Content for TS 33.128 Word version: 18.6.0

0… 4… 5… 5.7… 6… 6.2.2.2A… 6.2.3… 6.2.3.2.7… 6.2.3.3… 6.2.4… 6.3… 6.3.2.2A… 6.3.3… 6.3.3.2… 6.3.3.2.4… 6.3.3.2A… 7… 7.3… 7.3.3… 7.3.3.2.21… 7.3.3.2.42… 7.3.3.2.63… 7.3.4… 7.4… 7.4.3.8… 7.5… 7.6… 7.7… 7.7.4… 7.8… 7.8.4… 7.9… 7.10… 7.10.4… 7.11… 7.12… 7.13… 7.13.3… 7.13.3.4… 7.14… 7.15… 8… A… D… E… M…

3.1 Definitions 3.2 Symbols 3.3 Abbreviations
...

0 Introduction p. 19

The present document has been produced by the 3GPP TSG SA to standardise Lawful Interception of telecommunications. The present document describes protocols and procedures for Lawful Interception based on 3GPP specifications. These protocols and procedures cover both internal 3GPP interfaces (those required to intercept communications and manage interception within a 3GPP network) and external handover interfaces (those used for delivery of intercepted communications to Law Enforcement, or handling of warrants).

Lawful Interception needs to be done in accordance with the applicable national or regional laws and technical regulations. Such national laws and regulations define the extent to which capabilities in the present document are applicable in specific jurisdictions.

1 Scope p. 20

The present document specifies the protocols and procedures required to perform Lawful Interception within a 3GPP network. The present document addresses both internal interfaces used internally with a 3GPP network and external handover interfaces used to handover intercepted communications to law enforcement.

The present document describes the detailed targeting of communications in each point of interception within a 3GPP network and the information that a point of interception needs to be able to capture. Furthermore, the detailed data formats for both the internal and external interfaces are also defined.

National regulations determine the applicable set of information that needs to be handed over or excluded from handover to law enforcement for a given 3GPP operator service.

2 References p. 20

The following documents contain provisions which, through reference in this text, constitute provisions of the present document.

References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific.
For a specific reference, subsequent revisions do not apply.
For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document.

[1]

TR 21.905: "Vocabulary for 3GPP Specifications".

[2]

TS 23.501: "System Architecture for the 5G System".

[3]

TS 33.126: "Lawful Interception Requirements".

[4]

TS 23.502: "Procedures for the 5G System; Stage 2".

[5]

TS 33.127: "Lawful Interception (LI) Architecture and Functions".

[6]

ETSI TS 103 120: "Lawful Interception (LI); Interface for warrant information".

[7]

ETSI TS 103 221-1: "Lawful Interception (LI); Internal Network Interfaces; Part 1: X1".

[8]

ETSI TS 103 221-2: "Lawful Interception (LI); Internal Network Interfaces; Part 2: X2/X3".

[9]

ETSI TS 102 232-1: "Lawful Interception (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 1: Handover specification for IP delivery".

[10]

ETSI TS 102 232-7: "Lawful Interception (LI); Handover Interface and Service-Specific Details (SSD) for IP delivery; Part 7: Service-specific details for Mobile Services".

[11]

TS 33.501: "Security Architecture and Procedures for the 5G System".

[12]

TS 33.108: "3G security; Handover interface for Lawful Interception (LI)".

[13]

TS 24.501: "Non-Access-Stratum (NAS) protocol for 5G System (5GS)".

[14]

TS 24.007: "Mobile radio interface signalling layer 3; General Aspects".

[15]

TS 29.244: "Interface between the Control Plane and the User Plane nodes".

[16]

TS 29.502: "5G System; Session Management Services; Stage 3".

[17]

TS 29.571: "5G System; Common Data Types for Service Based Interfaces; Stage 3".

[18]

TS 23.040: "Technical realization of the Short Message Service (SMS)".

[19]

TS 23.003: "Numbering, addressing and identification ".

[20]

OMA-TS-MLP-V3_5-20181211-C: "Open Mobile Alliance; Mobile Location Protocol, Candidate Version 3.5", https://www.openmobilealliance.org/release/MLS/V1_4-20181211-C/OMA-TS-MLP-V3_5-20181211-C.pdf.

[21]

TS 29.540: "5G System; SMS Services; Stage 3".

[22]

TS 29.518: "5G System; Access and Mobility Management Services; Stage 3".

[23]

TS 38.413: "NG Application Protocol (NGAP)".

[24]

TS 29.572: "Location Management Services; Stage 3".

[25]

TS 29.503: "5G System; Unified Data Management Services".

[26]

RFC 815: "IP datagram reassembly algorithms".

[27]

RFC 2460: "Internet Protocol, Version 6 (IPv6) Specification".

[28]

RFC 793: "Transmission Control Protocol".

[29]

RFC 768: "User Datagram Protocol".

[30]

RFC 4340: "Datagram Congestion Control Protocol (DCCP)".

[31]

RFC 4960: "Stream Control Transmission Protocol".

[32]

IANA (www.iana.org): Assigned Internet Protocol Numbers, "Protocol Numbers".

[33]

RFC 6437: "IPv6 Flow Label Specification".

[34]

RFC 791: "Internet Protocol".

[35]

Open Geospatial Consortium OGC 05-010: "URNs of definitions in ogc namespace".

[36]

TS 33.107: "3G security; Lawful interception architecture and functions".

[37]

TS 37.340: "Evolved Universal Radio Access (E-UTRA) and NR-Multi-connectivity; Stage 2".

[38]

TS 36.413: "S1 Application Protocol (S1AP)".

[39]

OMA-TS-MMS_ENC-V1_3-20110913-A: "Multimedia Messaging Service Encapsulation Protocol".

[40]

TS 23.140: "Multimedia Messaging Protocol. Functional Description. Stage 2".

[41]

TS 38.415: "NG-RAN; PDU Session User Plane Protocol".

[42]

TS 23.273: "5G System (5GS) Location Services (LCS); Stage 2".

[43]

RFC 4566: "SDP: Session Description Protocol".

[44]

TS 24.193: "Stage 3: Access Traffic Steering, Switching and Splitting (ATSSS)".

[45]

TS 29.509: "5G System; Authentication Server Services; Stage 3".

[46]

TS 24.011: "Point-to-Point (PP) Short Message Service (SMS) support on mobile radio interface".

[47]

TS 29.002: "Mobile Application Part (MAP) specification".

[48]

TS 29.504: "5G System; Unified Data Repository Services; Stage 3".

[49]

TS 29.505: "5G System; Usage of the Unified Data Repository services for Subscription Data; Stage 3".

[50]

TS 23.401: "General Packet Radio Service (GPRS) enhancements for Evolved Universal Terrestrial Radio Access Network (E-UTRAN) access".

[51]

TS 24.301: "Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS), Stage 3".

[52]

TS 23.271: "Functional stage 2 description of Location Services (LCS)".

[53]

TS 29.172: "Evolved Packet Core (EPC) LCS Protocol (ELP) between the Gateway Mobile Location Centre (GMLC) and the Mobile Management Entity (MME); SLg interface".

[54]

TS 29.171: "LCS Application Protocol (LCS-AP) between the Mobile Management Entity (MME) and Evolved Serving Mobile Location Centre (E-SMLC); SLs interface".

[55]

TS 24.379: "Mission Critical Push to Talk (MCPTT) call control; protocol specification".

[56]

OMA-TS-PoC-System_Description-V2_1-20110802-A: "OMA PoC System Description".

[57]

TS 29.541: "5G System; Network Exposure (NE) function services for Non-IP Data Delivery (NIDD); Stage 3".

[58]

TS 29.522: "5G System; Network Exposure Function Northbound APIs; Stage 3".

[59]

TS 29.338: "Diameter based protocols to support Short Message Service (SMS) capable Mobile Management Entities (MMEs); Stage 3".

[60]

TS 29.337: "Diameter-based T4 interface for communications with packet data networks and applications".

[61]

TS 24.250: "Protocol for Reliable Data Service; Stage 3".

[62]

TS 29.128: "Mobility Management Entity (MME) and Serving GPRS Support Node (SGSN) interfaces for interworking with packet data networks and applications".

[63]

TS 29.122: "T8 reference point for Northbound APIs".

[64]

TS 29.598: "5G System; Unstructured Data Storage Services; Stage3".

[65]

TS 33.535: "Authentication and Key Management for Applications (AKMA) based on 3GPP credentials in the 5G System (5GS)".

[66]

RFC 5246: "The Transport Layer Security (TLS) Protocol Version 1.2".

[67]

GSMA IR.88: "IR.88 LTE and EPC Roaming Guidelines".

[68]

GSMA NG.114: "IMS Profile for Voice, Video and Messaging over 5GS".

[69]

RFC 8225: "PASSporT: Personal Assertion Token".

[70]

RFC 8224: "Authenticated Identity Management in the Session Initiation Protocol (SIP)".

[71]

RFC 8588: "Personal Assertion Token (PaSSporT) Extension for Signature-based Handling of Asserted information using toKENs (SHAKEN)".

[72]

TS 24.196: "Enhanced Calling Name (eCNAM)".

[73]

draft-ietf-stir-passport-rcd-17: "PASSporT Extension for Rich Call Data".

[74]

TS 24.229: "IP multimedia call control protocol based on Session Initiation Protocol (SIP)and Session Description Protocol (SDP); Stage 3".

[75]

IANA Session Initiation Protocol (SIP) Parameters: https://www.iana.org/assignments/sip-parameters/sip-parameters.xhtml

[76]

RFC 8946: "Personal Assertion Token (PASSporT) Extension for Diverted Calls".

[77]

TS 23.204: "3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Support of Short Message Service (SMS) over generic 3GPP Internet Protocol (IP) access; Stage 2".

[78]

GSMA RCC.07: "Rich Communication Suite - Advanced Communications Services and Client Specification".

[79]

RFC 4975: "The Message Session Relay Protocol (MSRP)".

[80]

RFC 3862: "Common Presence and Instant Messaging (CPIM): Message Format".

[81]

RFC 5438: "Instant Message Disposition Notification (IMDN)".

[82]

OMA-TS-CPM_System_Description-V2_2-20170926-C: "OMA Converged IP Messaging System Description".

[83] Void.

[84]

TS 36.455: "Evolved Universal Terrestrial Radio Access (E-UTRA); LTE Positioning Protocol A (LPPa) ".

[85]

TS 37.355: "LTE Positioning Protocol (LPP)".

[86]

TS 38.455: "NG-RAN; NR Positioning Protocol A (NRPPa)".

[87]

TS 29.274: "3GPP Evolved Packet System (EPS); Evolved General Packet Radio Service (GPRS) Tunnelling Protocol for Control plane (GTPv2-C); Stage 3".

[88]

TS 29.513: "5G System; Policy and Charging Control signalling flows and QoS parameter mapping".

[89]

TS 29.512: "5G System; Session Management Policy Control Service; Stage 3".

[90]

TS 29.508: "5G System; Session Management Event Exposure Service; Stage 3".

[91]

TS 29.514: "5G System; Policy Authorization Service; Stage 3".

[92]

TS 29.214: "Policy and Charging Control over Rx reference point".

[93]

TS 24.558: "Enabling Edge Applications; Protocol specification".

[94]

TS 29.558: "Enabling Edge Applications; Application Programming Interface (API) specification".

[95]

TS 24.008: "Mobile radio interface Layer 3 specification; Core network protocols; Stage 3".

[96]

TS 29.551: "5G System; Packet Flow Description Management Service; Stage 3".

[97]

ETSI TS 103 280: "Lawful Interception (LI); Dictionary for common parameters".

[98]

TS 26.512: "5G Media Streaming (5GMS); Protocols".

[99]

TS 26.247: "Transparent end-to-end Packet-switched Streaming Service (PSS); Progressive Download and Dynamic Adaptive Streaming over HTTP (3GP-DASH)".

[100]

TS 29.563: "5G System; Home Subscriber Server (HSS) services for interworking with Unified Data Management (UDM); Stage 3".

[101]

TS 29.562: "5G System; Home Subscriber Server (HSS) Services; Stage 3".

[102]

TS 24.341: "Support of SMS over IP networks, Stage 3".

[103]

TS 38.473: "NG-RAN;F1 application protocol (F1AP)".

[104]

TS 23.032: "Universal Geographical Area Description (GAD)".

[105]

ITU-T Recommendation Q.763 (1999): "Specifications of Signalling System No.7; Formats and codes".

[106]

TS 29.272: "Mobility Management Entity (MME) and Serving GPRS Support Node (SGSN) related interfaces based on Diameter protocol".

[107]

RFC 6442: "Location Conveyance for the Session Initiation Protocol".

[108] Void.

[109]

OMA-TS-CPM_Conv_Function: "OMA CPM Conversation Functions".

[110]

RFC 2045: "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies".

[111]

TS 32.299: " Telecommunication management; Charging management; Diameter charging applications".

[112]

TS 32.423: "Telecommunication management; Subscriber and equipment trace; Trace data definition and management".

[113]

TS 38.414: "NG-RAN; NG data transport".

[114]

RFC 2045: "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies".

[115]

RFC 5322: "Internet Message Format".

[116]

RFC 4975: "The Message Session Relay Protocol (MSRP)".

[117]

RFC 6901: "JavaScript Object Notation (JSON) Pointer".

[118]

RFC 3261: "SIP: Session Initiation Protocol".

[119]

W3C Recommendation: "XML Path Language (XPath)".

[120]

RFC 2046: "Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types".

[121]

TR 33.928: "ADMF Logic for Provisioning Lawful Interception (LI) ".

[122]

TS 23.316: "Wireless and wireline convergence access support for the 5G System".

[123]

TS 23.038: "Alphabets and language-specific information".

[124]

ITU-T Recommendation X.680 (2021): "Information technology-Abstract Syntax Notation One (ASN.1): Specification of basic notation".

[125]

RFC 4282: "The Network Access Identifier".

[126]

RFC 7042: "IANA Considerations and IETF Protocol and Documentation Usage for IEEE 802 Parameters".

[127]

IEEE "Guidelines for Use of Extended Unique Identifier (EUI), Organizationally Unique Identifier (OUI), and Company ID (CID)", https://standards.ieee.org/content/dam/ieee-standards/standards/web/documents/tutorials/eui.pdf

[128] TS 24.502: "Access to the 3GPP 5G Core Network (5GCN) via Non-3GPP Access Networks (N3AN)".

3 Definitions, symbols and abbreviations p. 25

3.1 Definitions p. 25

For the purposes of the present document, the terms and definitions given in TR 21.905 and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in TR 21.905.

3.2 Symbols p. 25

For the purposes of the present document, the following symbols apply:

3.3 Abbreviations p. 25

For the purposes of the present document, the abbreviations given in TR 21.905 and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in TR 21.905.

ADMF

LI Administration Function

Content of Communication

CSP

Communication Service Provider

CUPS

Control and User Plane Separation

DNAI

Data Network Access Identifier

ICF

Identity Caching Function

IEF

Identity Event Function

IQF

Identity Query Function

IRI

Intercept Related Information

LAF

Location Acquisition Function

LALS

Lawful Access Location Services

LARF

Location Acquisition Requesting Function

LEA

Law Enforcement Agency

LEMF

Law Enforcement Monitoring Facility

Lawful Interception

LICF

Lawful Interception Control Function

LI_HI1

LI_Handover Interface 1

LI_HI2

LI_Handover Interface 2

LI_HI3

LI_Handover Interface 3

LI_HI4

LI_Handover Interface 4

LI_HILA

Lawful Interception Handover Interface Location Acquisition

LI_HIQR

Lawful Interception Handover Interface Query Response

LIPF

Lawful Interception Provisioning Function

LIR

Location Immediate Request

LI_SI

Lawful Interception System Information Interface

LISSF

Lawful Interception State Storage Function

LI_ST

Lawful Interception State Transfer Interface

LI_X1

Lawful Interception Internal Interface 1

LI_X2

Lawful Interception Internal Interface 2

LI_X2_LA

Lawful Interception Internal Interface 2 Location Acquisition

LI_X3

Lawful Interception Internal Interface 3

LI_XEM1

Lawful Interception Internal Interface Event Management Interface 1

LI_XER

Lawful Interception Internal Interface Event Record

LI_XLA

Lawful Interception Internal Interface Location Acquisition

LI_XQR

Lawful Interception Internal Interface Query Response

LTF

Location Triggering Function

MDF

Mediation and Delivery Function

MDF2

Mediation and Delivery Function 2

MDF3

Mediation and Delivery Function 3

MDT

Minimization of Drive Test

Multimedia Message

MMS

Multimedia Message Service

N3AEC

Non-3GPP Access Establishment Cause

N3AF

Non-3GPP Access Function

NAT

Network Address Translation

NPLI

Network Provided Location Information

O&M

Operations and Management

POI

Point Of Interception

RCS

Rich Communication Suite

SDP

Session Description Protocol

SIP

Session Initiation Protocol

SIRF

System Information Retrieval Function

SOI

Start Of Interception

Triggering Function

TNGF

Trusted Non-3GPP Gateway Function

TWIF

Trusted WLAN Interworking Function

xCC

LI_X3 Communications Content.

xIRI

LI_X2 Intercept Related Information