CN102487519B - Media content monitor method and device in IP Multimedia System - Google Patents

Abstract

The invention discloses media content monitor method in a kind of IP Multimedia System, IP Multimedia System (IMS) is connected with bearing bed network by IMS IAD/Interconnected Border controlling functions entity (IBCF); Comprise: described IMS determines when the Content of Communication (CC) of the session of monitoring can not report DF3 by IMS IAD/IBCF, obtain the CC that can not report waiting to monitor session, and report DF3.The present invention discloses and a kind ofly realize media content monitoring device in the IP Multimedia System of said method, comprising: determining unit, for determining when the CC of the session of monitoring can not report DF3 by IMS IAD/IBCF, triggering acquiring unit; Acquiring unit, for obtaining the CC that can not report waiting to monitor session; Report unit, for the CC of acquisition is reported DF3.The present invention changes less to existing system, and can compatible multiple bearing bed network.

Description

Method and device for monitoring media content in IP multimedia subsystem

Technical Field

The present invention relates to a monitoring technology in an IP Multimedia Subsystem (IMS) network architecture, and in particular, to a method and an apparatus for monitoring media content in an IP Multimedia Subsystem.

Background

The internet protocol Multimedia Subsystem (IMS) is the developing direction of future Multimedia communication and is the most important component of next generation networks. It is a subsystem supporting IP multimedia service proposed by the Third Generation Partnership Project (3 GPP), and its notable feature is that it adopts Session Initiation Protocol (SIP) system, and the communication is independent of access mode, and it can possess multiple multimedia service control functions and multiple capabilities of bearing capacity separation, call and Session separation, application and service separation, service and network separation, and mobile network and Internet service fusion.

As communication technology becomes more and more powerful, it is getting deeper into various aspects of society and life, and the situation of using communication technology to engage in illegal criminal activities is becoming more and more serious. Legal monitoring technology becomes a powerful weapon for security departments of various countries to fight against criminal activities. Lawful interception is that a safety organization sets a specific interception target on communication equipment for law enforcement, and intercepts session events and communication contents of the interception target, which is an essential function in the communication field. Standards organizations such as the European Telecommunications Standards Institute (ETSI), 3GPP, etc., have established Standards related to lawful interception. Lawful interception in the IMS network domain also forms the corresponding standard and can guide the specific implementation.

Fig. 1 is a schematic diagram of a lawful interception architecture of 3GPP Packet switching, and as shown in fig. 1, 3GPP proposes a lawful interception standard in the field of IMS Packet Switching (PS) networks. Wherein, the monitoring is based on the following three interfaces:

the HI1 interface is used for realizing control management;

an HI2 interface, configured to report monitoring related information (IRI, Intercept related information) of monitored target communication;

an HI3 interface for outputting Communication Content (CC) of a target to be listened to;

the HI1 is used for respectively controlling the bearing layer network, HI2 interface information is output to Control layer equipment such as a Call Session Control Function (CSCF), and HI3 communication content is output to the bearing layer network. In the figure, X1 to X3 are interfaces corresponding to HI1 to HI3 interfaces, respectively, for IMS and GSN connections.

The standard can be applied to a monitoring System including a Law Enforcement Monitoring Facility (LEMF), an Administration Function (ADMF), a data transfer Function 2(DF2, Delivery Function2), a data transfer Function 3(DF3, Delivery Function3), and a monitoring equipment gigabit System Network (GSN, gigabit System Network).

The LEMF informs the monitoring request to the ADMF through the HI1, and the request message carries information such as the identity identifier of the monitored object; in the IMS domain, the ADMF sends the monitoring request message to a Proxy Call Session Control Function (P-CSCF)/a Serving-Call Session Control Function (S-CSCF); the ADMF sends the monitoring request message to DF2 through X1_2, and carries the information such as the identity of the monitored object; the ADMF sends the monitoring request message to DF3 through X1_3, and carries the information such as the identity of the monitored object; when a session request is routed to a P-CSCF/S-CSCF through a GSN in an IMS domain during the period from the session start to the session end, and the P-CSCF/S-CSCF judges that the user is monitored, monitoring a monitored object according to a monitoring object identifier; the P-CSCF/S-CSCF reports the IRI in the session process to the DF2 through the X2; the GSN reports the CC in the session process to DF3 through X3; DF2 reports the received IRI to LEMF through HI2 after MF processing according to the monitoring request from ADMF; DF3 reports the CC after MF processing to LEMF through HI3 according to the monitoring request from ADMF.

In practical applications, when a user roams to another network, the Access control of the user is implemented by the P-CSCF in the visited domain, i.e. the roaming network, so that when the P-CSCF in the visited domain cannot perform media negotiation with the media GateWay function device, when controlling the IMS Access GateWay (IMS-Access GateWay)/IBCF to output X3, or when the IMS Access GateWay/IBCF cannot output X3, the monitoring of the communication content of the user roaming to another network is lost.

Disclosure of Invention

In view of this, the main objective of the present invention is to provide a method and an apparatus for monitoring media content in an IP multimedia subsystem, which can directly report the CC of a session to be monitored to a DF3 through an IMS access gateway/IBCF.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

a method for monitoring media content in IP multimedia subsystem, IP Multimedia Subsystem (IMS) is connected with bearing layer network through IMS access gateway/interconnection border control function entity (IBCF); the method comprises the following steps:

and when the IMS determines that the Communication Content (CC) of the session to be monitored cannot be reported to the DF3 by the IMS access gateway/IBCF, acquiring the CC which cannot be reported of the session to be monitored, and reporting the CC to the DF 3.

Preferably, the determining, by the IMS, that the CC of the session to be monitored cannot be reported to the DF3 by the IMS access gateway/IBCF specifically includes:

the IMS determines that the IMS access gateway/IBCF does not have the capability of reporting the CC to DF 3;

and the IMS determines that the network domain where the IMS access gateway/IBCF is located does not allow the IMS access gateway/IBCF to report the CC to the DF 3.

Preferably, the IMS acquires a CC that cannot be reported of the session to be monitored specifically:

and when the IMS access gateway/IBCF determines that the session is the session to be monitored and does not acquire the related address information of the report DF3 of the CC of the session to be monitored, the CC of the session to be monitored is sent to the IMS.

Preferably, the reporting, by the IMS, the CC that cannot be reported of the session to be monitored to the DF3 specifically includes:

the IMS and the DF3 negotiate out port information and/or IP information of the CC to be received, and report the acquired CC to the port and/or IP address of the CC negotiated out to be received.

Preferably, an Application Server (AS) of the IMS acquires a CC of the session to be monitored, which cannot be reported, and reports the CC to the DF 3;

the DF3 is a Media Gateway (MGW)/media gateway control function entity (MGCF);

the bearing layer network is at least one of the following networks: gigabit System Network (GSN), Wireless Local Area Network (WLAN), Local Area Network (LAN).

A media content monitoring device in an IP multimedia subsystem is applied to a system in which an IMS is connected with a bearing layer network through an IMS access gateway/IBCF, and comprises a determining unit, an obtaining unit and a reporting unit which are arranged in the IMS; wherein,

a determining unit, configured to trigger the obtaining unit when determining that a CC of a session to be monitored cannot be reported to the DF3 by the IMS access gateway/IBCF;

an obtaining unit, configured to obtain a CC that cannot be reported of a session to be monitored;

and a reporting unit, configured to report the acquired CC to DF 3.

Preferably, the step of acquiring the unreveable CC of the session to be monitored by the determining unit specifically includes:

the determining unit further determines that the IMS access gateway/IBCF does not have the capability of reporting a CC to DF 3;

or, the determining unit further determines that the IMS access gateway/IBCF does not allow the IMS access gateway/IBCF to report the CC to DF3 in the network domain where the IMS access gateway/IBCF is located.

Preferably, the acquiring unit acquires the unrevessable CC of the session to be monitored specifically as follows:

and when the IMS access gateway/IBCF determines that the session is the session to be monitored and does not acquire the related address information of the report DF3 of the CC of the session to be monitored, the CC of the session to be monitored is sent to the IMS.

Preferably, the reporting unit further includes a negotiation subunit and a reporting subunit; wherein,

a negotiation subunit, configured to negotiate, with DF3, port information and/or IP information of the receiving CC;

and the reporting subunit is used for reporting the acquired CC to the negotiated port and/or IP address for receiving the CC.

Preferably, the acquiring unit and the reporting unit are arranged in the AS of the IMS;

the DF3 is MGW/MGCF;

the bearing layer network is at least one of the following networks: GSN, WLAN, LAN.

In the invention, when the IMS access gateway/IBCF is determined that the CC of the session to be monitored cannot be directly reported to the DF3, the IMS acquires the CC of the session to be monitored, negotiates with the DF3 on the port and/or the IP address of the DF3 for receiving the CC, and sends the acquired CC to the negotiated port and/or the IP address of the DF 3. The invention can realize the monitoring of the session without greatly changing the existing IMS network, and can be compatible with various bearing layer networks because of the arrangement of the IMS access gateway/IBCF.

Drawings

FIG. 1 is a diagram of a 3GPP packet-switched lawful interception architecture;

FIG. 2 is a diagram illustrating an IMS network lawful interception architecture according to the present invention;

fig. 3 is a flowchart of the present invention for acquiring CC of session by IMS and reporting to DF 3;

fig. 4 is a schematic diagram of the structure of a device for monitoring media content in an IP multimedia subsystem according to the present invention.

Detailed Description

The basic idea of the present invention is that after determining that the IMS access gateway/IBCF cannot directly report the CC of the session to be monitored to the DF3, the IMS acquires the CC of the session to be monitored, negotiates with the DF3 to receive the port and/or IP address of the DF3 of the CC, and sends the acquired CC to the negotiated port and/or IP address of the DF 3. The IMS access gateway/IBCF may be a Border Session Control entity (SBC), but is not limited to this device.

Fig. 2 is a schematic diagram of an IMS network lawful interception architecture according to the present invention, and as shown in fig. 2, in the IMS network lawful interception architecture of the present invention, a carrier layer network (GSN, WLAN, LAN, etc.) is connected to the IMS through an IMS access gateway/IBCF, and the following describes in detail the network elements and the information interaction manner therebetween.

The LEMF informs the monitoring request to the ADMF through the HI1, and the request message carries information such as the identity identifier of the monitored object; the ADMF sends the monitoring request message to the IMS through X1_3, and carries information such as the identity mark of the monitored object; the ADMF sends the monitoring request message to DF2 through X1_4, and carries the information such as the identity of the monitored object; in the session establishing process, when a session request passes through an IMS access gateway/IBCF, the IMS access gateway/IBCF judges that the user is monitored according to a monitoring request from an ADMF (adaptive Function interface), adapts session information and then sends the adapted session information to the IMS through an AFI (adaptive Function interface); the IMS judges that the user is monitored according to the monitoring request from the ADMF, processes the session information sent by the IMS access gateway/IBCF, and reports the IRI event in the session establishment process to the DF2 through X2; a call Content triggering function entity (CCTF) in the IMS judges that the user is monitored according to a monitoring request from the ADMF, and negotiates with DF3(MGW/MGCF) through a Call Content Negotiation Interface (CCNI); the CCTF can be AS/CSCF; the CCTF (AS/CSCF) sends the information (information such AS IP address, port and the like) negotiated with the DF3(MGW/MGCF) to the IMS access gateway/IBCF through a Call Content Control Interface (CCCI, Call Content Control Interface); the IMS access gateway/IBCF reports CC to DF3 through the negotiation information sent from CCTF (AS/CSCF); however, when the user roams to the visited domain, the P-CSCF in the visited domain performs media negotiation to control the IMS access gateway/IBCF to report CC to DF 3; when the visited domain does not allow or has no ability to output the CC to DF3, the CC needs to be output in the home domain; the IMS learns that the user visited domain cannot output the CC, namely cannot report the CC to the DF3, and further acquires the media content in the session process, namely the media negotiation needs to pass through the IMS; in the present invention, the IMS may be an AS network element, but not limited to this network element, and the AS is taken AS an example for description. IMS (AS) determines that the user is monitored according to the monitoring request from ADMF, negotiates with DF3(MGW/MGCF) and determines that DF3 receives the port information or IP address information of CC; ims (as) copies the media content in the session and sends CC to the IP address or port negotiated with DF 3; DF2 reports the received IRI to LEMF through HI2 after MF processing according to the monitoring request from ADMF; DF3 reports the CC after MF processing to LEMF through HI3 according to the monitoring request from ADMF.

Fig. 3 is a flowchart of the present invention in which an IMS acquires a CC of a session and reports the CC to a DF3, as shown in fig. 3, in the diagram, UE _ a serves as a calling party, UE _ B serves as a called party, and roams to a visited domain; the calling and called users are monitored; reference numerals in the drawings correspond to respective steps described below; as shown in fig. 3, the steps of acquiring the CC of the session by the IMS and reporting the CC to the DF3 in the present invention specifically include:

step 1, UE _ A sends a session request to an IMS access gateway/IBCF;

step 2, the IMS access gateway/IBCF sends the session request of the UE _ A to the P-CSCF _ A;

step 3, P-CSCF _ A forwards the session request of UE _ A to S-CSCF _ A;

step 4, S-CSCF _ A forwards the session request of UE _ A to AS _ A;

step 5, AS _ A judges that calling user UE _ A is monitored, AS _ A and MGW/MGCF negotiate to receive information such AS IP and/or port of session CC to determine information such AS report address of session CC;

step 6, after the AS _ A and the MGW/MGCF negotiate, the information obtained by negotiation is sent to the IMS access gateway/IBCF;

step 7, the IMS access gateway/IBCF copies the media, sends the CC of the session to the IP address and/or port of the negotiated MGW/MGCF, namely to DF3 (MGW/MGCF);

step 8, AS _ A sends the session request to S-CSCF _ A; S-CSCF _ A forwards the request to AS _ B;

step 9, the AS _ B judges that the called user is monitored, the UE _ B roams to the visiting domain, and the visiting domain is determined to be incapable of directly outputting the CC to the DF 3; the AS _ B negotiates with the MGW/MGCF to determine the information such AS the IP address and/or the port of the CC of the session of the UE _ B received by the MGW/MGCF; after the AS _ B acquires the CC of the session of the UE _ B, copying media content, and reporting the CC to the MGW/MGCF (namely, the AS _ B acquires the CC and sends the CC to a negotiated IP address and/or port); here, specifically, the CC for the session of the UE _ B acquired by the AS _ B is that after the IMS access gateway/IBCF determines that the CC cannot be directly reported to the DF3, the CC for the session to be monitored (i.e., the session of the UE _ B) is reported to the AS (AS _ B) of the IMS.

Step 10, AS _ B forwards the session request to S-CSCF _ B;

step 11, S-CSCF _ B forwards the session request to visit domain P-CSCF _ B;

step 12, the P-CSCF _ B sends the session request to an IMS access gateway/IBCF;

step 13, the IMS access gateway/IBCF sends the session request to UE _ B.

It should be understood by those skilled in the art that steps 10 to 13 are normal processing flows in the session flow, and are not related to CC snooping of the present invention, and therefore will not be further described. In addition, the monitoring mode of the invention does not cause any influence on the current conversation service.

In the invention, media negotiation between users is realized by the negotiation between end to end of the users, and only a signaling carrying a Session Description Protocol (SDP) passes through an IMS; the port for performing media negotiation with the UE _ A is the port of the UE _ B; the port for performing media negotiation with UE _ B is the port of UE _ a.

In the invention, media negotiation between users needs to be negotiated through AS and MGW/MGCF; the port for media negotiation with UE _ A is the one negotiated by AS _ A and MGW/MGCF; namely, the port dynamically allocated by MGW/MGCF; the port for media negotiation with UE _ B is the one negotiated by AS _ B and MGW/MGCF; i.e. dynamically assigned ports of the MGW/MGCF.

Fig. 4 is a schematic diagram of a structure of a media content monitoring device in an IP multimedia subsystem according to the present invention, and as shown in fig. 4, the media content monitoring device in the IP multimedia subsystem according to the present invention is applied to a system in which an IMS is connected to a bearer layer network through an IMS access gateway/IBCF, and includes a determining unit 40, an obtaining unit 41, and a reporting unit 42, which are provided in the IMS; wherein,

a determining unit 40, configured to trigger an obtaining unit 41 when determining that a CC of a session to be monitored cannot be reported to a DF3 by an IMS access gateway/IBCF;

an obtaining unit 41, configured to obtain a CC that cannot be reported of a session to be monitored;

and a reporting unit 42, configured to report the acquired CC to the DF 3.

Wherein, the determining unit 40 further determines that the IMS access gateway/IBCF does not have the capability of reporting a CC to DF 3;

or, the determining unit 40 determines that the IMS access gateway/IBCF does not allow the IMS access gateway/IBCF to report the CC to the DF 3.

The acquiring unit 41 specifically acquires the unreported CCs of the session to be monitored, which is:

and when the IMS access gateway/IBCF determines that the session is the session to be monitored and does not acquire the related address information of the report DF3 of the CC of the session to be monitored, the CC of the session to be monitored is sent to the IMS.

The reporting unit 42 further includes a negotiation subunit (not shown) and a reporting subunit (not shown); wherein,

a negotiation subunit, configured to negotiate, with DF3, port information and/or IP information of the receiving CC;

and the reporting subunit is used for reporting the acquired CC to the negotiated port and/or IP address for receiving the CC.

In the present invention, the acquiring unit 41 and the reporting unit 42 are disposed in the AS of the IMS; the DF3 is MGW/MGCF; the bearing layer network is at least one of the following networks: GSN, WLAN, LAN.

It should be understood by those skilled in the art that the apparatus for monitoring media content in the IP multimedia subsystem shown in fig. 4 of the present invention is designed to implement the aforementioned method for monitoring media content in the IP multimedia subsystem, and the implementation functions of the processing units/processing sub-units can be understood by referring to the related description of the aforementioned method for monitoring media content in the IP multimedia subsystem. The functions of the processing units in the figures may be implemented by a program running on a processor, or may be implemented by specific logic circuits.

The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention.

Claims (8)

1. A method for monitoring media content in IP multimedia subsystem, IP multimedia subsystem IMS is connected with bearing layer network through IMS access gateway/interconnection border control function entity IBCF; characterized in that the method comprises:

when the IMS determines that the communication content CC of the session to be monitored cannot be reported to the DF3 by the IMS access gateway/IBCF, the IMS acquires the CC which cannot be reported of the session to be monitored and reports the CC to the DF 3;

the method for acquiring the reported CC of the session to be monitored by the IMS comprises the following steps: and when the IMS access gateway/IBCF determines that the session is the session to be monitored and does not acquire the related address information of the report DF3 of the CC of the session to be monitored, the CC of the session to be monitored is sent to the IMS.

2. The method according to claim 1, wherein the IMS determining that the CC of the session to be listened to cannot be reported to DF3 by an IMS access gateway/IBCF specifically is:

the IMS determines that the IMS access gateway/IBCF does not have the capability of reporting the CC to DF 3;

and the IMS determines that the network domain where the IMS access gateway/IBCF is located does not allow the IMS access gateway/IBCF to report the CC to the DF 3.

3. The method according to claim 1, wherein the IMS reports, to the DF3, the CC that cannot be reported of the session to be monitored specifically includes:

the IMS and the DF3 negotiate out port information and/or IP information of the CC to be received, and report the acquired CC to the port and/or IP address of the CC negotiated out to be received.

4. The method according to any of claims 1 to 3, wherein an Application Server (AS) of the IMS acquires the reported-incapable CCs of the session to be monitored and reports the obtained CCs to a DF 3;

the DF3 is a media gateway MGW/media gateway control function entity MGCF;

the bearing layer network is at least one of the following networks: gigabit system network GSN, wireless local area network WLAN, local area network LAN.

5. A media content monitoring device in an IP multimedia subsystem is applied to a system in which an IMS is connected with a bearing layer network through an IMS access gateway/IBCF, and is characterized by comprising a determining unit, an obtaining unit and a reporting unit which are arranged in the IMS; wherein,

a determining unit, configured to trigger the obtaining unit when determining that a CC of a session to be monitored cannot be reported to the DF3 by the IMS access gateway/IBCF;

an obtaining unit, configured to obtain a CC that cannot be reported of a session to be monitored;

a reporting unit, configured to report the acquired CC to DF 3;

the acquiring unit is specifically configured to receive the CC of the session to be monitored, which is sent when the IMS access gateway/IBCF determines that the session is the session to be monitored and does not acquire the relevant address information of the reporting DF3 of the CC of the session to be monitored.

6. The apparatus of claim 5, wherein the determining unit obtains the unreported CCs of the session to be monitored specifically:

the determining unit further determines that the IMS access gateway/IBCF does not have the capability of reporting a CC to DF 3;

or, the determining unit further determines that the IMS access gateway/IBCF does not allow the IMS access gateway/IBCF to report the CC to DF3 in the network domain where the IMS access gateway/IBCF is located.

7. The apparatus of claim 5, wherein the reporting unit further comprises a negotiation subunit and a reporting subunit; wherein,

a negotiation subunit, configured to negotiate, with DF3, port information and/or IP information of the receiving CC;

and the reporting subunit is used for reporting the acquired CC to the negotiated port and/or IP address for receiving the CC.

8. The apparatus according to any one of claims 5 to 7, wherein the acquiring unit and the reporting unit are disposed in an AS of the IMS;

the DF3 is MGW/MGCF;

the bearing layer network is at least one of the following networks: GSN, WLAN, LAN.