monitoring request to the ADMF through the HI1, and the request message carries information such as the identity identifier of the monitored object; the ADMF sends the monitoring request message to a bearing layer network GSN/. the WLAN/LAN through an X1_1, and the monitoring request message carries information such as the identity identification of a monitored object; the ADMF sends the monitoring request message to the IMS through X1_3, and carries information such as the identity mark of the monitored object; the ADMF sends the monitoring request message to DF2 through X1_4, and carries the information such as the identity of the monitored object; the ADMF sends the monitoring request message to DF3 through X1_5, and carries the information such as the identity of the monitored object; in the session establishing process, when a session request passes through the GSN/. the./WLAN/LAN, the GSN/. the./WLAN/LAN judges that the user is monitored, monitors the monitored object according to the monitored object identifier, and sends the session related information of the monitored object to the IMS access gateway/IBCF; the IMS access gateway/IBCF adapts session information sent by a bearing layer network GSN/. the./WLAN/LAN and then sends the session information to the IMS through an Adaptation Function Interface (AFI); the IMS judges that the user is monitored according to the monitoring request from the ADMF, processes the session information sent by the IMS access gateway/IBCF, and reports the IRI event in the session establishment process to the DF2 through X2; meanwhile, the IMS determines that the user is monitored according to the monitoring request from the ADMF, and may report the CC in the session establishment process to the DF3 through X3.
In the invention, after receiving the monitoring request of ADMF, IMS can determine the relative information of the monitored user through the identification information of the monitored object in the monitoring request, at this time, IMS will send the relative information such as the identification information of the monitored object to IMS access gateway/IBCF through CCCI interface, so as to realize the network deployment and control of IMS access gateway/IBCF; certainly, the IMS may also directly forward the monitoring request to the IMS access gateway/IBCF through the CCCI interface, and the IMS access gateway/IBCF extracts the relevant information such as the identification information of the monitored object from the monitoring request, thereby implementing network deployment and control of the monitored object.
Thus, after receiving the session information sent by the carrier layer network GSN/./WLAN/LAN, the IMS access gateway/IBCF determines whether the user who developed the session is a monitored user according to the relevant information such as the identification information of the monitored object, and if so, reports the CC of the session of the current user to the DF 3.
Specifically, the IMS access gateway/IBCF reports the CC of the session to DF3, which is divided into two cases, when DF3 is not MGW/MGCF, the port of the IMS access gateway/IBCF performing media negotiation with DF3 is fixed, and at this time, when the IMS access gateway/IBCF determines that the current user is a monitored object, the CC of the current session can be directly reported to DF3 through the fixed port of DF 3. When DF3 is a Media GateWay (MGW), Media GateWay way, or Media GateWay Control Function (MGCF), MGW/MGCF is dynamically allocated IP and port during Media negotiation, so IMS access GateWay/IBCF does not have the capability to negotiate with MGW/MGCF Media to obtain dynamically allocated IP and port, and cannot report CC. At this time, if the IMS reports the CC to DF3 through X3, there is a media bypass problem, that is, the IMS access gateway/IBCF needs to send the CC to the IMS first, and then the IMS sends the CC to DF 3. The media negotiation is end-to-end media negotiation, which does not pass through the IMS, but only a Session Description Protocol (SDP) passes through the IMS; if the IMS needs to report the CC, the media must be uploaded to the IMS, that is, the IMS access gateway/IBCF must also send the media communication content to the IMS, so that each user in the session must perform media negotiation through the IMS, that is, a media bypass is caused; the invention can adopt IMS and DF3(MGW/MGCF) to negotiate the IP and port, after the media negotiation, the IMS informs the IP and port after media negotiation to the IMS access gateway/IBCF. In this way, the IMS access gateway/IBCF can report the CC directly to the DF 3.
Fig. 3 is a schematic diagram of a structure of a media content monitoring device in an IP multimedia subsystem according to the present invention, and as shown in fig. 3, the media content monitoring device in the IP multimedia subsystem according to the present invention is applied in a system in which an IMS is connected to a bearer layer network through an IMS access gateway/IBCF, and includes a receiving unit 30 and a transmitting unit 31 provided in the IMS, and a confirming unit 32 and a reporting unit 33 provided in the IMS access gateway/IBCF; wherein,
a receiving unit 30, configured to receive a listening request for a monitored object;
a sending unit 31, configured to send the monitored object information to an IMS access gateway/border control function entity IBCF;
a confirming unit 32, configured to trigger the reporting unit 33 when it is confirmed that the current access user is a monitored object;
a reporting unit 33, configured to report the CC of the session of the monitored object to the DF 3.
The sending unit 31 sends the identification information of the monitored object to the IMS access gateway/IBCF through CCCI.
The reporting unit 33 sends CC to the DF3 through the fixed port of the DF 3;
or, when DF3 is MGW/MGCF, reporting unit 33 sends CC to DF3 through the CC receiving port of DF3 obtained from IMS.
The bearer layer network is at least one of the following networks: GSN, WLAN, LAN.
It should be understood by those skilled in the art that the apparatus for monitoring media content in the IP multimedia subsystem shown in fig. 3 of the present invention is designed to implement the aforementioned method for monitoring media content in the IP multimedia subsystem, and the implementation functions of the processing units/processing sub-units/processing modules can be understood with reference to the aforementioned description of the method for monitoring media content in the IP multimedia subsystem. The functions of the processing units in the figures may be implemented by a program running on a processor, or may be implemented by specific logic circuits.
The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention.

Claims (8)

1. A method for monitoring media content in IP multimedia subsystem, IP multimedia subsystem IMS is connected with bearing layer network through IMS access gateway/interconnection border control function entity IBCF; characterized in that the method comprises:
after receiving a monitoring request for a monitored object, the IMS sends the monitored object information to an IMS access gateway/border control function entity (IBCF);
and when the IMS access gateway/IBCF confirms that the current access user is the monitored object, reporting the communication content CC of the conversation of the monitored object to a data transmission function 3DF 3.
2. The method according to claim 1, wherein after receiving the monitoring request for the monitored object, the IMS sends the monitored object information to an IMS access gateway/border control function entity IBCF specifically:
and after receiving the monitoring request sent by the ADMF, the IMS sends the identification information of the monitored object to the IMS access gateway/IBCF through a Call Content Control Interface (CCCI).
3. The method according to claim 1, wherein the reporting of the content of communication CC of the session of the monitored object to the DF3 is specifically:
the IMS access gateway/IBCF sends a CC to the DF3 through a fixed port of the DF 3;
or, when the DF3 is a media gateway MGW/media gateway control function entity MGCF, the IMS access gateway/IBCF sends a CC to the DF3 through a CC receiving port of the DF3 acquired from the IMS.
4. A method according to any one of claims 1 to 3, wherein the bearer layer network is at least one of: gigabit system network GSN, wireless local area network WLAN, local area network LAN.
5. A media content monitoring device in an IP multimedia subsystem is applied to a system in which an IMS is connected with a bearing layer network through an IMS access gateway/IBCF, and is characterized in that the device comprises a receiving unit and a sending unit which are arranged in the IMS, and a confirming unit and a reporting unit which are arranged in the IMS access gateway/IBCF; wherein,
a receiving unit, configured to receive a monitoring request for a monitored object;
a sending unit, configured to send the monitored object information to an IMS access gateway/border control function entity IBCF;
the confirming unit is used for triggering the reporting unit when confirming that the current access user is a monitored object;
and the reporting unit is used for reporting the CC of the session of the monitored object to the DF 3.
6. The apparatus of claim 5, wherein the sending unit sends the identification information of the monitored object to the IMS access gateway/IBCF via CCCI.
7. The apparatus of claim 5, wherein the reporting unit sends a CC to the DF3 through a fixed port of the DF 3;
or, when the DF3 is MGW/MGCF, the reporting unit sends a CC to the DF3 through a CC receiving port of the DF3 acquired from the IMS.
8. An apparatus according to any one of claims 5 to 7, wherein the bearer layer network is at least one of: GSN, WLAN, LAN.
CN201010571488.5A 2010-12-03 2010-12-03 Media content monitor method and device in IP Multimedia System Active CN102487521B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201010571488.5A CN102487521B (en) 2010-12-03 2010-12-03 Media content monitor method and device in IP Multimedia System
PCT/CN2011/075610 WO2012071875A1 (en) 2010-12-03 2011-06-10 Media content monitoring method and device in ip multimedia subsystem

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201010571488.5A CN102487521B (en) 2010-12-03 2010-12-03 Media content monitor method and device in IP Multimedia System

Publications (2)

Publication Number Publication Date
CN102487521A true CN102487521A (en) 2012-06-06
CN102487521B CN102487521B (en) 2016-06-08

Family

ID=46152965

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201010571488.5A Active CN102487521B (en) 2010-12-03 2010-12-03 Media content monitor method and device in IP Multimedia System

Country Status (2)

Country Link
CN (1) CN102487521B (en)
WO (1) WO2012071875A1 (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101110715A (en) * 2006-07-18 2008-01-23 华为技术有限公司 Method for transmitting legal monitoring information
CN101420432A (en) * 2008-12-01 2009-04-29 华为技术有限公司 Implementing method, system and apparatus for IMS listening
CN101562810A (en) * 2009-05-13 2009-10-21 中兴通讯股份有限公司 Method and system for legally monitoring IP multimedia subsystem network
CN101583129A (en) * 2009-06-12 2009-11-18 中兴通讯股份有限公司 Legal interception system and method in IP multi-media subsystem network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101110715A (en) * 2006-07-18 2008-01-23 华为技术有限公司 Method for transmitting legal monitoring information
CN101420432A (en) * 2008-12-01 2009-04-29 华为技术有限公司 Implementing method, system and apparatus for IMS listening
CN101562810A (en) * 2009-05-13 2009-10-21 中兴通讯股份有限公司 Method and system for legally monitoring IP multimedia subsystem network
CN101583129A (en) * 2009-06-12 2009-11-18 中兴通讯股份有限公司 Legal interception system and method in IP multi-media subsystem network

Also Published As

Publication number Publication date
WO2012071875A1 (en) 2012-06-07
CN102487521B (en) 2016-06-08

Similar Documents

Publication Publication Date Title
CN101218785B (en) Monitoring method and apparatus in telecommunication system
US9973541B2 (en) Lawful interception in an IP multimedia subsystem network
US7969968B2 (en) Lawful interception in wireline broadband networks
US10320851B2 (en) Methods and devices for detecting and correlating data packet flows in a lawful interception system
JP2008148310A (en) Method and system for managing multimedia session
EP2843876B1 (en) Method and device for instructing and implementing communication monitoring
EP3103252A1 (en) SECURITY METHOD AND SYSTEM FOR INTER-NODAL COMMUNICATION FOR VoIP LAWFUL INTERCEPTION
CN101557603B (en) Method, device and system for lawful monitoring
EP2301232B1 (en) Lawful interception of bearer traffic
CN102487520B (en) Media content monitor method and device in IP Multimedia System
CN107431731B (en) Method and device for intercepting communication
CN102487521B (en) Media content monitor method and device in IP Multimedia System
CN102487519B (en) Media content monitor method and device in IP Multimedia System
CN102843337B (en) Media content monitor method and device in IP multimedia subsystem
Sherr et al. Can they hear me now? A security analysis of law enforcement wiretaps
EP3616379B1 (en) Methods and nodes in a lawful interception system
KR20120068662A (en) Apparatus and method for lawful interception

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant