US 12,772,048 B2 · First node, second node, third node and methods performed thereby, for handling encrypted traffic in a communications network

Abstract

A computer-implemented method, performed by a first node (111). The method is for handling encrypted traffic in a communications system (100). The first node (111) receives (304), from a second node (112) one or more keys to enable decryption by a third node (113) of traffic. The traffic is routed between two or more endpoints (130, 120) and is encrypted between the endpoints (130, 120) The first node (111) also receives (304) the one or more indications. The one or more indications indicate a respective protocol to be used with the one or more keys to enable decryption of the traffic. The first node (111) also initiates (305) sending the one or more keys and the one or more indications to the third node (113), thereby enabling decryption of the traffic. The first node (111) and the third node (113) are different from any of the two or more endpoints (130, 120).

Claims19

Dependent claims

A computer-implemented method of handling encrypted traffic in a communications system, the method performed by a first node configured to manage or control policies in the communications system, the method comprising:

receiving, directly, or indirectly, from a second node configured to provide content to users of the communications system
one or more keys to enable decryption of encrypted traffic, by a third node configured to support handling of user plane traffic based on one or more rules and to implement enforcement actions in the user plane traffic in the communications system, the encrypted traffic being routed between two or more endpoints via the communications system, the encrypted traffic being encrypted between the two or more endpoints, and
one or more encryption protocol indications, the one or more encryption protocol indications indicating an encryption protocol to be used with the one or more keys to enable decryption of the encrypted traffic, and
initiating sending the one or more keys and the one or more encryption protocol indications to the third node, thereby enabling decryption of the encrypted traffic;
wherein the first node and the third node are different from any of the two or more endpoints.

2 more elements

A computer-implemented method of handling encrypted traffic in a communications system, the method performed by a third node configured to support handling of user plane traffic based on one or more rules and to implement enforcement actions in the user plane traffic, the method comprising:

receiving, from a first node configured to manage or control policies in the communications system:
a) one or more keys to enable decryption of encrypted traffic routed between two or more endpoints via the communications system, the traffic being encrypted between the two or more endpoints,
b) one or more encryption protocol indications indicating an encryption protocol to be used with the one or more keys to enable decryption of the encrypted traffic, and
c) one or more second indications indicating a session between the two or more endpoints for which decryption with the one or more keys is applicable;
and
decrypting the traffic for the indicated session with the received one or more keys, according to the encryption protocol indicated in the one or more encryption protocol indications, to perform a management operation on the encrypted traffic;
wherein the first node and the third node are different from any of the two or more endpoints.

4 more elements

A computer-implemented method of handling encrypted traffic in a communications system, the method performed by a second node configured to provide content to users of, the method comprising:

initiating providing, to a first node configured to manage or control policies in the communications system in the communications system, one or more keys and one or more encryption protocol indications, the one or more keys enabling decryption of traffic routed between two or more endpoints via the communications system, the traffic being encrypted between the two or more endpoints, the first node being different from any of the two or more endpoints, and the one or more encryption protocol indications indicating an encryption protocol to be used with the one or more keys to enable decryption of the encrypted traffic.

Dependencies are inferred from the claim text.

First node, second node, third node and methods performed thereby, for handling encrypted traffic in a communications network

Life of this patent

First node, second node, third node and methods performed thereby, for handling encrypted traffic in a communications network

Life of this patent

Abstract

Claims19