1、 ETSI TS 102 232-5 V3.5.1 (2015-10) Lawful Interception (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 5: Service-specific details for IP Multimedia Services floppy3TECHNICAL SPECIFICATION ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)2 Reference RTS/LI-00129-5 Keywords I
2、MS, IP, lawful interception, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The prese
3、nt document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI
4、. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that th
5、e document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http:/portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: https:/porta
6、l.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modifie
7、d without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2015. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the benefit of
8、its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)3 Contents Intellectual Property Rights 5g3F
9、oreword . 5g3Modal verbs terminology 5g3Introduction 5g31 Scope 6g32 References 6g32.1 Normative references . 6g32.2 Informative references 7g33 Definitions and abbreviations . 7g33.1 Definitions 7g33.2 Abbreviations . 7g34 General . 8g34.1 Reference Model for Lawful Interception 8g34.2 Reference sy
10、stem model . 10g34.2.1 Network layer Interception . 10g34.2.2 Service layer Interception . 11g34.3 General Requirements 11g35 Interception of IP Multimedia services 12g35.1 Identification of target of interception 12g35.1.1 SIP Target Identification . 12g35.1.2 H.323 Target Identification . 12g35.2
11、Interception of signalling 12g35.2.1 Provisioning of the SIP IRI IIF . 12g35.2.2 Provisioning of the H.323 IRI IIF . 12g35.2.3 Location information 13g35.3 Assigning a value to the Communication Identity Number . 13g35.3.1 Assigning a CIN value to SIP related IRI . 13g35.3.2 Assigning a CIN value to
12、 H.323 related IRI . 13g35.4 Events and IRI record types . 13g35.5 Interception of Content of Communication 14g35.6 Direction for IMS IRI for Signalling Messages . 14g35.7 Direction for IMS sessions . 15g35.7.1 Direction for SIP sessions . 15g35.7.2 Direction for H.323 sessions . 15g36 Handover Inte
13、rface . 15g36.1 Intercepted Related Information . 15g36.2 Correlation of IRI and CC 15g37 ASN.1 specification for IRI and CC. 15g3Annex A (informative): Interception using H.248 . 19g3A.1 Purpose of this annex . 19g3A.2 Notes on interception using H.248 . 19g3A.2.1 Target identification (see also cl
14、ause 5.1) 19g3A.2.2 Provisioning of the H.248 IRI IIF (see also clause 5.2) . 20g3A.3 Problems in H.248 interception 20g3A.3.1 Missing information in H.248 signalling 20g3A.3.2 Missing call content 21g3Annex B (normative): Minimum set of functional attributes to be provided . 22g3B.1 General require
15、ments . 22g3ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)4 B.2 Result of interception . 22g3B.3 Location information 23g3B.4 Time constraints . 23g3B.5 Technical handover interfaces and format requirements 24g3Annex C (informative): Change request history 25g3History 27g3ETSI ETSI TS 102 232-5 V3.5.1 (201
16、5-10)5 Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual P
17、roperty Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (http:/ipr.etsi.org). Pursuant to the ETSI IPR Policy, no investigation, including IPR se
18、arches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (TS) has been prod
19、uced by ETSI Technical Committee Lawful Interception (LI). The present document is part 5 of a multi-part deliverable. Full details of the entire series can be found in part 1 2. The ASN.1 module is also available as an electronic attachment to the original document from the ETSI site (see clause 7
20、for details). Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ an
21、d “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. Introduction The present document focuses on Lawful Interception of IP Multimedia Services. It is to be used in conjunction with ETSI TS 102 232-1 2, in which the handling of the intercepted information is describ
22、ed. ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)6 1 Scope The present document specifies interception of Internet Protocol (IP) Multimedia (MM) Services based on the Session Initiation Protocol (SIP) and Real Time Transport Protocol (RTP) and Message Session Relay Protocol (MSRP) and IP MM services as de
23、scribed by the Recommendations ITU-T H.323 6 and H.248 7. The present document is consistent with the definition of the Handover Interface, as described in ETSI TS 102 232-1 2. The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 9 and ETSI TS 101
24、671 1. 2 References 2.1 Normative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the reference document
25、(including any amendments) applies. Referenced documents which are not found to be publicly available in the expected location might be found at http:/docbox.etsi.org/Reference. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long
26、 term validity. The following referenced documents are necessary for the application of the present document. 1 ETSI TS 101 671: “Lawful Interception (LI); Handover interface for the lawful interception of telecommunications traffic“. NOTE: Periodically TS 101 671 is published as ES 201 671. A refer
27、ence to the latest version of the TS as above reflects the latest stable content from ETSI/TC LI. 2 ETSI TS 102 232-1: “Lawful Interception (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 1: Handover specification for IP delivery“. 3 Recommendation ITU-T X.680: “Inf
28、ormation technology - Abstract Syntax Notation One (ASN.1): Specification of basic notation“. 4 IETF RFC 3261: “SIP: Session Initiation Protocol“. 5 IETF RFC 3550: “RTP: A Transport Protocol for Real-Time Applications“. 6 Recommendation ITU-T H.323: “Packet-based multimedia communications systems“.
29、7 Recommendation ITU-T H.248: “Gateway control protocol“. NOTE: H.248 was renumbered when revised on 2002-03-29. H.248 main body, Annexes A to E and Appendix I were included in H.248.1. Subsequent annexes were sequentially numbered in the series, e.g. H.248 Annex F became H.248.2. 8 Void. 9 ETSI TS
30、133 108: “Universal Mobile Telecommunications System (UMTS); LTE; 3G security; Handover interface for Lawful Interception (LI) (3GPP TS 33.108 Release 9)“. 10 ETSI TS 101 331: “Lawful Interception (LI); Requirements of Law Enforcement Agencies“. 11 ATIS-PP-1000678.2006: “Lawfully Authorized Electron
31、ic Surveillance (LAES) for Voice over Packet Technologies in Wireline Telecommunications Networks“, Version 2 (Revision of T1.678-2004). ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)7 12 Recommendation ITU-T H.225.0: “Call signalling protocols and media stream packetization for packet-based multimedia com
32、munication systems“. 13 Recommendation ITU-T H.245: “Control protocol for multimedia communication“. 14 Void. 15 IETF RFC 4975: “The Message Session Relay Protocol (MSRP)“. 16 Recommendation ITU-T T.38: “Procedures for real-time Group 3 facsimile communication over IP networks“. 2.2 Informative refe
33、rences References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the reference document (including any amendments) applies. NO
34、TE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area.
35、i.1 ETSI TR 102 528: “Lawful Interception (LI); Interception domain Architecture for IP networks“. i.2 ETSI TR 102 503: “Lawful Interception (LI); ASN.1 Object Identifiers in Lawful Interception and Retained data handling Specifications“. 3 Definitions and abbreviations 3.1 Definitions For the purpo
36、ses of the present document, the terms and definitions given in ETSI TS 101 671 1, ETSI TS 102 232-1 2 and the following apply: context: logical collection of H.248 terminations IP MultiMedia service: multimedia service that utilizes the Internet Protocol (IP) for the transport of data MultiMedia (M
37、M): use of computers to present text, graphics, video, animation, and sound in an integrated way MultiMedia service: communication service that offers Multimedia communication to end-users termination: entity in H.248 that acts as a source or sink of media NOTE: Terminations may be physical, such as
38、 a given channel on a TDM line, or ephemeral, such as an IP endpoint. TSAP identifier: piece of information used to multiplex several transport connections of the same type on a single H.323 entity with all transport connections sharing the same Network Address (e.g. the port number in a TCP/UDP/IP
39、environment) NOTE: Transport layer Service Access Point (TSAP) identifiers may be (pre)assigned statically by some international authority or may be allocated dynamically during the setup of a call. Dynamically assigned TSAP identifiers are of transient nature, i.e. their values are only valid for t
40、he duration of a single call. 3.2 Abbreviations For the purposes of the present document, the following abbreviations apply: AF Administration Function ASN.1 Abstract Syntax Notation One CC IIF CC Internal Interception Function ETSI ETSI TS 102 232-5 V3.5.1 (2015-10)8 CC Content of Communication CCC
41、I Content of Communication Control Interface CCTF Content of Communication Trigger Function CCTI Content of Communication Trigger Interface CID Communication IDentifier CIN Communication Identity Number CLI Calling Line Identity CSP Communications Service Provider (covers all AP/NWO/SvP) DTMF Dual T
42、one Multi Frequency GW GateWay HI1 Handover Interface 1 (for Administrative Information) HI2 Handover Interface 2 (for Intercept Related Information) HI3 Handover Interface 3 (for Content of Communication) IAP Internet Access Provider ID IDentity IF Interception Function IIF Internal Interception Fu
43、nction INI Internal Network Interface IP Internet Protocol IRI IIF IRI Internal Interception Function IRI Intercept Related Information LEA Law Enforcement AgencyLEMF Law Enforcement Monitoring Facility LI Lawful Interception LIAF Lawful Interception Administration Function LIID Lawful Interception
44、IDentifier MF Mediation Function MG Media Gateway MGC Media Gateway Controller MM MultiMedia MSRP Message Session Relay Protocol OID Object IDentifierPDU Protocol Data Unit RAS Registration, Administration and Status RTCP RTP Control Protocol RTP Realtime Transport Protocol SDP Session Description P
45、rotocol SIP Session Initiation Protocol SSD Service-Specific DetailsSvP Service Provider TCP Transmission Control Protocol TDM Time Division Multiplex TSAP Transport layer Service Access Point UDP User Datagram Protocol UDPTL Facsimile UDP Transport Layer (protocol) URI Uniform Resource Identifier U
46、RL Uniform Resource Locator 4 General 4.1 Reference Model for Lawful Interception The present document adopts the generic reference model for the interception domain from ETSI TR 102 528 i.1, its internal intercept functions, Intercept Related Information Interception Function (IRI IIF), Content of
47、Communication Trigger Function (CCTF), and Content of Communication Internal Interception Function (CC IIF), and the Internal Network Interfaces INI1, INI2, INI3, Content of Communication Trigger Interface (CCTI) and Content of Communication Control Interface (CCCI) as shown in figure 1. ETSI ETSI T
48、S 102 232-5 V3.5.1 (2015-10)9 Figure 1: Reference Model for Lawful Interception The reference model depicts the following functions and interfaces: INI1a provisions Intercept Related Information Internal Interception Function (IRI IIF). INI1b may (statically) provision Content of Communications Trig
49、ger Function (CCTF). INI1c provisions the Mediation Function (MF). Intercept Related Information Internal Intercept Function (IRI IIF) generates IRI. Content of Communication Internal Interception Function (CC IIF) generates CC. Content of Communication Trigger Function (CCTF) controls CC IIF. Content of Communication Control Interface (CCCI) provisions CC IIF. Content of Communication Trigger Interface (CCTI) may trigger CCTF for provisioning of the CC IIF. Content of Communication Control Interface (C
