CN1270477C - Monitoring realizing method - Google Patents

Abstract

The invention discloses a method for realizing monitoring. When the user information of the monitored designated user is changed, such as the designated user replaces the terminal, SIM card, terminal number, etc., the user information storage reports the changed information to the police information center. The current user information and the original user information before the change enable the police information center to know that the user information of the monitored user has changed, and then enable the police information center to determine whether it is necessary to initiate monitoring of new user information according to the actual situation. Or cancel the monitoring of the specified user, so that the monitoring of the specified user is more effective.

Description

A way to monitor

technical field

The invention relates to the field of monitoring, in particular to a method for realizing monitoring.

Background technique

Lawful interception refers to the activities of national security agencies to monitor telecommunications services within the scope permitted by law. According to the requirements of the national security department, all operating communication networks must enable the police information center of the national security department to monitor designated users and provide a monitoring interface for monitoring, such as a police interface. Figure 1 shows a schematic diagram of the monitoring structure. As shown in Figure 1, the police information center sets the users to be monitored in the communication network through the police interface. When the specified user performs communication activities in the communication network, the communication network will specify The communication events and communication content of user communication activities are reported to the police information center through the police interface, and the police information center completes the storage and analysis of relevant information, thereby realizing the monitoring of designated users. The communication network mentioned above includes Public Switched Telephone Network (PSTN, Public Switched Telephone Network), Global Mobile Communication (GSM, Global System for Mobile Communication) network, Code Division Multiple Access (CDMA, Code Division Multiple Access) communication network, and future Wideband Code Division Multiple Access (WCDMA, Wide Code Division Multiple Access) communication network, Next Generation Network (NGN), etc.

In the communication network, it is the communication device that monitors the designated user, and the communication device can be a mobile switching center (MSC, Mobile Switch Center), a home location register (HLR, Home Location Register), a short message center ( SMC, Short Message Center), Packet Data Service Node (PDSN, Packet Data Service Node), Authentication Authorization and Accounting (AAA) server, Mobile Positioning Center (MPC, Mobile Position Center), etc. The communication equipment can also be MSC, HLR, home subscriber server (HSS, Home Subscriber Server), SMC, serving general packet radio service support node (SGSN, Serving GPRS Support Node) and gateway general packet radio service support node in the WCDMA communication system (GGSN, Gateway GPRS Support Node), Gateway Mobile Location Center (GMLC, Gateway Mobile Location Center), etc.

At present, communication services are mainly divided into two categories, one is circuit-based services based on circuit switching, and the other is packet-based services based on packet switching.

Fig. 2 has shown the monitoring interface synoptic diagram of police information center and communication equipment, as shown in Fig. Monitoring of user communication activity events and communication content. The X interface 203 between the police information center 202 and the communication device 201 includes: a signaling interface X1, service interfaces X2 and X3. The X1 interface realizes the management of monitoring activities, such as setting the user to be monitored, querying monitoring parameters, canceling the monitoring of the specified user, etc.; the X2 interface reports the communication activity related events of the specified user to the police information center 202, such as call events, Ringing events, answering events, on/off events, etc., can also report short messages to the police information center 202 through the X2 interface; Communication content can be voice, fax, asynchronous data, etc. For packet services, communication content can be web browsing, email, download, multimedia, etc. The transmission bearer of the X1 interface and the X2 interface is Transmission Control Protocol (TCP)/Internet Protocol (IP) or X.25; the transmission bearer of the X3 interface is used for circuit-type services, and its transmission bearer is an E1 link, and it is used for packet-type services. The bearer is TCP/IP or X.25.

Figure 3 shows a schematic diagram of the connection relationship between the police information center and the CDMA 2000 communication network. As shown in Figure 3, the police information center communicates with the communication equipment in the CDMA 2000 communication network through the police interface, such as MSC, HLR, and gateway MSC (GMSC), SMC, MPC, PDSN, AAA server, etc. are connected to realize the monitoring of designated users in the CDMA 2000 communication network.

Figure 4 shows a schematic diagram of the connection relationship between the police information center and the WCDMA communication network. GMLC, SGSN, GGSN, etc. are connected to realize monitoring of designated users in the WCDMA communication network.

In a mobile communication network, HLR is used to manage subscription information and service information of mobile users. The information stored in the HLR includes: user identification, the user identification stored by the HLR in the CDMA2000 communication network is Mobile Number Directory (MDN), International Mobile Subscriber Identity (IMSI), Electronic Serial Number (ESN), and the HLR storage in the WCDMA communication network The user identification of the mobile station is the Mobile Station International Integrated Service Service Network Number (MSISDN, Mobile Subscriber ISDN Number), IMSI and International Mobile Equipment Identity (IMEI); the call forwarding number of the mobile user, such as the unconditional forwarding number and the no answer forwarding number, etc. ; The location information of the user, such as the service MSC ID; other information related to the service. The AAA server is used to store the user's IMSI and Network Access Identity (NAI) account, as well as the user's authentication information.

The HLR and AAA server monitor the designated user according to the user ID specified by the police information center. For example, the HLR in the CDMA 2000 communication network monitors the designated user according to the MDN, IMSI or ESN, and the AAA server monitors the designated user according to the IMSI or NAI account to monitor the designated user; the HLR in the WCDMA communication network monitors the designated user according to MSISDN, IMSI or IMEI.

The police information center can query the information of the specified user in the HLR or AAA server through the police interface, such as querying the user ID and call forwarding number of the specified user. When the specified user has business activities in the HLR or AAA server, the HLR or AAA The server reports relevant activity events to the police information center, so that the police information center can obtain the communication activity information of the designated user in time. For example, when the designated user turns on the machine, the HLR reports the power-on event of the designated user to the police information center; when the designated user turns off the machine, the HLR reports the power-off event of the designated user to the police information center; The police information center reports the location update event of the designated user; when other users call the designated user, the HLR reports the designated user's incoming call traffic event to the police information center; when the designated user performs supplementary business operations, the HLR sends the police information The center reports the supplementary service operation event of the designated user; when the designated user accesses the packet switching network of the CDMA 2000 communication network, the AAA server reports the access notification event of the designated user to the police information center. The above events reported by the HLR or AAA server to the police information center are events that occur when the terminal used by the designated user performs communication activities or business operations.

However, some activities of designated users are completed through the service of the operator, rather than through the terminal used by the user. If the terminal used by the user is lost or the user identification card (SIM) is damaged, the user needs to reissue or replace the SIM card. Cause a user ID to change, or a user to change their account number and password. The police information center cannot know through the communication equipment connected to the activity event that the specified user completes through the service provided by the operator. However, the communication device monitors the designated user according to the user ID. If the police information center cannot know that the user ID changes, it will cause the monitored user set by the police information center to no longer be monitored, or HLR, The AAA server automatically changes the monitored user ID to a new user ID, which makes the HLR or AAA server inconsistent with the designated user list information of the police information center, and ultimately causes the police information center to be unable to process the relevant activity events reported by the HLR and AAA server , so that the monitoring of the specified user fails.

Contents of the invention

In view of this, the purpose of the present invention is to provide a monitoring method, so that the police information center can learn that the user information of the monitored user has been changed.

In order to achieve the above object, the present invention provides a method for realizing monitoring, which method includes:

A. After the user information storage learns that the user subscription information of the monitored user has changed, it notifies the police information center.

The notification carries the modified current user subscription information and the original user subscription information before modification.

The modified current user information and the original user information before modification are encrypted by using a data encryption standard algorithm or using three consecutively applied data encryption standard algorithms.

The notification sent by the user information storage to the police information center is: the user information storage sends a notification to the police information center through the X2 interface.

After the step A, the method further includes: the police information center returns a response indicating that the user information of the intercepted user has been changed to the user information storage.

The change of the user information in step A means: the terminal used by the monitored user changes, or the SIM card changes, or the terminal number changes.

After the step A, further include:

B1. The police information center resets the designated user to be monitored based on the changed current user subscription information, or cancels the monitoring of the monitored user.

After the step B1, it further includes: the user information storage cancels monitoring of the user corresponding to the subscription information of the user before the modification.

After the step A, further include:

B2. The user information storage monitors the user corresponding to the user subscription information according to the changed current user subscription information.

The step B2 further includes: the user information storage cancels monitoring of the user corresponding to the user information before modification.

According to the method proposed by the present invention, when the user information of the designated user being monitored is changed, such as the terminal, SIM card, terminal number, etc. used by the designated user, the user information storage will report the changed current user information and information to the police information center. The original user information before the change enables the police information center to know that the user information of the monitored user has changed, and then enables the police information center to determine whether it is necessary to initiate monitoring of new user information or cancel the monitoring of the user’s information according to the actual situation. Monitoring of specified users makes the monitoring of specified users more effective.

Description of drawings

Figure 1 shows a schematic diagram of the monitoring structure;

Fig. 2 shows the schematic diagram of the listening interface of the police information center and the communication equipment;

Fig. 3 shows the schematic diagram of the connection relationship between the police information center and the CDMA 2000 communication network;

Fig. 4 shows the schematic diagram of the connection relationship between the police information center and the WCDMA communication network;

Fig. 5 shows a schematic diagram of the implementation process of notifying the police information center of user information modification in the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings.

In the present invention, since user information is stored in user information stores such as HLR and AAA server, when the user information of the specified user being monitored is changed, the user information store reports the changed current user information and the changed information to the police information center. The previous original user information enables the police information center to know that the user information of the monitored user has changed.

Fig. 5 shows a schematic diagram of the implementation process of notifying the police information center user information change in the present invention. As shown in Fig. 5, the realization process of notifying the police information center user information change includes the following steps:

Step 501: When the user information storage learns that the user information of the monitored designated user has been modified, it sends a user information change notification to the police information center, and the user information change notification carries the current user information after modification and the original user before modification information, informing the police information center that the corresponding user information of the specified user has changed.

For HLR, when the user information of the specified user in the HLR, such as any identification in the IMSI/MDN/ESN, changes, the HLR reports the user information change notification to the police information center through the police interface, and the user information change notification carries at least Parameter information described in Table 1.

For the AAA server, when the user information of the specified user in the AAA server, such as any identifier in the IMSI/NAI, changes, the AAA server reports the user information change notification to the police information center through the police interface, and the user information change notification carries at least There is parameter information described in Table 2.

The content carried in the user information change notification can be encoded according to the Abstract Language Notation (ASN.1), and then encrypted using three successively applied Data Encryption Standard (3DES) algorithms, and then sent to the police information through the TCP connection of the X2 interface center.

Step 502: After receiving the user information change notification, the police information center obtains the changed user information of the specified user, and then determines whether to initiate monitoring of the new user information or cancel the specified user information according to the specific situation and actual needs. user monitoring. If it is necessary to continue to monitor the specified user, reset the monitored specified user in the communication device according to the changed current user information, such as resetting the monitored user in the user information storage, MSC, PDSN and other communication devices. Specify the user, and further, the user information storage can automatically cancel the monitoring of the user corresponding to the original user information. The police information center can also notify the user information storage, MSC, PDSN and other communication devices to cancel the monitoring of the user corresponding to the original user information. In addition, when the police information center does not send any instruction to set or cancel monitoring to the user information server, the user information storage such as HLR and AAA server can automatically monitor the corresponding user according to the changed current user information, and Further, the user information storage automatically cancels monitoring of the user corresponding to the original user information. The police information center may further return a user information modification response to the user information storage, notifying the user information storage that it has learned of the modification of the user information of the specified user.

When the key information in the user information, such as IMSI, ESN, MDN changes, the HLR should provide the current user information of the specified user to the police information center, so that the police information center can change the target type of deployment according to the latest user information, For example, when the designated user replaces the terminal and SIM card due to the loss of the terminal used by the designated user, and when the terminal number of the designated user changes, the HLR should report the event to the police information center. parameter type describe HLR ID m HLR logo event sequence number m The serial number generated by the police information center is used to sort the activity events reported by the X2 interface, and the loss of activity events can be detected through the event serial number event time m Used to indicate the time when HLR generates user information change notification Target Type Bitmap m It is used to indicate which identifiers in the subsequent MSN, IMSI or ESN are the user identifiers when setting the monitored user, such as: Bit0-MDN Bit1-IMSIBit2-ESNBit3-ISDNBit4-NAIBit5~Bit7 are valid when reserved value is 1 MDN C Specify the user ID of the user before the user information is modified. If there are these IDs in the HLR, these IDs should be reported to the police information center IMSI C ESN C new MDN C If the MDN changes, the changed MDN new IMSI C If the IMSI has changed, the changed IMSI new ESN C If the ESN changes, the changed ESN

Table I

M-Parameters that must be carried in the user information change notification

When there is this parameter information in C-HLR, the parameter that should be carried in the user information change notification parameter type describe AAA ID m AAA server ID, usually the IP address of the AAA server is used as the AAA server ID event sequence number m The serial number generated by the police information center is used to sort the activity events reported by the X2 interface, and the loss of activity events can be detected through the event serial number event time m It is used to indicate the time when the AAA server generates the user information change notification Target Type Bitmap m It is used to indicate which identifiers in the subsequent MSN, IMSI or ESN are the user identifiers when setting the monitored user, such as: Bit0-MDNBit1-IMSIBit2-ESNBit3-ISDNBit4-NAIBit5～Bit7 are valid when the reserved value is 1 IMSI C Specify the user ID of the user before the user information is modified. If there are these IDs in the AAA server, these IDs should be reported to the police information center NAI C new IMSI C If the IMSI has changed, the changed IMSI New NAI List C If the NAI changes, the changed NAI account number list, including the modification and addition of the NAI

Table II

M-Parameters that must be carried in the user information change notification

When the C-AAA server has this parameter information, the parameter that should be carried in the user information change notification

In a word, the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (10)

1, a kind of method of monitoring of realizing is characterized in that this method comprises:

After A, user information store know that the user signing contract information of intercepted user is changed, the notice Lawful Interception Center.

2, method according to claim 1 is characterized in that, carries amended active user's CAMEL-Subscription-Information in the described notice and revises preceding original subscriber's CAMEL-Subscription-Information.

3, method according to claim 2 is characterized in that, uses data encryption standard algorithm or uses the data encryption standard algorithm of three continuous application that described amended active user's information and the preceding original subscriber's information of modification are encrypted.

4, method according to claim 1 is characterized in that, described user information store sends notice to Lawful Interception Center and is: user information store sends notice by X2 interface to Lawful Interception Center.

5, method according to claim 1 is characterized in that, further comprises after the described steps A: Lawful Interception Center returns the response that shows that the user profile of knowing intercepted user has been changed to user information store.

6, method according to claim 1 is characterized in that, user profile changes to described in the steps A: the terminal of being used by the user that monitored changes, or SIM card changes, or termination number changes.

7, method according to claim 1 is characterized in that, further comprises after the described steps A:

B1, Lawful Interception Center reset the designated user of being monitored, or cancellation are to the monitorings of intercepted user based on the active user's CAMEL-Subscription-Information after changing.

8, method according to claim 7 is characterized in that, further comprises after the described step B1: the user information store cancellation to change before the corresponding user's of user signing contract information monitoring.

9, method according to claim 1 is characterized in that, further comprises after the described steps A:

B2, user information store are according to the active user's CAMEL-Subscription-Information after changing, to monitoring with the corresponding user of described user signing contract information.

10, method according to claim 9 is characterized in that, described step B2 further comprises: user information store cancellation to change before the corresponding user's of user profile monitoring.

Images