Method and device for realizing internet lawful interception

Abstract

The invention provides a method and a device for realizing internet lawful interception, wherein a lawful interception facility configures interception management information needing interception to a network access management apparatus; the network access management apparatus transmits the interception management information to a network access apparatus where a target user is located when the target user authenticates network access or requests network resources; and the network access apparatus intercepts the target user and transmits interception events or communication contents obtained by interception to the lawful interception facility according to the interception management information. The invention also provides two methods for transmitting the interception management information and a device for realizing the internet lawful interception. The device comprises an authentication server, a DHCP server and a network access apparatus. The common protocols of the standard DHCP, RADIUS, and the like only need to be simply expanded, and the invention can effectively support the static lawful interception and the dynamic lawful interception and is easy to realize and deploy.

Description

technical field [0001] The invention relates to the technical field of network communication information security, in particular to a method and device for realizing legal interception on the Internet. Background technique [0002] Lawful interception is within the scope permitted by the national law, the national security department monitors the activities of specific telecommunication services, such as figure 1 shown. This activity is initiated by the Lawful Interception Management Agency (LEMF) by issuing an interception order to the network operator / access provider / service provider (NWO / AP / SvP), and its relevant network equipment provides the communication content and related information of the intercepted object. information to complete. The figure shows three typical legal interception interface types: management information interface (HI1), interception-related information interface (H12) and communication content interface (HI3). The HI1 interface transmits differ...

AI Technical Summary

Problems solved by technology

[0005] In the above monitoring methods, a specific protocol method is required between the authentication server 24 as the network access management device and the legal monitoring facility 23 to monitor transaction management information, monitor related information communication and processing, while the legal monitoring facility 23 and the network access Devices 22 also need a specific protocol to monitor transaction communication and processing; and due to the inaccuracy and dynamics of the target user 21 in establishing a communication session, it is difficult for the above monitoring method to be timely and effective

Images