Patent ID: 8254573
Filing Date: 2012-08-28
Classification: H04L,H04W

Abstract:
1. A method comprising: capturing a first message with a probe configured to monitor a first network interface established in a core portion of a telecommunications network; extracting a ciphering key and an identifier from the first message; identifying a radio network controller associated with the first network interface; selecting, using a ciphering key map, one of a plurality of monitoring applications responsible for processing encrypted messages captured from a second network interface established in a terrestrial portion of the telecommunications network, the selected one of the plurality of monitoring applications being configured to serve the identified radio network controller, an entry of the ciphering key map including an interface identifier corresponding to the first network interface, a radio network controller identifier corresponding to the radio network controller associated with the first network interface, and a monitoring application identifier corresponding to the selected one of the plurality of monitoring applications; and forwarding the ciphering key and the identifier to the selected one of the plurality of monitoring applications, the selected one of the plurality of monitoring applications configured to store the ciphering key and the identifier in a memory, receive an encrypted message via the second network interface, retrieve the ciphering key from the memory in response to the identifier matching an identifier of a call tracking record associated with the encrypted message, and decipher the encrypted message using the ciphering key.