B.5 Information flows for Lawful Interception invocation (informative)

3G security3GPP43.033Lawful InterceptionRelease 13Stage 2TS

The following figures show the information flows for the invocation of Lawful Interception for GPRS and typical scenarios. The figures show some of the basic signalling messages of the target packet data communication and the events on the X2P and X3P-interfaces. The dotted lines indicate signalling depending on whether IP and/or IRI information has been requested. GGSN may setup/release packet tunnels and send IRI information depending on national requirements.

The use of the GGSN for interception is a national option.

B.5.1 GPRS attach

Figure B.15 shows the interception of a basic GPRS attach where the mobile (A) is the target for interception.

Figure B.15: Interception of mobile originated GPRS attachment

B.5.2 Mobile originated GPRS detach

Figure B.16 shows the interception of a mobile originated GPRS detach where the originating mobile (A) is the target for interception.

Figure B.16: Interception of mobile originated GPRS detachment

B.5.3 Network initiated GPRS detach

Figure B.17 shows the interception of a network initiated (by SGSN or HLR) GPRS detach where the mobile (A) is the target for interception.

Figure B.17: Interception of network initiated GPRS detach

NOTE: * Additional signals in case of HLR initiated

B.5.4 Intra SGSN Routing Area Update

Figure B.18 shows the interception of an Intra Routing Area Update where the mobile (A) is the target for interception. The sequence is the same for the combined RA / LA Update procedure but additional signalling is performed between the SGSN and MSC/VLR, HLR and the old MSC/VLR before the Routing Area Update Accept message is sent to the MS.

Figure B.18: Interception of an Intra Routing Area Update

B.5.5 Inter SGSN Routing Area Update

Figure B.19 shows the interception of an Inter Routing Area Update where the mobile (A) is the target for interception. The sequence is the same for the combined RA / LA Update procedure but additional signalling is performed between the SGSN and MSC/VLR, HLR and the old MSC/VLR before the Routing Area Update Accept message is sent to the MS. In case of PDP context not being active less signalling is required.

Figure B.19: Interception of an Inter Routing Area Update

B.5.6 PDP Context Activation

Figure B.20 shows the interception of a PDP Context activation where the mobile (A) is the target for interception. The sequence for a network initiated PDP Context activation is analogous but is preceded by the SGSN sending a Request PDP Context Activation to the MS.

Figure B.20: Interception of a PDP Context Activation

B.5.7 Start of interception with PDP context active

A tunnel is established to DF3P and an event is sent to DF2P.

B.5.8 MS initiated PDP Context Deactivation

Figure B.21 shows the interception of a MS initiated PDP Context deactivation where the mobile (A) is the target for interception.

Figure B.21: Interception of a PDP Context Deactivation

B.5.9 Network initiated PDP Context Deactivation

Figure B.22 shows the interception of a Network initiated PDP Context deactivation where the mobile (A) is the target for interception. The GGSN may send, (depending on national requirements) the PDP Context deactivation and release the GPRS packet tunnel after the Delete PDP Context Response has been sent or received, (signalling between the SGSN and the GGSN is not shown here).

Figure B.22: Interception of a Network initiated PDP Context Deactivation

B.5.10 SMS

Figure B.23 and B.24 shows the interception of a Mobile-terminated SMS and a Mobile-originated SMS transfer where the mobile (A) is the target for interception.

Figure B.23: Interception of a Mobile-terminated SMS transfer

Figure B.24: Interception of a Mobile-originated SMS transfer

Annex C (informative):
Change history

Change history

Date

TSG #

TSG Doc

CR

Rev

Cat

Subject/Comment

Old

New

04-2000

Release 1999 version
(only circuit switched LI)

7.1.0

8.0.0

12-2000

SP-10

SP-000623

003

A

Addition of parameters to the X3-Interface

8.0.0

8.1.0

12-2000

SP-10

SP-000670

005

1

A

Deletion of mono-mode and addition of optimal routeing

8.0.0

8.1.0

03-2001

SP-11

Upgrade to Release 4 (and 3GPP numbering)

03.33 v 8.1.0

43.033 v 4.0.0

06-2002

SP-16

Upgrade to Release 5

4.0.0

5.0.0

12-2004

SP-26

Upgrade to Release 6

5.0.0

6.0.0

06-2007

SP-36

Upgrade to Release 7

6.0.0

7.0.0

12-2008

SP-42

Upgrade to Release 8

7.0.0

8.0.0

12-2009

Update to Rel-9 version (MCC)

8.0.0

9.0.0

2011-03

Update to Rel-10 version (MCC)

9.0.0

10.0.0

2012-09

Update to Rel-11 version (MCC)

10.0.0

11.0.0

2014-09

Update to Rel-12 version (MCC)

11.0.0

12.0.0

2016-01

Update to Rel-13 version (MCC)

12.0.0

13.0.0