The challenge
In most countries, telecom operators are legally required to retain information on network traffic and location data for the investigation, detection, and prosecution of criminal offences. Governments and agencies use information such as user ID, caller, called party, duration, time of call, etc. for specific enquiries, as described in regulations such as the Directive 2006/24/EC of the European Union.
Qosmos solution
Qosmos technology queries the IP network in real-time as if it were a database and filters the relevant data to optimize storage space and speed up post-processing. Filter configuration is made simple thanks to Qosmos’ unique information extraction query language ixQL, enabling the use of simple regular expressions and Boolean operators.
Benefits
For operators
- Respond quickly to legal and investigative requests for electronic evidence, thanks to proactive real-time processing and formatting of extracted information
- Only relevant data is extracted, which minimizes storage requirements and post-processing of information.
- Ability to extract information directly from the network, independently of servers and even in cases where they do not have access to (third party) logs or databases
For authorities
- Precise understanding of user behavior and communication intent
- Fast and efficient response to legal and investigative requests for electronic evidence
Example of Implementation
Information Extracted
Recognized applications and protocols (sample)
- Audio/Video (H.323, SIP, MGCP, RTP, RTCP, MMSE, RTSP, Shoutcast, Yahoo Video, MSN Video, SCCP, etc.)
- Instant Messaging (Aim, MSN, Skype, Yahoo, Google Talk, QQ, etc.)
- Network (IP, TCP, FTP, Ethernet, DNS, DHCP, UDP, etc.)
- Web applications (Dailymotion, Google, eBay, Google Earth, HTTP, MySpace, Wikipedia, YouTube, etc.)
- Webmail (Gmail, Hotmail, Livemail, Squiremail, Yahoo mail, etc.)
Extracted information (sample)
- Caller
- Called party
- Duration of call
- User login
- IP address
- Date & time of login / logoff
- Subject of email
- Attached documents
- IMSI
- IMEI