Abstract:
A method, system, and a computer program product for reducing consumption of resources for lawful interception or retention data related to traffic concerning a 2G/3G target mobile connected to a telecommunications network interworking with Evolved Packet System is provided. At least a first parameter value in data for which lawful interception or data retention has been activated is detected at a first node. Based on at least the first parameter value, whether the traffic is intercepted or retained at a second node crossed by the traffic in the same network is evaluated. If the second node is located downstream of the first node, lawful interception requests or intercepted data are filtered out.

Description:
TECHNICAL FIELD 
       [0001]    The present invention relates to methods and arrangements in a telecommunications system for providing interception or retention data to lawful interception requesting entities, particularly in case of 2G/3G networks interworking with the Evolved Packet System. 
       BACKGROUND 
       [0002]    In many countries telecommunications operators and Internet service providers are today obliged by legal requirements to provide Law Enforcement Agencies (LEAs) with stored traffic data generated from public telecommunications for the purpose of detection, investigation and prosecution of crime and criminal offences. 
         [0003]    A system for accessing communications related data is the well known Lawful Interception (LI) system. The standard architecture comprises Intercepting Control Elements (ICEs) providing the user equipment of the target user with an access to the telecommunications network. An Intercepting Control Element may be, for instance, a 3G Mobile service Switching Center (MSC) Server, a 3G Gateway MSC Server, a Serving GPRS Support Node (SGSN), or a Gateway GSN (GGSN). 
         [0004]    The architecture may further comprise one or more Law Enforcement Monitoring Facilities (LEMFs) through which respective Law Enforcement Agencies receive interception information. 
         [0005]    An Administration Function (ADMF) entity may be configured for sending the target identity and Lawful Interception authorisation data from the Law Enforcement Agencies to the Intercepting Control Elements. 
         [0006]    Every physical Intercepting Control Element may be linked to the ADMF by means of its own X1 — 1 interface. Consequently, every single Intercepting Control Element may perform interception, i.e. activation, deactivation, interrogation as well as invocation, independently from other Intercepting Control Elements. 
         [0007]    2G/GSM and 3G/UMTS are key mobile communication technologies, used by more than two-billion people around the world. In order to adapt to new services, increasing demand for user bandwidth, quality of service and requirements for network convergence, evolutions are often introduced in 3G network standard. 
         [0008]    In this context, Evolved Packet System (EPS) is a major evolution of the 3G/UMTS standard introduced by the 3rd Generation Partnership Project (3GPP) standard committee. EPS is defined by 3GPP in Release 8 as an entirely new core network with a flatter all-IP architecture enabling a higher data rate and lower latency packet optimised system that supports multiple radio access technologies, focusing on the packet-switched domain. 
         [0009]    In view of the widespread diffusion of 2G and 3G technologies, 3GPP specifications allow 2G/3G networks to interwork with Evolved Packet System, a situation that frequently happens e.g. whenever a 2G/3G terminal is used in a network whose operator has also deployed Evolved Packet System. 
         [0010]    3GPP specifications include functional requirements for Lawful Interception. Technical specification ETSI DTS/LI-00039 gives guidance for the delivery and associated issues of retained data of telecommunications and subscribers. In particular, such specification provides a set of requirements relating to Handover Interfaces for the retained traffic data and subscriber data by law enforcement and other authorized requesting authorities. Technical Specification ETSI DTS/L1-00033 contains handover requirements and a handover specification for the data that is identified in EU Directive 2006/24/EC on retained data. 
         [0011]    In case of interworking between 2G/3G and the Evolved Packet System, Lawful Interception is to be performed in different nodes, in particular in three different nodes where, in some cases, two nodes out of three may belong to the same network. This situation creates multiple instances of intercept products for the same target subscriber, a situation that may negatively affect the performance of the nodes involved in Lawful Interception, on the side of both the operator and of the Law Enforcement Agency, in terms of bandwidth and, in general, in terms of usage of resources. 
       SUMMARY 
       [0012]    The aim of the present invention is to overcome the above mentioned drawbacks, by disclosing a method and a system that reduce usage of resources for satisfying lawful interception requirements. 
         [0013]    This aim and other objects which will become better apparent hereinafter are achieved by a method and a system that avoid redundancy of interception requests and of intercepted data. 
         [0014]    According to a first aspect of the invention, Lawful Interception on anode is skipped when the node is able to determine that Lawful Interception is also performed at another node in the same network. 
         [0015]    According to a second aspect of the invention, intercepted data from a node is discarded when the intercepted data would result in multiple instances of the same data. 
         [0016]    More in detail, the aim and objects of the invention are achieved by a method for reducing consumption of resources for lawful interception or retention data related to traffic concerning a 2G/3G target mobile connected to a telecommunications network interworking with Evolved Packet System, comprising the steps of: at a first node, detecting at least a parameter value in data for which lawful interception or data retention has been activated; based on said at least parameter value, evaluating whether said traffic is intercepted or retained at a second node crossed by said traffic in the same network; filtering out lawful interception requests or intercepted data if said second node is located downstream of said first node. 
         [0017]    The above aim and objects are also achieved by a Lawful Interception system for interception or retention of data related to traffic associated with a target user equipment in a 2G/3G telecommunications network interworking with Evolved Packet System, wherein at least a first node and a least a second node are configured to operate as Intercepting Control Elements or Data Retention sources, wherein said first node is configured to detect at least a parameter value in data for which lawful interception or data retention has been activated and, based on said parameter value, to filter out lawful interception requests or intercepted data if said second node is located downstream of said first node. 
         [0018]    The present invention also concerns computer programs comprising portions of software codes in order to implement the method according to the invention when operated at a processor of an Intercepting Control Element or a Data Retention source. A computer program may be loadable into at least one of an Serving GPRS Support Node or a Serving Gateway to configure said Serving GPRS Support Node or Serving Gateway as Intercepting Control Element or Data retention source operable in a Lawful Interception system according to the invention. 
         [0019]    Such a computer program can be stored on a computer readable medium, which may be a permanent or rewritable memory within the Intercepting Control Element or Data Retention source or can be located externally. The respective computer program may also be transferred to the Intercepting Control Element or Data Retention source, for example via a cable or a wireless link as a sequence of signals. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0020]    Further characteristics and advantages of the invention will become better apparent from the detailed description of particular but not exclusive embodiments, illustrated by way of non-limiting examples in the accompanying drawings, wherein: 
           [0021]      FIG. 1  is a block diagram of the Evolved Packet System architecture in a non roaming scenario. 
           [0022]      FIG. 2  is an arrangement of a Lawful Interception system, in which one or more of a Serving GPRS Support Node, a Serving Gateway and a Packet Data Network Gateway (PDN-GW) may operate as Intercepting Control Elements. 
           [0023]      FIG. 3  is an arrangement of a Lawful Interception system, in which one or more of a Serving GPRS Support Node, Serving Gateway and Packet Data Network Gateway may act as Data Retention sources. 
           [0024]      FIG. 4  is a flow diagram showing a method for skipping Lawful Interception according to one aspect of the present invention. 
           [0025]      FIG. 5  is a flow diagram showing a method for discarding intercepted data according to another aspect of the present invention. 
       
    
    
     DETAILED DESCRIPTION 
       [0026]    An Evolved Packet System architecture in case of a non roaming scenario is depicted in  FIG. 1 . The architecture comprises a target mobile or User Equipment (UE)  1 , Enhanced-UTRAN (E-UTRAN)  110 , Universal Terrestrial Radio Access Networks (UTRAN)  120  and GSM EDGE Radio Access Network (GERAN)  130 , Serving GPRS Support Node (SGSN)  3 , Mobility Management Entity (MME)  140 , Home Subscriber Server (HSS)  150 , Serving Gateway (S-GW)  4 , Packet Data Network (PDN) Gateway  5 , Policy Charging Rule Function (PCRF)  170 , and Operator&#39;s IP services  180 . 
         [0027]    Some of the nodes depicted in  FIG. 1  may operate as Intercept Control Elements of a Lawful Interception system, particularly Serving GPRS Support Node  3 , Serving Gateway  4  and Packet Data Network Gateway  5 . 
         [0028]    The Serving GPRS Support Node  3  is responsible for the delivery of data packets from and to the mobile stations within its geographical service area. Lawful Interception may be needed in Serving GPRS Support Node  3  as it handles Mobility Management events and is also in a position in the network to intercept subscribers in the Visited Public Land Mobile Network (VPLMN) in case the Gp interface is used between different countries. 
         [0029]    The Serving Gateway  4  is the gateway that terminates the interface towards E-UTRAN. For each User Equipment  1  associated with the Evolved Packet System, a single Serving Gateway  4  is active at a given time. Lawful Interception is required at the Serving Gateway  4  to intercept E-UTRAN attached subscribers. 
         [0030]    The Packet Data Network Gateway  5  is the gateway that terminates the SGi interface towards the Packet Data Network. If a User Equipment  1  is accessing multiple Packet Data Networks, more than one Packet Data Network Gateway may be active for that User Equipment  1 . In the scenarios describer by 3GPP TS 23.401, Lawful Interception is required at the Packet Data Network Gateway  5  to intercept in the Home Public Land Mobile Network (HPLMN) subscribers roaming to a different Visited Public Land Mobile Network. 
         [0031]    Traffic involving a 2G/3G attached subscriber  1  may be handled in a Serving GPRS Support Node  3  by using the so called “dual track”. Gn/Gp interface can be used towards a GGSN while S4/S12 interfaces can be used with a Serving Gateway  4 . 
         [0032]    According to the 3GPP standard, a Serving GPRS Support Node  3  supporting both Gn/Gp and S4/S12 interfaces shall, for all active Packet Data Network connections for a certain User Equipment  1 , use either S4 or Gn/Gp. Each Serving GPRS Support Node  3  is therefore rejecting a PDP context activation violating this in the following way. If User Equipment  1  is sending an Activate Packet Data Protocol context request for an Access Point Name using Gn, the activation is rejected by the Serving GPRS Support Node  3  if a PDP context using S4 already exists for User Equipment  1 . 
         [0033]    If User Equipment  1  is sending an Activate PDP context request for an Access Point Name using S4, the activation is rejected by Serving GPRS Support Node  3  if a PDP context using Gn already exists for this User Equipment  1 . 
         [0034]    A method for optimising consumption of resources for lawful interception or retention data according to a first aspect of the present invention is now described with respect to data flow of  FIG. 4 . 
         [0035]      FIG. 4  shows two network elements, namely a User Equipment  1  and a network node  200 , which can be either a Serving GPRS Support Node  3  or a Serving Gateway  4 . 
         [0036]    When a message is sent by User Equipment  1  to the Serving GPRS Support Node  3  or to the Serving Gateway  4 , a parameter value from which a route of the user&#39;s traffic can be determined, is carried in the message. 
         [0037]    Such parameter value may be for instance an Access Point Name (APN), which will be used in the following description. 
         [0038]    At step  210  the Serving GPRS Support Node  3  checks the Access Point Name and, at step  211  the Serving GPRS Support Node  3  evaluates if the Access Point Name is requesting the use of an S4 track. 
         [0039]    If this is the case, at step  212 , Lawful Interception is skipped, since a request for an S4 track necessarily implies that traffic from the User Equipment  1  crosses Serving Gateway  4 , on which Lawful Interception has been activated. 
         [0040]    Similarly, at step  210  the Access Point Name is checked by the Serving Gateway  4 , which, at step  211 , evaluates if the Access Point Name is related to a Packet Data Network Gateway  5  in the same Public Land Mobile Network. In this case Lawful Interception is equally skipped, since this implies that traffic from User Equipment  1  crosses Packet Data Network Gateway  5 , on which Lawful Interception has been activated. 
         [0041]    According to a first aspect of the invention, optimisation of usage of resources for Lawful Interception is therefore achieved by skipping Lawful Interception requests when the same are being applied at a different node located in the same network, particularly at a different node located downstream of the node that is skipping Lawful Interception. 
         [0042]    According to a second aspect of the invention, optimisation of usage of resources for Lawful Interception is achieved by discarding redundant data. 
         [0043]    With reference to  FIG. 2 , an architecture for accessing communications related data in a Lawful Interception system  10  according to such second aspect of the invention is disclosed. 
         [0044]    A Lawful Interception system  10  may comprise Intercepting Control Elements  11  providing the user equipment  1  of the target user with access to the telecommunications network. 
         [0045]    One or more of Serving GPRS Support Node  3 , Serving Gateway  4  and Packet Data Network Gateway  5  may be defined as Intercepting Control Elements  11 , in order to intercept signalling and content of communication for a mobile node  1  that is a target for Lawful Interception. 
         [0046]    Lawful Interception system  10  may further comprise one or more Law Enforcement Monitoring Facilities (LEMFs)  12 , through which respective Law Enforcement Agencies (LEAs) may receive interception information. 
         [0047]    An Administration Function (ADMF) entity  13  may be further configured for sending target identity and Lawful Interception authorization data received from the respective Law Enforcement Agencies to the Intercepting Control Elements  11 . 
         [0048]    Administration Function  13  may interface through a first Handover Interface  14  (HI 1 ) with all the Law Enforcement Agencies that may require interception in the intercepting network and may keep the intercept activities of individual Law Enforcement Agencies separate and interface to the intercepting network. Administration Function  13  may also be used to hide from Intercepting Control Elements  11  that multiple activations by different Law Enforcement Agencies on the same target may have been active. Moreover, Administration Function  13  may be partitioned to ensure separation of provisioning data from different agencies. 
         [0049]    Every physical Intercepting Control Element  11  may be linked to Administration Function  13  by means of its own X1 — 1 interface. Consequently, every single Intercepting Control Element  11  may perform interception, i.e. activation, deactivation, interrogation as well as invocation, independently from other Intercepting Control Elements  11 . 
         [0050]    In order to deliver the intercepted information to Law Enforcement Agencies, two Delivery Functions (DF) entities may be provided, each exchanging respective portions of information with Administration Function  13 , through X1 — 2 and X1 — 3 interfaces, and the Law Enforcement Monitoring Facility  12 . 
         [0051]    In particular, a Delivery Function DF 2  entity  15  may be configured to receive Intercept Related Information (IRI) from Intercepting Control Element  11 , through an X2 interface, and to convert and distribute the Intercept Related Information to the relevant Law Enforcement Agencies via a second Handover Interface  16  (HI 2 ) by means of a Mediation Function (MF)  17 . 
         [0052]    The Intercept Related Information may be a collection of information or data associated with telecommunication services involving the target identity, such as call associated information or data, e.g. unsuccessful call attempts, service associated information or data, e.g. service profile management by subscriber, and location information. 
         [0053]    A Delivery Function DF 3  entity  18  may be configured to receive Content of Communications (CC) information from Intercepting Control Elements  11  through an X3 interface, and to convert and distribute such information to the relevant Law Enforcement Agency through Mediation Function  19  and a third Handover Interface (HI 3 )  20 . 
         [0054]    The Content of Communications may be information different from the Intercept Related Information, which is exchanged between two or more users of a telecommunications service and, more in general, may include information which, as part of some telecommunications service, could be stored by one user for subsequent retrieval by another user. 
         [0055]    All the traffic information may be used for proper storage in order to satisfy possible legal requirements concerning data retention. 
         [0056]    In this respect,  FIG. 3  depicts an arrangement for retaining data in a Communication Service Provider  21  (CSP). Specifically, the Communication Service Provider  21  may be provided with a Data Retention System (DRS)  23  for exchanging retained data relating information with a Requesting Authority  24 , which may be a Law Enforcement Agency (LEA). 
         [0057]    Communication Service Provider  21  may include a Serving GPRS Support Node  3 , a Serving Gateway  4  and a Packet Data Network Gateway  5 , configured to operate as Data Retention sources. 
         [0058]    Data exchanged between Communication Service Provider  21  and Requesting Authority  24  may comprise requests from the Requesting Authority  24 , corresponding responses from the Data Retention System  23  and other data retention information, such as results of the requests and acknowledgements of receipt. The interfaces through which Communication Service Provider  21  and Data Retention System  23  exchange the above data with the Requesting Authority are denoted as Handover Interfaces. 
         [0059]    The generic Handover Interface adopts a two-port structure in which administrative request/response information and Retained Data information are logically separated. In particular, a first Handover Interface port HI-A  25  may be configured to transport various kinds of administrative, request and response information from/to the Requesting Authority  24  and an organization at the Communication Service Provider  21  that is responsible for Retained Data matters, identified by an Administration Function  27 . 
         [0060]    A second Handover Interface HI-B  26  may be configured to transport the retained data information stored in a repository  29  from the Communication Service Provider  21  to the Requesting Authority  24 . The individual retained data parameters have to be sent to the Requesting Authority  24  at least once, if available. To this aim, a Mediation/Delivery function  28  may be provided, for retrieving retained data from repository  29  and forwarding such data to Requesting Authority  24  in a suitable format through the HI-B  26 . 
         [0061]    A second aspect of the present invention is now described with respect to the data flow diagram of  FIG. 5 . 
         [0062]      FIG. 5  shows three network elements: node  200 , which can be either a Serving GPRS Support Node  3  or a Serving Gateway  4 , Delivery Function  2  (DF 2 )  15  and Delivery Function  3  (DF 3 )  18 . 
         [0063]    Node  200  may send Intercept Related Information (IRI) through an X2 interface to DF 2   15 . The Intercept Related Information may include a parameter value from which a route of the user&#39;s traffic can be determined. 
         [0064]    Such parameter value may be for instance an Access Point Name (APN), which will be used in the following description. 
         [0065]    At step  300 , the Access Point Name is checked by the DF 2   15 , which, at step  310 , evaluates if the Access Point Name is related to a Packet Data Network Gateway  5  in the same Public Land Mobile Network. 
         [0066]    In this case, at step  320  the DF 2   15  discards Intercept Related Information data. Furthermore, DF 2   15  sends a message to DF 3   18  indicating to filter the corresponding Content of Communication (CC) data. 
         [0067]    At step  330 , Communication Content data is then filtered by DF 3   18 . 
         [0068]    According to this second aspect of the invention, intercepted data from a node is discarded when the same data has been intercepted or retained in a different node crossed by the same traffic from User Equipment  1 . 
         [0069]    It has been shown that the invention fully achieves the intended aim and objects, since it allows to avoid activating, maintaining or delivering multiple instances of intercept products for the same target subscriber, which improves performance of nodes involved in Lawful Interception, both on the side of the operator and of Legal Enforcement Agencies, in terms of resource usage, including bandwidth and storage size. 
         [0070]    In particular the invention allows saving Lawful Interception capacity in Serving GPRS Support Nodes  3  and in Serving Gateways Nodes  4 . 
         [0071]    Lawful Interception capacity saving is obtained also in the processing at DF/MF, as the filtering may be performed at the Serving GPRS Support Node directly, without involving DF/MF for filtering. Lawful Interception capacity saving will consequently be obtained at the LEMF. 
         [0072]    Furthermore, the invention allows bandwidth saving on Lawful Intercrption interfaces between a Serving GPRS Support Node and DF/MF (X interfaces), since filtering is done at the network element and, consequently, on the HI interfaces between the DF/MF and the LEMF. 
         [0073]    Both capacity and bandwidth saving results in reduced costs for transmission to the Law enforcement, which is a benefit also for Law Enforcement Agencies. 
         [0074]    Clearly, several modifications will be apparent to and can be readily made by the skilled in the art without departing from the scope of the present invention. 
         [0075]    Therefore, the scope of the claims shall not be limited by the illustrations or the preferred embodiments given in the description in the form of examples, but rather the claims shall encompass all of the features of patentable novelty that reside in the present invention, including all the features that would be treated as equivalents by the skilled in the art. 
         [0076]    Where technical features mentioned in any claim are followed by reference signs, those reference signs have been included for the sole purpose of increasing the intelligibility of the claims and accordingly, such reference signs do not have any limiting effect on the interpretation of each element identified by way of example by such reference signs.