SIST ES 201 671 V3.2.1:2019

• Abstract:

  The present document is step 3 of a three-step approach to describe a generic Handover Interface (HI) for the provision; of lawful interception from a Network Operator, an Access Provider or a Service Provider (NWO/AP/SvP) to the; Law Enforcement Agencies (LEAs). The provision of lawful interception is a requirement of national law, which is; usually mandatory for the operation of any telecommunication service.; Step 1 contains the requirements for lawful interception from a users (LEAs) point of view and is published in ETSI; TS 101 331 [1].; Step 2 describes the derived network functions and the general architecture (or functional model) and is published in; ETSI ES 201 158 [2].; The present document specifies:; • the generic flow of information as well as the procedures and information elements, which are applicable to; any future telecommunication network or service;; • the network/service specific protocols relating to the provision of lawful interception at the Handover Interface; (HI), for the following networks/services:; - switched circuit; and; - packet data.; The technologies covered in the present document are: GSM, TETRA, GPRS, ISDN, PSTN, fixed NGN (including; PSTN/ISDN emulation) and fixed IMS PSTN simulation.; NOTE: As new networks and/or services are developed, the present document will be expanded as the relevant; standards become available.

• Status: Published
• Publication Date: 03-Dec-2018
• ICS: 33.030 - Telecommunication services. Applications
• Technical Committee: SPN - Services and Protocols for Networks
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 28-Nov-2018
• Due Date: 02-Feb-2019
• Completion Date: 04-Dec-2018
• Directive: TP273 - Pravilnik o opremi in vmesnikih za zakonito prestrezanje komunikacij
• Ref Project: ETSI ES 201 671 V3.2.1 (2018-05) - Lawful Interception (LI); Handover interface for the lawful interception of telecommunications traffic

Overview

SIST ES 201 671 V3.2.1:2019 establishes standardized requirements for the handover interface (HI) in lawful interception (LI) of telecommunications traffic. Developed by the Slovenian Institute for Standardization (SIST) and harmonized with ETSI ES 201 671 V3.2.1, this standard details procedures and protocols for delivering intercepted telecommunication data and related information from network or service providers to authorized law enforcement agencies (LEAs).

Lawful interception is a regulated obligation in most countries, requiring telecommunication operators, access providers, and service providers to facilitate the interception of communications in accordance with national laws. This standard ensures consistent, secure, and efficient handover interfaces regardless of network technologies (including GSM, GPRS, TETRA, ISDN, PSTN, Next Generation Networks, and fixed IMS PSTN simulation).

Key Topics

• Generic Handover Interface (HI): Outlines a modular and technology-agnostic framework for intercepting telecommunications traffic and associated data.
• Three-Step Methodology:
  • Step 1: User and LEA requirements (per ETSI TS 101 331)
  • Step 2: Network architecture and functional modeling (per ETSI ES 201 158)
  • Step 3: Implementation of the handover interface (covered by this standard)
• Handover Interface Ports:
  • HI1: Exchange of administrative information (e.g., warrants, authorization notifications)
  • HI2: Delivery of Intercept Related Information (IRI) such as call logs and signaling data
  • HI3: Transfer of the content of communication (CoC), including voice or data streams
• Information Flow and Protocols: Defines the flow of intercepted data and procedures for both circuit-switched and packet-switched networks.
• Identifiers and Correlation: Use of standard identifiers (LIID, CID, NID) to ensure accurate and reliable data handover.
• Security Requirements: Mandates authentication, access control, and confidentiality for all handover interface ports.

Applications

The practical value of SIST ES 201 671 V3.2.1:2019 is significant across the telecommunications and security industries:

• Telecommunications Operators: Ensures compliance with legal obligations for lawful interception, facilitating smooth cooperation with law enforcement while maintaining interoperability across evolving network technologies.
• Regulatory Authorities: Provides a reference for evaluating operator compliance and for overseeing secure, legal interception processes.
• Law Enforcement Agencies: Receives standardized, high-quality intercept data regardless of the operator or service provider, improving investigative capabilities.
• Technology Vendors and Integrators: Guides the development and deployment of lawful interception systems with a clear focus on modularity, security, and compatibility with both legacy and next-generation networks.

Related Standards

SIST ES 201 671 V3.2.1:2019 should be considered alongside several related standards to ensure comprehensive coverage of lawful interception requirements:

• ETSI TS 101 331: Specifies the requirements for lawful interception from the perspective of end users (typically law enforcement).
• ETSI ES 201 158: Details the network architecture and functional elements essential for supporting lawful interception activities.
• ISO/IEC 27001: Information security management, relevant for ensuring the secure handling of intercepted data.
• National regulations: Country-specific laws governing lawful interception, retention, and privacy requirements.

By adhering to SIST ES 201 671 V3.2.1:2019, organizations ensure robust, standardized, and legally compliant handover interfaces for telecommunications interception, supporting effective law enforcement operations and upholding security standards across telecommunications networks.

Final draft ETSI ES 201 671 V3.2.1 (2018-03)

ETSI STANDARD
Lawful Interception (LI);
Handover interface for the lawful interception of
telecommunications traffic
2 Final draft ETSI ES 201 671 V3.2.1 (2018-03)

Reference
RES/LI-00154
Keywords
data, handover, interface, Lawful Interception,
security, speech
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
The present document can be downloaded from:
http://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the
print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying
and microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2018.
All rights reserved.
TM TM TM
DECT , PLUGTESTS , UMTS and the ETSI logo are trademarks of ETSI registered for the benefit of its Members.
TM TM
3GPP and LTE are trademarks of ETSI registered for the benefit of its Members and
of the 3GPP Organizational Partners.
oneM2M logo is protected for the benefit of its Members. ®
GSM and the GSM logo are trademarks registered and owned by the GSM Association.
ETSI
3 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
Contents
Intellectual Property Rights . 9
Foreword . 9
Modal verbs terminology . 9
Introduction . 9
1 Scope . 10
2 References . 10
2.1 Normative references . 10
2.2 Informative references . 14
3 Definitions and abbreviations . 15
3.1 Definitions . 15
3.2 Abbreviations . 18
4 General requirements . 20
4.0 General . 20
4.1 Basic principles for the Handover Interface . 20
4.2 Legal requirements . 20
4.3 Functional requirements . 20
5 Overview of Handover Interface . 21
5.0 General . 21
5.1 Handover Interface port 1 (HI1) . 22
5.1.0 General . 22
5.1.1 Manual interface . 23
5.1.2 Electronic interface . 23
5.2 Handover Interface port 2 (HI2) . 23
5.3 Handover Interface port 3 (HI3) . 23
6 Specific identifiers for LI . 23
6.0 General . 23
6.1 Lawful Interception IDentifier (LIID) . 24
6.2 Communication IDentifier (CID) . 24
6.2.0 General . 24
6.2.1 Network IDentifier (NID) . 24
6.2.2 Communication Identity Number (CIN) - optional . 25
7 HI1: Interface port for administrative information . 25
7.0 General . 25
7.1 Information for the activation of lawful interception . 25
7.2 LI notifications towards the LEMF . 26
8 HI2: Interface port for Intercept Related Information . 26
8.0 General . 26
8.1 Data transmission protocols . 26
8.1.0 Introduction. 26
8.1.1 Application for IRI (HI2 information) . 27
8.2 Types of IRI records . 27
9 HI3: Interface port for Content of Communication . 27
10 Performance and quality . 28
10.1 Timing . 28
10.2 Quality . 28
11 Security aspects . 28
11.0 General . 28
11.1 Security properties . 28
11.2 Security mechanisms . 29
ETSI
4 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
12 Quantitative aspects . 29
Annex A (normative): Circuit switched network handover . 30
A.0 General . 30
A.1 Specific identifiers for LI . 30
A.1.0 General . 30
A.1.1 CC Link IDentifier (CCLID) . 30
A.1.2 Circuit switched LI correlation between CC and IRI . 30
A.1.3 Usage of Identifiers . 30
A.2 HI1: interface port for administrative state . 31
A.3 HI2: interface port for IRI . 31
A.3.1 Definition of Intercept Related Information (IRI) . 31
A.3.2 Structure of IRI records . 32
A.3.2.0 General . 32
A.3.2.1 Control information for HI2. 32
A.3.2.2 Basic call information . 32
A.3.2.3 Information on Supplementary Services, related to a call in progress . 33
A.3.2.4 Information on non-call related Supplementary Services . 33
A.3.3 Selection of parameters for IRI records . 34
A.3.4 Coding of parameters in IRI records . 36
A.3.5 Information content of the IRI record types . 37
A.4 HI3: interface port for Content of Communication . 37
A.4.0 General . 37
A.4.1 Delivery of Content of Communication (CC) . 37
A.4.1.0 General . 37
A.4.1.1 Delivery of TETRA CC over circuit switched handover networks . 38
A.4.2 Delivery of packetized Content of Communication (CC) (general) . 38
A.4.2.0 General . 38
A.4.2.1 Delivery of TETRA CC over packet switched handover networks . 39
A.4.3 Control information for circuit switched Content of Communication (CC) . 39
A.4.4 Exception handling . 40
A.4.4.1 Failure of CC links . 40
A.4.4.2 Fault reporting . 40
A.4.5 Security requirements at the interface port HI3 . 41
A.4.5.0 General . 41
A.4.5.1 LI access verification . 41
A.4.5.2 Access protection . 41
A.4.5.3 Authentication . 41
A.5 LI procedures for circuit switched supplementary services . 42
A.5.1 General . 42
A.5.2 CC link Impact . 44
A.5.3 IRI impact, general principle for sending IRI records . 44
A.5.4 Multi party calls - general principles, options A, B . 45
A.5.4.0 General . 45
A.5.4.1 CC links for active and non-active calls (option A) . 45
A.5.4.2 Reuse of CC links for active calls (option B) . 45
A.5.5 Subscriber Controlled Input (SCI): Activation/Deactivation/Interrogation of services . 46
A.6 Detailed procedures for circuit switched supplementary services . 46
A.6.1 Advice of Charge services (AOC) . 46
A.6.2 Call Waiting (CW) . 46
A.6.2.1 Call Waiting (CW) at target: CC links . 46
A.6.2.2 Call Waiting: IRI records . 47
A.6.2.2.1 Target is served user. 47
A.6.2.2.2 Other party is served user . 47
A.6.3 Call Hold/Retrie ve . 47
A.6.3.1 CC links for active and non-active calls (option A) . 47
A.6.3.2 Reuse of CC links for active calls (option B) . 47
ETSI
5 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
A.6.3.3 IRI records . 47
A.6.3.3.1 Invocation of Call Hold or Retrieve by target . 47
A.6.3.3.2 Invocation of Hold or Retrieve by other parties . 47
A.6.4 Explicit Call Transfer (ECT) . 47
A.6.4.1 Explicit Call Transfer (ECT), CC link . 47
A.6.4.2 Explicit Call Transfer (ECT), IRI records . 48
A.6.5 Calling Line Identification Presentation (CLIP) (IRI Records) . 48
A.6.5.1 Call originated by target (other party is served user) . 48
A.6.5.2 Call terminated at target (target is served user) . 48
A.6.6 Calling Line Identification Restriction (CLIR) . 48
A.6.7 COnnected Line identification Presentation (COLP) . 48
A.6.7.1 Call terminated at target (other party is served user) . 48
A.6.7.2 Call originated by target (target is served user) . 48
A.6.8 COnnected Line identification Restriction (COLR) . 48
A.6.9 Closed User Group (CUG) . 49
A.6.10 Completion of Call to Busy Subscriber (CCBS) . 49
A.6.11 CONFerence call, add-on (CONF) . 49
A.6.11.1 CONFerence calls, add on: CC links . 49
A.6.11.2 Conference calls: IRI records. 49
A.6.12 Three Party Service (Conference) . 49
A.6.12.1 CC links . 49
A.6.12.2 Three Party Service, IRI Records . 49
A.6.13 Meet-Me Conference (MMC) . 49
A.6.14 Direct Dialling In (DDI) . 50
A.6.15 Multiple Subscriber Number (MSN) . 50
A.6.16 DIVersion services (DIV) . 50
A.6.16.0 General . 50
A.6.16.1 Call Diversion by target . 50
A.6.16.1.1 Call Diversion by target, CC links . 50
A.6.16.1.2 Call Diversion by target, IRI records . 51
A.6.16.2 Forwarded call terminated at target . 51
A.6.16.3 Call from target forwarded . 51
A.6.17 Variants of call diversion services . 51
A.6.18 Void . 51
A.6.19 Malicious Call IDentification (MCID) . 51
A.6.20 SUBaddressing (SUB) . 51
A.6.21 Terminal Portability (TP) . 51
A.6.21.1 CC links . 51
A.6.21.2 IRI records . 51
A.6.21.2.1 Invocation of Terminal Portability by target . 51
A.6.21.2.2 Invocation of Terminal Portability by other parties . 52
A.6.22 User-to-User Signalling (UUS) . 52
A.6.23 Abbreviated Address (AA) . 52
A.6.24 Fixed Destination Call (FDC) . 52
A.6.25 Alarm Call (AC)/Wake-Up Service (WUS) . 52
A.6.26 Incoming Call Barring (ICB). 52
A.6.27 Outgoing Call Barring (OCB) . 52
A.6.28 Completion of Calls on No Reply (CCNR) . 52
A.6.29 Reverse charging . 52
A.6.30 Line hunting . 53
A.6.31 Message Wait Indication (MWI) . 53
A.6.32 Name display . 53
A.6.33 Tones, announcements . 53
A.7 Void . 53
A.8 GSM circuit switched technology annex . 53
A.8.1 Functional architecture . 53
A.8.2 Correlation of CC and IRI (see clause 6) . 54
A.8.3 HI3 (delivery of CC) . 54
A.8.4 HI2 (delivery of IRI) . 54
A.9 TETRA technology annex . 56
ETSI
6 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
A.10 NGN PSTN/ISDN emulation and simulation services technology annex . 56
A.10.0 General . 56
A.10.1 Functional architecture . 56
A.10.2 Correlation . 56
A.10.3 HI2. 57
A.10.4 HI3. 57
Annex B (normative): Packet switched network handover . 58
B.1 Specific identifiers for LI . 58
B.2 HI1: interface port for administrative state . 58
B.3 HI2: interface port for IRI . 58
B.3.1 Definition of Interception Related Information for packet switched . 58
B.3.2 Exception handling . 58
B.3.3 Security aspects . 58
B.4 HI3: interface port for Content of Communication (CC) . 59
B.5 GPRS technology annex . 59
B.5.1 Functional architecture . 59
B.5.2 Correlation . 60
B.5.2.1 Correlation of the present document IDs to GSM IDs . 60
B.5.2.2 GPRS LI correlation between CC and IRI . 60
B.5.3 HI2 (delivery of IRI) . 60
B.5.4 HI3 (Delivery of CC) . 61
Annex C (normative): HI2 Delivery mechanisms and procedures . 62
C.0 Premise . 62
C.1 ROSE . 62
C.1.1 Architecture . 62
C.1.2 ASE_HI procedures . 62
C.1.2.1 Sending part . 62
C.1.2.2 Receiving part . 64
C.1.2.3 Data link management . 64
C.1.2.3.0 General . 64
C.1.2.3.1 Data link establishment . 64
C.1.2.3.2 Data link release . 65
C.1.2.4 Handling of unrecognized fields and parameters . 65
C.1.3 Void . 65
C.2 FTP . 65
C.2.1 Introduction . 65
C.2.2 Usage of the FTP . 66
C.2.3 Profiles . 67
C.2.4 File content . 69
C.2.5 Exceptional procedures . 69
C.2.6 Other considerations . 70
Annex D (normative): Structure of data at the Handover Interface . 71
D.0 General . 71
D.1 Syntax definitions . 71
D.2 Object tree . 72
D.3 HI management operation . 73
D.4 LI management notification . 74
D.5 Intercept related information (HI2 PS and CS) . 76
D.6 User data packet transfer (HI3 CS) . 90
ETSI
7 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
D.7 TETRA data transfer (HI3 interface) . 91
D.8 Definition of the UUS1 content associated to the CC link . 91
D.9 Content of Communication (HI3 GPRS) . 92
Annex E (informative): Use of subaddress and calling party number to carry correlation
information . 94
E.1 Introduction . 94
E.2 Subaddress options . 94
E.3 Subaddress coding . 94
E.3.0 General . 94
E.3.1 BCD values . 94
E.3.2 Field order and layout . 95
E.4 Field coding . 101
E.4.0 General . 101
E.4.1 Direction . 101
E.4.2 Coding of the Calling Party Number . 101
E.5 Length of fields . 102
Annex F (informative): GPRS HI3 Interface . 103
F.1 Functional architecture . 103
F.2 Correlation . 103
F.3 HI3 Delivery Content of Communication (CC) . 104
F.3.0 General . 104
F.3.1 GPRS LI correlation header . 104
F.3.1.1 Introduction. 104
F.3.1.2 Definition of GLIC header . 104
F.3.1.3 Exceptional procedure . 106
F.3.1.4 Other considerations . 106
F.3.2 FTP . 106
F.3.2.1 Introduction. 106
F.3.2.2 Usage of the FTP . 106
F.3.2.3 Profiles . 108
F.3.2.4 Exceptional procedures . 110
F.3.2.5 CC contents for FTP . 110
F.3.2.5.1 Fields . 110
F.3.2.5.2 Information Element syntax . 112
F.3.2.6 Other considerations . 113
Annex G (informative): LEMF requirements - handling of unrecognized fields and
parameters . 115
Annex H (informative): IP Multimedia Subsystem (IMS) handover . 116
H.0 General . 116
H.1 Specific identifiers for LI . 116
H.1.0 General . 116
H.1.1 Lawful interception identifier . 117
H.1.2 Network identifier . 117
H.1.3 Correlation number. 117
H.1.4 IRI for IMS . 118
H.1.4.0 General . 118
H.1.4.1 Events and information . 119
H.1.5 Correlation indications of IMS IRI with GSN CC at the LEMF . 120
Annex I (informative): Latest ASN.1 module versions . 122
ETSI
8 Final draft ETSI ES 201 671 V3.2.1 (2018-03)
Annex J (informative): Bibliography . 123
Annex K (infor
...

ETSI STANDARD
Lawful Interception (LI);
Handover interface for the lawful interception of
telecommunications traffic
2 ETSI ES 201 671 V3.2.1 (2018-05)

Reference
RES/LI-00154
Keywords
data, handover, interface, Lawful Interception,
security, speech
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
The present document can be downloaded from:
http://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the
print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying
and microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2018.
All rights reserved.
TM TM TM
DECT , PLUGTESTS , UMTS and the ETSI logo are trademarks of ETSI registered for the benefit of its Members.
TM TM
3GPP and LTE are trademarks of ETSI registered for the benefit of its Members and
of the 3GPP Organizational Partners.
oneM2M logo is protected for the benefit of its Members. ®
GSM and the GSM logo are trademarks registered and owned by the GSM Association.
ETSI
3 ETSI ES 201 671 V3.2.1 (2018-05)
Contents
Intellectual Property Rights . 9
Foreword . 9
Modal verbs terminology . 9
Introduction . 9
1 Scope . 10
2 References . 10
2.1 Normative references . 10
2.2 Informative references . 14
3 Definitions and abbreviations . 15
3.1 Definitions . 15
3.2 Abbreviations . 18
4 General requirements . 20
4.0 General . 20
4.1 Basic principles for the Handover Interface . 20
4.2 Legal requirements . 20
4.3 Functional requirements . 20
5 Overview of Handover Interface . 21
5.0 General . 21
5.1 Handover Interface port 1 (HI1) . 22
5.1.0 General . 22
5.1.1 Manual interface . 23
5.1.2 Electronic interface . 23
5.2 Handover Interface port 2 (HI2) . 23
5.3 Handover Interface port 3 (HI3) . 23
6 Specific identifiers for LI . 23
6.0 General . 23
6.1 Lawful Interception IDentifier (LIID) . 24
6.2 Communication IDentifier (CID) . 24
6.2.0 General . 24
6.2.1 Network IDentifier (NID) . 24
6.2.2 Communication Identity Number (CIN) - optional . 25
7 HI1: Interface port for administrative information . 25
7.0 General . 25
7.1 Information for the activation of lawful interception . 25
7.2 LI notifications towards the LEMF . 26
8 HI2: Interface port for Intercept Related Information . 26
8.0 General . 26
8.1 Data transmission protocols . 26
8.1.0 Introduction. 26
8.1.1 Application for IRI (HI2 information) . 27
8.2 Types of IRI records . 27
9 HI3: Interface port for Content of Communication . 27
10 Performance and quality . 28
10.1 Timing . 28
10.2 Quality . 28
11 Security aspects . 28
11.0 General . 28
11.1 Security properties . 28
11.2 Security mechanisms . 29
ETSI
4 ETSI ES 201 671 V3.2.1 (2018-05)
12 Quantitative aspects . 29
Annex A (normative): Circuit switched network handover . 30
A.0 General . 30
A.1 Specific identifiers for LI . 30
A.1.0 General . 30
A.1.1 CC Link IDentifier (CCLID) . 30
A.1.2 Circuit switched LI correlation between CC and IRI . 30
A.1.3 Usage of Identifiers . 30
A.2 HI1: interface port for administrative state . 31
A.3 HI2: interface port for IRI . 31
A.3.1 Definition of Intercept Related Information (IRI) . 31
A.3.2 Structure of IRI records . 32
A.3.2.0 General . 32
A.3.2.1 Control information for HI2. 32
A.3.2.2 Basic call information . 32
A.3.2.3 Information on Supplementary Services, related to a call in progress . 33
A.3.2.4 Information on non-call related Supplementary Services . 33
A.3.3 Selection of parameters for IRI records . 34
A.3.4 Coding of parameters in IRI records . 36
A.3.5 Information content of the IRI record types . 37
A.4 HI3: interface port for Content of Communication . 37
A.4.0 General . 37
A.4.1 Delivery of Content of Communication (CC) . 37
A.4.1.0 General . 37
A.4.1.1 Delivery of TETRA CC over circuit switched handover networks . 38
A.4.2 Delivery of packetized Content of Communication (CC) (general) . 38
A.4.2.0 General . 38
A.4.2.1 Delivery of TETRA CC over packet switched handover networks . 39
A.4.3 Control information for circuit switched Content of Communication (CC) . 39
A.4.4 Exception handling . 40
A.4.4.1 Failure of CC links . 40
A.4.4.2 Fault reporting . 40
A.4.5 Security requirements at the interface port HI3 . 41
A.4.5.0 General . 41
A.4.5.1 LI access verification . 41
A.4.5.2 Access protection . 41
A.4.5.3 Authentication . 41
A.5 LI procedures for circuit switched supplementary services . 42
A.5.1 General . 42
A.5.2 CC link Impact . 44
A.5.3 IRI impact, general principle for sending IRI records . 44
A.5.4 Multi party calls - general principles, options A, B . 45
A.5.4.0 General . 45
A.5.4.1 CC links for active and non-active calls (option A) . 45
A.5.4.2 Reuse of CC links for active calls (option B) . 45
A.5.5 Subscriber Controlled Input (SCI): Activation/Deactivation/Interrogation of services . 46
A.6 Detailed procedures for circuit switched supplementary services . 46
A.6.1 Advice of Charge services (AOC) . 46
A.6.2 Call Waiting (CW) . 46
A.6.2.1 Call Waiting (CW) at target: CC links . 46
A.6.2.2 Call Waiting: IRI records . 47
A.6.2.2.1 Target is served user. 47
A.6.2.2.2 Other party is served user . 47
A.6.3 Call Hold/Retrie ve . 47
A.6.3.1 CC links for active and non-active calls (option A) . 47
A.6.3.2 Reuse of CC links for active calls (option B) . 47
ETSI
5 ETSI ES 201 671 V3.2.1 (2018-05)
A.6.3.3 IRI records . 47
A.6.3.3.1 Invocation of Call Hold or Retrieve by target . 47
A.6.3.3.2 Invocation of Hold or Retrieve by other parties . 47
A.6.4 Explicit Call Transfer (ECT) . 47
A.6.4.1 Explicit Call Transfer (ECT), CC link . 47
A.6.4.2 Explicit Call Transfer (ECT), IRI records . 48
A.6.5 Calling Line Identification Presentation (CLIP) (IRI Records) . 48
A.6.5.1 Call originated by target (other party is served user) . 48
A.6.5.2 Call terminated at target (target is served user) . 48
A.6.6 Calling Line Identification Restriction (CLIR) . 48
A.6.7 COnnected Line identification Presentation (COLP) . 48
A.6.7.1 Call terminated at target (other party is served user) . 48
A.6.7.2 Call originated by target (target is served user) . 48
A.6.8 COnnected Line identification Restriction (COLR) . 48
A.6.9 Closed User Group (CUG) . 49
A.6.10 Completion of Call to Busy Subscriber (CCBS) . 49
A.6.11 CONFerence call, add-on (CONF) . 49
A.6.11.1 CONFerence calls, add on: CC links . 49
A.6.11.2 Conference calls: IRI records. 49
A.6.12 Three Party Service (Conference) . 49
A.6.12.1 CC links . 49
A.6.12.2 Three Party Service, IRI Records . 49
A.6.13 Meet-Me Conference (MMC) . 49
A.6.14 Direct Dialling In (DDI) . 50
A.6.15 Multiple Subscriber Number (MSN) . 50
A.6.16 DIVersion services (DIV) . 50
A.6.16.0 General . 50
A.6.16.1 Call Diversion by target . 50
A.6.16.1.1 Call Diversion by target, CC links . 50
A.6.16.1.2 Call Diversion by target, IRI records . 51
A.6.16.2 Forwarded call terminated at target . 51
A.6.16.3 Call from target forwarded . 51
A.6.17 Variants of call diversion services . 51
A.6.18 Void . 51
A.6.19 Malicious Call IDentification (MCID) . 51
A.6.20 SUBaddressing (SUB) . 51
A.6.21 Terminal Portability (TP) . 51
A.6.21.1 CC links . 51
A.6.21.2 IRI records . 51
A.6.21.2.1 Invocation of Terminal Portability by target . 51
A.6.21.2.2 Invocation of Terminal Portability by other parties . 52
A.6.22 User-to-User Signalling (UUS) . 52
A.6.23 Abbreviated Address (AA) . 52
A.6.24 Fixed Destination Call (FDC) . 52
A.6.25 Alarm Call (AC)/Wake-Up Service (WUS) . 52
A.6.26 Incoming Call Barring (ICB). 52
A.6.27 Outgoing Call Barring (OCB) . 52
A.6.28 Completion of Calls on No Reply (CCNR) . 52
A.6.29 Reverse charging . 52
A.6.30 Line hunting . 53
A.6.31 Message Wait Indication (MWI) . 53
A.6.32 Name display . 53
A.6.33 Tones, announcements . 53
A.7 Void . 53
A.8 GSM circuit switched technology annex . 53
A.8.1 Functional architecture . 53
A.8.2 Correlation of CC and IRI (see clause 6) . 54
A.8.3 HI3 (delivery of CC) . 54
A.8.4 HI2 (delivery of IRI) . 54
A.9 TETRA technology annex . 56
ETSI
6 ETSI ES 201 671 V3.2.1 (2018-05)
A.10 NGN PSTN/ISDN emulation and simulation services technology annex . 56
A.10.0 General . 56
A.10.1 Functional architecture . 56
A.10.2 Correlation . 56
A.10.3 HI2. 57
A.10.4 HI3. 57
Annex B (normative): Packet switched network handover . 58
B.1 Specific identifiers for LI . 58
B.2 HI1: interface port for administrative state . 58
B.3 HI2: interface port for IRI . 58
B.3.1 Definition of Interception Related Information for packet switched . 58
B.3.2 Exception handling . 58
B.3.3 Security aspects . 58
B.4 HI3: interface port for Content of Communication (CC) . 59
B.5 GPRS technology annex . 59
B.5.1 Functional architecture . 59
B.5.2 Correlation . 60
B.5.2.1 Correlation of the present document IDs to GSM IDs . 60
B.5.2.2 GPRS LI correlation between CC and IRI . 60
B.5.3 HI2 (delivery of IRI) . 60
B.5.4 HI3 (Delivery of CC) . 61
Annex C (normative): HI2 Delivery mechanisms and procedures . 62
C.0 Premise . 62
C.1 ROSE . 62
C.1.1 Architecture . 62
C.1.2 ASE_HI procedures . 62
C.1.2.1 Sending part . 62
C.1.2.2 Receiving part . 64
C.1.2.3 Data link management . 64
C.1.2.3.0 General . 64
C.1.2.3.1 Data link establishment . 64
C.1.2.3.2 Data link release . 65
C.1.2.4 Handling of unrecognized fields and parameters . 65
C.1.3 Void . 65
C.2 FTP . 65
C.2.1 Introduction . 65
C.2.2 Usage of the FTP . 66
C.2.3 Profiles . 67
C.2.4 File content . 69
C.2.5 Exceptional procedures . 69
C.2.6 Other considerations . 70
Annex D (normative): Structure of data at the Handover Interface . 71
D.0 General . 71
D.1 Syntax definitions . 71
D.2 Object tree . 72
D.3 HI management operation . 73
D.4 LI management notification . 74
D.5 Intercept related information (HI2 PS and CS) . 76
D.6 User data packet transfer (HI3 CS) . 90
ETSI
7 ETSI ES 201 671 V3.2.1 (2018-05)
D.7 TETRA data transfer (HI3 interface) . 91
D.8 Definition of the UUS1 content associated to the CC link . 91
D.9 Content of Communication (HI3 GPRS) . 92
Annex E (informative): Use of subaddress and calling party number to carry correlation
information . 94
E.1 Introduction . 94
E.2 Subaddress options . 94
E.3 Subaddress coding . 94
E.3.0 General . 94
E.3.1 BCD values . 94
E.3.2 Field order and layout . 95
E.4 Field coding . 101
E.4.0 General . 101
E.4.1 Direction . 101
E.4.2 Coding of the Calling Party Number . 101
E.5 Length of fields . 102
Annex F (informative): GPRS HI3 Interface . 103
F.1 Functional architecture . 103
F.2 Correlation . 103
F.3 HI3 Delivery Content of Communication (CC) . 104
F.3.0 General . 104
F.3.1 GPRS LI correlation header . 104
F.3.1.1 Introduction. 104
F.3.1.2 Definition of GLIC header . 104
F.3.1.3 Exceptional procedure . 106
F.3.1.4 Other considerations . 106
F.3.2 FTP . 106
F.3.2.1 Introduction. 106
F.3.2.2 Usage of the FTP . 106
F.3.2.3 Profiles . 108
F.3.2.4 Exceptional procedures . 110
F.3.2.5 CC contents for FTP . 110
F.3.2.5.1 Fields . 110
F.3.2.5.2 Information Element syntax . 112
F.3.2.6 Other considerations . 113
Annex G (informative): LEMF requirements - handling of unrecognized fields and
parameters . 115
Annex H (informative): IP Multimedia Subsystem (IMS) handover . 116
H.0 General . 116
H.1 Specific identifiers for LI . 116
H.1.0 General . 116
H.1.1 Lawful interception identifier . 117
H.1.2 Network identifier . 117
H.1.3 Correlation number. 117
H.1.4 IRI for IMS . 118
H.1.4.0 General . 118
H.1.4.1 Events and information . 119
H.1.5 Correlation indications of IMS IRI with GSN CC at the LEMF . 120
Annex I (informative): Latest ASN.1 module versions . 122
ETSI
8 ETSI ES 201 671 V3.2.1 (2018-05)
Annex J (informative): Bibliography . 123
Annex K (informative): Change Request history .
...

SLOVENSKI STANDARD
01-januar-2019
=DNRQLWRSUHVWUH]DQMH/,,]URþLOQLYPHVQLN]D]DNRQLWRSUHVWUH]DQMH
WHOHNRPXQLNDFLMVNHJDSURPHWD
Lawful Interception (LI) - Handover interface for the lawful interception of
telecommunications traffic
Ta slovenski standard je istoveten z: ETSI ES 201 671 V3.2.1 (2018-05)
ICS:
33.030 Telekomunikacijske Telecommunication services.
uporabniške rešitve Applications
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

ETSI STANDARD
Lawful Interception (LI);
Handover interface for the lawful interception of
telecommunications traffic
2 ETSI ES 201 671 V3.2.1 (2018-05)

Reference
RES/LI-00154
Keywords
data, handover, interface, Lawful Interception,
security, speech
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
The present document can be downloaded from:
http://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the
print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying
and microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2018.
All rights reserved.
TM TM TM
DECT , PLUGTESTS , UMTS and the ETSI logo are trademarks of ETSI registered for the benefit of its Members.
TM TM
3GPP and LTE are trademarks of ETSI registered for the benefit of its Members and
of the 3GPP Organizational Partners.
oneM2M logo is protected for the benefit of its Members. ®
GSM and the GSM logo are trademarks registered and owned by the GSM Association.
ETSI
3 ETSI ES 201 671 V3.2.1 (2018-05)
Contents
Intellectual Property Rights . 9
Foreword . 9
Modal verbs terminology . 9
Introduction . 9
1 Scope . 10
2 References . 10
2.1 Normative references . 10
2.2 Informative references . 14
3 Definitions and abbreviations . 15
3.1 Definitions . 15
3.2 Abbreviations . 18
4 General requirements . 20
4.0 General . 20
4.1 Basic principles for the Handover Interface . 20
4.2 Legal requirements . 20
4.3 Functional requirements . 20
5 Overview of Handover Interface . 21
5.0 General . 21
5.1 Handover Interface port 1 (HI1) . 22
5.1.0 General . 22
5.1.1 Manual interface . 23
5.1.2 Electronic interface . 23
5.2 Handover Interface port 2 (HI2) . 23
5.3 Handover Interface port 3 (HI3) . 23
6 Specific identifiers for LI . 23
6.0 General . 23
6.1 Lawful Interception IDentifier (LIID) . 24
6.2 Communication IDentifier (CID) . 24
6.2.0 General . 24
6.2.1 Network IDentifier (NID) . 24
6.2.2 Communication Identity Number (CIN) - optional . 25
7 HI1: Interface port for administrative information . 25
7.0 General . 25
7.1 Information for the activation of lawful interception . 25
7.2 LI notifications towards the LEMF . 26
8 HI2: Interface port for Intercept Related Information . 26
8.0 General . 26
8.1 Data transmission protocols . 26
8.1.0 Introduction. 26
8.1.1 Application for IRI (HI2 information) . 27
8.2 Types of IRI records . 27
9 HI3: Interface port for Content of Communication . 27
10 Performance and quality . 28
10.1 Timing . 28
10.2 Quality . 28
11 Security aspects . 28
11.0 General . 28
11.1 Security properties . 28
11.2 Security mechanisms . 29
ETSI
4 ETSI ES 201 671 V3.2.1 (2018-05)
12 Quantitative aspects . 29
Annex A (normative): Circuit switched network handover . 30
A.0 General . 30
A.1 Specific identifiers for LI . 30
A.1.0 General . 30
A.1.1 CC Link IDentifier (CCLID) . 30
A.1.2 Circuit switched LI correlation between CC and IRI . 30
A.1.3 Usage of Identifiers . 30
A.2 HI1: interface port for administrative state . 31
A.3 HI2: interface port for IRI . 31
A.3.1 Definition of Intercept Related Information (IRI) . 31
A.3.2 Structure of IRI records . 32
A.3.2.0 General . 32
A.3.2.1 Control information for HI2. 32
A.3.2.2 Basic call information . 32
A.3.2.3 Information on Supplementary Services, related to a call in progress . 33
A.3.2.4 Information on non-call related Supplementary Services . 33
A.3.3 Selection of parameters for IRI records . 34
A.3.4 Coding of parameters in IRI records . 36
A.3.5 Information content of the IRI record types . 37
A.4 HI3: interface port for Content of Communication . 37
A.4.0 General . 37
A.4.1 Delivery of Content of Communication (CC) . 37
A.4.1.0 General . 37
A.4.1.1 Delivery of TETRA CC over circuit switched handover networks . 38
A.4.2 Delivery of packetized Content of Communication (CC) (general) . 38
A.4.2.0 General . 38
A.4.2.1 Delivery of TETRA CC over packet switched handover networks . 39
A.4.3 Control information for circuit switched Content of Communication (CC) . 39
A.4.4 Exception handling . 40
A.4.4.1 Failure of CC links . 40
A.4.4.2 Fault reporting . 40
A.4.5 Security requirements at the interface port HI3 . 41
A.4.5.0 General . 41
A.4.5.1 LI access verification . 41
A.4.5.2 Access protection . 41
A.4.5.3 Authentication . 41
A.5 LI procedures for circuit switched supplementary services . 42
A.5.1 General . 42
A.5.2 CC link Impact . 44
A.5.3 IRI impact, general principle for sending IRI records . 44
A.5.4 Multi party calls - general principles, options A, B . 45
A.5.4.0 General . 45
A.5.4.1 CC links for active and non-active calls (option A) . 45
A.5.4.2 Reuse of CC links for active calls (option B) . 45
A.5.5 Subscriber Controlled Input (SCI): Activation/Deactivation/Interrogation of services . 46
A.6 Detailed procedures for circuit switched supplementary services . 46
A.6.1 Advice of Charge services (AOC) . 46
A.6.2 Call Waiting (CW) . 46
A.6.2.1 Call Waiting (CW) at target: CC links . 46
A.6.2.2 Call Waiting: IRI records . 47
A.6.2.2.1 Target is served user. 47
A.6.2.2.2 Other party is served user . 47
A.6.3 Call Hold/Retrie ve . 47
A.6.3.1 CC links for active and non-active calls (option A) . 47
A.6.3.2 Reuse of CC links for active calls (option B) . 47
ETSI
5 ETSI ES 201 671 V3.2.1 (2018-05)
A.6.3.3 IRI records . 47
A.6.3.3.1 Invocation of Call Hold or Retrieve by target . 47
A.6.3.3.2 Invocation of Hold or Retrieve by other parties . 47
A.6.4 Explicit Call Transfer (ECT) . 47
A.6.4.1 Explicit Call Transfer (ECT), CC link . 47
A.6.4.2 Explicit Call Transfer (ECT), IRI records . 48
A.6.5 Calling Line Identification Presentation (CLIP) (IRI Records) . 48
A.6.5.1 Call originated by target (other party is served user) . 48
A.6.5.2 Call terminated at target (target is served user) . 48
A.6.6 Calling Line Identification Restriction (CLIR) . 48
A.6.7 COnnected Line identification Presentation (COLP) . 48
A.6.7.1 Call terminated at target (other party is served user) . 48
A.6.7.2 Call originated by target (target is served user) . 48
A.6.8 COnnected Line identification Restriction (COLR) . 48
A.6.9 Closed User Group (CUG) . 49
A.6.10 Completion of Call to Busy Subscriber (CCBS) . 49
A.6.11 CONFerence call, add-on (CONF) . 49
A.6.11.1 CONFerence calls, add on: CC links . 49
A.6.11.2 Conference calls: IRI records. 49
A.6.12 Three Party Service (Conference) . 49
A.6.12.1 CC links . 49
A.6.12.2 Three Party Service, IRI Records . 49
A.6.13 Meet-Me Conference (MMC) . 49
A.6.14 Direct Dialling In (DDI) . 50
A.6.15 Multiple Subscriber Number (MSN) . 50
A.6.16 DIVersion services (DIV) . 50
A.6.16.0 General . 50
A.6.16.1 Call Diversion by target . 50
A.6.16.1.1 Call Diversion by target, CC links . 50
A.6.16.1.2 Call Diversion by target, IRI records . 51
A.6.16.2 Forwarded call terminated at target . 51
A.6.16.3 Call from target forwarded . 51
A.6.17 Variants of call diversion services . 51
A.6.18 Void . 51
A.6.19 Malicious Call IDentification (MCID) . 51
A.6.20 SUBaddressing (SUB) . 51
A.6.21 Terminal Portability (TP) . 51
A.6.21.1 CC links . 51
A.6.21.2 IRI records . 51
A.6.21.2.1 Invocation of Terminal Portability by target . 51
A.6.21.2.2 Invocation of Terminal Portability by other parties . 52
A.6.22 User-to-User Signalling (UUS) . 52
A.6.23 Abbreviated Address (AA) . 52
A.6.24 Fixed Destination Call (FDC) . 52
A.6.25 Alarm Call (AC)/Wake-Up Service (WUS) . 52
A.6.26 Incoming Call Barring (ICB). 52
A.6.27 Outgoing Call Barring (OCB) . 52
A.6.28 Completion of Calls on No Reply (CCNR) . 52
A.6.29 Reverse charging . 52
A.6.30 Line hunting . 53
A.6.31 Message Wait Indication (MWI) . 53
A.6.32 Name display . 53
A.6.33 Tones, announcements . 53
A.7 Void . 53
A.8 GSM circuit switched technology annex . 53
A.8.1 Functional architecture . 53
A.8.2 Correlation of CC and IRI (see clause 6) . 54
A.8.3 HI3 (delivery of CC) . 54
A.8.4 HI2 (delivery of IRI) . 54
A.9 TETRA technology annex . 56
ETSI
6 ETSI ES 201 671 V3.2.1 (2018-05)
A.10 NGN PSTN/ISDN emulation and simulation services technology annex . 56
A.10.0 General . 56
A.10.1 Functional architecture . 56
A.10.2 Correlation . 56
A.10.3 HI2. 57
A.10.4 HI3. 57
Annex B (normative): Packet switched network handover . 58
B.1 Specific identifiers for LI . 58
B.2 HI1: interface port for administrative state . 58
B.3 HI2: interface port for IRI . 58
B.3.1 Definition of Interception Related Information for packet switched . 58
B.3.2 Exception handling . 58
B.3.3 Security aspects . 58
B.4 HI3: interface port for Content of Communication (CC) . 59
B.5 GPRS technology annex . 59
B.5.1 Functional architecture . 59
B.5.2 Correlation . 60
B.5.2.1 Correlation of the present document IDs to GSM IDs . 60
B.5.2.2 GPRS LI correlation between CC and IRI . 60
B.5.3 HI2 (delivery of IRI) . 60
B.5.4 HI3 (Delivery of CC) . 61
Annex C (normative): HI2 Delivery mechanisms and procedures . 62
C.0 Premise . 62
C.1 ROSE . 62
C.1.1 Architecture . 62
C.1.2 ASE_HI procedures . 62
C.1.2.1 Sending part . 62
C.1.2.2 Receiving part . 64
C.1.2.3 Data link management . 64
C.1.2.3.0 General . 64
C.1.2.3.1 Data link establishment . 64
C.1.2.3.2 Data link release . 65
C.1.2.4 Handling of unrecognized fields and parameters . 65
C.1.3 Void . 65
C.2 FTP . 65
C.2.1 Introduction . 65
C.2.2 Usage of the FTP . 66
C.2.3 Profiles . 67
C.2.4 File content . 69
C.2.5 Exceptional procedures . 69
C.2.6 Other considerations . 70
Annex D (normative): Structure of data at the Handover Interface . 71
D.0 General . 71
D.1 Syntax definitions . 71
D.2 Object tree . 72
D.3 HI management operation . 73
D.4 LI management notification . 74
D.5 Intercept related information (HI2 PS and CS) . 76
D.6 User data packet transfer (HI3 CS) . 90
ETSI
7 ETSI ES 201 671 V3.2.1 (2018-05)
D.7 TETRA data transfer (HI3 interface) . 91
D.8 Definition of the UUS1 content associated to the CC link . 91
D.9 Content of Communication (HI3 GPRS) . 92
Annex E (informative): Use of subaddress and calling party number to carry correlation
information . 94
E.1 Introduction . 94
E.2 Subaddress options . 94
E.3 Subaddress coding . 94
E.3.0 General . 94
E.3.1 BCD values . 94
E.3.2 Field order and layout . 95
E.4 Field coding . 101
E.4.0 General . 101
E.4.1 Direction . 101
E.4.2 Coding of the Calling Party Number . 101
E.5 Length of fields . 102
Annex F (informative): GPRS HI3 Interface . 103
F.1 Functional architecture . 103
F.2 Correlation . 103
F.3 HI3 Delivery Content of Communication (CC) . 104
F.3.0 General . 104
F.3.1 GPRS LI correlation header . 104
F.3.1.1 Introduction. 104
F.3.1.2 Definition of GLIC header . 104
F.3.1.3 Exceptional procedure . 106
F.3.1.4 Other considerations . 106
F.3.2 FTP . 106
F.3.2.1 Introduction. 106
F.3.2.2 Usage of the FTP . 106
F.3.2.3 Profiles . 108
F.3.2.4 Exceptional procedures . 110
F.3.2.5 CC contents for FTP . 110
F.3.2.5.1 Fields . 110
F.3.2.5.2 Information Element syntax . 112
F.3.2.6 Other considerations . 113
Annex G (informative): LEMF requirements - handling of unrecognized fields and
parameters . 115
Annex H (informative): IP Multimedia Subsystem (IMS) handover . 116
H.0 General . 116
H.1 Specific identifiers for LI . 116
H.1.0 General . 116
H.1.1 Lawful interception identifier . 117
H.1.2 Network identifier . 117
H.1.3 Correlation number. 117
H.1.4 IRI for IMS .
...