1. A method of obtaining session information in a network comprising a plurality of end-points coupled by at least one network element, the method comprising:
establishing a secure communication channel with a first end-point by the at least one network element;
forwarding session initiation requests and responses between the first end-point and the second end-point to establish a session for an exchange of media between the first end-point and the second end-point, the session having a characteristic;
retrieving the characteristic of the session from the first end-point using the secure channel;
storing the characteristic of the session, wherein the characteristic of the session is a key that is used to encrypt media of the session;
periodically capturing blocks of media exchanged between the first end-point and the second end-point;
attempting to decrypt the blocks of media using the key;
analyzing the blocks of media for which decryption was attempted to determine whether the key provided by the first end-point is valid, wherein analyzing the blocks of media for which decryption was attempted to determine whether the key provided by the first end-point is valid includes analyzing the blocks of media for which decryption was attempted to determine whether the blocks of media for which decryption was attempted remain encrypted by employing a spectral analyzer separate from the first and second end-points to perform a randomness test on signal frequencies within the blocks of media to determine whether the blocks of media include random data; and
logging information associated with the session if it is determined that the media remains encrypted after performing spectral analysis for use by legal interceptors.
2. The method of claim 1, wherein the characteristic of the session is associated with a manipulation of media data that is exchanged between the first end-point and the second end-point.
3. The method of claim 2, wherein the manipulation of media data includes encryption of the media data, and wherein the characteristic is a key that is used to encrypt the media data.
4. The method of claim 2, wherein the manipulation of media data includes translation of audio signals to digital signals, and wherein the characteristic is a codec associated with the media data.
5. The method of claim 2, wherein the manipulation of media data includes compression of the media data, and wherein the characteristic identifies a type and degree of compression applied to the media data.
6. The method of claim 1, wherein the step of forwarding requests and responses uses the Session Initiation Protocol.
7. The method of claim 1, wherein the step of forwarding requests and responses uses the H.323 protocol.
8. The method of claim 1, wherein the first end-point and second end-point communicate using a Voice over Internet Protocol network.
9. The method according to claim 3, wherein the key is obtained via a negotiation between the first end-point, the second end-point and the network element.
10. The method according to claim 3 wherein the key is obtained via a secure negotiation between the first end-point and the second end-point.
11. The method of claim 1, wherein the step of analyzing includes performing at least one of a Chi Square spectral analysis, a Monobit analysis, a Poker analysis, a Runs analysis and a Long Runs analysis of the decrypted blocks of media.
12. The method of claim 1, further including the steps of:
receiving a request from a legal interceptor for access to the session;
forwarding characteristic information associated with the session to the legal interceptor.
13. The method of claim 1, wherein the characteristic of the session includes codec information associated with the media, and wherein the method further includes the step of:
periodically capturing blocks of media exchanged between the first end-point and the second end-point; and
processing the blocks of media using the codec and spectral analysis to determine whether the blocks of media are encrypted.
14. A network element comprising:
at least one computer for:
establishing a secure communication channel with a first end-point by the at least one network element;
forwarding session initiation requests and responses between the first end-point and the second end-point to establish a session for an exchange of media between the first end-point and the second end-point, the session having a characteristic;
retrieving the characteristic of the session from the first end-point using the secure channel;
storing the characteristic of the session, wherein the characteristic of the session is a key that is used to encrypt media of the session;
session sampling logic implemented by the at least one computer for periodically sampling media exchanged in the session between the first and second end-points; and
analysis logic, coupled to the session sampling logic, for:
monitoring media exchanged between the first and second end-points;
determining whether the encryption methods used on the media are known, wherein determining whether encryption methods used on the media are known includes attempting to decrypt the media using the key and analyzing the media for which decryption was attempted to determine whether the media for which decryption was attempted remains encrypted by employing a spectral analyzer separate from the first and second end-points to perform a randomness test on signal frequencies within the media to determine whether the media includes random data; and
marking sessions having unknown encryption methods as potential security risks,
wherein the analysis logic further includes logging logic for logging session information of sessions determined to be at risk for use by legal interceptors.
15. The network element of claim 14 further including notification logic for notifying legal interceptors of sessions identified to be potential security risks.
16. The network element of claim 14, further comprising a key table for storing, for each session between each one of a plurality of end-points coupled to the network element, a value of a key used to encrypt media of the associated session, and wherein the analysis logic includes decryption logic for decrypting the periodically sampled media using the associated key and spectral analysis logic for determining whether the decrypted periodically sampled media remains encrypted.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for evaluating sensor images of an image-evaluating surroundings-detection system on a moving carrier, wherein the carrier has a driver assistance system, comprising:
evaluating captured sensor images which are dark in relation to the surroundings in chronologically successive evaluation steps;
determining whether in principle said dark images are moving toward the carrier at a speed of said carrier;
wherein the dark images are detected as shadows of a static object and corresponding signaling is performed, and
wherein the driver assistance system comprises a lane-keeping assistance system.
2. The method as claimed in claim 1, wherein a series or an area of pixels of the sensor image which are one of dark or bright in relation to the surroundings are evaluated in terms of a distance from the carrier of the image-evaluating surroundings-detection system.
3. The method as claimed in claim 2, wherein the series or the area of pixels which are dark or bright in relation to the surroundings are evaluated in chronologically successive evaluation steps to determine whether, and at what time intervals, the pixels are successively congruent with captured areas (ROI), defined in a direction of the carrier, within the sensor image.
4. The method as claimed in claim 3, wherein congruence with a captured area is detected when a relatively large number of the pixels of the captured area (ROI) have a brightness value (L) below a predefined first threshold.
5. The method as claimed in claim 3, wherein exiting from the captured areas is detected when a relatively small number of the pixels of the captured area (ROI) have a brightness value (L) above a predefined second threshold.
6. The method as claimed in claim 5, wherein the one relatively large number of pixels is 80% and the relatively small number of pixels is 20%.
7. The method as claimed in claim 2, wherein the evaluation of a series or an area of pixels in a predefined time period is performed using a parameter distribution algorithm, before automatic illumination control and sensitivity control of the surroundings-detection system and of the camera is carried out.
8. The method as claimed in claim 7, further comprising:
detecting exiting from a captured area (ROI) when the illumination control of the surroundings-detection system in the captured area (ROI) assumes a constant profile over a predefined time period.
9. An arrangement for evaluating sensor images of an image-evaluating surroundings-detection system on a moving carrier, comprising:
an electronic camera of the image-evaluating surroundings-detection system which is mounted on a vehicle as a carrier, wherein the camera is configured to continuously capture an area of the vehicle which is at the front in a direction of travel on a roadway
wherein, in each case, a sensor image comprising pixels and whose brightness values and color values depict the surroundings is present,
an evaluation unit is configured to detect dark areas in the sensor image of the camera as shadows of a static object, and configured to perform corresponding signaling based on the detected dark areas,
wherein the vehicle has a driver assistance system comprising a lane-keeping assistance system.
10. The arrangement as claimed in claim 9, wherein the color values of the color blue are utilized through indirect illumination by a light of the sky.
11. The arrangement as claimed in claim 9, wherein the evaluation unit is additionally supplied with a speed of the vehicle.
12. The arrangement as claimed in claim 9, wherein the signaling is displayed using a display unit in which the detection of the shadow, the exiting of the shadow, and distance of the shadow from the vehicle is displayed.
13. The arrangement as claimed in claim 9, wherein the dark are caused by one of a bridge, or a flyover comprising a shadow thrown onto the roadway in front of the vehicle.
14. A computer program product stored on a computer readable medium, comprising computer-readable programming instructions which, when the computer program product is executed on a microprocessor with associated storage means, cause the microprocessor to carry out a method as claimed in claim 1.