DECISION Group Inc.

Decision Groupwww.edecision4u.com

Mediation Device for

Internet Access Provider

• A legally sanctioned official access to private communications of specific targets through– telephone calls– e-mail messages– …

• A security process: through which a communication service provider collects and provides law enforcement with intercepted communications of private individuals or organizations.

What is Lawful Interception

What Challenges to Current LI

Based on old telecom network of voice analog technology without support of new IP technology

All batch job task without quick response to immediate events LI result report acquired one or two days later because of

batch processing tasksOnly on voice and email without on the scope of many

other popular online services Cyber crime rings rely on 60% on voice 　 and email and 40% on other social media, 　 instant message, and interactive tools…

Current Out-of-Date LI Technology cannot Mitigate the Risk of Attacks from Crime Rings

For both Telecom and Network Environment

Compliant with ETSI or CALEA Standards

Getting IP packet data stream from Telecom and Internet

Service Providers

Decoding as many protocols as possible

Data retention capability for long term tracking and

reporting

Easy to deploy and manage with high security control

New Criteria for Lawful Interception

Standard Integrated Lawful Interception Solutions from Decision GroupStandard Integrated Lawful Interception Solutions from Decision Group

Scenario and Actors for LI

target

Correspondent

Handover interface

Interception interface

Regulators Regulators

Service ProvidersService Providers

Mediation Vendors Mediation Vendors

Collection Vendors Collection Vendors

Interception Vendors Interception Vendors

Monitor

ETSI Lawful Interception Model

LEMF

NetworkInternalFunctions

Intercept related information (IRI)

Content ofCommunication (CC)

Administration function

IRI Mediation function

Content Mediationfunction

IIF

INI

HI1

HI2

HI3

IIF: Internal interception FunctionINI: Internal Network Interface

HI1: Administraive InformationHI2: Intercept Related InformationHI3: Content of Communication

NWO/AP/SvPDomain

Interception Vendors Interception Vendors

Mediation Vendors Mediation Vendors

Collection Vendors Collection Vendors

LI Plane @ LEALI Plane @ ISP

Court

Investigator

Crime Investigation Cycle with LI

Interception & Filtering

Delivery

Target Provision

Warrant Management

Decoding &

ReconstructionDeep Content Deep Content

InspectionInspection

Presentation

GSNGSN

Core RouterCore Router

BRASBRAS

AAA

IP Data -Control Plane-User Plane

Wired IAS Passive Interception

Wired IAS Active Interception

Wireless 3G Passive Interception

iMediatior System Spec

－ Target Type • ISP account/RADIUS • CPE MAC address/RADIUS • IP address• MSISDN/GTP-C

－ Packet Pre-processing • GTP-C, GTP-U, RADIUS….

－ Interception Adaptor • Passive Sniffing: DG certified IP Probe • Active Filtering : BRAS,GGSN,HA,MME,SGW,PGW

－ Data Delivery• Proprietary Handover Interface: DG HI • ETSI Handover interface: ETSI TS 102 232-1/3

－ Capacity per Server (HP DL380 G8)• Max 300 active interception session

Target Provision

Interception&

Filtering

Delivery