@brookson.com

Interception references

Home
GSM Security
Books
Homepages
Email me

Interception of Telecommunications

Telecommunications standards for Interception have recently started to become quite common. I have tried here to put together source information on the Internet. Some of the legislation is also included for information.
Note that the table below is formatted by Microsoft Word, and has almost worked!

Current as of January 2001. Many of the references have changed! I'll get round to editing sometime.

Standards

Area Title Description www address Notes
3GPP(1) Release 2000 3G TS 33.106 Lawful Interception Requirements 3rd Generation Lawful Interception Requirements for Release 2000 specifications due 1Q 2001 - moves 3G into the Internet world. ftp://ftp.3gpp.org/TSG_SA/WG3_Security/TSGS3_15_Washington/Docs/ In draft form. Not yet approved.

See Document S3-000543

  33.107 V 3.0.0: Lawful interception architecture and functions Lawful interception architecture and functions www.3gpp.org Not yet written.
3GPP(1) Release 1999 33.106 V 3.1.0: Lawful interception requirements 3rd Generation Lawful Interception requirements for 3G Release 99 - in a circuit switched environment. http://webapp.etsi.org/pda/home.asp?wki_id=8684 Approved version R99.
  33.107 V 3.0.0: Lawful interception architecture and functions As above. http://webapp.etsi.org/pda/home.asp?wki_id=9758 Approved version R99.
ETSI TSEC-LI TR101.331 ETSI Lawful Interception Group

Telecommunications Security
Definition of user requirements for lawful interception of telecommunications;
Requirements of the law enforcement agencies: Part 1: General approach

www.etsi.org Standard not approved. See SEC Committee on ESTI site for details.
  ETSI ES 201 158 V1.1.2 (1998-05) The requirements for legal interception (see reference) provide for a set of general requirements for the interception of telecommunications by law enforcement and state security agencies.

These requirements will be used as a basis for the technical work. In their present form, however, they are not suitable for immediate implementation in telecommunications systems and require transformation to technically useful statements or requirements prior to standardisation. This transformation process will consist of three steps: Step 1: Define user requirements Step 2: Define network requirements Step 3: Define handover interface(s) This ETR covers step 2 above.

http://webapp.etsi.org/pda/home.asp?wki_id=4341  
  ES 201 671: "Handover Interface for the lawful interception of telecommunications traffic". This ETSI Standard describes the Handover interface for Lawful Interception between Network Operators/Service Providers/Access Providers and Law Enforcement Agencies. The interface will support the delivery of 64 kbit/s speech and data. TC remarks: This document will be the first of a set of interface descriptions. Other documents, which describe other network technologies, will follow as separate parts. This document, as well as the following ones, will be in line with the requirements of the Law Enforcement Agencies, as given in ETR 331, and the requirements for the network functions, as given in DE/SEC-002311. http://webapp.etsi.org/pda/home.asp?wki_id=5973  
INTELLIGENT NETWORKS ETSI EG 201 781 V1.1.1 (2000-07) The scope of this ETSI Guide is to cover the standardisation of functions to allow lawful interception of services running in on IN platform. These functions probably need to be defined in the SSP and SCP, including the information flow between these entities. Alternatives will, however, be investigated. As specific parts of the information flow are confidential, security aspects need to be addressed. Reference documents: ETR 330, ETR 331, ES 201 158. http://webapp.etsi.org/pda/home.asp?wki_id=7242  
ELECTRONIC SIGNATURES ETSI ES 201 733 V1.1.3 (2000-05) To study the requirements for standardisation of digital signatures in telecommunications applications. The study will determine which areas of digital signature standardisation should be concentrated on for the requirements of the different European member states, taking account of the emerging national positions on data security, electronic commerce, lawful interception and trusted third parties' requirements. http://webapp.etsi.org/pda/home.asp?wki_id=8179  
GSM STANDARDS GSM 01.33: "Lawful Interception requirements for GSM". Traditional GSM and includes GPRS.    
  ETSI TS 101 507 V7.3.0 (1999-11) GSM 02.33:" Lawful Interception - stage 1". http://webapp.etsi.org/pda/home.asp?wki_id=6482  
  ETSI TS 101 509 V7.1.0 (1999-11) GSM 03.33: "Lawful Interception - stage 2". http://webapp.etsi.org/pda/home.asp?wki_id=5329  
TETRA ETSI EN 301 040 V2.0.0 (1999-06) To define an interface to allow Lawful Interception of all TETRA traffic and signalling. The requirements and stage 1 definitions are to be included in this edition http://webapp.etsi.org/pda/home.asp?wki_id=5279  
  ETSI EG 201 040 V1.1.1 (1998-04) To prepare a report on the development of the TETRA LI interface http://webapp.etsi.org/pda/home.asp?wki_id=6255  
TIPHON ETSI TR 101 750 V1.1.1 (1999-11) Draft interception specifications for Multimedia Internet.

Liaison and studies into the impact of lawful interception on TIPHON and TIPHON access networks. This shall include the following specific tasks: Review of IUR, CALEA and ETR 331 to assess applicability to TIPHON and report findings to TC-SEC-L1 in addition to EP-TIPHON; Review of TIPHON access networks to determine capability to support L1 requirement; Act as primary liaison with TC-SEC-L1 during development of packet data handover interface ensuring that it is suited to TIPHON.

http://webapp.etsi.org/pda/home.asp?wki_id=7794  

 

Legislation

  Name Description www
EU COUNCIL IUR European Union Council Resolution on the Lawful Interception of Telecommunications (17. January 1995) One of the original documents produced to specify the user requirements for Lawful Interception. Does not specify newer technologies such as the Internet or Email, http://www.privacy.org/pi/activities/tapping/eu_tap_resolution_1995.html

see also ENFOPOL 19 on

http://www.fipr.org/polarch/enfopol19.html#Top

United States of America - CALEA Communications Assistance for
Law Enforcement Act (CALEA)
CALEA was passed in 1994 in the USA as a response to rapid advances in telecommunications technology, such as the implementation of digital technology and wireless services, that have threatened the ability of law enforcement officials to conduct authorised electronic surveillance. CALEA requires telecommunications carriers to modify their equipment, facilities, and services to ensure that they are able to comply with authorised electronic surveillance. http://www.fcc.gov/wtb/csinfo/calea.html

& the FBI on

http://www.askcalea.com/

Germany Telecommunications Traffic Interception Ordinance and

Technical Directive setting relating to Requirements to the implementation of Legal Measure for the Interception of Telecommunications

  http://www.regtp.de/tech_reg_tele/01420/01/index.html
United Kingdom RIP Act The Regulation of Investigatory Powers (RIP) Bill was introduced in the House of Commons on 9th February 2000 and completed its Parliamentary passage on 26 July. The Bill received Royal Assent on 28 July.

The Regulation of Investigatory Powers Act 2000 (RIPA) updates the law on the interception of communications to take account of technological change such as the growth of the Internet. It also puts other intrusive investigative techniques on a statutory footing for the very first time; provides new powers to help combat the threat posed by rising criminal use of strong encryption; and ensures that there is independent judicial oversight of the powers in the Act.

http://www.homeoffice.gov.uk/ripa/ripact.htm
Australia TELECOMMUNICATIONS ACT 1997 Part 14-National interest matters 311. Simplified outline

And

Part 15-Co-operation with agencies

317. Simplified outline

318. Definition

319. Meaning of interception

320. Meaning of interception capability, special assistance capability and agency specific delivery capability

321. Purpose of Division

http://www.austlii.edu.au/au/legis/cth/consol_act/ta1997214/

Notes

  • www.3gpp.org web site is open.
  • www.etsi.org web site has ETSI specifications, which are open to download the standards, you need to supply your Email address.
  • www.tiphon.org is open.
  • Top of page