The Challenge

In most countries, telecom operators are legally required to retain information on network traffic and location data for the investigation, detection, and prosecution of criminal offences. Governments and agencies use information such as user ID, caller, called party, duration, time of call, etc. for specific enquiries, as described in regulations such as the Directive 2006/24/EC of the European Union.

How Qosmos Inside Solves the Problem

Qosmos technology queries the IP network in real-time as if it were a database, and filters the relevant data to optimize storage space and speed up post-processing. The information is then forwarded to a Data Retention Solution.

Benefits

For Operators

• Respond quickly to legal and investigative requests for electronic evidence, thanks to proactive real-time processing and formatting of extracted information
• Only relevant data is extracted, which minimizes storage requirements and post-processing
• Ability to extract information directly from the network, independently of servers and even in cases where they do not have access to (third party) logs or databases (Webmail, P2P, etc.)

For Authorities

• Precise understanding of user behavior and communication intent
• Fast and efficient response to legal and investigative requests for electronic evidence

Example of Implementation

Information Extracted

Recognized Protocols and Applications (sample)

• VoIP and streaming: SIP, RTP, H.323, MGCP, RTCP, MMSE, RTSP, Shoutcast, Yahoo Video, MSN Video, SCCP, etc.
• Email: SMTP, POP3, IMAP, Lotus Notes, etc.
• Webmail: Gmail, Hotmail, Livemail, Squiremail, Yahoo mail, etc.
• Instant Messaging: AIM, msn, Skype, Yahoo, Google Talk, QQ, etc.
• Web applications: Dailymotion, Google, eBay, Google Earth, HTTP, MySpace, Wikipedia, YouTube, etc.

Extracted Information (sample)

• Caller / Called party
• Duration of call
• User login
• IP address
• Date & time of login / logoff
• Subject of email
• Attached documents
• IMSI, IMEI