OpenLI Intercept Management

From neil.tappsville.com
Revision as of 03:19, 25 November 2019 by Gonzo (talk | contribs)
Jump to navigationJump to search

OpenLI Intercept Manager

  • Keeps track of individual intercepts.
  • Reduplicates dual intercepts
  • Push configuration to freeRadius (Filter AAA messages and transpose Chargeable-User-Identity to user-name field expected by OpenLI) and reload its configuration.
  • Terminate expired intercepts (push coa deactivate if the subscribers session is active)
  • Push configuration to OpenLI

Relationships and Terminology

LEA 1 - n Warrant 1 - n Intercept

  • LEA - Law Enforcement Agencies
  • Warrant - Document naming a (or multiple) person(s), place(s) or object(s) that are subject to LI

Example. Person: Big Bird, Place: 123 Sesame Street, Object: Blue Car

  • Intercept - Single wiretap instance delivered to a specific LEA with a unique identifier.

Example. Internet Access Connection for subscriber ABC123 delivered to 'The Spooks'


SelectorID 1-1 Mediator ID 1-n LIIDs

  • SelectorID - Unique identifier used to identify a service instance

Example: BNG Chargeable-User-Identity, VoIP: username or phonenumber

  • MediatorID - IP traffic is only intercepted once within the network, each packet is given this tag and sent to the LI Collector where it will then attribute the raw packet with corresponding intercept(s)
  • LIID - Lawful Interception Identifier - unique identifier (for that LEA) for which an specific intercepted service is tagged.

NOTE: A single customers service may be intercepted multiple times by a one LEA (the target is the subject of multiple concurrent investigations) and can also be intercepted by multiple agencies at the same time,