Skip the navigation
)
News

Microsoft seeks patent for spy tech for Skype

'Legal Intercept' would allow it to silently record VoIP communications.

June 28, 2011 05:06 PM ET

Computerworld - Editor's note: An earlier version of this story said the Legal Intercept patent had been granted. The patent application is still being processed.

A technology called Legal Intercept that Microsoft hopes to patent would allow the company to secretly intercept, monitor and record Skype calls. And it's stoking privacy concerns.

Microsoft's patent application for Legal Intercept was filed in 2009, well before the company's $8.5 billion purchase of Skype in May. The patent application, which is still in process, was made public last week.

From Microsoft's description of the technology in its patent application, Legal Intercept appears similar to tools used by telecommunication companies and equipment makers to comply with government wiretap and surveillance requests.

According to Microsoft, Legal Intercept is designed to silently record communications on VoIP networks such as Skype.

"Data associated with a request to establish a communication is modified to cause the communication to be established via a path that includes a recording agent." The recording agent is then able to "silently record" the communication, according to Microsoft's description.

"Modification may include, for example, adding, changing, and/or deleting data within the data. The data as modified is then passed to a protocol entity that uses the data to establish a communication session," the description notes.

According to Microsoft, Legal Intercept addresses gaps in current monitoring tools that are designed mainly for intercepting Plain Old Telephone Service (POTS). "With new Voice over Internet Protocol (VoIP) and other communication technology, the POTS model for recording communications does not work," Microsoft noted in the patent application.

Michael Froomkin, a professor of law at the University Of Miami School Of Law, said that from the patent description it sounds as if the technology would allow Microsoft to do is make Skype CALEA capable.

CALEA (Communications Assistance for Law Enforcement Act) requires telecommunications carriers and makers of communications equipment to enable their equipment so it can be used for surveillance purposes by federal law enforcement agencies.

But the implications of the technology are much broader, Froomkin added. "First, making a communication technology FBI-friendly means also making it dictator-friendly, and in the long run this is not good for movements like the Arab Spring," he said. "Second, experience shows that building in back doors invites exploits."

Skype has also been somewhat cagey about whether it's had a CALEA-style back door all along, he said. "Skype doesn't fully disclose how it works or how it encrypts," Froomkin said. "As a result users must take a great deal on faith.

"History teaches us over and over that faith is very easily misplaced," he added.

Jeffrey Chester, executive director of the Center for Digital Democracy, said the technology aligns with Microsoft's broader goals.

The company "aims to incorporate tracking technologies for its Skype services, as it aggressively expands its mobile advertising system across the world," Chester said. "Skype will likely soon have ad targeting and user profiling digit strings attached. This underscores the need for strong mobile and location privacy safeguards," he said.

A Microsoft spokesman said the company would not comment.

Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at Twitter @jaivijayan or subscribe to Jaikumar's RSS feed Vijayan RSS. His e-mail address is jvijayan@computerworld.com.

Read more about Privacy in Computerworld's Privacy Topic Center.



What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Don't have an account yet?
Additional Resources
Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

Privacy White Papers
Practice Management: Double Billing Rate and Improve Patient Services
Would you like to double your billing rate and achieve faster payment for services?

Download this customer success story to see how One Health...
Mission Critical Data Explosion and Customer Case Study
Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?

Download this customer success story to see how...
Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
Database Activity Monitoring Is Evolving
Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
Establishing a Strategy for Database Security is No Longer Optional
The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three...
All Privacy White Papers
Privacy Webcasts
Close a Dangerous Vulnerability: Automated Methods for Managing Admin Rights
In this exclusive webcast from Viewfinity, you'll hear how to leverage Group Policy Object settings to close this vulnerability by elevating privileges for...
Data Protection and Disaster Recovery with iSCSI and VMware
Get this on demand webcast now
Distributed Database Security with Real-time Monitoring
View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
InfoSphere Warehouse Packs Demo
These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
Delivery Management -- Extending Lifecycle Management
Date: Wednesday, June 20, 2012, 1:00 PM EDT

Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,...
All Privacy Webcasts
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs