Techniques for lawful interception in wireless networks

摘要

An embodiment of the present invention provides an apparatus, comprising a transceiver operable in a wireless network, wherein the transceiver is configured to enable wireless interception by a predetermined third party without the knowledge of a user of said transceiver, wherein the apparatus uses a secure external interface that is beyond the scope of the 802.16 wireless network, and wherein the operation of the wireless interception includes interception by a law enforcement agency by using a law interception server (LIS), Authentication Authorization and Accounting (AAA), Anchor Auth, Target lawful interception agent LIA and Serving lawful interception agent (LIA) and wherein the LIS first identifies a mobile station (MS) based on input from the law enforcement agency and once the MS is identified, the LIA for the MS is then identified by the LIS and once the LIA is identified, the LIA sends the security association for the MS session to the LIS which then sends this to the law enforcement.

主权项

1. A system, comprising:
a base station (BS) transceiver of a serving Access Service Network (ASN) of a wireless network for receiving a wireless packet from a mobile station (MS); a Law Interception Agent (LIA) within the serving ASN for intercepting the wireless packet received by the BS transceiver, and forwarding the intercepted wireless packet to a predetermined third party without the knowledge of the wireless interception by a user of the MS; a target ASN for receiving a handover of the MS's communication from the serving ASN; wherein the Law Interception Server (LIS) and the Law Enforcement Agency (LEA) continuously receive data from the MS throughout the transfer of the MS from the serving ASN to the target ASN; an LIA within the target ASN for receiving a Lawful Interception (LI) context for a session with the MS and for forwarding a target ASN intercepted wireless packet into a tunnel to the LIS and the LEA without knowledge of the wireless interception by a user of the MS, wherein the intercepted wireless packet and the target ASN intercepted wireless packet are associated with the session; and a virtual private network (VPN) connection through the wireless network to a corporate network or a private network, wherein a VPN encrypts the wireless packet as a VPN encrypted packet and a law enforcement agency (LEA) uses VPN keys previously obtained for a VPN session to decrypt the VPN encrypted packet.