CN102487521A - Method and device for monitoring media content in IP multimedia subsystem - Google Patents

Abstract

The invention discloses a method for monitoring media content in an IMS (IP (Internet Protocol) Multimedia Subsystem). The IMS is connected with a carrier network through an IMS-access gateway/IBCF (Interconnection Border Control Function) entity. The method comprises the following steps that: after receiving a monitoring request of a monitored object, the IMS sends the information of the monitored object to the IMS-access gateway/IBCF; and when determining that the current access user is the monitored object, the IMS-access gateway/IBCF reports the CC (Communication Content) of the session of the monitored objected to a DF3 (Delivery Function 3). The invention simultaneously discloses a device for monitoring media content in the IMS, wherein the device can be used for monitoring media contents in the IMS. According to the invention, session monitoring can be realized without greatly changing an existing IMS network; and as the IMS-access gateway/IBCF is arranged, various carrier networks can be compatible.

Description

Method and device for monitoring media content in IP multimedia subsystem

technical field

The present invention relates to the monitoring technology in the IP Multimedia Subsystem (IMS, IP Multimedia Subsystem) network architecture, in particular to a method and device for monitoring media content in the IP Multimedia Subsystem.

Background technique

The Internet Protocol Multimedia Subsystem (IMS, IP Multimedia Subsystem) is the development direction of future multimedia communication, and it is also the most important part of the next generation network. It is a subsystem supporting IP multimedia services proposed by the Third Generation Partnership Project (3GPP, Third Generation Partnership Project). Its notable feature is that it adopts the Session Initial Protocol (SIP, Session Initial Protocol) system, and the communication has nothing to do with the access mode. , can have a variety of capabilities such as separation of multimedia service control functions and bearer capabilities, separation of calls and sessions, separation of applications and services, separation of services and networks, and integration of mobile network and Internet services.

Just because communication technology is becoming more and more powerful and penetrates into all aspects of society and life, the situation of using communication technology to engage in illegal and criminal activities is also becoming more and more serious. Lawful interception technology has become a powerful weapon for national security departments to combat criminal activities. Lawful interception means that the security agency sets a specific interception target on the communication device for the needs of law enforcement, and monitors the session events and communication content of the interception target. It is an indispensable function in the communication field. European Telecommunications Standards Institute (ETSI, European Telecommunications Standards Institute), 3GPP and other standard organizations have been formulating relevant standards for lawful interception. At present, the lawful interception in the field of IMS network has also formed the corresponding standard, and can guide the specific implementation.

Fig. 1 is a schematic diagram of 3GPP packet switching lawful interception architecture, as shown in Fig. 1, 3GPP has proposed a kind of lawful interception standard in IMS packet switching (PS, Packet Switch) network field. Among them, monitoring is based on the following three interfaces:

HI1 interface, used to realize deployment and control management;

The HI2 interface is used to report the intercept related information (IRI, Intercept Related Information) of the intercepted target communication;

HI3 interface, used to output the communication content (CC, Communication Content) of the monitored target;

Control the bearer layer network through HI1, output HI2 interface messages to the control layer equipment such as call session control function entity (CSCF, Call Session Control Function), and output HI3 communication content to the bearer layer network. In the figure, X1 to X3 are the interfaces connecting the IMS and the GSN, respectively corresponding to the HI1 interface to the HI3 interface.

This standard can be applied to include law enforcement monitoring unit (LEMF, Law Enforcement Monitoring Facility), management function entity (ADMF, Administration Function), data transmission function 2 (DF2, Delivery Function2), data transmission function 3 (DF3, Delivery Function3) In the monitoring system of Gigabyte System Network (GSN, Gigabyte System Network) and monitoring equipment.

LEMF notifies the monitoring request to ADMF through HI1, and the request message carries information such as the identity of the monitoring object; ADMF sends the monitoring request message to the bearer layer network GSN through X1_1, carrying information such as the identity of the monitoring object; in the IMS domain, ADMF will monitor The request message is sent to the proxy call session control function entity (P-CSCF, Proxy Call Session Control Function)/serving call session control function entity (S-CSCF, Serving-Call Session Control Function); ADMF sends the monitoring request message to DF3, carrying information such as the monitoring object identity; during the period from the beginning of the session to the end of the session, in the IMS domain, when the session request is routed to the P-CSCF/S-CSCF via the GSN, when the P-CSCF/S-CSCF judges that the user is monitored , monitor the monitored object according to the monitored object identifier; P-CSCF/S-CSCF reports the IRI during the session to DF2 through X2; GSN reports the CC during the session to DF3 through X3; DF2 according to the monitoring request from ADMF, Report the received IRI to LEMF through HI2 after MF processing; DF3 reports the received CC to LEMF through HI3 according to the monitoring request from ADMF after MF processing.

Today, in practical applications, in the next-generation network with IMS as the core, there are various types of bearer layer networks, including wireless local area networks (WLAN, Wireless Local Area Networks), local area networks (LAN, Local Area Networks), etc. As a result, it becomes very difficult for lawful interception in the IMS network field to adapt to various bearer layer networks. At the same time, it is required that many bearer layer devices can realize the monitoring function, which is difficult to realize in reality. Many devices may not be able to provide the monitoring function in the live network, which will make the monitoring function unavailable.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a media content monitoring method and device in the IP multimedia subsystem, which can directly report the CC of the session of the monitored object to DF3 by the IMS access gateway/IBCF.

In order to achieve the above object, technical solution of the present invention is achieved in that way:

A method for monitoring media content in an IP multimedia subsystem, the IP multimedia subsystem IMS is connected to the bearer layer network through an IMS access gateway/interconnection border control function entity IBCF; the method includes:

After the IMS receives the monitoring request for the monitored object, it sends the monitored object information to the IMS access gateway/border control function entity IBCF;

When the IMS access gateway/IBCF confirms that the current access user is the intercepted object, it reports the communication content CC of the intercepted object's session to DF3.

Preferably, after the IMS receives the monitoring request for the monitored object, it sends the monitored object information to the IMS access gateway/border control function entity IBCF, specifically:

After receiving the monitoring request sent by the ADMF, the IMS sends the identification information of the monitored object to the IMS access gateway/IBCF through the call content control interface CCCI.

Preferably, the reporting of the communication content CC of the session of the monitored object to DF3 is specifically:

The IMS access gateway/IBCF sends the CC to the DF3 through the fixed port of the DF3;

Or, when the DF3 is a media gateway MGW/media gateway control function entity MGCF, the IMS access gateway/IBCF sends the CC to the DF3 through the CC receiving port of the DF3 acquired from the IMS.

Preferably, the bearer layer network is at least one of the following networks: a gigabyte system network GSN, a wireless local area network WLAN, and a local area network LAN.

A device for listening to media content in an IP multimedia subsystem, applied to a system in which an IMS is connected to a bearer layer network through an IMS access gateway/IBCF, the device includes a receiving unit and a sending unit arranged in the IMS, and is located in the The confirmation unit and the reporting unit in the IMS access gateway/IBCF; wherein,

a receiving unit, configured to receive a monitoring request for the monitored object;

A sending unit, configured to send the monitored object information to the IMS access gateway/border control function entity IBCF;

A confirmation unit is used to trigger the reporting unit when confirming that the current access user is the monitored object;

The reporting unit is configured to report the CC of the monitored object's session to DF3.

Preferably, the sending unit sends the identity information of the intercepted object to the IMS access gateway/IBCF through CCCI.

Preferably, the reporting unit sends the CC to the DF3 through a fixed port of the DF3;

Or, when the DF3 is a media gateway MGW/media gateway control function entity MGCF, the reporting unit sends the CC to the DF3 through the CC receiving port of the DF3 acquired from the IMS.

Preferably, the bearer layer network is at least one of the following networks: GSN, WLAN, LAN.

In the present invention, when the IMS receives the monitoring request sent by the ADMF, it will notify the IMS access gateway/IBCF of related information such as the identification information of the monitored object, so that the IMS access gateway/IBCF can realize the monitoring of the monitored user. For deployment and control, when it is determined that the currently accessed user is the monitored user, the session CC of the monitored user will be reported to DF3, thereby realizing the monitoring of the monitored user. The IMS access gateway/IBCF is notified of the relevant information of the intercepted user through the IMS, so that the IMS access gateway/IBCF has the deployment and control capability. The present invention can monitor the session without making major changes to the existing IMS network, and because the IMS access gateway/IBCF is set, it can be compatible with various bearing layer networks.

Description of drawings

FIG. 1 is a schematic diagram of a 3GPP packet switching lawful interception architecture;

FIG. 2 is a schematic diagram of an IMS network lawful interception architecture of the present invention;

FIG. 3 is a schematic diagram of the composition and structure of the media content monitoring device in the IP multimedia subsystem of the present invention.

Detailed ways

The basic idea of the present invention is that when the IMS receives the monitoring request sent by the ADMF, it will notify the IMS access gateway/IBCF of related information such as the identification information of the monitored object, so that the IMS access gateway/IBCF can realize the The monitored user performs deployment and control, and when it is determined that the currently connected user is the monitored user, the session CC of the monitored user will be reported to DF3, thereby realizing the monitoring of the monitored user.

Fig. 2 is a schematic diagram of the IMS network legal interception architecture of the present invention, as shown in Fig. 2, compared with the 3GPP packet switching legal interception architecture shown in Fig. 1, in the IMS network legal interception architecture of the present invention, the bearer layer network (GSN, WLAN, LAN, etc.) are connected to the IMS through the IMS access gateway/IBCF, and the application environment of the present invention is that the IMS access gateway/IBCF and the IMS do not support network deployment and control. Each network element and the information exchange mode among them are described in detail below.

LEMF notifies ADMF of the interception request through HI1, and the request message carries information such as the identity of the interception object; ADMF sends the interception request message to the bearer network GSN/.../WLAN/LAN through X1_1, carrying information such as the identity of the interception object ; ADMF sends the monitoring request message to IMS through X1_3, carrying information such as the monitoring object identity; ADMF sends the monitoring request message to DF2 through X1_4, carrying information such as the monitoring object identity; ADMF sends the monitoring request message to DF3 through X1_5, Carry information such as the identity of the monitored object; during the session establishment process, when the session request passes through GSN/.../WLAN/LAN, GSN/.../WLAN/LAN judges that the user is monitored, and monitors the monitored object according to the monitored object ID. Send the monitoring object session-related information to the IMS access gateway/IBCF; the IMS access gateway/IBCF adapts the session information sent by the bearer layer network GSN/.../WLAN/LAN through the adaptation function interface (AFI, Adaptation Function Interface) to IMS; IMS judges that the user is monitored according to the monitoring request from ADMF, processes the session information sent by the IMS access gateway/IBCF, and reports the IRI event during session establishment to DF2 through X2 ; At the same time, the IMS judges that the user is monitored according to the monitoring request from the ADMF, and may also report the CC in the session establishment process to the DF3 through X3.

In the present invention, after the IMS receives the monitoring request from the ADMF, it can determine the relevant information of the monitored user through the identification information of the monitored object in the monitoring request. Relevant information is sent to the IMS access gateway/IBCF through the CCCI interface to realize the network deployment and control of the IMS access gateway/IBCF; of course, the IMS can also directly forward the monitoring request to the IMS access gateway/IBCF through the CCCI interface, and the IMS access The gateway/IBCF extracts relevant information such as the identification information of the monitored object from the monitoring request, so as to realize the network deployment and control of the monitored object.

In this way, after receiving the session information sent by the bearer layer network GSN/.../WLAN/LAN, the IMS access gateway/IBCF confirms whether the user who initiates the session is the intercepted user based on relevant information such as the identification information of the intercepted object The user, if yes, reports the CC of the current user's session to DF3.

Specifically, the IMS access gateway/IBCF reports the CC of the session to DF3, which is divided into two cases. When DF3 is not MGW/MGCF, the port for media negotiation between the IMS access gateway/IBCF and DF3 is fixed. At this time , when the IMS access gateway/IBCF determines that the current user is the monitored object, it can directly report the CC of the current session to DF3 through the fixed port of DF3. When DF3 is a media gateway (MGW, Media GateWay)/media gateway control function entity (MGCF, MediaGateWay Control Function), MGW/MGCF dynamically allocates IP and ports during the media negotiation process. Therefore, the IMS access gateway/ The IBCF has no ability to negotiate with the MGW/MGCF media to obtain a dynamically allocated IP and port, so it cannot report the CC. At this time, if the IMS reports the CC to DF3 through X3, there will be a media detour problem, that is, the IMS access gateway/IBCF first needs to send the CC to the IMS, and then the IMS sends the CC to DF3. The media negotiation is an end-to-end media negotiation that does not go through the IMS, but the Session Description Protocol (SDP, Session Description Protocol) goes through the IMS; if the IMS needs to report the CC, the media must be uploaded to the IMS, that is, the IMS access gateway /IBCF must also send media communication content to IMS, and each user in the session can carry out media negotiation through IMS like this, promptly causes media detour; The present invention can adopt IMS and DF3 (MGW/MGCF) to carry out media negotiation IP and port, After the media negotiation is completed, the IMS notifies the IMS access gateway/IBCF of the IP and port after the media negotiation. In this way, the IMS access gateway/IBCF can directly report the CC to DF3.

Fig. 3 is a schematic diagram of the composition structure of the media content monitoring device in the IP multimedia subsystem of the present invention, as shown in Figure 3, the media content monitoring device in the IP multimedia subsystem of the present invention is applied to the IMS through the IMS access gateway/IBCF and the bearer layer network In the connected system, the receiving unit 30 and the sending unit 31 are set in the IMS, and the confirmation unit 32 and the reporting unit 33 are set in the IMS access gateway/IBCF; wherein,

a receiving unit 30, configured to receive a monitoring request for the monitored object;

A sending unit 31, configured to send the intercepted object information to the IMS access gateway/border control function entity IBCF;

A confirmation unit 32, configured to trigger the reporting unit 33 when confirming that the current access user is the monitored object;

The reporting unit 33 is configured to report the CC of the session of the listened object to DF3.

The above-mentioned sending unit 31 sends the identification information of the listened object to the IMS access gateway/IBCF through the CCCI.

The reporting unit 33 sends the CC to the DF3 through the fixed port of the DF3;

Or, when DF3 is the MGW/MGCF, the reporting unit 33 sends the CC to the DF3 through the CC receiving port of the DF3 acquired from the IMS.

The aforementioned bearer layer network is at least one of the following networks: GSN, WLAN, and LAN.

Those skilled in the art should understand that the media content monitoring device in the IP multimedia subsystem shown in Figure 3 of the present invention is designed for realizing the aforementioned media content monitoring method in the IP multimedia subsystem, and each of the above-mentioned processing units/processing subunits/ The implementation function of the processing module can be understood with reference to the related description of the media content monitoring method in the aforementioned IP multimedia subsystem. The functions of each processing unit in the figure can be realized by programs running on the processor, or by specific logic circuits.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (8)

1. a method for monitoring media content in an IP multimedia subsystem, the IP multimedia subsystem IMS is connected with the bearer layer network by an IMS access gateway/interconnection border control functional entity IBCF; it is characterized in that the method comprises: After the IMS receives the monitoring request for the monitored object, it sends the monitored object information to the IMS access gateway/border control function entity IBCF; When the IMS access gateway/IBCF confirms that the current access user is the intercepted object, it reports the communication content CC of the intercepted object's session to the data transmission function 3DF3. 2. The method according to claim 1, wherein after the IMS receives the monitoring request of the monitored object, the monitored object information is sent to the IMS access gateway/border control function entity IBCF, specifically: After receiving the monitoring request sent by the ADMF, the IMS sends the identification information of the monitored object to the IMS access gateway/IBCF through the call content control interface CCCI. 3. The method according to claim 1, characterized in that, reporting the communication content CC of the conversation of the listened object to DF3 is specifically: The IMS access gateway/IBCF sends the CC to the DF3 through the fixed port of the DF3; Or, when the DF3 is a media gateway MGW/media gateway control function entity MGCF, the IMS access gateway/IBCF sends the CC to the DF3 through the CC receiving port of the DF3 acquired from the IMS. 4. The method according to any one of claims 1 to 3, wherein the bearer layer network is at least one of the following networks: gigabyte system network GSN, wireless local area network WLAN, local area network LAN. 5. A device for listening to media content in an IP multimedia subsystem, applied to a system in which IMS is connected to a bearer layer network through an IMS access gateway/IBCF, characterized in that the device includes a receiving unit located in the IMS and a sending unit, set in the confirmation unit and the reporting unit in the IMS access gateway/IBCF; wherein, a receiving unit, configured to receive a monitoring request for the monitored object; A sending unit, configured to send the monitored object information to the IMS access gateway/border control function entity IBCF; A confirmation unit is used to trigger the reporting unit when confirming that the current access user is the monitored object; The reporting unit is configured to report the CC of the monitored object's session to DF3. 6 . The device according to claim 5 , wherein the sending unit sends the identity information of the intercepted object to the IMS access gateway/IBCF through CCCI. 7. The device according to claim 5, wherein the reporting unit sends the CC to the DF3 through the fixed port of the DF3; Or, when the DF3 is the MGW/MGCF, the reporting unit sends the CC to the DF3 through the CC receiving port of the DF3 acquired from the IMS. 8. The device according to any one of claims 5 to 7, wherein the bearer layer network is at least one of the following networks: GSN, WLAN, LAN.

Images