ETSI TS 102 232-5-2017 Lawful Interception (LI) Handover Interface and Service-Specific Details (SSD) for IP delivery Part 5 Service-specific details for IP Multimedia Services (V3_1.pdf

1、 ETSI TS 102 232-5 V3.7.1 (2017-03) Lawful Interception (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 5: Service-specific details for IP Multimedia Services floppy3TECHNICAL SPECIFICATION ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)2 Reference RTS/LI-00142-5 Keywords I

2、MS, IP, lawful interception, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The prese

3、nt document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI

4、. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that th

5、e document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: ht

6、tps:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not

7、be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2017. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the b

8、enefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)3 Contents Intellectual Property R

9、ights 5g3Foreword . 5g3Modal verbs terminology 5g3Introduction 5g31 Scope 6g32 References 6g32.1 Normative references . 6g32.2 Informative references 7g33 Definitions and abbreviations . 7g33.1 Definitions 7g33.2 Abbreviations . 8g34 General . 9g34.1 Reference Model for Lawful Interception 9g34.2 Re

10、ference system model . 10g34.2.0 Overview 10g34.2.1 Network layer Interception . 11g34.2.2 Service layer Interception . 11g34.3 General Requirements 12g35 Interception of IP Multimedia services 12g35.1 Identification of target of interception 12g35.1.1 SIP Target Identification . 12g35.1.2 H.323 Tar

11、get Identification . 13g35.2 Interception of signalling 13g35.2.1 Provisioning of the SIP IRI IIF . 13g35.2.2 Provisioning of the H.323 IRI IIF . 13g35.2.3 Location information 13g35.2.4 Supplementary Services 13g35.2.5 Additional signalling information . 14g35.3 Assigning a value to the Communicati

12、on Identity Number . 14g35.3.0 Introduction. 14g35.3.1 Assigning a CIN value to SIP related IRI . 14g35.3.2 Assigning a CIN value to H.323 related IRI . 14g35.4 Events and IRI record types . 14g35.5 Interception of Content of Communication 15g35.6 Direction for IMS IRI for Signalling Messages . 16g3

13、5.7 Direction for IMS sessions . 16g35.7.1 Direction for SIP sessions . 16g35.7.2 Direction for H.323 sessions . 16g36 Handover Interface . 16g36.1 Intercepted Related Information . 16g36.2 Correlation of IRI and CC 16g37 ASN.1 specification for IRI and CC. 17g3Annex A (informative): Interception us

14、ing H.248 . 20g3A.1 Purpose of this annex . 20g3A.2 Notes on interception using H.248 . 20g3A.2.1 Target identification (see also clause 5.1) 20g3A.2.2 Provisioning of the H.248 IRI IIF (see also clause 5.2) . 21g3A.3 Problems in H.248 interception 21g3A.3.1 Missing information in H.248 signalling 2

15、1g3ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)4 A.3.2 Missing call content 22g3Annex B (normative): Minimum set of functional attributes to be provided . 23g3B.0 Overview 23g3B.1 General requirements . 23g3B.2 Result of interception . 24g3B.3 Location information 24g3B.4 Time constraints . 24g3B.5 Techn

16、ical handover interfaces and format requirements 25g3Annex C (informative): Change request history 26g3History 28g3ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)5 Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information per

17、taining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secre

18、tariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates o

19、n the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (TS) has been produced by ETSI Technical Committee Lawful Interception (LI). The present document is part 5 of a multi-part deliverable. Full details of the entire ser

20、ies can be found in part 1 2. The ASN.1 module is also available as an electronic attachment to the original document from the ETSI site (see clause 7 for details). Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “c

21、an“ and “cannot“ are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. Introduction The present document focuses on Lawful Intercepti

22、on of IP Multimedia Services. It is to be used in conjunction with ETSI TS 102 232-1 2, in which the handling of the intercepted information is described. ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)6 1 Scope The present document specifies interception of Internet Protocol (IP) Multimedia (MM) Services b

23、ased on the Session Initiation Protocol (SIP) and Real Time Transport Protocol (RTP) and Message Session Relay Protocol (MSRP) and IP MM services as described by the Recommendations ITU-T H.323 6 and H.248 7. The present document is consistent with the definition of the Handover Interface, as descri

24、bed in ETSI TS 102 232-1 2. The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 9 and ETSI TS 101 671 1. 2 References 2.1 Normative references References are either specific (identified by date of publication and/or edition number or version numbe

25、r) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. Referenced documents which are not found to be publicly available in the expected location might be found at htt

26、p:/docbox.etsi.org/Reference. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are necessary for the application of the present document. 1 ETSI TS 101 671: “Lawful Interceptio

27、n (LI); Handover interface for the lawful interception of telecommunications traffic“. NOTE: Periodically ETSI TS 101 671 is published as ETSI ES 201 671. A reference to the latest version of the TS as above reflects the latest stable content from ETSI/TC LI. 2 ETSI TS 102 232-1: “Lawful Interceptio

28、n (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 1: Handover specification for IP delivery“. 3 Recommendation ITU-T X.680: “Information technology - Abstract Syntax Notation One (ASN.1): Specification of basic notation“. 4 IETF RFC 3261: “SIP: Session Initiation Pr

29、otocol“. 5 IETF RFC 3550: “RTP: A Transport Protocol for Real-Time Applications“. 6 Recommendation ITU-T H.323: “Packet-based multimedia communications systems“. 7 Recommendation ITU-T H.248: “Gateway control protocol“. NOTE: H.248 was renumbered when revised on 2002-03-29. H.248 main body, Annexes

30、A to E and Appendix I were included in H.248.1. Subsequent annexes were sequentially numbered in the series, e.g. H.248 Annex F became H.248.2. 8 Void. 9 ETSI TS 133 108: “Universal Mobile Telecommunications System (UMTS); LTE; 3G security; Handover interface for Lawful Interception (LI) (3GPP TS 33

31、.108 Release 9)“. 10 ETSI TS 101 331: “Lawful Interception (LI); Requirements of Law Enforcement Agencies“. 11 ATIS-PP-1000678.2006: “Lawfully Authorized Electronic Surveillance (LAES) for Voice over Packet Technologies in Wireline Telecommunications Networks“, Version 2 (Revision of T1.678-2004). E

32、TSI ETSI TS 102 232-5 V3.7.1 (2017-03)7 12 Recommendation ITU-T H.225.0: “Call signalling protocols and media stream packetization for packet-based multimedia communication systems“. 13 Recommendation ITU-T H.245: “Control protocol for multimedia communication“. 14 Void. 15 IETF RFC 4975: “The Messa

33、ge Session Relay Protocol (MSRP)“. 16 Recommendation ITU-T T.38: “Procedures for real-time Group 3 facsimile communication over IP networks“. 17 IETF RFC 4825: “The Extensible Markup Language (XML) Configuration Access Protocol (XCAP)“. 18 ETSI TS 124 623: “Digital cellular telecommunications system

34、 (Phase 2+); Universal Mobile Telecommunications System (UMTS); LTE; Extensible Markup Language (XML) Configuration Access Protocol (XCAP) over the Ut interface for Manipulating Supplementary Services (3GPP TS 24.623)“. 19 IETF RFC 2822: “Internet Message Format“. 2.2 Informative references Referenc

35、es are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. NOTE: While any

36、hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area. i.1 ETSI TR 10

37、2 528: “Lawful Interception (LI); Interception domain Architecture for IP networks“. i.2 ETSI TR 102 503: “Lawful Interception (LI); ASN.1 Object Identifiers in Lawful Interception and Retained data handling Specifications“. 3 Definitions and abbreviations 3.1 Definitions For the purposes of the pre

38、sent document, the terms and definitions given in ETSI TS 101 671 1, ETSI TS 102 232-1 2 and the following apply: context: logical collection of H.248 terminations IP MultiMedia service: multimedia service that utilizes the Internet Protocol (IP) for the transport of data MultiMedia (MM): use of com

39、puters to present text, graphics, video, animation, and sound in an integrated way MultiMedia service: communication service that offers Multimedia communication to end-users termination: entity in H.248 that acts as a source or sink of media NOTE: Terminations may be physical, such as a given chann

40、el on a TDM line, or ephemeral, such as an IP endpoint. ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)8 TSAP identifier: piece of information used to multiplex several transport connections of the same type on a single H.323 entity with all transport connections sharing the same Network Address (e.g. the p

41、ort number in a TCP/UDP/IP environment) NOTE: Transport layer Service Access Point (TSAP) identifiers may be (pre)assigned statically by some international authority or may be allocated dynamically during the setup of a call. Dynamically assigned TSAP identifiers are of transient nature, i.e. their

42、values are only valid for the duration of a single call. 3.2 Abbreviations For the purposes of the present document, the following abbreviations apply: AF Administration Function ASN.1 Abstract Syntax Notation One CC IIF CC Internal Interception Function CC Content of Communication CCCI Content of C

43、ommunication Control Interface CCTF Content of Communication Trigger Function CCTI Content of Communication Trigger Interface CID Communication IDentifier CIN Communication Identity Number CLI Calling Line Identity CSP Communications Service Provider NOTE: Covers all AP/NWO/SvP. DTMF Dual Tone Multi

44、 Frequency GW GateWay HI1 Handover Interface 1 (for Administrative Information) HI2 Handover Interface 2 (for Intercept Related Information) HI3 Handover Interface 3 (for Content of Communication) ID IDentity IF Interception Function IIF Internal Interception Function IMS IP Multimedia Subsystem INI

45、 Internal Network Interface IP Internet Protocol IRI IIF IRI Internal Interception Function IRI Intercept Related Information LEA Law Enforcement AgencyLEMF Law Enforcement Monitoring Facility LI Lawful Interception LIAF Lawful Interception Administration Function LIID Lawful Interception IDentifier

46、 MF Mediation Function MG Media Gateway MGC Media Gateway Controller MM MultiMedia MSRP Message Session Relay Protocol OID Object IDentifierPDU Protocol Data Unit RAS Registration, Administration and Status RTCP RTP Control Protocol RTP Realtime Transport Protocol SDP Session Description Protocol SI

47、P Session Initiation Protocol SSD Service-Specific DetailsSvP Service Provider TCP Transmission Control Protocol TDM Time Division Multiplex TSAP Transport layer Service Access Point UDP User Datagram Protocol ETSI ETSI TS 102 232-5 V3.7.1 (2017-03)9 UDPTL Facsimile UDP Transport Layer (protocol) UE

48、 User Equipment URI Uniform Resource Identifier URL Uniform Resource Locator 4 General 4.1 Reference Model for Lawful Interception The present document adopts the generic reference model for the interception domain from ETSI TR 102 528 i.1, its internal intercept functions, Intercept Related Informa

49、tion Interception Function (IRI IIF), Content of Communication Trigger Function (CCTF), and Content of Communication Internal Interception Function (CC IIF), and the Internal Network Interfaces INI1, INI2, INI3, Content of Communication Trigger Interface (CCTI) and Content of Communication Control Interface (CCCI) as shown in figure 1. Figure 1: Reference Model for Lawful Interception The reference model depicts the following functions and interfaces: INI1a provisions Intercept Related Information Internal Interc