Patent ID: 8175277
Filing Date: 2012-05-08
Classification: H04L

Abstract:
1. A method for intercepting a secure communication session, comprising: distributing one or more keys from a key distribution point to establish a secure communication session between a first endpoint and a second endpoint, the keys comprising a media session key for accessing a media stream and a control session key for accessing a control stream; establishing a secure channel between the key distribution point and a first intercepting endpoint using an authentication protocol; determining, by one or more hardware processors of the key distribution point, that the first intercepting endpoint is authorized to intercept the secure communication session by determining that an interception rule stored in memory authorizes the first intercepting endpoint for the control session key but not the media session key; determining, by one or more hardware processors, that the first intercepting endpoint is restricted from receiving a caller identity corresponding to the first endpoint; and in response to determining that the first intercepting endpoint is authorized, transmitting, from the key distribution point to the first intercepting endpoint, only the control session key but not the media session key and not the caller identity to the first intercepting endpoint, the key providing the first intercepting endpoint with access to intercept the secure communication session.