Lawful Interception for Proximity Service

Abstract

Apparatuses and methods are described, which perform control in relation to a connection for proximity service between at least two devices, perform lawful interception in relation to the proximity service with respect to at least one device to be intercepted of the at least two devices, and configure at least one radio access network control element to perform the lawful interception in relation to the proximity service.

1 . An apparatus comprising
 a processor and   a memory for storing instructions to be executed by the processor, wherein the processor is configured   to perform control in relation to a connection for proximity service between at least two devices,   to perform lawful interception in relation to the proximity service with respect to at least one device to be intercepted of the at least two devices, and   to configure at least one radio access network control element to perform the lawful interception in relation to the proximity service.   
     
     
         2 .- 5 . (canceled) 
     
     
         6 . The apparatus according to  claim 1 , wherein
 the interception information to be reported comprises communication content information, and the connection for proximity service between the at least two devices is an indirect connection via the at least one radio access network control element, and   the processor is configured to instruct the at least one radio access network control element to provide the communication content information.   
     
     
         7 . The apparatus according to any  claim 1 , wherein the interception information to be reported comprise connection content information and the connection for proximity service between the at least two devices is a direct connection between the at least two devices, and
 the processor is configured to instruct the at least one radio access network control element to change the connection for proximity service to an indirect connection via the at least one radio access network control element and to provide the communication content information.   
     
     
         8 . The apparatus according to  claim 7 , wherein the processor is configured to trigger a change of user plane security keys which are adopted in the direct connection and indirect connection respectively, in case security keys for direct connection and indirect connection are different. 
     
     
         9 . An apparatus comprising
 a processor and   a memory for storing instructions to be executed by the processor, wherein the processor is configured   to provide control in a radio access network,   to perform control in relation to a connection for proximity service between at least two devices,   to receive configuration information for performing lawful interception in relation to the proximity service with respect to at least one device to be intercepted of the at least two devices, and   to report interception information with respect to the at least one device to be intercepted.   
     
     
         10 .- 12 . (canceled) 
     
     
         13 . The apparatus according to  claim 9 , wherein
 the interception information to be reported comprises communication content information, and the connection for proximity service between the at least two devices is an indirect connection via the apparatus, and   the processor is configured to report the communication content information.   
     
     
         14 . The apparatus according to  claim 9 , wherein the interception information to be reported comprise connection content information and the connection for proximity service between the at least two devices is a direct connection between the at least two devices, and
 the processor is configured to change the connection for proximity service to an indirect connection via the apparatus and to report the communication content information.   
     
     
         15 . The apparatus according to  claim 14 , wherein the processor is configured to trigger a change of user plane security keys which are adopted in the direct connection and indirect connection respectively, in case security keys for direct connection and indirect connection are different. 
     
     
         16 . The apparatus according to  claim 9 , wherein the processor is configured to
 receive a trigger for establishing a user plane transport bearer from the apparatus to a core network for providing communication content information upon starting providing of the communication content information, and/or deactivating the user plane transport bearer from the apparatus to the core network upon ending providing of the communication content information.   
     
     
         17 . The apparatus according to  claim 9 , wherein the processor is configured to
 receive a trigger for establishing a user plane transport bearer from the apparatus to a core network for providing communication content information when a communication via the connection for proximity service between the at least two devices starts, and/or deactivating the user plane transport bearer from the apparatus to the core network when the communication via the connection for proximity service between the at least two devices ends.   
     
     
         18 . (canceled) 
     
     
         19 . An apparatus comprising
 a processor and   a memory for storing instructions to be executed by the processor, wherein the processor is configured   to provide a connection to a radio access network, and   to receive interception information intercepted by lawful interception with respect to at least one device to be intercepted, wherein the at least one device is one of at least two devices connected by a connection for proximity service in the radio access network.   
     
     
         20 . (canceled) 
     
     
         21 . (canceled) 
     
     
         22 . The apparatus according to  claim 19 , wherein the processor is configured to
 trigger establishing a user plane transport bearer from a radio access network control element intercepting the at least one device for providing communication content information upon starting providing of the communication content information, and/or deactivating the user plane transport bearer from the radio access network control element upon ending providing of the communication content information.   
     
     
         23 . The apparatus according to  claim 19 , wherein the processor is configured to
 trigger establishing a user plane transport bearer from a radio access network control element intercepting the at least one device for providing communication content information when a communication via the connection for proximity service between the at least two devices starts, and/or deactivating the user plane transport bearer from the radio access network control element when the communication via the connection for proximity service between the at least two devices ends.   
     
     
         24 . (canceled) 
     
     
         25 . (canceled) 
     
     
         26 . A method comprising
 performing control in relation to a connection for proximity service between at least two devices,   performing lawful interception in relation to the proximity service with respect to at least one device to be intercepted of the at least two devices, and   configuring at least one radio access network control element to perform the lawful interception in relation to the proximity service.   
     
     
         27 .- 30 . (canceled) 
     
     
         31 . The method according to any one of the  claim 26 , wherein
 the interception information to be reported comprises communication content information, and the connection for proximity service between the at least two devices is an indirect connection via the at least one radio access network control element, and the method further comprises   instructing the at least one radio access network control element to provide the communication content information.   
     
     
         32 . The method according to  claim 26 , wherein the interception information to be reported comprise connection content information and the connection for proximity service between the at least two devices is a direct connection between the at least two devices, and
 the method further comprises   instructing the at least one radio access network control element to change the connection for proximity service to an indirect connection via the at least one radio access network control element and to provide the communication content information.   
     
     
         33 . The method according to  claim 32 , further comprising triggering a change of user plane security keys which are adopted in the direct connection and indirect connection respectively, in case security keys for direct connection and indirect connection are different. 
     
     
         34 . The method according to  claim 26 , wherein the method is implemented in a device-to-device registration server function or a mobility management entity or in the radio access network control element. 
     
     
         35 . A method comprising
 providing control in a radio access network,   performing control in relation to a connection for proximity service between at least two devices,   receiving configuration information for performing lawful interception in relation to the proximity service with respect to at least one device to be intercepted of the at least two devices, and   reporting interception information with respect to the at least one device to be intercepted.   
     
     
         36 .- 38 . (canceled) 
     
     
         39 . The method according to  claim 35 , wherein
 the interception information to be reported comprises communication content information, and the connection for proximity service between the at least two devices is an indirect connection via a radio access network control element carrying out the method, and   the method further comprises   reporting the communication content information.   
     
     
         40 . The method according to  claim 35 , wherein the interception information to be reported comprise connection content information and the connection for proximity service between the at least two devices is a direct connection between the at least two devices, and
 the method further comprises   changing the connection for proximity service to an indirect connection via a radio access network control element carrying out the method and to report the communication content information.   
     
     
         41 . The method according to  claim 40 , further comprising triggering a change of user plane security keys which are adopted in the direct connection and indirect connection respectively, in case security keys for direct connection and indirect connection are different. 
     
     
         42 . The method according to  claim 35 , further comprising
 receiving a trigger for establishing a user plane transport bearer from a radio access network control element carrying out the method to a core network for providing communication content information upon starting providing of the communication content information, and/or deactivating the user plane transport bearer from the radio access network control element to the core network upon ending providing of the communication content information.   
     
     
         43 . The method according to  claim 35 , further comprising
 receiving a trigger for establishing a user plane transport bearer from a radio access network control element carrying out the method to a core network for providing communication content information when a communication via the connection for proximity service between the at least two devices starts, and/or deactivating the user plane transport bearer from the radio access network control element to the core network when the communication via the connection for proximity service between the at least two devices ends.   
     
     
         44 . (canceled) 
     
     
         45 . (canceled) 
     
     
         46 . A method comprising
 providing a connection to a radio access network, and   receiving interception information intercepted by lawful interception with respect to at least one device to be intercepted, wherein the at least one device is one of at least two devices connected by a connection for proximity service in the radio access network.   
     
     
         47 . (canceled) 
     
     
         48 . (canceled) 
     
     
         49 . The method according to  claim 46 , further comprising
 triggering establishing a user plane transport bearer from a radio access network control element intercepting the at least one device to a gateway element performing the method for providing communication content information upon starting providing of the communication content information, and/or deactivating the user plane transport bearer from the radio access network control element to the gateway element upon ending providing of the communication content information.   
     
     
         50 . The method according to  claim 46 , further comprising
 triggering establishing a user plane transport bearer from a radio access network control element intercepting the at least one device to a gateway element performing the method for providing communication content information when a communication via the connection for proximity service between the at least two devices starts, and/or deactivating the user plane transport bearer from the radio access network control element to the gateway element when the communication via the connection for proximity service between the at least two devices ends.   
     
     
         51 . (canceled) 
     
     
         52 . A computer program product comprising code means for performing a method according to  claim 26  when run on a processing means or module. 
     
     
         53 . (canceled)