Patent ID: 8891397

Claim:
A method for processing data packets in a mobile data network that includes a radio access network coupled to a core network, the method comprising the steps of: (A) a plurality of antennas sending and receiving network messages between user equipment and a plurality of basestations in the radio access network, each basestation communicating with a corresponding one of the plurality of antennas; (B) providing a first service mechanism in the radio access network and a second service mechanism in the core network, wherein the second service mechanism is located in a serving gateway in the core network; (C) establishing breakout authorization criteria on the second service mechanism; (D) the second service mechanism in the core network performs the steps of: monitoring network messages in the core network to determine traffic that meets the breakout authorization criteria; and sending a message to the first service mechanism with subscriber information for network messages that meet the breakout authorization criteria; (E) communicating between the first service mechanism and the second service mechanism on an overlay network; and (F) withholding subscriber information from the first breakout mechanism for subscribers subject to lawful interception by performing the steps of: 1) maintaining a lawful interception (LI) subscriber list with subscriber IDs subject to a LI; 2) on an activation of a packet data protocol (PDP) context, comparing a subscriber identification (ID) of the PDP context with the LI subscriber list; 3) where the subscriber ID for the PDP session is on the LI subscriber list, not authorizing breakout of the PDP session by withholding of subscriber information being sent to the first breakout mechanism.