G.4.1 Scope of interception

33.1283GPPProtocol and procedures for Lawful Interception (LI)Release 18SecurityStage 3TS

For the service type of Data, the NFs present in the packet core network provide the LI functions. This annex illustrates the LIPF logic for 5GC and EPC as the two packet core networks.

The interception of service type of Data includes:

– Delivery of IRI, or CC based on the delivery type indicated in the warrant.

– When required, the delivery of packet data header reporting.

– When required, the delivery of LALS reports based on the LALS triggering.

The CSP may have differing implementation options for the packet data header reporting and LALS triggering.

In the case of EPC, the CSP may also have differing deployment options in choosing the NFs (SGW-based Vs PGW-based) that provide the interception.