Method for Lawfully Intercepting Communication IP Packets Exchanged Between Terminals

Abstract

A method for lawfully intercepting communication IP packets exchanged between terminals is provided. The method involves assigning an IP address associated with a telecommunication service provider to, for example, a sending terminal for use as its IP address in communications with a receiving terminal, the telecommunication service provider providing SIP proxy services for establishing communication between the sending and receiving terminals. The communication IP packets are intercepted in such a way that the terminals are unaware of the interception.

What is claimed is: 
     
         1 . A computer-implemented method for lawfully intercepting communication IP packets exchanged between a first terminal having a first IP address and a second terminal having a second IP address, the method comprising:
 first equipment in a data network of a first communications service provider transmitting a third IP address to the first terminal for use as a source IP address of the first terminal in a field of session establishment messages to be transmitted from the first terminal to establish communication between the first terminal and the second terminal,   the first equipment and/or a second equipment in the data network receiving at least some of the communication IP packets; and   intercepting the communication IP packets in the data network.   
     
     
         2 . A method according to  claim 1 , wherein the session establishment messages are SIP (Session Initiation Protocol) message and the field of the session establishment message is a SDP (Session Description Protocol) connection field. 
     
     
         3 . A method according to  claim 1 , further comprising the first equipment and/or the second equipment removing the first IP address from the communication IP packets received from the first terminal before the communication IP packets are sent to the second terminal. 
     
     
         4 . A method according to  claim 1 , wherein the communication IP packets comprise media packets. 
     
     
         5 . A method according to  claim 2 , wherein the communication IP packets comprise media packets. 
     
     
         6 . A method according to  claim 5 , wherein the media packets are RTP (Real Time Protocol) packets. 
     
     
         7 . A method according to  claim 1 , wherein the third IP address is associated with the first equipment. 
     
     
         8 . A method according to  claim 7 , wherein the first equipment has one or more network interfaces, the third IP address being an IP address of one of the one or more network interfaces. 
     
     
         9 . A method according to  claim 1 , wherein the first terminal is a Mobile Node and the first equipment is a Home Agent. 
     
     
         10 . A method according to  claim 9 , wherein the Home Agent communicates with the Mobile Node using Mobile IP version 4, versions or modifications of Mobile IP version 4, or equivalents thereof. 
     
     
         11 . A method according to  claim 9 , wherein the Home Agent communicates with the Mobile Node using Mobile IP version 6, versions or modifications of Mobile IP version 6, or equivalents thereof. 
     
     
         12 . A method according to  claim 1 , wherein the second terminal does not belong to the first communications service provider. 
     
     
         13 . A method according to  claim 1 , wherein the first terminal does not belong to the first communications service provider. 
     
     
         14 . A method according to  claim 1 , wherein the first terminal belongs to a second communications service provider and the second terminal belongs to a third communications service provider, the first, second and third communication service providers being different from one another. 
     
     
         15 . A method according to  claim 1 , wherein the communication IP packets are intercepted by lawful intercepting equipment in the data network which is connected to a law enforcement agency. 
     
     
         16 . A method according to  claim 1 , wherein the second terminal does not belong to the first communications service provider, the communication IP packets being intercepted by lawful intercepting equipment in the data network which is connected to a law enforcement agency (LEA) device, the intercepting equipment receiving instructions from the LEA device to intercept the communication IP packets in a communication established by using a SIP Uniform Resource Identifier (URI) of a user of the first terminal or the second terminal. 
     
     
         17 . A method according to  claim 2 , further comprising the first equipment and/or the second equipment in the data network receiving SIP messages from the second terminal, at least some of the SIP messages received in IP packets from the second terminal having the third IP address as a destination address. 
     
     
         18 . A method according to  claim 1 , wherein the communication IP packets comprise the session establishment messages and media packets. 
     
     
         19 . A method according to  claim 18 , wherein the communication IP packets are intercepted in the data network upon the first equipment and/or the second equipment and/or a third equipment in the data network detecting an identifier of a user of the first terminal. 
     
     
         20 . A method according to  claim 19 , wherein the identifier is a URI (Uniform Resource Identifier). 
     
     
         21 . A method according to  claim 2 , wherein the communication IP packets comprise SIP messages and media packets. 
     
     
         22 . A method according to  claim 21 , wherein the communication IP packets are intercepted in the data network upon the first equipment and/or the second equipment and/or a third equipment in the data network detecting an identifier of a user of the first terminal, the identifier being a SIP URI (Session Initiation Protocol Uniform Resource Identifier).