# US 9,439,066 B2 · Methods, computer program products and apparatuses enabling to conceal lawful interception from network operators > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,439,066 B2 - Document ID: US9439066B2 - Status: Granted - Kind: B2 - Application number: 14/407,688 - Filed: 2012-06-13 - Published: 2015-06-18 - Granted: 2016-09-06 - Earliest claimed: 2012-06-13 - Assignees: Nokia Solutions and Networks Oy - Applicants: Akos Meszaros; Andras Janko - Inventors: Akos Meszaros; Andras Janko - Web page: https://patentgrep.com/patent/US9439066B2 ## CPC - H04L 63/304: {intercepting circuit switched data communications (lawful interception of wireless network communications H04W12/02)} - H04M 3/2218: {Call detail recording} - H04M 3/2281: {Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls} - H04M 15/39: {Arrangements for preventing metering, charging or billing} - H04M 15/47: {Fraud detection or prevention means} - H04W 12/80: Arrangements enabling lawful interception [LI] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Certain embodiments propose to conceal interception from network operators by receiving a setup message to set up a monitoring connection towards another entity (e.g. an ISUP IAM), analyze the received setup message, and responsive thereto, establish the monitoring connection towards the another entity. The control unit is further configured to confirm that a preconfigured identifier representative for a lawful interception is included within the setup message (e.g. inside the field Called Party Subaddress, under Operator ID—octets 4, 5 and 6), and responsive thereto, suppress at least partially a generation of data records for the monitoring connection. ## Claims ### Claim 1 An apparatus, comprising: a control unit configured to receive a setup message to set up a monitoring connection towards another entity, analyze the received setup message, and responsive thereto, establish the monitoring connection towards said another entity, confirm that a preconfigured identifier representative for a lawful interception is included within said setup message, and responsive thereto, suppress at least partially a generation of data records for said monitoring connection to conceal the lawful interception. ### Claim 2 (depends on 1) An apparatus according to claim 1, wherein the control unit is further configured to confirm that said preconfigured identifier is included in a specific message field within said message. ### Claim 3 (depends on 1) An apparatus according to claim 1, wherein the control unit is further configured to confirm that said preconfigured identifier is included in a subfield identifying said another entity to which the monitoring connection is established. ### Claim 4 (depends on 1) An apparatus according to claim 1, wherein the control unit is further configured to confirm that said preconfigured identifier is included at a specific location within said subfield identifying said another entity. ### Claim 5 (depends on 1) An apparatus according to claim 1, wherein the setup message is an initial address message. ### Claim 6 (depends on 2) An apparatus according to claim 2, wherein the specific message field within said message is a called party subaddress field. ### Claim 7 (depends on 4) An apparatus according to claim 4, wherein the specific location within said subfield is a predetermined group of bits within the subfield. ### Claim 8 (depends on 1) The apparatus according to claim 1, wherein the data records at least partially suppressed include sensitive information. ### Claim 9 (depends on 1) The apparatus according to claim 1, wherein the control unit is further configured to suppress statistical reports about calls of the monitoring connection. ### Claim 10 A method implemented in a network entity, comprising: receiving a setup message to set up a monitoring connection towards another network entity to monitor lawfully intercepted traffic, analyzing the received setup message, and responsive thereto, establishing the monitoring connection towards said another network entity, confirming that a preconfigured identifier representative for a lawful interception is included within said setup message, and responsive thereto, suppressing at least partially a generation of data records for said monitoring connection to conceal the lawful interception. ### Claim 11 (depends on 10) A method according to claim 10, wherein confirming further comprises confirming that said preconfigured identifier is included in a specific message field within said message. ### Claim 12 (depends on 10) A method according to claim 10, wherein confirming further comprises confirming that said preconfigured identifier is included in a subfield identifying said another network entity to which the monitoring connection is established. ### Claim 13 (depends on 10) A method according to claim 10, wherein confirming further comprises confirming that said preconfigured identifier is included at a specific location within said subfield identifying said another network entity. ### Claim 14 (depends on 10) A method according to claim 10, wherein the setup message is an initial address message. ### Claim 15 (depends on 11) A method according to claim 11, wherein the specific message field within said message is a called party subaddress field. ### Claim 16 (depends on 13) A method according to claim 13, wherein the specific location within said subfield is a predetermined group of bits within the subfield.