Intercept Related Information (Events) shall be sent at the Mobile Entity Attach, Mobile Entity Detach, Tracking Area/EPS Location Update, LALS Location Report, Bearer activation (valid for both Default and Dedicated bearer), Start of Intercept with bearer active, Start of Interception with E-UTRAN attached UE, Bearer Modification, Bearer Deactivation, Serving Evolved Packet System (applicable to the HSS), UE requested PDN connectivity, UE requested PDN disconnection, and UE requested bearer resource modification.
Serving Evolved Packet System and HSS related events event reporting are national options.
The following information needs to be transferred from the EPS nodes or the HSS to the DF2 in order to allow a DF2 to perform its functionality:
target identity (IMSI, MSISDN, ME identity);
events and associated parameters as defined in clauses 22.214.171.124 and 12.2.3 may be provided;
the target location (if available) or the IAs in case of location dependent interception;
date/time of Location (if target location provided);
Quality of Service (QoS) information (if available);
encryption parameters (keys and associated parameters for decrypting CC), if available and necessary.
For HeNB interception, the MME shall provide in addition the following:
HeNB location information needs to be transferred from the HeNB location verifying node to the DF2 in order to allow the DF2 to perform its functionality.
The EPS nodes detect packets containing packet header information in the communications path but the information needed for Packet Header Information Reporting may need to be transferred from the EPS nodes either directly to the DF2 or via another network entity in order to allow the DF2 to perform its functionality.
The IRI should be sent to DF2 using a reliable transport mechanism.
There are several different events in which the information is sent to the DF2 if this is required. Details are described in the following clause. The events for interception are configurable (if they are sent to DF2) in the EPC nodes or the HSS and can be suppressed in the DF2. The network procedures for which the events are generated are defined in TS 23.401
The following events are applicable to the MME:
Tracking Area/EPS Location Update;
UE requested PDN connectivity;
UE Requested PDN disconnection;
Start of interception with E-UTRAN attached UE.
The following events are applicable to the Serving GW and PDN GW:
Bearer activation (valid for both Default and Dedicated bearer);
Start of intercept with bearer active;
UE Requested Bearer Resource Modification;
Packet Data Header Information.
The following events are applicable to the HSS:
Serving Evolved Packet System.
HSS subscriber record change;
Location information request.
The following LALS Reports are applicable to the EPS (see Clause 19
Report for LALS Target Positioning;
Report for LALS Enhanced Location for IRI.
A set of elements as shown below can be associated with the events. The events trigger the transmission of the information from the nodes to DF2. Available IEs from this set of elements as shown below can be extended in the nodes, if this is necessary as a national option. DF2 can extend available information if this is necessary as a national option. If interception is performed at the PDN GW, then Packet Data Header Information reporting shall also be performed at the PDN GW and not at the Serving GW.
A number of elements shown below can be also associated with the LALS reports. The transmission of the information from the LI LCS Client to DF2 is triggered by an LCS Server/GMLC response to the LI LCS Client request.
MSISDN of the target.
IMSI of the target.
Observed ME Id
ME Id of the target; when it coincides with the IMEI, it shall be checked for each activation over the radio interface.
Indicates which type of event is delivered: Attach, Detach, Tracking Area Update, UE requested PDN connectivity, UE Requested PDN disconnection, UE Requested Bearer Resource Modification, Bearer activation, Start of intercept with bearer active, Start of interception with E-UTRAN attached UE, Bearer deactivation, Bearer modification, Serving Evolved Packet System, Packet Data Header Information, HSS subscriber record change, Cancel location, Register location, Location information request. In case of LALS report the event type is absent.
Date of the event generation in the ICE.
Time of the event generation in the ICE. Timestamp shall be generated relative to ICE internal clock.
This indicates what has been changed (MSISDN, A-MSISDN or IMSI) in the Subscriber Change Record
The parameter is applicable to the MME only and provides the IP version (IPv4, IPv4/IPv6, IPv6) requested by the UE.
PDN Address Allocation
The parameter is applicable to the S-GW and PDN-GW; it provides the IP version (IPv4, IPv4/IPv6, IPv6) and IP address(es) allocated for the UE.
Protocol Configuration Options
Are used to transfer parameters between the UE and the PDN-GW (e.g. Address Allocation Preference by DHCP).
Indicates the type of attach (may carry indication of handover in case of mobility with non-3GPP access).
Location Information is the Tracking Area Identity (TAI), TA List assigned to the UE, E-CGI and/or location area identity or the derived Location from the LI LCS Client that is present at the node at the time of event record production. In case of Tracking Area Update event, the last visited TAI of the UE may be applicable. Country and network IDs can be considered as location information, by some national regulations. If the information in the MME received over S1 (TS 36.413
) includes one or more cell IDs, then all cell IDs shall be reported to the LEMF whenever location reporting is triggered at the MME.
Time of Location
Date/Time of location. The time when location was obtained by the location source node.
The UE IP address(es) for the PDN connection.
When provided by the MME, the parameter carries the Access Point Name provided by the UE. When provided by the S-GW/PDN-GW, it is the Access Point Name used for the connection.
The Radio Access Type
The Aggregate Maximum Bit Rate for the APN.
Provides information from the GTPv2 protocol that the procedure is triggered as part of a handover.
Procedure Transaction Identifier
Identifies a set of messages belonging to the same procedure; the parameter is dynamically allocated by the UE.
EPS bearer identity
An EPS bearer identity uniquely identifies an EPS bearer for one UE accessing via E-UTRAN. The EPS Bearer Identity is allocated by the MME.
Bearer activation/deactivation type
Indicates the type of bearer being activated/deactivated, i.e. default or dedicated.
Linked EPS bearer identity
Indicates, in case of dedicated bearer, the EPS bearer identity of the default bearer.
The initiator of the procedure, either the network, HeNB, or the UE.
Switch off indicator
Indicates whether a detach procedure is due to a switch off situation or not.
Parameter sent by the network to the UE to indicate the type of detach.
Traffic Flow Template (TFT)
The EPS bearer traffic flow template (TFT) is the collection of all packet filters associated with that EPS bearer.
Traffic Aggregate Description (TAD)
The TAD consists of the description of the packet filter(s) for the traffic flow aggregate.
Serving MME address
The address of the serving MME.
Old Location Information
Location Information of the subscriber before Tracking Area Update. If the information in the MME (TS 36.413
) received over S1 includes one or more cell IDs, then all cell IDs shall be reported to the LEMF whenever location reporting is triggered at the MME.
The correlation number is used to correlate CC and IRI.
Network Element Identifier
Unique identifier for the ICE reporting the event.
Logical Function Information
Used to distinguish between multiple logical functions operating in a single physical network element.
Failed attach reason
Reason for failed attach of the target.
Failed bearer activation reason
Reason for failed bearer activation for the target.
Failed Bearer Modification reason
The reason for failure of Bearer Modification.
The observed Interception Areas.
Bearer Deactivation cause
The cause of deactivation of the PDP context.
EPS Bearer QoS
This field indicates the Quality of Service associated with the Bearer procedure.
Indicates the type of request in an UE requested PDN connectivity, i.e. initial request or handover.
Uniquely identifies a CSG within one PLMN. Note: Open HeNBs do not have associated CSGs.
Identifies the membership of a given CSG (i.e., CSG Identities and associated expiration data for the UEs).
Uniquely identifies a HeNB (i.e., HeNB equipment ID and HeNB name).
HeNB IP Address
The public IP address of the HeNB provided to the HeNB location verifying node
Reports the location of the HeNB used during location verification.
ISP Operator Identity
Identifies the ISP through which the HeNB is connected to the SeGW (e.g., IP address).
Security Gateway IP Address
The IP Address of the Security Gateway that terminates the tunnel from the HeNB.
The tunnel protocol used between the HeNB and the SeGW.
Indicates the time when the User Location Information was acquired.
Destination IP Address
The IP address, including type IPv4 or IPv6, of the destination of the IP packet.
Destination Port Number
The port number of the destination of the IP packet.
Flow Label (IPv6 only)
The field in the IPv6 header that is used by a source to label packets of a flow (see RFC 3697 ).
The number of packets detected and reported (for a particular summary period).
Packet Data Summary Reason
The reason for a Packet Data Summary message being sent to the LEMF (e.g., timed out, counter expiration, end of session)
The size of the packet. (i.e., Total Length Field in IPv4 or Payload Length field in IPv6)
Source IP Address
The IP address, including type IPv4 or IPv6, of the source of the IP packet.
Source Port Number
The port number of the source of the IP packet.
Sum of Packet Sizes (for a particular summary period)
The sum of values contained in the Total Length fields of the IPv4 packets or the sum of the values contained in the Payload Length fields of the IPv6 packets.
Includes the dates and times of the first and last packets in a particular packet data interval.
Transport Protocol (e.g., TCP)
The identification of the transport protocol of the packet or packet flow being reported.
UE Local IP Address
The UE local IP address (IP SEC terminal Point) reported over GTP based S2b interface TS 29.274
based on local policy for Fixed Broadband access network interworking.
UE UDP Port
Used in case of GTP based S2b interface TS 29.274
if NAT is detected and UE Local IP Address is present for Fixed Broadband access network interworking.
WLAN location information
Used in case of GTP based S2b interface TS 29.274
. Provides location information in form of TWAN Identifier, if available at ePDG/PDN-GW.
WLAN location timestamp
Used in case of GTP based S2b interface TS 29.274
. Provides location information timestamp in form of TWAN Identifier Timestamp, if available at ePDG/PDN-GW.
ProSe Remote UE IDs
The identities of the ProSe remote UE connected to the Prose UE-to-NW Relay, see clause 17.3
ProSe Remote UE IP info
The IP address(es) of the ProSe Remote UE connected to the ProSe UE-to-NW Relay, see clause 17.3
location error code
LALS positioning error identification code
Secondary RAT Usage Indication
This is only reported by the S-GW.