Lawful Interception of Encrypted Communications

摘要

A method and apparatus for providing access to an encrypted communication between a sending node and a receiving node to a Law Enforcement Agency (LEA). A Key Management Server (KMS) function stores cryptographic information used to encrypt the communication at a database. The cryptographic information is associated with an identifier used to identify the encrypted communication between the sending node and the receiving node. The KMS receives a request for Lawful Interception, the request including an identity of a Lawful Interception target. The KMS uses the target identity to determine the identifier, and retrieves the cryptographic information associated with the identifier from the database. The cryptographic information can be used to decrypt the encrypted communication. The KMS then sends either information derived from the cryptographic information or a decrypted communication towards the LEA. This allows the LEA to obtain a decrypted version of the communication.

主权项

1. A method of providing access to an encrypted communication between a sending node and a receiving node to a Law Enforcement Agency, the method comprising, at a Key Management Server function:
storing at a database cryptographic information used to encrypt the communication, the cryptographic information associated with an identifier used to identify the encrypted communication between the sending node and receiving node; receiving a request originating from a Law Enforcement Agency for Lawful Intercept, the request including an identity of a target for Lawful Interception; using the target identity to determine the identifier, and retrieving from the database the cryptographic information associated with the identifier, the cryptographic information usable to decrypt the encrypted communication; and sending one of information derived from the cryptographic information and a decrypted communication towards the Law Enforcement Agency.