ETSI TR 141 033-2016 Digital cellular telecommunications system (Phase 2+) Lawful Interception requirements for GSM (V13 0 0 3GPP TR 41 033 version 13 0 0 Release 13)《数字蜂窝通信系统(第2+阶_1.pdf

1、 ETSI TR 1Digital cellular telecoLawful Interce(3GPP TR 41.0TECHNICAL REPORT 141 033 V13.0.0 (2016communications system (Phaception requirements for GSM.033 version 13.0.0 Release 13GLOBAL SYSTEMOBILE COMMUN16-01) hase 2+); SM 13) TEM FOR ICATIONSRETSI ETSI TR 141 033 V13.0.0 (2016-01)13GPP TR 41.03

2、3 version 13.0.0 Release 13Reference RTR/TSGS-0341033vd00 Keywords GSM,SECURITY ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse

3、 (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified witho

4、ut the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of th

5、e present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http:/portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to o

6、ne of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The conte

7、nt of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2016. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Ma

8、rks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI TR 141 033 V13.0.0 (2016-01)23G

9、PP TR 41.033 version 13.0.0 Release 13Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in E

10、TSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, n

11、o investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical

12、 Report (TR) has been produced by ETSI 3rd Generation Partnership Project (3GPP). The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or GSM identities. These should be interpreted as being references to the corresponding ETSI deliverabl

13、es. The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under http:/webapp.etsi.org/key/queryform.asp. Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be interprete

14、d as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI TR 141 033 V13.0.0 (2016-01)33GPP TR 41.033 version 13.0.0 Release 13Contents Intellectua

15、l Property Rights 2g3Foreword . 2g3Modal verbs terminology 2g3Foreword . 4g31 Scope 5g32 References 5g33 Definitions and abbreviations . 5g33.1 Definitions 5g33.2 Abbreviations . 6g34 Telecom interception requirements 6g34.1 Background 6g34.2 Background technical requirements . 6g35 General technica

16、l requirements for legal interception in GSM/PCN networks . 7g35.1 General principles. 8g35.2 Capability . 8g35.3 Operation 8g36 Summary of information passed over the X-interface . 8g36.1 Intercept request, set-up details for target (X1) 8g36.2 Output (from PLMN to RF) . 8g36.2.1 X2, “Network relat

17、ed data“ . 8g36.2.2 X3, “Product“ (when requested) . 9g37 Interception mechanisms 9g37.1 Intercept Request Function (X1) 9g37.2 Interception output, “Product“ and “Network related data“ 9g37.3 Delivery mechanisms . 10g37.3.1 Network related data (see subclause 6.2.1) . 10g37.3.2 Product 10g37.4 Admi

18、nistration mechanism . 10g37.4.1 Security . 10g37.5 Merging and processing of “Product“ and “Network related data“ 10g3Annex A: Diagram of an example interception technical implementation . 11g3Annex B: GPRS and Lawful Interception . 12g3B.1 Introduction 12g3B.1.1 Overview 12g3B.1.2 Scope 12g3B.2 Ta

19、rget Identity 12g3B.3 Summary of Information Passed over the X-interface . 12g3B.3.1 Intercept Request, Set-up Details for Target (X1) 12g3B.3.2 Output (from PLMN to Requesting Function) . 13g3B.3.2.1 X2, “Network related data“ . 13g3B.3.2.2 X3, “Product“ (when requested) . 13g3Annex C: Change histo

20、ry 14g3History 15g3ETSI ETSI TR 141 033 V13.0.0 (2016-01)43GPP TR 41.033 version 13.0.0 Release 13Foreword This Technical Report has been produced by the 3rdGeneration Partnership Project (3GPP). The contents of the present document are subject to continuing work within the TSG and may change follow

21、ing formal TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an identifying change of release date and an increase in version number as follows: Version x.y.z where: x the first digit: 1 presented to TSG for information; 2 presented to T

22、SG for approval; 3 or greater indicates TSG approved document under change control. y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates, etc. z the third digit is incremented when editorial only changes have been incorporated in the docum

23、ent. ETSI ETSI TR 141 033 V13.0.0 (2016-01)53GPP TR 41.033 version 13.0.0 Release 131 Scope This Technical Report describes the interface requirements of a mechanism which will deliver intercept from GSM mobile stations, including both speech and data product. The stage 1 description of Lawful Inter

24、ception will be specified in 3GPP TS 42.033. The stage 2 description of Lawful Interception will be specified in 3GPP TS 43.033. 2 References The following documents contain provisions which, through reference in this text, constitute provisions of the present document. References are either specifi

25、c (identified by date of publication, edition number, version number, etc.) or non-specific. For a specific reference, subsequent revisions do not apply. For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific

26、 reference implicitly refers to the latest version of that document in the same Release as the present document. 1 GSM 01.04: “Digital cellular telecommunications system (Phase 2+); Abbreviations and acronyms“. 2 GSM MoU Association document SG09, June 1995 3 The European Union Council Resolution re

27、ference: International Requirements for The Lawful Interception of Telecommunications (January 1995), (JAI_24_Rev 2, 8197/2/95) 4 ITU-T Recommendation G.711: “Pulse Code Modulation (PCM) of voice frequencies“. 3 Definitions and abbreviations 3.1 Definitions A-party: The originating party number. B-P

28、arty: The called party number. C-Party: A diverted-to party number. Network related data: Data associated with a call, excluding the actual product such as speech or data. Product: Data sent or received by a mobile user such as speech or fax or data. RF: Requesting Function; mechanism owned by an in

29、terception authority to set-up and receive the interception product. Target: An MSISDN (or sometimes IMSI) which is to be made the subject of an interception. WAN: Wide Area Network, or interconnected LANs providing a computer data network between PLMN elements. ETSI ETSI TR 141 033 V13.0.0 (2016-01

30、)63GPP TR 41.033 version 13.0.0 Release 133.2 Abbreviations In addition to those mentioned below, abbreviations used in this report are listed in GSM 01.04. CGI Cell Global Identity FTAM File Transfer Access and Management GSM Global System for Mobile communications HLR Home Location Register IMEI I

31、nternational Mobile station Equipment Identity IMSI International Mobile Subscriber Identity ISDN Integrated Services Digital Network LEA Law Enforcement Agency MoU Memorandum of Understanding MoU-SG The MoU Security Group MS Mobile Station MSC Mobile-services Switching Centre MSISDN Mobile Station

32、International ISDN Number PLMN Public Lands Mobile Network PSTN Public Switched Telephone Network RF Requesting Function SMG Special Mobile Group SMG-SG The ETSI TC SMG Security Group SMS Short Message Service SS Supplementary ServiceSS7 Signalling System No. 7 UDI Unrestricted Digital Interface (64

33、 kbit/s ISDN data) WAN Wide Area Network 4 Telecom interception requirements 4.1 Background Previous MoU-SG specification SG09 has defined the interception of GSM in general terms. This report will define the X-interface to the Public Lands Mobile Network (PLMN) to support interception. 4.2 Backgrou

34、nd technical requirements This report describes the interface to the PLMN, defined as the X-interface. The interface is illustrated in figure 1. The X-interface is between the Requesting Function (RF) and the PLMN. It is divided into three logical parts: 1) The X1-interface is used to present comman

35、ds to the PLMN, from an administration centre. This interface is part of the switch management capability, usually over an X.25 interface or Wide Area Network (WAN). 2) The X2-interface receives “Network related data“ from the Mobile-services Switching Centre (MSC), in switch management or file outp

36、ut format, probably over an X.25 network or WAN. Alternatively, it may be sent in combination with the ISDN product in the X3-interface described below. 3) The X3-interface receives “Product“ (mobile users speech and data) from the MSC. It is contained within one or more 64 kbit/s channels. The obje

37、ctive of the X-interface is to allow a standard to be created so that a PLMN consisting of MSCs from different manufacturers may be combined. Although the X1-interface commands may be slightly different for each manufacturer, it should be possible to create a single intelligent system to manage the

38、interface at a low cost, capable of managing all different manufacturers implementations. Similarly, the outputs defined in the X2 and X3 parts of the X-interface should be capable of processing by the same “Requesting Function“. ETSI ETSI TR 141 033 V13.0.0 (2016-01)73GPP TR 41.033 version 13.0.0 R

39、elease 135 General technical requirements for legal interception in GSM/PCN networks Figure 1 shows the general system for interception. Technical interception is implemented within a PLMN by special functionality on network elements; primarily the MSCs/VLRs and Home Location Registers (HLRs). Use o

40、f the function and delivery of the “Product“ from the target is defined by the X-interface. X-interface RequestingFunctionGMSCMSC/VLRAdministrationCentreTARGET / MSISDNRF PLMN 123b4bMediation DeviceRF PLMNRF PLMNGSM PLMN3a4aREQUESTINGFUNCTION (RF)PRODUCTNETWORK RELATED DATAHLRTECHNICAL INTERCEPTIONI

41、NTERFACEINTERCEPTREQUESTINTERCEPTREQUEST(Optional)NOTES: 1: Paper or direct request 2: Electronic request 3a and 3b:“Network related data“ Items 3 - roamers from other PLMNs may also be targets; - mobile originating, mobile terminating, and diversion or multiparty calls will be capable of intercepti

42、on; - location information. 5.3 Operation The interception function shall not alter the operation of a targets service or provide indication to any party involved in the call. Output product should be in “clear“ form - no GSM radio interface or PLMN generated radio interface encoding or encryption i

43、s present (the PLMN cannot remove subscriber encryption). The service should not alter the standard functions of GSM network elements. The “Product“ and the “Network related data“ shall be delivered as near as possible to the time the call is made. 6 Summary of information passed over the X-interfac

44、e 6.1 Intercept request, set-up details for target (X1) Data to be stored for target mobile station: - MSISDN, or optionally the International Mobile Subscriber Identity (IMSI); - Connection address for the Requesting Function (RF); - Type of output: - “Product“ or “Network related data“ or both. 6.

45、2 Output (from PLMN to RF) 6.2.1 X2, “Network related data“ - unique reference number for MSC call event; - MSISDN, (and optionally IMSI, International Mobile station Equipment Identity (IMEI); - type of call (i.e. originating or terminating); - A-party number, B-party number; - C-party (diversion o

46、r multiparty numbers); - start time of call; ETSI ETSI TR 141 033 V13.0.0 (2016-01)93GPP TR 41.033 version 13.0.0 Release 13- finish time of call (or call duration); - location information (Cell Global Identity (CGI); - teleservice or bearer service used, Supplementary Service (SS) used; - call comp

47、letion message (giving call release reason). NOTE 1: The above list is a guide to the information which may be provided by the MSC, but not all the items will be available for every call type. NOTE 2: Connected party numbers (A-, B- and C-party) may only be available for calls completely contained w

48、ithin ISDN based networks. NOTE 3: Appropriate “Network related data“ should also be output from the MSC for unsuccessful call attempts. 6.2.2 X3, “Product“ (when requested) - “Product“: speech, user data, fax, or Short Message Service (SMS); NOTE: SMS text may be forwarded to the RF by means of the

49、 X2-interface mechanism. - Unique reference number for MSC call event. 7 Interception mechanisms 7.1 Intercept Request Function (X1) The following basic target administration functions are to be supported: ADD - flag a target by MSISDN, or optionally IMSI; - X2 delivery address, e.g. X.25 or WAN address; - X3 “Product“ delivery address, E.164 address; - select “Network related data“ alone, or “Network related data“ and “Product“. REMOVE - de-flag a target. SHOW - list one or more targeted MSISDNs. 7.2 Interception output, “Product“ and “