1、 ETSI TS 1Digital cellular telecoLaw(3GPP TS 43.0TECHNICAL SPECIFICATION143 033 V13.0.0 (2016communications system (Pha3G security; a ful Interception; Stage 2 .033 version 13.0.0 Release 13GLOBAL SYSTEMOBILE COMMUN16-01) hase 2+); 13) TEM FOR ICATIONSRETSI ETSI TS 143 033 V13.0.0 (2016-01)13GPP TS
2、43.033 version 13.0.0 Release 13Reference RTS/TSGS-0343033vd00 Keywords GSM,SECURITY ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de G
3、rasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified
4、without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users
5、of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http:/portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment
6、 to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The
7、content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2016. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Tra
8、de Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI ETSI TS 143 033 V13.0.0 (2016-0
9、1)23GPP TS 43.033 version 13.0.0 Release 13Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found
10、 in ETSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Poli
11、cy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Tech
12、nical Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP). The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or GSM identities. These should be interpreted as being references to the corresponding ETS
13、I deliverables. The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under http:/webapp.etsi.org/key/queryform.asp. Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to b
14、e interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI TS 143 033 V13.0.0 (2016-01)33GPP TS 43.033 version 13.0.0 Release 13Contents
15、 Intellectual Property Rights 2g3Foreword . 2g3Modal verbs terminology 2g3Foreword . 6g31 Scope 7g32 References 7g33 Definitions and abbreviations . 8g33.1 Definitions 8g33.2 Abbreviations . 8g34 Functional architecture . 8g35 Activation, deactivation and interrogation . 9g35.1 Activation . 10g35.1.
16、1 X1_1-interface 10g35.1.2 X1_2-interface (IRI) . 11g35.1.3 X1_3-interface (IP) . 11g35.2 Deactivation . 12g35.2.1 X1_1-interface 12g35.2.2 X1_2-interface (IRI) . 13g35.2.3 X1_3-interface (IP) . 13g35.3 Interrogation . 14g35.3.1 Interrogation of the MSC/VLR and the GMSC 14g35.3.2 Interrogation of De
17、livery Functions 14g36 Invocation of Lawful Interception 15g36.1 Provision of Intercept Product - Circuit Switched 16g36.1.1 Void 16g36.1.2 Two stubline configuration (circuit switched data or speech) to LEA 17g36.1.3 X3-interface 17g36.2 Provision of Intercept Product - Short Message Service 18g36.
18、3 Provision of Intercept Related Information 18g36.3.1 X2-interface 19g36.3.2 Structure of the events 19g36.3.3 Call Related events . 21g36.3.3.1 Call establishment . 21g36.3.3.2 Answer 21g36.3.3.3 Supplementary Services 22g36.3.3.4 Handover . 22g36.3.3.5 Release 22g36.3.4 Non Call Related events .
19、23g36.3.4.1 SMS. 23g36.3.4.2 Location update . 23g36.3.4.3 Subscriber Controlled Input (SCI) 23g36.4 Intercept cases for supplementary services 24g36.4.1 Interception of Multiparty call 24g36.4.1.1 Intercept Product only for Multiparty . 24g36.4.1.2 Intercept Related Information for Multiparty 25g36
20、.4.2 Interception for Call Forwarding / Call Deflection . 25g36.4.3 Interception on Call Hold / Call Waiting 25g36.4.4 Interception after ECT 25g37 Security. 26g37.1 Security 26g37.1.1 Administration security . 26g3ETSI ETSI TS 143 033 V13.0.0 (2016-01)43GPP TS 43.033 version 13.0.0 Release 137.1.2
21、IRI security . 26g37.1.2.1 Normal operation 26g37.1.2.2 Communication failure 26g37.1.3 IP security . 27g37.1.4 Security aspects of Lawful Interception charging . 27g37.1.5 Other security issues . 27g37.1.5.1 Log files 27g37.1.5.2 Data consistency . 27g3Annex A (normative): Information flows for Law
22、ful Interception invocation . 28g3A.1 Mobile originated circuit switched calls. 28g3A.2 Mobile terminated circuit switched calls 29g3A.3 Call hold / call waiting . 30g3A.4 Multiparty calls 31g3A.5 Call forwarding / call deflection . 34g3A.5.1 Unconditional call forwarding 34g3A.5.2 Call forwarding o
23、n not reachable (IMSI detached) 34g3A.5.3 Call forwarding on busy (network determined) 35g3A.5.4 Call forwarding on not reachable (no response to paging/radio channel failure) . 35g3A.5.5 Call forwarding on no reply . 36g3A.5.6 Call forwarding on busy (user determined)/call deflection 36g3A.5.7 Call
24、 waiting / call forwarding on no reply 37g3A.6 Explicit call transfer . 39g3Annex B (normative): Interception for GPRS . 41g3B.1 Architecture 41g3B.2 Activation, deactivation and interrogation . 41g3B.2.1 Activation . 42g3B.2.1.1 X1_1p-interface 42g3B.2.1.2 X1_2p-interface (IRI) . 43g3B.2.1.3 X1_3p-
25、interface (IP) . 44g3B.2.2 Deactivation . 45g3B.2.2.1 X1_1p-interface 45g3B.2.2.2 X1_2p-interface (IRI) . 46g3B.2.2.3 X1_3p-interface (IP) . 46g3B.2.3 Interrogation . 47g3B.2.3.1 Interrogation of the SGSN and GGSN 47g3B.2.3.2 Interrogation of Delivery Functions 47g3B.3 Invocation of Lawful Intercept
26、ion 48g3B.3.1 Provision of Intercept Product - GPRS. 49g3B.3.1.1 X3p-interface 49g3B.3.2 Provision of Intercept Product - Short Message Service 50g3B.3.3 Provision of Intercept Related Information 50g3B.3.3.1 X2p-interface 51g3B.3.3.2 Structure of the events 51g3B.3.3.3 GPRS related events . 52g3B.3
27、.3.3.1 GPRS attach 52g3B.3.3.3.2 GPRS detach . 53g3B.3.3.3.3 GPRS PDP context activation . 53g3B.3.3.3.4 Start of interception with PDP context active . 53g3B.3.3.3.5 GPRS PDP context deactivation . 54g3B.3.3.3.6 Cell and/or RA update . 54g3B.3.3.3.7 SMS. 54g3B.3.4 Intercept cases for supplementary
28、services 54g3B.4 Security. 55g3B.4.1 Security 55g3ETSI ETSI TS 143 033 V13.0.0 (2016-01)53GPP TS 43.033 version 13.0.0 Release 13B.4.1.1 Administration security . 55g3B.4.1.2 IRI security . 55g3B.4.1.2.1 Normal operation 55g3B.4.1.2.2 Communication failure 55g3B.4.1.3 IP security . 56g3B.4.1.4 Secur
29、ity aspects of Lawful Interception billing 56g3B.4.1.5 Other security issues . 56g3B.4.1.5.1 Log files 56g3B.4.1.5.2 Data consistency . 56g3B.5 Information flows for Lawful Interception invocation (informative) 57g3B.5.1 GPRS attach . 57g3B.5.2 Mobile originated GPRS detach . 57g3B.5.3 Network initi
30、ated GPRS detach 58g3B.5.4 Intra SGSN Routing Area Update 58g3B.5.5 Inter SGSN Routing Area Update 59g3B.5.6 PDP Context Activation . 60g3B.5.7 Start of interception with PDP context active. 60g3B.5.8 MS initiated PDP Context Deactivation . 61g3B.5.9 Network initiated PDP Context Deactivation . 61g3
31、B.5.10 SMS 62g3Annex C (informative): Change history . 63g3History 64g3ETSI ETSI TS 143 033 V13.0.0 (2016-01)63GPP TS 43.033 version 13.0.0 Release 13Foreword This Technical Specification has been produced by the 3rdGeneration Partnership Project (3GPP). The contents of the present document are subj
32、ect to continuing work within the TSG and may change following formal TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an identifying change of release date and an increase in version number as follows: Version x.y.z where: x the first
33、digit: 1 presented to TSG for information; 2 presented to TSG for approval; 3 or greater indicates TSG approved document under change control. y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates, etc. z the third digit is incremented when
34、 editorial only changes have been incorporated in the document. ETSI ETSI TS 143 033 V13.0.0 (2016-01)73GPP TS 43.033 version 13.0.0 Release 131 Scope The present document gives the stage 2 description of Lawful Interception within a PLMN for circuit switched systems and GPRS. It does not address th
35、e interface between the PLMN and the LEA lawful intercepted product and related information collection functions. This is outside the scope of the GSM standard. The structure of the present document is as follows: - clause 4 covers the architecture of the interception system; - clause 5 describes ho
36、w interception is activated, deactivated and interrogated within the interception system; - clause 6 describes how the system is provisioned, defines events at which interception takes place and what kind of information is generated at each event; - clause 7 provides brief descriptions of various in
37、tercept cases; - clause 8 reviews security requirements for access to the interception system; - annex A provides information flows to illustrate when intercepted traffic and related data is generated; - annex B describes an interception system for GPRS. The annex is subdivided into 5 sections that
38、are identical in structure to clauses 4 through 8, but applicable to a GPRS clause rather than a GSM circuit switched system. 2 References The following documents contain provisions which, through reference in this text, constitute provisions of the present document. References are either specific (
39、identified by date of publication, edition number, version number, etc.) or non-specific. For a specific reference, subsequent revisions do not apply. For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific re
40、ference implicitly refers to the latest version of that document in the same Release as the present document. 1 GSM 01.04: “Digital cellular telecommunications system (Phase 2+); Abbreviations and acronyms“. 2 3GPP TS 41.033: “Digital cellular telecommunications system (Phase 2+); Lawful Interceptio
41、n requirements for GSM“. 3 3GPP TS 42.033: “Digital cellular telecommunications system (Phase 2+); Lawful Interception stage 1“. 4 GSM 03.60: “Digital cellular telecommunications system (Phase 2+); GPRS Service description stage 2“. ETSI ETSI TS 143 033 V13.0.0 (2016-01)83GPP TS 43.033 version 13.0.
42、0 Release 133 Definitions and abbreviations 3.1 Definitions Definitions can be found in 3GPP TS 42.033 in the stage 1 description of Lawful interception and in GSM 03.60, the stage 2 service description for GPRS. 3.2 Abbreviations In addition to those below abbreviations used in the present document
43、 are listed in GSM 01.04. ADMF Administration Function DF2 Delivery Function 2DF2P Delivery Function 2 for GPRS DF3 Delivery Function 3DF3P Delivery Function 3 for GPRS GCI Global Cell Identity GSN GPRS Support Node (i.e.SGSN or GGSN) IA Interception Area IP Intercept Product IRI Intercept Related I
44、nformation LEA Law Enforcement AgencySCI Subscriber Controlled Input 4 Functional architecture The following picture contains the reference configuration for the lawful interception. The various entities and interfaces are described in more detail in the succeeding subclauses. There is one Administr
45、ation Function (ADMF) in the network. Together with the delivery functions it is used to hide from the MSC/VLR and GMSC that there might be multiple activations by different Law Enforcement Agencies (LEAs) on the same target. DeliveryFunction 2MSC/VLRGMSCX2X0_2X3ADMFDeliveryFunction 3X0_3X1_2 X1_3X1
46、_1X0_1LEAFigure 1: Reference configuration The reference configuration is only a logical representation of the entities involved in lawful interception and does not mandate separate physical entities. This allows for higher levels of integration. ETSI ETSI TS 143 033 V13.0.0 (2016-01)93GPP TS 43.033
47、 version 13.0.0 Release 135 Activation, deactivation and interrogation The following picture shows the extract from the reference configuration which is relevant for activation, deactivation and interrogation of the lawful interception. DeliveryFunction 2MSC/VLRGMSCADMFDeliveryFunction 3X1_2 X1_3X1_
48、1X0_1Figure 2: Functional model for Lawful Interception activation, deactivation and interrogation In addition to the typical GSM functional entities, a new functional entity is introduced - the ADMF - the Lawful Interception administration function. The ADMF: - interfaces with all the LEAs that may
49、 require interception in the PLMN; - keeps the intercept activities of individual LEAs separate; - interfaces to the PLMN. NOTE: The X1_1, X1_2 and X1_3-interfaces together are functionally equivalent to the X1-interface represented in 3GPP TS 41.033. Every physical MSC/VLR and GMSC is linked by an own X1_1-interface to the ADMF. Consequently, every single MSC/VLR and GMSC performs interception (activation, deactivation, interrogation as well as invocation) independently from other MSC/VLRs and GMSCs. The X0_1-interface represents the interface between the reque
