Intercept Related Information

From TBwiki
(Difference between revisions)
Jump to: navigation, search
Line 1: Line 1:
 
The call data (known as Intercept Related Information or [[IRI]] in Europe and Call Data or CD in the US) consists of information about the targeted communications, including destination of a voice call (e.g., called party’s telephone number), source of a call (caller’s phone number), time of the call, duration, etc.  
 
The call data (known as Intercept Related Information or [[IRI]] in Europe and Call Data or CD in the US) consists of information about the targeted communications, including destination of a voice call (e.g., called party’s telephone number), source of a call (caller’s phone number), time of the call, duration, etc.  
  
−
==IRI Records==
+
==IRI records==
  
 
* Lawful Interception, a feature as provided by service providers to law enforcement agencies, allows law enforcement agencies to intercept calls
 
* Lawful Interception, a feature as provided by service providers to law enforcement agencies, allows law enforcement agencies to intercept calls
 
** By receiving a copy of the audio of both parties
 
** By receiving a copy of the audio of both parties
 
** By receiving call information records (or IRI records)
 
** By receiving call information records (or IRI records)
−
* Intercept Related Information Record (IRI record) is�a CDR-style record that contain IRI information on an intercepted call
+
* Intercept Related Information record (IRI record) is a CDR-style record that contain IRI information on an intercepted call
  
 +
==IRI records generating==
  
−
[[Image:Lawful-intercept-details.png|thumb|360px|Schematic showing interception of a call already routed with a Tmedia]]
+
* IRI records are generated at various states of the interception
 +
* They provide information on the interception, and call state
 +
* In a call, each call leg can be an interception target
 +
* When a leg is an interception target, it’s intercepted:
 +
** Audio «from» this leg is forked to a new outgoing call
 +
** Audio «to» this leg is forked to a new outgoing call
 +
** IRI records are generated for this interception
 +
* Both legs may be independently and simultaneously intercepted
 +
** 2 pairs of forked audio outgoing calls
 +
** 2 sets of IRI records
  
−
Lawful interception will identify a call to intercept, and send the following information to one or multiple Law Enforcement agencies:
+
==Types of IRI records==
−
* information on an intercepted call (calling/called numbers, timestamps, call duration, etc.)
+
−
* audio from both directions of the call
+
  
−
Interception of a call is triggered by:
+
* Start: Indicate that the interception is starting
−
* A phone number to monitor
+
* Continue: Indicate call state change
−
* A date/time period
+
* End:  Indicate the end of the interception
−
A call that matches the number and the time period will be intercepted.
+
  
 +
===Typical information found in an IRI record===
  
−
==Toolpack Implementation==
+
* Record type (Start, Continue, End)
−
With a [[Tmedia]] system running the [[Toolpack]] software (version 2.7 or above), lawful interception is triggered by a routing script. This script uses the information from a configuration file (csv format), to determine which phone number must be intercepted during which time period.
+
* LIID (unique identifier of the intercepted target)
 +
* CIN (communication identity number)
 +
* Operator identifier
 +
* Direction (target is originating, or terminating)
 +
* Call state (idle, setup, connected)
 +
* Duration of ring and conversation states
 +
* Calling / called party numbers
 +
* Release reason
 +
* CC link state (setup, active, released, lack of resources)
 +
* CC link release reason
  
−
A call that matches the number (calling or called number) and the time period will be intercepted.
+
==IRI records encoding==
 +
* IRI records are encoded in ASN.1 format
 +
* ASN.1 IDs and objects hierarchy for encoding IRI records is provided by ETSI specifications
  
−
During the interception, two outgoing calls toward an interception [[NAP]] will be placed, each containing a copy of the audio of one direction of the intercepted call. The specified [[NAP]] must be configured to point to the Law Enforcement Agency, generally using ISDN trunks.
+
==IRI records values and files specification==
 +
* IRI records values can be
 +
** Mandatory in each record
 +
** In one record only for the whole call
 +
** optional (in some records only, or none at all)
 +
* IRI record files can
 +
** Contain only one IRI record (one file per record)
 +
** Contain multiple IRI records (grouped)
  
−
In addition, information records (containing general call information like calling/called number, timestamps, and call duration, etc., this information is called [[Intercept Related Information]] ([[IRI]]) records) will be sent to the Law Enforcement Agency. That information is sent as data files (format specified by ETSI 201 671 v2-1-1) to a FTP server (Toolpack also supports SFTP for more security).
+
==IRI records uploading to the agency==
 +
* As files, using the FTP protocol
 +
* Telcobridges supports SFTP as file transfer method as well
  
−
Lawful Intercept configuration (NAP to use, login information of the FTP/SFTP server, target numbers to intercept, etc.) can be configured in the [[Toolpack]] Web Portal.
+
[[Image:Lawful-intercept-details.png|thumb|360px|Schematic showing interception of a call already routed with a Tmedia]]
−
 
+
−
==H.248 Implementation==
+
−
Lawful Interception is also supported using H.248 interface.
+
  
−
== Configuration ==
 
−
*[[Toolpack:Lawful_Interception_Settings_B|Toolpack v2.9: Lawful Intercept]]
 
−
*[[Toolpack:Lawful_Interception_Settings_A|Toolpack v2.8: Lawful Intercept]]
 
−
*[[Web_Portal_Tutorial_Guide_v2.7#Lawful_Interception|Toolpack v2.7: Lawful Intercept]]
 
  
 
== References ==
 
== References ==

Revision as of 06:11, 21 September 2016

The call data (known as Intercept Related Information or IRI in Europe and Call Data or CD in the US) consists of information about the targeted communications, including destination of a voice call (e.g., called party’s telephone number), source of a call (caller’s phone number), time of the call, duration, etc.

Contents

IRI records

  • Lawful Interception, a feature as provided by service providers to law enforcement agencies, allows law enforcement agencies to intercept calls
    • By receiving a copy of the audio of both parties
    • By receiving call information records (or IRI records)
  • Intercept Related Information record (IRI record) is a CDR-style record that contain IRI information on an intercepted call

IRI records generating

  • IRI records are generated at various states of the interception
  • They provide information on the interception, and call state
  • In a call, each call leg can be an interception target
  • When a leg is an interception target, it’s intercepted:
    • Audio «from» this leg is forked to a new outgoing call
    • Audio «to» this leg is forked to a new outgoing call
    • IRI records are generated for this interception
  • Both legs may be independently and simultaneously intercepted
    • 2 pairs of forked audio outgoing calls
    • 2 sets of IRI records

Types of IRI records

  • Start: Indicate that the interception is starting
  • Continue: Indicate call state change
  • End: Indicate the end of the interception

Typical information found in an IRI record

  • Record type (Start, Continue, End)
  • LIID (unique identifier of the intercepted target)
  • CIN (communication identity number)
  • Operator identifier
  • Direction (target is originating, or terminating)
  • Call state (idle, setup, connected)
  • Duration of ring and conversation states
  • Calling / called party numbers
  • Release reason
  • CC link state (setup, active, released, lack of resources)
  • CC link release reason

IRI records encoding

  • IRI records are encoded in ASN.1 format
  • ASN.1 IDs and objects hierarchy for encoding IRI records is provided by ETSI specifications

IRI records values and files specification

  • IRI records values can be
    • Mandatory in each record
    • In one record only for the whole call
    • optional (in some records only, or none at all)
  • IRI record files can
    • Contain only one IRI record (one file per record)
    • Contain multiple IRI records (grouped)

IRI records uploading to the agency

  • As files, using the FTP protocol
  • Telcobridges supports SFTP as file transfer method as well
Schematic showing interception of a call already routed with a Tmedia


References

Wikipedia lawful intercept article

Retrieved from "https://docs.telcobridges.com/mediawiki/index.php?title=Intercept_Related_Information&oldid=21685"
Personal tools