SIST-TS ETSI/TS 102 232-7 V3.13.1:2023
(Main)Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP delivery - Part 7: Service-specific details for Mobile Services
General Information
- Abstract
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP TS 33.128 [6].
- Status
- Published
- Publication Date
- 25-Jun-2023
- Technical Committee
- SPN - Services and Protocols for Networks
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 09-Jun-2023
- Due Date
- 14-Aug-2023
- Completion Date
- 26-Jun-2023
Overview
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 addresses the requirements for lawful interception (LI) in mobile services, focusing on the handover interface and service-specific details for IP-based delivery. This standard is part of a multi-part series developed by ETSI Technical Committee Lawful Interception (LI) and adopted as SIST-TS by the Slovenian Institute for Standardization (SIST). It is specifically aligned with the frameworks established by 3GPP TS 33.108 and 3GPP TS 33.128, facilitating the secure and standardized delivery of intercepted data from various mobile service domains to authorized law enforcement agencies.
The document outlines how intercepted information, such as Intercept Related Information (IRI) and Content of Communication (CC), must be formatted and transferred across interfaces to support a broad range of mobile and IP-based communication services. By providing service-specific guidance, this standard ensures the seamless integration of mobile service interception capabilities into an operator's existing lawful interception delivery mechanisms.
Key Topics
Lawful Interception for Mobile Services
Defines the requirements for intercepting communications in mobile networks according to referenced 3GPP standards.Handover Interface Specification
Utilizes ETSI TS 102 232-1 as the baseline, describing how headers and data exchange should be structured for efficient and reliable transfer of intercepted data.Service-Specific Data Models
Details the mapping and handling of IRI and CC for:- Circuit-switched and packet-switched mobile domains
- Evolved Packet System (EPS), IMS Conference, IMS-based VoIP
- Multimedia, proximity services, and group communication systems
Data Consistency and Mapping
Provides guidance on consistent population of data fields and header elements when transferring information from network operator systems to law enforcement monitoring facilities.Alignment with 3GPP and ETSI Frameworks
Ensures compatibility and compliance with the latest regulatory and technical requirements for lawful interception in both 4G and 5G environments.
Applications
Telecommunications Operators
Enables CSPs and mobile network operators to meet legal obligations for lawful interception by delivering intercepted mobile communications in a standardized format.Law Enforcement Agencies
Supports efficient, accurate, and secure access to both communication content and metadata, essential for criminal investigations and national security operations.System Integrators and Solution Providers
Facilitates the integration of interception solutions within multi-vendor and multi-technology environments by leveraging a common interface and service-specific data structures.Regulatory Compliance
Assures national and regional telecom regulatory authorities that interception practices adhere to internationally recognized standards, reducing risk and complexity in audit and enforcement.
Related Standards
- ETSI TS 102 232-1: Handover Interface and Service-Specific Details for IP delivery - foundational specification for IP-based lawful interception delivery.
- 3GPP TS 33.108: Security; Handover interface for Lawful Interception (covering UMTS, LTE, GSM).
- 3GPP TS 33.128: Security; Protocol and procedures for Lawful Interception (includes 5G, LTE, UMTS, GSM).
- ETSI TS 103 221-2: Internal Network Interfaces for lawful interception (X2/X3 interface).
- ETSI TS 101 671: Historical foundational standard for lawful interception handover interfaces.
Adopting SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 helps telecom operators, solution providers, and authorities implement robust legal interception frameworks adapted to today's mobile and IP-based environments, ensuring both compliance and interoperability on an international scale. For further insights and legal interception resources, refer to the latest versions of the associated ETSI and 3GPP standards.
Get Certified
Connect with accredited certification bodies for this standard

BSI Group
BSI (British Standards Institution) is the business standards company that helps organizations make excellence a habit.

NYCE
Mexican standards and certification body.
Sponsored listings
Frequently Asked Questions
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP delivery - Part 7: Service-specific details for Mobile Services". This standard covers: The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through a common interface. 3GPP TS 33.108 The scope of the present document includes the handover of lawfully-intercepted information from the following parts of 3GPP TS 33.108 [3]: • Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched domain (3GPP TS 33.108 [3], clause 5). • IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6). • IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7). • IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10). • IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11). • IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12). • IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13). • IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14). The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3]. 3GPP TS 33.128 The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP TS 33.128 [6].
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through a common interface. 3GPP TS 33.108 The scope of the present document includes the handover of lawfully-intercepted information from the following parts of 3GPP TS 33.108 [3]: • Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched domain (3GPP TS 33.108 [3], clause 5). • IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6). • IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7). • IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10). • IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11). • IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12). • IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13). • IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14). The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3]. 3GPP TS 33.128 The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP TS 33.128 [6].
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 is classified under the following ICS (International Classification for Standards) categories: 35.240.95 - Internet applications. The ICS classification helps identify the subject area and facilitates finding related standards.
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 is associated with the following European legislation: EU Directives/Regulations: TP273. When a standard is cited in the Official Journal of the European Union, products manufactured in conformity with it benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation.
SIST-TS ETSI/TS 102 232-7 V3.13.1:2023 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
TECHNICAL SPECIFICATION
Lawful Interception (LI);
Handover Interface and
Service-Specific Details (SSD) for IP delivery;
Part 7: Service-specific details for Mobile Services
2 ETSI TS 102 232-7 V3.13.1 (2023-03)
Reference
RTS/LI-00236-7
Keywords
handover, IP, lawful interception, mobile, security
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE
Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871
Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law
anty is made of merchantability or fitness
and/or governmental rule and/or regulation and further, no representation or warr
for any particular purpose or against infringement of intellectual property rights.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.
Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.
© ETSI 2023.
All rights reserved.
ETSI
3 ETSI TS 102 232-7 V3.13.1 (2023-03)
Contents
Intellectual Property Rights . 5
Foreword . 5
Modal verbs terminology . 5
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 7
3 Definition of terms, symbols and abbreviations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
4 General . 8
4.1 Approach . 8
4.2 Reference model . 8
5 3GPP handover Headers, data exchange and networks . 8
5.1 Approach . 8
5.2 Structures . 9
6 3GPP handover Intercept Related Information (IRI) and Content of Communication (CC) . 9
6.1 Definition of IRI events and CC . 9
6.2 IRI format . 9
6.3 CC format . 9
7 Void . 10
8 Void . 10
9 EPS Headers, data exchange and networks . 10
9.1 Approach . 10
9.2 Structures . 10
10 EPS Intercept Related Information (IRI) and Content of Communication (CC) . 10
10.1 Definition of IRI events and CC . 10
10.2 IRI format . 10
10.3 CC format . 10
11 IMS Conference Intercept Related Information (IRI) and Content of Communication (CC) . 11
11.1 Definition of IRI events and CC . 11
11.2 IRI format . 11
11.3 CC format . 11
12 IMS-based VoIP Intercept Related Information (IRI) and Content of Communication (CC) . 11
12.1 Definition of IRI events and CC . 11
12.2 IRI format . 11
12.3 CC format . 11
13 Proximity Services Intercept Related Information (IRI) . 12
13.1 Definition of IRI . 12
13.2 IRI format . 12
14 Group Communications System Enablers Intercept Related Information (IRI) and Content of
Communication (CC) . 12
14.1 Definition of IRI events and CC . 12
14.2 IRI format . 12
14.3 CC format . 12
ETSI
4 ETSI TS 102 232-7 V3.13.1 (2023-03)
15 IRI and CC for services defined in 3GPP TS 33.128 . 12
15.1 Definition of IRI events and CC . 12
15.2 IRI and CC format . 13
15.3 Network Function Identifier . 13
15.4 Extended Interception Point Identifier . 13
15.5 PayloadDirection . 13
Annex A (normative): ASN.1 for IRI and CC . 14
A.1 Note on integrating ASN.1 structures . 14
A.1.1 Header field mappings . 14
A.1.2 CIN allocation . 16
Annex B (informative): Change request history . 17
History . 19
ETSI
5 ETSI TS 102 232-7 V3.13.1 (2023-03)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its
Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the ®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This Technical Specification (TS) has been produced by ETSI Technical Committee Lawful Interception (LI).
The present document is part 7 of a multi-part deliverable. Full details of the entire series can be found in part 1 [2].
Modal verbs terminology
In the present document "shall", "shall not", "should", "should not", "may", "need not", "will", "will not", "can" and
"cannot" are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of
provisions).
"must" and "must not" are NOT allowed in ETSI deliverables except when used in direct citation.
Introduction
The ETSI TS 102 232 [i.1] series of standards aims to provide a common delivery interface for lawfully-intercepted
material from a wide range of services. The aim of the present document is to increase the range of services to which
the ETSI TS 102 232 [i.1] interface applies, by including services from 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]
within the ETSI TS 102 232 [i.1] delivery framework.
ETSI
6 ETSI TS 102 232-7 V3.13.1 (2023-03)
1 Scope
Introduction
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP
TS 33.128 [6].
2 References
2.1 Normative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
Referenced documents which are not found to be publicly available in the expected location might be found at
https://docbox.etsi.org/Reference/.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are necessary for the application of the present document.
[1] Void.
[2] ETSI TS 102 232-1: "Lawful Interception (LI); Handover Interface and Service-Specific Details
(SSD) for IP delivery; Part 1: Handover specification for IP delivery".
ETSI
7 ETSI TS 102 232-7 V3.13.1 (2023-03)
[3] ETSI TS 133 108: "Universal Mobile Telecommunications System (UMTS); LTE; Digital cellular
telecommunications system (Phase 2+) (GSM); 3G security; Handover interface for Lawful
Interception (LI) (3GPP TS 33.108)".
[4] Void.
[5] Void.
[6] ETSI TS 133 128: "Digital cellular telecommunications system (Phase 2+) (GSM); Universal
Mobile Telecommunications System (UMTS); LTE; 5G; Security; Protocol and procedures for
Lawful Interception (LI); Stage 3 (3GPP TS 33.128)".
[7] ETSI TS 103 221-2: "Lawful Interception (LI); Internal Network Interfaces; Part 2: X2/X3".
2.2 Informative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are not necessary for the application of the present document but they assist the
user with regard to a particular subject area.
[i.1] ETSI TS 102 232 (all parts): "Lawful Interception (LI); Handover Interface and Service-Specific
Details (SSD) for IP delivery".
[i.2] ETSI TS 101 671: "Lawful Interception (LI) Handover interface for the lawful interception of
telecommunications traffic".
NOTE: ETSI TS 101 671 is in status "historical" and is not maintained.
3 Definition of terms, symbols and abbreviations
3.1 Terms
For the purposes of the present document, the terms given in ETSI TS 102 232-1 [2] and ETSI TS 101 671 [i.2] apply.
3.2 Symbols
Void.
3.3 Abbreviations
For the purposes of the present document, the following abbreviations apply:
ASN.1 Abstract Syntax Notation One
CC Content of Communication
CC-PDU Content of Communication Protocol Data Unit
CIN Communications Identity Number
confLIC Conference LI Correlation
CR Change Request
CS Circuit Switched
EPS Evolved Packet System
GCSE Group Communications System Enablers
gcseLIC Group Communications System Enablers LI Correlation
ETSI
8 ETSI TS 102 232-7 V3.13.1 (2023-03)
HI Handover Interface
IMS IP Multimedia Subsystem
IP Internet Protocol
IPID Interception Point IDentifier
IRI Intercept Related Information
LI Lawful Interception
LI_X2 Lawful Interception Internal Interface 2
LI_X3 Lawful Interception Internal Interface 3
MF Mediation Function (at CSP)
NFID Network Function Identifier
PDU Protocol Data Unit
ProSe Proximity Services
PS Packet Switched
TC Technical Committee
TS Technical Specification
uLIC UMTS LI Correlation
UMTS Universal Mobile Telecommunications System
voipLIC Voice Over IP LI Correlation
4 General
4.1 Approach
The present document forms part 7 of the ETSI TS 102 232 [i.1] family of standards, in that it is a service-specific
component of the ETSI TS 102 232-1 [2] framework.
3GPP TS 33.108 [3] and 3GPP TS 33.128 [6] define the interception behaviour that leads to IRI events on the handover
interface, for both the packet data domain and circuit switched domain.
4.2 Reference model
Law Enforcement
Mediation
Source of mobile data
Monitoring
Function (MF)
(defined in 3GPP
Facility
TS 33.108 or 3GPP
TS 33.128.
Handover
interface
Figure 1: Reference model
5 3GPP handover Headers, data exchange and
networks
5.1 Approach
ETSI TS 102 232-1 [2] describes a technique for data exchange, and specifies the headers that shall be associated with
the results of interception. The present document follows ETSI TS 102 232-1 [2] r
...
SLOVENSKI STANDARD
01-julij-2023
Zakonito prestrezanje (LI) - Izročilni vmesnik in storitveno specifične podrobnosti
(SSD) za IP-dostavo vsebin - 7. del: Storitveno specifične podrobnosti za mobilne
storitve
Lawful Interception (LI) - Handover Interface and Service-Specific Details (SSD) for IP
delivery - Part 7: Service-specific details for Mobile Services
Ta slovenski standard je istoveten z: ETSI TS 102 232-7 V3.13.1 (2023-03)
ICS:
35.240.95 Spletne uporabniške rešitve Internet applications
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
TECHNICAL SPECIFICATION
Lawful Interception (LI);
Handover Interface and
Service-Specific Details (SSD) for IP delivery;
Part 7: Service-specific details for Mobile Services
2 ETSI TS 102 232-7 V3.13.1 (2023-03)
Reference
RTS/LI-00236-7
Keywords
handover, IP, lawful interception, mobile, security
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE
Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16
Siret N° 348 623 562 00017 - APE 7112B
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° w061004871
Important notice
The present document can be downloaded from:
https://www.etsi.org/standards-search
The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the prevailing version of an ETSI
deliverable is the one made publicly available in PDF format at www.etsi.org/deliver.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
https://portal.etsi.org/TB/ETSIDeliverableStatus.aspx
If you find errors in the present document, please send your comment to one of the following services:
https://portal.etsi.org/People/CommiteeSupportStaff.aspx
If you find a security vulnerability in the present document, please report it through our
Coordinated Vulnerability Disclosure Program:
https://www.etsi.org/standards/coordinated-vulnerability-disclosure
Notice of disclaimer & limitation of liability
The information provided in the present deliverable is directed solely to professionals who have the appropriate degree of
experience to understand and interpret its content in accordance with generally accepted engineering or
other professional standard and applicable regulations.
No recommendation as to products and services or vendors is made or should be implied.
No representation or warranty is made that this deliverable is technically accurate or sufficient or conforms to any law
anty is made of merchantability or fitness
and/or governmental rule and/or regulation and further, no representation or warr
for any particular purpose or against infringement of intellectual property rights.
In no event shall ETSI be held liable for loss of profits or any other incidental or consequential damages.
Any software contained in this deliverable is provided "AS IS" with no warranties, express or implied, including but not
limited to, the warranties of merchantability, fitness for a particular purpose and non-infringement of intellectual property
rights and ETSI shall not be held liable in any event for any damages whatsoever (including, without limitation, damages
for loss of profits, business interruption, loss of information, or any other pecuniary loss) arising out of or related to the use
of or inability to use the software.
Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and
microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.
© ETSI 2023.
All rights reserved.
ETSI
3 ETSI TS 102 232-7 V3.13.1 (2023-03)
Contents
Intellectual Property Rights . 5
Foreword . 5
Modal verbs terminology . 5
Introduction . 5
1 Scope . 6
2 References . 6
2.1 Normative references . 6
2.2 Informative references . 7
3 Definition of terms, symbols and abbreviations . 7
3.1 Terms . 7
3.2 Symbols . 7
3.3 Abbreviations . 7
4 General . 8
4.1 Approach . 8
4.2 Reference model . 8
5 3GPP handover Headers, data exchange and networks . 8
5.1 Approach . 8
5.2 Structures . 9
6 3GPP handover Intercept Related Information (IRI) and Content of Communication (CC) . 9
6.1 Definition of IRI events and CC . 9
6.2 IRI format . 9
6.3 CC format . 9
7 Void . 10
8 Void . 10
9 EPS Headers, data exchange and networks . 10
9.1 Approach . 10
9.2 Structures . 10
10 EPS Intercept Related Information (IRI) and Content of Communication (CC) . 10
10.1 Definition of IRI events and CC . 10
10.2 IRI format . 10
10.3 CC format . 10
11 IMS Conference Intercept Related Information (IRI) and Content of Communication (CC) . 11
11.1 Definition of IRI events and CC . 11
11.2 IRI format . 11
11.3 CC format . 11
12 IMS-based VoIP Intercept Related Information (IRI) and Content of Communication (CC) . 11
12.1 Definition of IRI events and CC . 11
12.2 IRI format . 11
12.3 CC format . 11
13 Proximity Services Intercept Related Information (IRI) . 12
13.1 Definition of IRI . 12
13.2 IRI format . 12
14 Group Communications System Enablers Intercept Related Information (IRI) and Content of
Communication (CC) . 12
14.1 Definition of IRI events and CC . 12
14.2 IRI format . 12
14.3 CC format . 12
ETSI
4 ETSI TS 102 232-7 V3.13.1 (2023-03)
15 IRI and CC for services defined in 3GPP TS 33.128 . 12
15.1 Definition of IRI events and CC . 12
15.2 IRI and CC format . 13
15.3 Network Function Identifier . 13
15.4 Extended Interception Point Identifier . 13
15.5 PayloadDirection . 13
Annex A (normative): ASN.1 for IRI and CC . 14
A.1 Note on integrating ASN.1 structures . 14
A.1.1 Header field mappings . 14
A.1.2 CIN allocation . 16
Annex B (informative): Change request history . 17
History . 19
ETSI
5 ETSI TS 102 232-7 V3.13.1 (2023-03)
Intellectual Property Rights
Essential patents
IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The declarations
pertaining to these essential IPRs, if any, are publicly available for ETSI members and non-members, and can be
found in ETSI SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to
ETSI in respect of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (https://ipr.etsi.org/).
Pursuant to the ETSI Directives including the ETSI IPR Policy, no investigation regarding the essentiality of IPRs,
including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not
referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become,
essential to the present document.
Trademarks
The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners.
ETSI claims no ownership of these except for any which are indicated as being the property of ETSI, and conveys no
right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does
not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks.
DECT™, PLUGTESTS™, UMTS™ and the ETSI logo are trademarks of ETSI registered for the benefit of its
Members. 3GPP™ and LTE™ are trademarks of ETSI registered for the benefit of its Members and of the 3GPP
Organizational Partners. oneM2M™ logo is a trademark of ETSI registered for the benefit of its Members and of the ®
oneM2M Partners. GSM and the GSM logo are trademarks registered and owned by the GSM Association.
Foreword
This Technical Specification (TS) has been produced by ETSI Technical Committee Lawful Interception (LI).
The present document is part 7 of a multi-part deliverable. Full details of the entire series can be found in part 1 [2].
Modal verbs terminology
In the present document "shall", "shall not", "should", "should not", "may", "need not", "will", "will not", "can" and
"cannot" are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of
provisions).
"must" and "must not" are NOT allowed in ETSI deliverables except when used in direct citation.
Introduction
The ETSI TS 102 232 [i.1] series of standards aims to provide a common delivery interface for lawfully-intercepted
material from a wide range of services. The aim of the present document is to increase the range of services to which
the ETSI TS 102 232 [i.1] interface applies, by including services from 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]
within the ETSI TS 102 232 [i.1] delivery framework.
ETSI
6 ETSI TS 102 232-7 V3.13.1 (2023-03)
1 Scope
Introduction
The present document specifies an approach for the handover of the lawfully-intercepted information that is defined in
the two standards: 3GPP TS 33.108 [3] and 3GPP TS 33.128 [6]. The present document uses the handover techniques
defined in ETSI TS 102 232-1 [2]. In this way, the present document allows additional services to be delivered through
a common interface.
3GPP TS 33.108
The scope of the present document includes the handover of lawfully-intercepted information from the following parts
of 3GPP TS 33.108 [3]:
• Intercept Related Information (IRI) and the Content of Communication (CC) from the mobile circuit-switched
domain (3GPP TS 33.108 [3], clause 5).
• IRI and CC from the mobile packet-switched domain (3GPP TS 33.108 [3], clause 6).
• IRI and CC from the multi-media domain (3GPP TS 33.108 [3], clause 7).
• IRI and CC from the EPS domain (3GPP TS 33.108 [3], clause 10).
• IRI and CC from the IMS Conference domain (3GPP TS 33.108 [3], clause 11).
• IRI and CC from the IMS-based VoIP domain (3GPP TS 33.108 [3], clause 12).
• IRI from the Proximity Services domain (3GPP TS 33.108 [3], clause 13).
• IRI and CC from the Group Communication System Enablers domain (3GPP TS 33.108 [3], clause 14).
The present document does not override or supersede any specifications or requirements in 3GPP TS 33.108 [3].
3GPP TS 33.128
The scope of the present document includes the handover of lawfully-intercepted information in accordance with 3GPP
TS 33.128 [6].
2 References
2.1 Normative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
Referenced documents which are not found to be publicly available in the expected location might be found at
https://docbox.etsi.org/Reference/.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are necessary for the application of the present document.
[1] Void.
[2] ETSI TS 102 232-1: "Lawful Interception (LI); Handover Interface and Service-Specific Details
(SSD) for IP delivery; Part 1: Handover specification for IP delivery".
ETSI
7 ETSI TS 102 232-7 V3.13.1 (2023-03)
[3] ETSI TS 133 108: "Universal Mobile Telecommunications System (UMTS); LTE; Digital cellular
telecommunications system (Phase 2+) (GSM); 3G security; Handover interface for Lawful
Interception (LI) (3GPP TS 33.108)".
[4] Void.
[5] Void.
[6] ETSI TS 133 128: "Digital cellular telecommunications system (Phase 2+) (GSM); Universal
Mobile Telecommunications System (UMTS); LTE; 5G; Security; Protocol and procedures for
Lawful Interception (LI); Stage 3 (3GPP TS 33.128)".
[7] ETSI TS 103 221-2: "Lawful Interception (LI); Internal Network Interfaces; Part 2: X2/X3".
2.2 Informative references
References are either specific (identified by date of publication and/or edition number or version number) or
non-specific. For specific references, only the cited version applies. For non-specific references, the latest version of the
referenced document (including any amendments) applies.
NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee
their long term validity.
The following referenced documents are not necessary for the application of the present document but they assist the
user with regard to a particular subject area.
[i.1] ETSI TS 102 232 (all parts): "Lawful Interception (LI); Handover Interface and Service-Specific
Details (SSD) for IP delivery".
[i.2] ETSI TS 101 671: "Lawful Interception (LI) Handover interface for the lawful interception of
telecommunications traffic".
NOTE: ETSI TS 101 671 is in status "historical" and is not maintained.
3 Definition of terms, symbols and abbreviations
3.1 Terms
For the purposes of the present document, the terms given in ETSI TS 102 232-1 [2] and ETSI TS 101 671 [i.2] apply.
3.2 Symbols
Void.
3.3 Abbreviations
For the purposes of the present document, the following abbreviations apply:
ASN.1 Abstract Syntax Notation One
CC Content of Communication
CC-PDU Content of Communication Protocol Data Unit
CIN Communications Identity Number
confLIC Conference LI Correlation
CR Change Request
CS Circuit Switched
EPS Evolved Packet System
GCSE Group Communications System Enablers
gcseLIC Group Communications System Enablers LI Correlation
ETSI
8 ETSI TS 102 232-7 V3.13.1 (2023-03)
HI Handover Interface
IMS IP Multimedia Subsystem
IP Internet Protocol
IPID Interception Point IDentifier
IRI Intercept Related Information
LI Lawful Interception
LI_X2 Lawful Interception Internal Interface 2
LI_X3 Lawful Interception Internal Interface 3
MF Mediation Function (at CSP)
NFID Network Function Identifier
PDU Protocol Data Unit
ProSe Proximity Services
PS Packet Switched
TC Technical Committee
TS Technical Specification
uLIC UMTS LI Correlation
UMTS Universal Mobile Telecommunications System
voipLIC Voice Over IP LI Correlation
4 General
4.1 Approach
The present document forms part 7 of the ETSI TS 102 232 [i.1] family of standards, in that it is a service-specific
component of the ETSI TS 102 232-1 [2] framework.
3GPP TS 33.108 [3] and 3GPP TS 33.128 [6] define the interception behaviour that leads to IRI events on the handover
interface, for both the packet data domain and circuit switched domain.
4.2 Reference model
Law Enforcement
Mediation
Source of mobile data
Monitoring
Function (MF)
(defined in 3GPP
Fa
...







