SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
(Main)Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP delivery - Part 7: Service-specific details for Mobile Services
Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP delivery - Part 7: Service-specific details for Mobile Services
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP TS 33.128 [6].
Zakonito prestrezanje (LI) - Izročilni vmesnik in storitveno specifične podrobnosti (SSD) za IP-dostavo vsebin - 7. del: Storitveno specifične podrobnosti za mobilne storitve
Ta dokument določa pristop izročanja zakonito prestreženih informacij, ki je opredeljen v standardih 3GPP TS 33.108 [3] in 3GPP TS 33.128 [6]. V tem dokumentu so uporabljene tehnike izročanja, ki so opredeljene v dokumentu ETSI TS 102 232-1 [2]. S tem je omogočeno zagotavljanje dodatnih storitev prek skupnega vmesnika.
Standard 3GPP TS 33.108
Področje uporabe tega dokumenta vključuje izročanje zakonito prestreženih informacij iz naslednjih delov standarda 3GPP TS 33.108 [3]:
• Podatki o prestreženi komunikaciji (IRI) in vsebina komunikacije (CC) iz vodovno komutirane mobilne domene (3GPP TS 33.108 [3], točka 5)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz paketno komutirane mobilne domene (3GPP TS 33.108 [3], točka 6)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz večpredstavnostne domene (3GPP TS 33.108 [3], točka 7)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz domene EPS (3GPP TS 33.108 [3], točka 10)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz konferenčne domene IMS (3GPP TS 33.108 [3], točka 11)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz domene VoIP na podlagi IMS (3GPP TS 33.108 [3], točka 12)
• Podatki o prestreženi komunikaciji iz domene bližnjih storitev (3GPP TS 33.108 [3], točka 13)
• Podatki o prestreženi komunikaciji in vsebina komunikacije iz domene GCSE (3GPP TS 33.108 [3], točka 14)
Ta dokument ne razveljavlja ali nadomešča nobene specifikacije ali zahteve v standardu 3GPP TS 33.108 [3].
Standard 3GPP TS 33.128
Področje uporabe tega dokumenta vključuje izročanje zakonito prestreženih informacij v skladu s standardom 3GPP TS 33.128 [6].
General Information
Buy Standard
Standards Content (Sample)
ETSI TS 102 232-7 V3.13.1 (2023-03)
TECHNICAL SPECIFICATION
Lawful Interception (LI);
Handover Interface and
Service-Specific Details (SSD) for IP delivery;
Part 7: Service-specific details for Mobile Services
---------------------- Page: 1 ----------------------
2 ETSI TS 102 232-7 V3.13.1 (2023-03)
Reference
RTS/LI-00236-7
Keywords
handover, IP, lawful interception, mobile, security
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE
Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871
Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law
anty is made of merchantability or fitness
and/or governmental rule and/or regulation and further, no representation or warr
for any particular purpose or against infringement of intellectual property rights.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.
Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.
© ETSI 2023.
All rights reserved.
ETSI
---------------------- Page: 2 ----------------------
3 ETSI TS 102 232-7 V3.13.1 (2023-03)
Contents
Intellectual Property Rights . 5
Foreword . 5
Modal verbs terminology . 5
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 7
3 Definition of terms, symbols and abbreviations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
4 General . 8
4.1 Approach . 8
4.2 Reference model . 8
5 3GPP handover Headers, data exchange and networks . 8
5.1 Approach . 8
5.2 Structures . 9
6 3GPP handover Intercept Related Information (IRI) and Content of Communication (CC) . 9
6.1 Definition of IRI events and CC . 9
6.2 IRI format . 9
6.3 CC format . 9
7 Void . 10
8 Void . 10
9 EPS Headers, data exchange and networks . 10
9.1 Approach . 10
9.2 Structures . 10
10 EPS Intercept Related Information (IRI) and Content of Communication (CC) . 10
10.1 Definition of IRI events and CC . 10
10.2 IRI format . 10
10.3 CC format . 10
11 IMS Conference Intercept Related Information (IRI) and Content of Communication (CC) . 11
11.1 Definition of IRI events and CC . 11
11.2 IRI format . 11
11.3 CC format . 11
12 IMS-based VoIP Intercept Related Information (IRI) and Content of Communication (CC) . 11
12.1 Definition of IRI events and CC . 11
12.2 IRI format . 11
12.3 CC format . 11
13 Proximity Services Intercept Related Information (IRI) . 12
13.1 Definition of IRI . 12
13.2 IRI format . 12
14 Group Communications System Enablers Intercept Related Information (IRI) and Content of
Communication (CC) . 12
14.1 Definition of IRI events and CC . 12
14.2 IRI format . 12
14.3 CC format . 12
ETSI
---------------------- Page: 3 ----------------------
4 ETSI TS 102 232-7 V3.13.1 (2023-03)
15 IRI and CC for services defined in 3GPP TS 33.128 . 12
15.1 Definition of IRI events and CC . 12
15.2 IRI and CC format . 13
15.3 Network Function Identifier . 13
15.4 Extended Interception Point Identifier . 13
15.5 PayloadDirection . 13
Annex A (normative): ASN.1 for IRI and CC . 14
A.1 Note on integrating ASN.1 structures . 14
A.1.1 Header field mappings . 14
A.1.2 CIN allocation . 16
Annex B (informative): Change request history . 17
History . 19
ETSI
---------------------- Page: 4 ----------------------
5 ETSI TS 102 232-7 V3.13.1 (2023-03)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its
Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the
®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This Technical Specification (TS) has been produced by ETSI Technical Committee Lawful Interception (LI).
The present document is part 7 of a multi-part deliverable. Full details of the entire series can be found in part 1 [2].
Modal verbs terminology
In the present document "shall", "shall not", "should", "should not", "may", "need not", "will", "will not", "can" and
"cannot" are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of
provisions).
"must" and "must not" are NOT allowed in ETSI deliverables except when used in direct citation.
Introduction
The ETSI TS 102 232 [i.1] series of standards aims to provide a common delivery interface for lawfully-intercepted
material from a wide range of services. The aim of the present document is to increase the range of services to which
the ETSI TS 102 232 [i.1] interface applies, by including services from 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]
within the ETSI TS 102 232 [i.1] delivery framework.
ETSI
---------------------- Page: 5 ----------------------
6 ETSI TS 102 232-7 V3.13.1 (2023-03)
1 Scope
Introduction
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP
TS 33.128 [6].
2 References
2.1 Normative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
Referenced documents which are not found to be publicly available in the expected location might be found at
https://docbox.etsi.org/Reference/.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are necessary for the application of the present document.
[1] Void.
[2] ETSI TS 102 232-1: "Lawful Interception (LI); Handover Interface and Service-Specific Details
(SSD) for IP delivery; Part 1: Handover specification for IP delivery".
ETSI
---------------------- Page: 6 ----------------------
7 ETSI TS 102 232-7 V3.13.1 (2023-03)
[3] ETSI TS 133 108: "Universal Mobile Telecommunications System (UMTS); LTE; Digital cellular
telecommunications system (Phase 2+) (GSM); 3G security; Handover interface for Lawful
Interception (LI) (3GPP TS 33.108)".
[4] Void.
[5] Void.
[6] ETSI TS 133 128: "Digital cellular telecommunications system (Phase 2+) (GSM); Universal
Mobile Telecommunications System (UMTS); LTE; 5G; Security; Protocol and procedures for
Lawful Interception (LI); Stage 3 (3GPP TS 33.128)".
[7] ETSI TS 103 221-2: "Lawful Interception (LI); Internal Network Interfaces; Part 2: X2/X3".
2.2 Informative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are not necessary for the application of the present document but they assist the
user with regard to a particular subject area.
[i.1] ETSI TS 102 232 (all parts): "Lawful Interception (LI); Handover Interface and Service-Specific
Details (SSD) for IP delivery".
[i.2] ETSI TS 101 671: "Lawful Interception (LI) Handover interface for the lawful interception of
telecommunications traffic".
NOTE: ETSI TS 101 671 is in status "historical" and is not maintained.
3 Definition of terms, symbols and abbreviations
3.1 Terms
For the purposes of the present document, the terms given in ETSI TS 102 232-1 [2] and ETSI TS 101 671 [i.2] apply.
3.2 Symbols
Void.
3.3 Abbreviations
For the purposes of the present document, the following abbreviations apply:
ASN.1 Abstract Syntax Notation One
CC Content of Communication
CC-PDU Content of Communication Protocol Data Unit
CIN Communications Identity Number
confLIC Conference LI Correlation
CR Change Request
CS Circuit Switched
EPS Evolved Packet System
GCSE Group Communications System Enablers
gcseLIC Group Communications System Enablers LI Correlation
ETSI
---------------------- Page: 7 ----------------------
8 ETSI TS 102 232-7 V3.13.1 (2023-03)
HI Handover Interface
IMS IP Multimedia Subsystem
IP Internet Protocol
IPID Interception Point IDentifier
IRI Intercept Related Information
LI Lawful Interception
LI_X2 Lawful Interception Internal Interface 2
LI_X3 Lawful Interception Internal Interface 3
MF Mediation Function (at CSP)
NFID Network Function Identifier
PDU Protocol Data Unit
ProSe Proximity Services
PS Packet Switched
TC Technical Committee
TS Technical Specification
uLIC UMTS LI Correlation
UMTS Universal Mobile Telecommunications System
voipLIC Voice Over IP LI Correlation
4 General
4.1 Approach
The present document forms part 7 of the ETSI TS 102 232 [i.1] family of standards, in that it is a service-specific
component of the ETSI TS 102 232-1 [2] framework.
3GPP TS 33.108 [3] and 3GPP TS 33.128 [6] define the interception behaviour that leads to IRI events on the handover
interface, for both the packet data domain and circuit switched domain.
4.2 Reference model
Law Enforcement
Mediation
Source of mobile data
Monitoring
Function (MF)
(defined in 3GPP
Facility
TS 33.108 or 3GPP
TS 33.128.
Handover
interface
Figure 1: Reference model
5 3GPP handover Headers, data exchange and
networks
5.1 Approach
ETSI TS 102 232-1 [2] describes a technique for data exchange, and specifies the headers that shall be associated with
the results of interception. The present document follows ETSI TS 102 232-1 [2] regarding headers and data exchange,
and demonstrates how the header fields in ETSI TS 102 232-1 [2] can be populated in a direct and straightforward
manner using the interception information available in 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6].
ETSI
---------------------- Page: 8 ----------------------
9 ETSI TS 102 232-7 V3.13.1 (2023-03)
5.2 Structures
IRI events from 3GPP TS 33.108 [3], for both circuit and packet switched services as per clauses 5 and 6 in 3GPP
TS 33.108 [3], are sent using the uMTSIRI element of IRIContents.
CC from CS domain delivery in IP are sent using the CSvoice-CC-PDU element of CCContents, which is the
CSvoice-CC-PDU from 3GPP TS 33.108 [3], containing cSvoiceLIC-header and payload.
CC from these packet switched services are sent using the uMTSCC element of CCContents, which is an OCTET
STRING.
Alternatively, subject to national agreement, CC from these packet switched services are sent using the
uMTSCC-CC-PDU element of CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the
uLIC8header and payload.
Clause 9.2 defines the structures for IRI and CC reporting per clause 10 of 3GPP TS 33.108 [3] for EPS services.
Clause 15 defines the structures for IRI and CC reporting of 3GPP TS 33.128 [6] defined EPS services.
CC and IRI PDUs formatted according to 3GPP TS 33.128 [6] are sent using the threeGPP33128DefinedCC and
threeGPP33128DefinedIRI elements of CCContents and IRIContents respectively.
6 3GPP handover Intercept Related Information (IRI)
and Content of Communication (CC)
6.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3] for both circuit and packet switched services as per clauses 5 and 6 in
3GPP TS 33.108 [3].
6.2 IRI format
IRI events are defined as per 3GPP TS 33.108 [3] for both of these circuit and packet switched services. They are sent
using the uMTSIRI element of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
6.3 CC format
CC from these packet switched services are sent using the uMTSCC element CCContents, which is an OCTET
STRING. The OCTET STRING will be as defined in the payload element of the CC-PDU structure in 3GPP
TS 33.108 [3], clause B.4.
Alternatively, subject to national agreement, CC from these packet switched services are sent using the
uMTSCC-CC-PDU element of CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the
uLIC-header and payload.
CC from CS domain delivery in IP are sent using the CSvoice-CC-PDU element of CCContents, which is the
CSvoice-CC-PDU from 3GPP TS 33.108 [3], containing cSvoiceLIC-header and payload.
The information in the cSvoiceLIC-header element of CSvoice-CC-PDU will be used to populate the header
information in the LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between
these elements.
The information in the uLIC-header element of CC-PDU will be used to populate the header information in the
LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between these elements.
ETSI
---------------------- Page: 9 ----------------------
10 ETSI TS 102 232-7 V3.13.1 (2023-03)
7 Void
8 Void
9 EPS Headers, data exchange and networks
9.1 Approach
ETSI TS 102 232-1 [2] describes a technique for data exchange, and specifies the headers that shall be associated with
the results of interception. The present document follows ETSI TS 102 232-1 [2] regarding headers, data exchange and
networks demonstrates how the header fields in ETSI TS 102 232-1 [2] can be populated in a direct and straightforward
manner using the interception information available in 3GPP TS 33.108 [3].
9.2 Structures
IRI events from 3GPP TS 33.108 [3], for EPS services, are sent using the ePSIRI element of IRIContents.
CC from EPS services is sent using the ePSCC element of CCContents, which is an OCTET STRING.
Alternatively, subject to national agreement, CC from EPS services are sent using the ePSCC-CC-PDU element of
CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the uLIC-header and payload.
10 EPS Intercept Related Information (IRI) and Content
of Communication (CC)
10.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3].
10.2 IRI format
IRI events for EPS services are defined as per clause 10 of 3GPP TS 33.108 [3]. They are sent using the ePSIRI element
of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
10.3 CC format
CC from EPS is sent using the ePSCC element of CCContents, which is an OCTET STRING. The OCTET STRING
will be as defined in the payload element of the CC-PDU structure in 3GPP TS 33.108 [3], clause B.10.
Alternatively, subject to national agreement, CC from EPS services are sent using the ePSCC-CC-PDU element of
CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the uLIC-header and payload.
The information in the uLIC-header element of CC-PDU will be used to populate the header information in the
LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between these elements.
ETSI
---------------------- Page: 10 ----------------------
11 ETSI TS 102 232-7 V3.13.1 (2023-03)
11 IMS Conference Intercept Related Information (IRI)
and Content of Communication (CC)
11.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3].
11.2 IRI format
IRI events for IMS Conference services are defined as per clause 11 of 3GPP TS 33.108 [3]. They are sent using the
confIRI element of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
11.3 CC format
CC from IMS Conference services are sent using the Conf-CC-PDU element of CCContents, which is the
Conf-CC-PDU from 3GPP TS 33.108 [3], containing the confLIC-header and payload.
The information in the confLIC-header element of Conf-CC-PDU will be used to populate the header information in the
LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between these elements.
NOTE: Octet string is not provided as it will break evidential use.
12 IMS-based VoIP Intercept Related Information (IRI)
and Content of Communication (CC)
12.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3].
12.2 IRI format
IRI events for IMS-based VoIP services are defined as per clause 12 of 3GPP TS 33.108 [3]. They are sent using the
ePSIRI element of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
12.3 C
...
SLOVENSKI STANDARD
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
01-julij-2023
Zakonito prestrezanje (LI) - Izročilni vmesnik in storitveno specifične podrobnosti
(SSD) za IP-dostavo vsebin - 7. del: Storitveno specifične podrobnosti za mobilne
storitve
Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP
delivery - Part 7: Service-specific details for Mobile Services
Ta slovenski standard je istoveten z: ETSI TS 102 232-7 V3.13.1 (2023-03)
ICS:
35.240.95 Spletne uporabniške rešitve Internet applications
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
---------------------- Page: 1 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
---------------------- Page: 2 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
ETSI TS 102 232-7 V3.13.1 (2023-03)
TECHNICAL SPECIFICATION
Lawful Interception (LI);
Handover Interface and
Service-Specific Details (SSD) for IP delivery;
Part 7: Service-specific details for Mobile Services
---------------------- Page: 3 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
2 ETSI TS 102 232-7 V3.13.1 (2023-03)
Reference
RTS/LI-00236-7
Keywords
handover, IP, lawful interception, mobile, security
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE
Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871
Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law
anty is made of merchantability or fitness
and/or governmental rule and/or regulation and further, no representation or warr
for any particular purpose or against infringement of intellectual property rights.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.
Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.
© ETSI 2023.
All rights reserved.
ETSI
---------------------- Page: 4 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
3 ETSI TS 102 232-7 V3.13.1 (2023-03)
Contents
Intellectual Property Rights . 5
Foreword . 5
Modal verbs terminology . 5
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 7
3 Definition of terms, symbols and abbreviations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
4 General . 8
4.1 Approach . 8
4.2 Reference model . 8
5 3GPP handover Headers, data exchange and networks . 8
5.1 Approach . 8
5.2 Structures . 9
6 3GPP handover Intercept Related Information (IRI) and Content of Communication (CC) . 9
6.1 Definition of IRI events and CC . 9
6.2 IRI format . 9
6.3 CC format . 9
7 Void . 10
8 Void . 10
9 EPS Headers, data exchange and networks . 10
9.1 Approach . 10
9.2 Structures . 10
10 EPS Intercept Related Information (IRI) and Content of Communication (CC) . 10
10.1 Definition of IRI events and CC . 10
10.2 IRI format . 10
10.3 CC format . 10
11 IMS Conference Intercept Related Information (IRI) and Content of Communication (CC) . 11
11.1 Definition of IRI events and CC . 11
11.2 IRI format . 11
11.3 CC format . 11
12 IMS-based VoIP Intercept Related Information (IRI) and Content of Communication (CC) . 11
12.1 Definition of IRI events and CC . 11
12.2 IRI format . 11
12.3 CC format . 11
13 Proximity Services Intercept Related Information (IRI) . 12
13.1 Definition of IRI . 12
13.2 IRI format . 12
14 Group Communications System Enablers Intercept Related Information (IRI) and Content of
Communication (CC) . 12
14.1 Definition of IRI events and CC . 12
14.2 IRI format . 12
14.3 CC format . 12
ETSI
---------------------- Page: 5 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
4 ETSI TS 102 232-7 V3.13.1 (2023-03)
15 IRI and CC for services defined in 3GPP TS 33.128 . 12
15.1 Definition of IRI events and CC . 12
15.2 IRI and CC format . 13
15.3 Network Function Identifier . 13
15.4 Extended Interception Point Identifier . 13
15.5 PayloadDirection . 13
Annex A (normative): ASN.1 for IRI and CC . 14
A.1 Note on integrating ASN.1 structures . 14
A.1.1 Header field mappings . 14
A.1.2 CIN allocation . 16
Annex B (informative): Change request history . 17
History . 19
ETSI
---------------------- Page: 6 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
5 ETSI TS 102 232-7 V3.13.1 (2023-03)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its
Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the
®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This Technical Specification (TS) has been produced by ETSI Technical Committee Lawful Interception (LI).
The present document is part 7 of a multi-part deliverable. Full details of the entire series can be found in part 1 [2].
Modal verbs terminology
In the present document "shall", "shall not", "should", "should not", "may", "need not", "will", "will not", "can" and
"cannot" are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of
provisions).
"must" and "must not" are NOT allowed in ETSI deliverables except when used in direct citation.
Introduction
The ETSI TS 102 232 [i.1] series of standards aims to provide a common delivery interface for lawfully-intercepted
material from a wide range of services. The aim of the present document is to increase the range of services to which
the ETSI TS 102 232 [i.1] interface applies, by including services from 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]
within the ETSI TS 102 232 [i.1] delivery framework.
ETSI
---------------------- Page: 7 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
6 ETSI TS 102 232-7 V3.13.1 (2023-03)
1 Scope
Introduction
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP
TS 33.128 [6].
2 References
2.1 Normative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
Referenced documents which are not found to be publicly available in the expected location might be found at
https://docbox.etsi.org/Reference/.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are necessary for the application of the present document.
[1] Void.
[2] ETSI TS 102 232-1: "Lawful Interception (LI); Handover Interface and Service-Specific Details
(SSD) for IP delivery; Part 1: Handover specification for IP delivery".
ETSI
---------------------- Page: 8 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
7 ETSI TS 102 232-7 V3.13.1 (2023-03)
[3] ETSI TS 133 108: "Universal Mobile Telecommunications System (UMTS); LTE; Digital cellular
telecommunications system (Phase 2+) (GSM); 3G security; Handover interface for Lawful
Interception (LI) (3GPP TS 33.108)".
[4] Void.
[5] Void.
[6] ETSI TS 133 128: "Digital cellular telecommunications system (Phase 2+) (GSM); Universal
Mobile Telecommunications System (UMTS); LTE; 5G; Security; Protocol and procedures for
Lawful Interception (LI); Stage 3 (3GPP TS 33.128)".
[7] ETSI TS 103 221-2: "Lawful Interception (LI); Internal Network Interfaces; Part 2: X2/X3".
2.2 Informative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are not necessary for the application of the present document but they assist the
user with regard to a particular subject area.
[i.1] ETSI TS 102 232 (all parts): "Lawful Interception (LI); Handover Interface and Service-Specific
Details (SSD) for IP delivery".
[i.2] ETSI TS 101 671: "Lawful Interception (LI) Handover interface for the lawful interception of
telecommunications traffic".
NOTE: ETSI TS 101 671 is in status "historical" and is not maintained.
3 Definition of terms, symbols and abbreviations
3.1 Terms
For the purposes of the present document, the terms given in ETSI TS 102 232-1 [2] and ETSI TS 101 671 [i.2] apply.
3.2 Symbols
Void.
3.3 Abbreviations
For the purposes of the present document, the following abbreviations apply:
ASN.1 Abstract Syntax Notation One
CC Content of Communication
CC-PDU Content of Communication Protocol Data Unit
CIN Communications Identity Number
confLIC Conference LI Correlation
CR Change Request
CS Circuit Switched
EPS Evolved Packet System
GCSE Group Communications System Enablers
gcseLIC Group Communications System Enablers LI Correlation
ETSI
---------------------- Page: 9 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
8 ETSI TS 102 232-7 V3.13.1 (2023-03)
HI Handover Interface
IMS IP Multimedia Subsystem
IP Internet Protocol
IPID Interception Point IDentifier
IRI Intercept Related Information
LI Lawful Interception
LI_X2 Lawful Interception Internal Interface 2
LI_X3 Lawful Interception Internal Interface 3
MF Mediation Function (at CSP)
NFID Network Function Identifier
PDU Protocol Data Unit
ProSe Proximity Services
PS Packet Switched
TC Technical Committee
TS Technical Specification
uLIC UMTS LI Correlation
UMTS Universal Mobile Telecommunications System
voipLIC Voice Over IP LI Correlation
4 General
4.1 Approach
The present document forms part 7 of the ETSI TS 102 232 [i.1] family of standards, in that it is a service-specific
component of the ETSI TS 102 232-1 [2] framework.
3GPP TS 33.108 [3] and 3GPP TS 33.128 [6] define the interception behaviour that leads to IRI events on the handover
interface, for both the packet data domain and circuit switched domain.
4.2 Reference model
Law Enforcement
Mediation
Source of mobile data
Monitoring
Function (MF)
(defined in 3GPP
Facility
TS 33.108 or 3GPP
TS 33.128.
Handover
interface
Figure 1: Reference model
5 3GPP handover Headers, data exchange and
networks
5.1 Approach
ETSI TS 102 232-1 [2] describes a technique for data exchange, and specifies the headers that shall be associated with
the results of interception. The present document follows ETSI TS 102 232-1 [2] regarding headers and data exchange,
and demonstrates how the header fields in ETSI TS 102 232-1 [2] can be populated in a direct and straightforward
manner using the interception information available in 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6].
ETSI
---------------------- Page: 10 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
9 ETSI TS 102 232-7 V3.13.1 (2023-03)
5.2 Structures
IRI events from 3GPP TS 33.108 [3], for both circuit and packet switched services as per clauses 5 and 6 in 3GPP
TS 33.108 [3], are sent using the uMTSIRI element of IRIContents.
CC from CS domain delivery in IP are sent using the CSvoice-CC-PDU element of CCContents, which is the
CSvoice-CC-PDU from 3GPP TS 33.108 [3], containing cSvoiceLIC-header and payload.
CC from these packet switched services are sent using the uMTSCC element of CCContents, which is an OCTET
STRING.
Alternatively, subject to national agreement, CC from these packet switched services are sent using the
uMTSCC-CC-PDU element of CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the
uLIC8header and payload.
Clause 9.2 defines the structures for IRI and CC reporting per clause 10 of 3GPP TS 33.108 [3] for EPS services.
Clause 15 defines the structures for IRI and CC reporting of 3GPP TS 33.128 [6] defined EPS services.
CC and IRI PDUs formatted according to 3GPP TS 33.128 [6] are sent using the threeGPP33128DefinedCC and
threeGPP33128DefinedIRI elements of CCContents and IRIContents respectively.
6 3GPP handover Intercept Related Information (IRI)
and Content of Communication (CC)
6.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3] for both circuit and packet switched services as per clauses 5 and 6 in
3GPP TS 33.108 [3].
6.2 IRI format
IRI events are defined as per 3GPP TS 33.108 [3] for both of these circuit and packet switched services. They are sent
using the uMTSIRI element of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
6.3 CC format
CC from these packet switched services are sent using the uMTSCC element CCContents, which is an OCTET
STRING. The OCTET STRING will be as defined in the payload element of the CC-PDU structure in 3GPP
TS 33.108 [3], clause B.4.
Alternatively, subject to national agreement, CC from these packet switched services are sent using the
uMTSCC-CC-PDU element of CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the
uLIC-header and payload.
CC from CS domain delivery in IP are sent using the CSvoice-CC-PDU element of CCContents, which is the
CSvoice-CC-PDU from 3GPP TS 33.108 [3], containing cSvoiceLIC-header and payload.
The information in the cSvoiceLIC-header element of CSvoice-CC-PDU will be used to populate the header
information in the LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between
these elements.
The information in the uLIC-header element of CC-PDU will be used to populate the header information in the
LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between these elements.
ETSI
---------------------- Page: 11 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
10 ETSI TS 102 232-7 V3.13.1 (2023-03)
7 Void
8 Void
9 EPS Headers, data exchange and networks
9.1 Approach
ETSI TS 102 232-1 [2] describes a technique for data exchange, and specifies the headers that shall be associated with
the results of interception. The present document follows ETSI TS 102 232-1 [2] regarding headers, data exchange and
networks demonstrates how the header fields in ETSI TS 102 232-1 [2] can be populated in a direct and straightforward
manner using the interception information available in 3GPP TS 33.108 [3].
9.2 Structures
IRI events from 3GPP TS 33.108 [3], for EPS services, are sent using the ePSIRI element of IRIContents.
CC from EPS services is sent using the ePSCC element of CCContents, which is an OCTET STRING.
Alternatively, subject to national agreement, CC from EPS services are sent using the ePSCC-CC-PDU element of
CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the uLIC-header and payload.
10 EPS Intercept Related Information (IRI) and Content
of Communication (CC)
10.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3].
10.2 IRI format
IRI events for EPS services are defined as per clause 10 of 3GPP TS 33.108 [3]. They are sent using the ePSIRI element
of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1 [2] structures should be populated
consistently in both structures. Clause A.1 gives guidance on mapping between 3GPP TS 33.108 [3] elements and ETSI
TS 102 232-1 [2] elements for IRI.
10.3 CC format
CC from EPS is sent using the ePSCC element of CCContents, which is an OCTET STRING. The OCTET STRING
will be as defined in the payload element of the CC-PDU structure in 3GPP TS 33.108 [3], clause B.10.
Alternatively, subject to national agreement, CC from EPS services are sent using the ePSCC-CC-PDU element of
CCContents, which is the CC-PDU from 3GPP TS 33.108 [3], containing the uLIC-header and payload.
The information in the uLIC-header element of CC-PDU will be used to populate the header information in the
LI-PS-PDU structure of ETSI TS 102 232-1 [2]. Clause A.1 gives guidance on the mapping between these elements.
ETSI
---------------------- Page: 12 ----------------------
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
11 ETSI TS 102 232-7 V3.13.1 (2023-03)
11 IMS Conference Intercept Related Information (IRI)
and Content of Communication (CC)
11.1 Definition of IRI events and CC
IRI events are defined as per 3GPP TS 33.108 [3].
11.2 IRI format
IRI events for IMS Conference services are defined as per clause 11 of 3GPP TS 33.108 [3]. They are sent using the
confIRI element of IRIContents.
Fields which are duplicated in the 3GPP TS 33.108 [3] and ETSI TS 102 232-1
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.