Lawful Interception (LI)

The Challenge

With the development of the Internet, criminals have started to use new communication means such as chats, blogs or Webmail and are even hijacking applications such as online gaming to hide communications. Law Enforcement Agencies (LEAs) therefore need ways to tap all Internet communications for their investigations.

Qosmos Solution

Qosmos provides LEAs and Lawful Intercept system suppliers with a powerful solution to identify a target using multiple identifiers and intercept all its IP-based communications. Intercept is initiated when a trigger such as “user login = TARGET” is detected across several Web applications such as Skype or Webmail. When a target is identified, the entire IP traffic related to the corresponding IP address is intercepted.

Benefits

For Lawful Interception Suppliers

  • Focus on core competence by outsourcing advanced protocol and application expertise to identify targets more accurately
  • Improved time-to-market by embedding powerful target detection technology

For Law Enforcement Agencies

  • Detect targets more accurately in the complex environment of IP communications
  • Launch interception more rapidly and be sure to keep a full copy of all IP communications

Example of Implementation

Qosmos ixMachine LI Architecture

Information Extracted for Lawful Interception

Recognized Applications and Protocols (sample)

  • VoIP
  • Email (POP, smtp)
  • Webmail (Gmail, Hotmail, Livemail, Squiremail, Yahoo mail, etc.)
  • Instant Messaging (Aim, SNM, Skype, Yahoo, Google Talk, QQ, etc.)
  • Online games (World of Warcraft)
  • Online classified ads
  • Audio/Video (H.323, SIP, MGCP, RTP, RTCP, MMSE, RTSP, Shoutcast, Yahoo Video, MSN Video, SCCP, etc.)
  • Web applications (Dailymotion, Google, eBay, Google Earth, HTTP, MySpace, Wikipedia, YouTube, etc.)

Protocols are identified even in the case of unidirectional traffic e.g. email by satellite

Extracted Information (sample)

  • Caller, Telephone number, called party, Webmail login, email address, IM Login, Forum Login, IP address, MAC address, mobile ID (IMSI, IMEI), etc.