Difference between revisions of "OpenLI Intercept Management"

From neil.tappsville.com
Jump to navigationJump to search
m
m
Line 3: Line 3:
 
Purpose
 
Purpose
 
* Track individual intercepts.
 
* Track individual intercepts.
 +
* Reflect the state of LI components in the network
 
* Deduplicate dual intercepts
 
* Deduplicate dual intercepts
* Push configuration to freeRadius (it is used to pre-filter AAA messages, transpose Chargeable-User-Identity to user-name field expected by OpenLI, and issue coa messages) and reload its configuration.
 
 
* Terminate expired intercepts (push coa deactivate if the subscribers session is active).
 
* Terminate expired intercepts (push coa deactivate if the subscribers session is active).
 +
* Push configuration to freeRadius and reload its configuration.
 
* Push configuration to OpenLI and reload its configuration.
 
* Push configuration to OpenLI and reload its configuration.
  

Revision as of 03:23, 25 November 2019

OpenLI Intercept Manager

Purpose

  • Track individual intercepts.
  • Reflect the state of LI components in the network
  • Deduplicate dual intercepts
  • Terminate expired intercepts (push coa deactivate if the subscribers session is active).
  • Push configuration to freeRadius and reload its configuration.
  • Push configuration to OpenLI and reload its configuration.

Relationships and Terminology

LEA 1 - n Warrant 1 - n Intercept

  • LEA - Law Enforcement Agencies
  • Warrant - Document naming a (or multiple) person(s), place(s) or object(s) that are subject to LI

Example. Person: Big Bird, Place: 123 Sesame Street, Object: Blue Car

  • Intercept - Single wiretap instance delivered to a specific LEA with a unique identifier.

Example. Internet Access Connection for subscriber ABC123 delivered to 'The Spooks'


SelectorID 1-1 Mediator ID 1-n LIIDs

  • SelectorID - Unique identifier used to identify a service instance

Example: BNG Chargeable-User-Identity, VoIP: username or phonenumber

  • MediatorID - IP traffic is only intercepted once within the network, each packet is given this tag and sent to the LI Collector where it will then attribute the raw packet with corresponding intercept(s)
  • LIID - Lawful Interception Identifier - unique identifier (for that LEA) for which an specific intercepted service is tagged.

NOTE: A single customers service may be intercepted multiple times by a one LEA (the target is the subject of multiple concurrent investigations) and can also be intercepted by multiple agencies at the same time,