Difference between revisions of "OpenLI Intercept Management"
From neil.tappsville.com
Jump to navigationJump to searchm |
m |
||
Line 3: | Line 3: | ||
Purpose | Purpose | ||
* Track individual intercepts. | * Track individual intercepts. | ||
+ | * Reflect the state of LI components in the network | ||
* Deduplicate dual intercepts | * Deduplicate dual intercepts | ||
− | |||
* Terminate expired intercepts (push coa deactivate if the subscribers session is active). | * Terminate expired intercepts (push coa deactivate if the subscribers session is active). | ||
+ | * Push configuration to freeRadius and reload its configuration. | ||
* Push configuration to OpenLI and reload its configuration. | * Push configuration to OpenLI and reload its configuration. | ||
Revision as of 03:23, 25 November 2019
OpenLI Intercept Manager
Purpose
- Track individual intercepts.
- Reflect the state of LI components in the network
- Deduplicate dual intercepts
- Terminate expired intercepts (push coa deactivate if the subscribers session is active).
- Push configuration to freeRadius and reload its configuration.
- Push configuration to OpenLI and reload its configuration.
Relationships and Terminology
LEA 1 - n Warrant 1 - n Intercept
- LEA - Law Enforcement Agencies
- Warrant - Document naming a (or multiple) person(s), place(s) or object(s) that are subject to LI
Example. Person: Big Bird, Place: 123 Sesame Street, Object: Blue Car
- Intercept - Single wiretap instance delivered to a specific LEA with a unique identifier.
Example. Internet Access Connection for subscriber ABC123 delivered to 'The Spooks'
SelectorID 1-1 Mediator ID 1-n LIIDs
- SelectorID - Unique identifier used to identify a service instance
Example: BNG Chargeable-User-Identity, VoIP: username or phonenumber
- MediatorID - IP traffic is only intercepted once within the network, each packet is given this tag and sent to the LI Collector where it will then attribute the raw packet with corresponding intercept(s)
- LIID - Lawful Interception Identifier - unique identifier (for that LEA) for which an specific intercepted service is tagged.
NOTE: A single customers service may be intercepted multiple times by a one LEA (the target is the subject of multiple concurrent investigations) and can also be intercepted by multiple agencies at the same time,