®

White Paper
- 1 -
Gaining Total Visibility for Lawful Interception
This paper provides a basic definition and description of Lawful Interception (LI), as well as
offering a brief overview of current challenges that confront communications organizations
and law enforcement. The paper also evaluates some technology options for organizations
in monitoring digital and voice communications across diverse channels.
LI encompasses all activities that affect the capture and storage of digital and voice com-
munications traveling over the network of a service provider, including the telephone and
the Internet.
Each country has its own criteria for defining criminal or terrorist activities; the purpose of LI
is to gather evidence to detect and prevent such activities. In the United States, the Commu-
nications Assistance for Law Enforcement Act (CALEA) sets forth how service providers must
support lawful interception. Abroad, the European Telecommunications Standards Institute
(ETSI) drives adoption of standards for telecommunications, broadband, and related tech-
nologies in Europe and other countries.
Š
*DLQLQJ7RWDO9LVLELOLW\IRU/DZIXO,QWHUFHSWLRQ
:KLWH3DSHU

7KH3XUSRVHVRI/DZIXO,QWHUFHSWLRQ
/,LVLQWHQGHGWRREWDLQFHUWDLQFRPPXQLFDWLRQVQHWZRUNGDWDIRUWKHSXUSRVHVRIDQDO\VLVRUIRUXVHDV
HYLGHQFHSXUVXDQWWROHJDODXWKRULW\6XFKGDWDPLJKWWDNHWKHIRUPRIVLJQDOLQJRUQHWZRUNPDQDJHPHQW
LQIRUPDWLRQRUPD\LQFOXGHWKHDFWXDOFRQWHQWRIWKHFRPPXQLFDWLRQV,IGDWDLVQRWREWDLQHGLQUHDOWLPH
/,DFWLYLW\LVUHIHUUHGWRDV³DFFHVVWRUHWDLQHGGDWD´
7KHWHUP³ODZIXOLQWHUFHSWLRQ´GHVFULEHVWKHSURFHVVE\ZKLFKODZHQIRUFHPHQWDJHQFLHVFRQGXFW
HOHFWURQLFVXUYHLOODQFHRIFLUFXLWDQGSDFNHWPRGHFRPPXQLFDWLRQVDVDXWKRUL]HGE\MXGLFLDORU
DGPLQLVWUDWLYHRUGHU
7RSURWHFWWKHFRPPRQZHOIDUHQDWLRQVZRUOGZLGHKDYHDGRSWHGOHJLVODWLYHUHJXODWLRQVPDQGDWLQJ
WKDWFRPPXQLFDWLRQVSURYLGHUVGHVLJQWKHLUQHWZRUNVLQVXFKDZD\DVWRHQDEOHDXWKRUL]HGHOHFWURQLF
VXUYHLOODQFH,QWHUQDWLRQDOVWDQGDUGVRUJDQL]DWLRQVVHWIRUWKSDUDPHWHUVWRJXLGHVHUYLFHSURYLGHUV63V
DQGPDQXIDFWXUHUVLQLPSOHPHQWLQJWKHVHVWDQGDUGV
0RVWSHRSOHDUHDZDUHRIVXUYHLOODQFHLQWKHIRUPRI³ZLUHWDSV´RQWUDGLWLRQDOWHOHFRPPXQLFDWLRQVVXFK
DVWHOHSKRQHV$VFRPPXQLFDWLRQWHFKQRORJLHVKDYHEHFRPHPRUHFRPSOH[LQWHUFHSWLRQWHFKQLTXHV
KDYHJURZQDFFRUGLQJO\1RZDGD\VWKHLGHDEHKLQGZLUHWDSSLQJLVDOVRHPSOR\HGLQYRLFHGDWDDQG
PXOWLVHUYLFHQHWZRUNVWKDWGHOLYHU,QWHUQHWVHUYLFHV)LJXUHLOOXVWUDWHVWKHYDULHW\RIFRPPXQLFDWLRQVWKDW
FDQEHPRQLWRUHGLQFOXGLQJYRLFHRYHU,39R,3HPDLO:HEWUDI¿F¿OHVKDULQJDQGVRIRUWK
³:LUHWDSSLQJ³LQWKH'LJLWDO$JH
:LUHWDSSLQJDSSOLHGWRGLJLWDOPHGLDGLIIHUVLQSURFHVVEXWQRWLQHLWKHULQWHQWRUFRQFHSWIURPDQDORJ
8QGHU/,D/DZ(QIRUFHPHQW$JHQF\/($ZLOOGHFLGHWRSHUIRUPHOHFWURQLFVXUYHLOODQFHRQD³WDUJHW´
XQGHUWKHDXWKRUL]DWLRQRIDMXGJHRURWKHUDXWKRULW\6XUYHLOODQFHLVLPSOHPHQWHGE\PHDQVRIZLUHWDSV
RQWUDGLWLRQDOWHOHFRPPXQLFDWLRQVDQGE\GLJLWDOLQWHUFHSWVRQ,QWHUQHWVHUYLFHVLQYRLFHGDWDDQG
PXOWLVHUYLFHQHWZRUNV
7KH/,SURFHVVPD\EHKDQGOHGE\DWKLUGSDUW\YHQGRUXVLQJLWVRZQSURSULHWDU\PHGLDWLRQGHYLFH6XFK
DGHYLFHQRWRQO\SURYLGHVWKHLQWHUIDFHWKDW/,XVHVIRULQWHUFHSWLRQEXWFDQDOVRFUHDWHUHTXHVWVWRRWKHU
QHWZRUNGHYLFHVWRFDUU\RXWWKH/,/DVWO\WKHPHGLDWLRQGHYLFHFDQFRQYHUWWKHWUDI¿FLQWRWKHIRUPDW
UHTXLUHGE\WKH/($ZKLFKFDQYDU\E\FRXQWU\RUE\JRYHUQPHQWDODJHQF\
7KH/($DIWHUGHPRQVWUDWLQJOHJDOO\PDQGDWHGSUREDEOHFDXVHPLJKWGHOLYHUDUHTXHVWIRUDZLUHWDSWR
WKH63RIWKHHQWLW\XQGHULQYHVWLJDWLRQ7KDW63WKHQXVHVWKHWDUJHW¶V,QWHUQHW3URWRFRO,3DGGUHVVWR
GHWHUPLQHZKLFKRILWVHGJHURXWHUVKDQGOHVWKHWDUJHW¶VWUDI¿FLQWKHIRUPRIGDWDFRPPXQLFDWLRQ7KH63
LQWHUFHSWVVXVSHFWWUDI¿FDVLWSDVVHVWKURXJKWKHURXWHUDQGVHQGVDFRS\WRWKHLQYHVWLJDWLYHDJHQF\
ZLWKRXWWKHDZDUHQHVVRIWKHHQWLW\XQGHULQYHVWLJDWLRQ
7KHQHHGIRUDFFXUDF\DQGUHOLDELOLW\RIWKHLQIRUPDWLRQLVGLI¿FXOWWRRYHUVWDWHEHFDXVHWKH
FRQVHTXHQFHVRIVXUYHLOODQFHPD\EHSURIRXQGERWKIRUWKHWDUJHWDQGIRUODZHQIRUFHPHQWLWVHOI

7KH/,0RQLWRULQJ,QIUDVWUXFWXUH&RQFHSWVDQG&RPSRQHQWV
7KHWHFKQRORJ\RI/,PRQLWRULQJLVGULYHQIRUHPRVWE\WKHFKDQJLQJQHHGVRIODZHQIRUFHPHQW²ZKLFKLQ
WXUQUHVSRQGWRWKHIDVWHYROYLQJ,QWHUQHWDQGWKHQDWXUHRIWKHWKUHDWV$VDUHVXOWDYDULHW\RIVROXWLRQV
KDVHPHUJHGWRDGGUHVVGLYHUVHDSSOLFDWLRQVVXFKDVKRPHODQGVHFXULW\DQGPD\UHTXLUHLQIRUPDWLRQ
GHOLYHUHGLQVSHFL¿FIRUPDWV%HFDXVHLQWHUFHSWVRQWKHQHWZRUNPXVWEHVHFUHWWKHDFWLYHLQWHUFHSW
PHVVDJHVKDYHWREHNHSWVHSDUDWHIURPPHVVDJHVXVHGIRUURXWLQHFDOOVHWXS
$WLWVPRVWIXQGDPHQWDOOHYHO/,PRQLWRULQJWHFKQRORJ\FRQVLVWVRIDOLVWHQLQJGHYLFHSODFHGRQWKH
WHOHSKRQHRUFRPSXWHUFDEOH²DSURFHVVFRQGXFWHGLQDFFRUGDQFHZLWKWKHUHTXLVLWHOHJDOSHUPLVVLRQVIRU
Š
*DLQLQJ7RWDO9LVLELOLW\IRU/DZIXO,QWHUFHSWLRQ
:KLWH3DSHU

LQWHUFHSWLRQ²SOXVDGHYLFHWRUHFRUGDQGDOHUWDXWKRULW\ZKHQWULJJHUSRLQWVDUHUHDFKHG)RUH[DPSOH
D&$/($IRU9RLFHIHDWXUHZRXOGDOORZWKHODZIXOLQWHUFHSWLRQRIYRLFHFRQYHUVDWLRQVUXQQLQJRQ9R,3
:KHQDODZHQIRUFHPHQWHQWLW\ZLVKHVWRPRQLWRUDWHOHSKRQHFRQYHUVDWLRQ&$/($IRU9RLFHZRXOGPDNH
FRSLHVRI,3SDFNHWVFDUU\LQJWKHFRQYHUVDWLRQDQGVHQGGXSOLFDWHVWRUHVSHFWLYHPRQLWRULQJGHYLFHV
7HOHSKRQHLQWHUFHSWLRQDQGPRQLWRULQJ
7HOHSKRQHFRQYHUVDWLRQVPD\EHUHFRUGHGLQWKHLUHQWLUHW\RULQDIRUPGHWHUPLQHGE\WKHQHHGRIWKH
VSHFL¿FOHJDOLQVWDQFH)RUH[DPSOHUHFRUGLQJPLJKWEHFRQ¿QHGWRRXWJRLQJFRQYHUVDWLRQVRQO\RUWR
VROHO\LQWHUQDWLRQDOFDOOV6RPHPHVVDJHVDUHDXGLWHGLQUHDOWLPHDQGRQO\UHFRUGHGDQGVWRUHGLIFRQWHQW
RIDVXVSLFLRXVQDWXUHEHFRPHVHYLGHQWLQDVKRUWSHULRGRIWLPH
3HQ5HJLVWHURU7UDSDQG7UDFHGHYLFHVUHFRUGRUGHFRGHGLDOLQJURXWLQJDGGUHVVLQJRUVLJQDOLQJ
LQIRUPDWLRQEXWGRQRWLQFOXGHWKHFRQWHQWVRIDQ\FRPPXQLFDWLRQ7KH\WDNHQRWHRQO\RIFDOOVDQGGDWD
VLPLODUWRWKDWZKLFKDSSHDUVRQDSKRQHELOOVXFKDVWLPHRIFDOODQVZHUGLVFRQQHFWDQGFDOOIRUZDUG
LQIRUPDWLRQ
&RPSXWHU7UDI¿F0RQLWRULQJ
,QWKH86/,FDSDELOLWLHVRQWKH:HEDUHOHJDOO\PDQGDWHGE\WKH&RPPXQLFDWLRQV$VVLVWDQFHIRU/DZ
(QIRUFHPHQW$FW&$/($7KLVLVEHFDXVHFRPSXWHUWRFRPSXWHUFRPPXQLFDWLRQSUHVHQWVDKXJH
YROXPHRILQIRUPDWLRQDQGSRWHQWLDOWKUHDWVZLWKVRPDQ\SHRSOHDQGHQWLWLHVFRQQHFWLQJWR:HEVLWHV
HPDLOVHUYHUV,63VDQG¿OHVHUYHUVGDLO\/($VFDQ¿OWHUWKLVLQIRUPDWLRQIRUDXWKHQWLFWKUHDWVE\WUDFNLQJ
XVHUVRUE\WUDFNLQJWKHGDWDLWVHOIWKDWLVWUDQVIHUUHGRUE\QRWLQJWUDI¿FSDWWHUQV)ROORZLQJLVDOLVWRI
SULPDU\DFWLYLWLHVWKDWFDQEHPRQLWRUHG
‡ :HEVLWHXVHWUDFNLQJ
:KHQDXVHUFRQQHFWVWRD:HEVLWHWKHVLWHFDQUHFRUGWKH,3DGGUHVVWKDWWKHXVHUFRQQHFWHG
IURPDQGWKHRQHWKDWKHRUVKHFRQQHFWVWRDIWHUZDUGV/($FDQDOVRWUDFNWKLVDFWLYLW\
‡ (PDLO
(PDLOW\SLFDOO\SDVVHVWKURXJKPDQ\LQWHUPHGLDU\VLWHVEHWZHHQVHQGHUDQGUHFHLYHU7KHVHVLWHV
0RQLWRULQJ7RROV
7DS
1HWZRUN&RQWUROOHU6ZLWFK
7DS
7DS
5RXWHU
Internet
6ZLWFK 6ZLWFK F
6ZLWFK
6ZLWFK F
6ZLWFK
6ZLWFK
:HEDQG(PDLO6HUYHUV
9R,3)73DQG)LOH6HUYHUV
:RUNJURXSV
6ZLWFK F
)LUHZDOO
XSV :RUNJURX :
9R,3)73DQ HUYHUV G)LOH6H QG
:H HEDQG( HUV PDLO6HUYH P
0RQLWRULQJ7RROV
7DSVDQGD1HWZRUN&RQWUROOHU6ZLWFKSURYLGHLQYLVLEOHWUDQVSDUHQWDFFHVVWRGLJLWDO
FRPPXQLFDWLRQVIRU/,DSSOLFDWLRQV
Š
*DLQLQJ7RWDO9LVLELOLW\IRU/DZIXO,QWHUFHSWLRQ
:KLWH3DSHU

FDQFRQVLVWRIDQ\SDJHRQWKH,QWHUQHWWKH,QWHUQHW6HUYLFH3URYLGHU:HEKRVWLQJVHUYLFHVDQG
WKHHPDLOSURYLGHU(PDLOPHVVDJHVFDQEHLQWHUFHSWHGLQRUEHWZHHQDQ\RIWKHVHVLWHV
‡ ,QVWDQW0HVVHQJHU,0
,QVWDQW0HVVHQJHUW\SHFRUUHVSRQGHQFHLVVHQWIURPWKH,0RULJLQDWRU¶VFRPSXWHUWRDVHUYHU
DQGIURPWKHUHWRWKHUHFLSLHQW¶VFRPSXWHU
‡ )LOH7UDQVIHU
)LOHWUDQVIHUPRYHVGDWDIURPRQHFRPSXWHUWRDQRWKHUW\SLFDOO\RYHUWKH,QWHUQHW6LQFHDOO¿OHV
WUDYHOLQSDFNHWVVHQWRYHUDQ,3EDVHGQHWZRUNDQ\W\SHRI¿OHFDQEHWUDQVIHUUHGPXVLF
GRZQORDGVGDWDVWRUDJHRUWD[SD\PHQWV
(QFU\SWLRQ
8VHUVFDQHQFU\SWVRPHWHOHSKRQHFRQYHUVDWLRQVDQGPRVWFRPSXWHUWUDQVPLVVLRQV+RZHYHUXQOHVV
WKHXVHUSHUIRUPVWKLVHQFU\SWLRQYHU\FDUHIXOO\XVLQJVRSKLVWLFDWHGVWURQJNH\VWKHGDWDPD\EH
YXOQHUDEOHWRGHFU\SWLRQJLYHQHQRXJKFRPSXWLQJSRZHUDQGWLPH/($VFDQDOVRVHQGHQFU\SWHGGDWD
WRIRUHQVLFVSHFLDOLVWVIRUGHFU\SWLRQLIWKH\GHHPWKDWQHFHVVDU\

)XQFWLRQDO5HTXLUHPHQWVIRUD/DZIXO,QWHUFHSWLRQ'HYLFH
)RUDQ/,GHYLFHWRIXQFWLRQHIIHFWLYHO\LWVKRXOGHPERG\WKHIROORZLQJIHDWXUHVHW
‡ Undetectability and unobtrusiveness.1HLWKHUWKHLQLWLDWRURUUHFLSLHQWRIDFRPPXQLFDWLRQVKRXOG
EHDEOHWRGHWHFWWKHSUHVHQFHRIWKH/,GHYLFH7KH/,GHYLFHVKRXOGSDVVLYHO\UHFRUGDOOQHWZRUN
WUDQVDFWLRQVDQGQRWDOWHUDQ\SDUWRIWKHQHWZRUNWUDI¿F
‡ Real-time monitoring capabilities.%HFDXVHRIWKHQDWXUHRIODZHQIRUFHPHQWWLPLQJLVRIWKH
XWPRVWLPSRUWDQFHLQSUHYHQWLQJDFULPHRUDQDWWDFNRULQJDWKHULQJHYLGHQFH
‡ Complete visibility into network traffc.7KLVLQFOXGHV
SHUFHQWYLVLELOLW\DWDQ\SRLQWLQWKHFRPPXQLFDWLRQVWUHDP
=HURGURSSHGSDFNHWV7KLVLVSDUWLFXODUO\LPSRUWDQWZLWKHQFU\SWLRQZKHUHPLVVLQJ
FKDUDFWHUVFDQUHQGHUDPHVVDJHLQFRPSOHWHRUXQUHDGDEOH
‡ $GHTXDWHSURFHVVLQJVSHHG7KLVPXVWEHVXI¿FLHQWWRPDWFKQHWZRUNEDQGZLGWK
1HW2SWLFVD5DQJHRI6ROXWLRQVIRU/DZIXO,QWHUFHSWLRQ
7HVWDFFHVVSRUWVRU7DSVDUHGHYLFHVXVHGE\FDUULHUVDQG
RWKHUVWRPHHWWKHFDSDELOLW\UHTXLUHPHQWVRI&$/($OHJLVODWLRQ
1HW2SWLFV7DSVUHVLGHLQERWKFDUULHUDQGHQWHUSULVHLQIUDVWUXFWXUHV
WRFDUU\RXWQHWZRUNPRQLWRULQJDQGWRLPSURYHERWKQHWZRUN
VHFXULW\DQGHI¿FLHQF\7KHVHGHYLFHVDUHSODFHGLQOLQHWRSURYLGH
SHUPDQHQWSDVVLYHDFFHVVSRLQWVWRWKHSK\VLFDOVWUHDP7KDWSDVVLYHFKDUDFWHULVWLFRI7DSVPHDQVWKDW
WKHQHWZRUNGDWDLVXQDIIHFWHGZKHWKHUWKH7DSLVSRZHUHGRUQRW$VSDUWRIDQ/,VROXWLRQ7DSVKDYH
SURYHQPRUHXVHIXOWKDQ6SDQSRUWV,I/($PXVWUHFRQ¿JXUHDVZLWFKWRVHQGWKHULJKWFRQYHUVDWLRQV
WRWKH6SDQSRUWHYHU\WLPHLQWHUFHSWLVUHTXLUHGDULVNDULVHVRIPLVFRQ¿JXULQJWKHVZLWFKDQG
FRQQHFWLRQV$OVR6SDQSRUWVGURSSDFNHWV²DQRWKHUVLJQL¿FDQWPRQLWRULQJULVNSDUWLFXODUO\LQHQFU\SWHG
FRPPXQLFDWLRQV
'LUHFWRU;VWUHDPŒDQGL/LQN$JJ;VWUHDPŒHQDEOH
GHSOR\PHQWRIDQLQWHOOLJHQWÀH[LEOHDQGHI¿FLHQWPRQLWRULQJ
DFFHVVSODWIRUPIRU*QHWZRUNV'LUHFWRU;VWUHDP¶V
XQLTXH7DS)ORZŒ¿OWHULQJWHFKQRORJ\HQDEOHV/,WRIRFXV
RQVHOHFWWUDI¿FRILQWHUHVWIRUHDFKWRROEDVHGRQSURWRFROV,3DGGUHVVHVSRUWVDQG9/$1V7KH
UREXVWHQJLQHHULQJRI'LUHFWRU;VWUHDPDQGL/LQN$JJ;VWUHDPHQDEOHDSRRORI*DQG*WRROVWR
EHGHSOR\HGDFURVVDODUJHQXPEHURI*QHWZRUNOLQNVZLWKUHPRWHFHQWUDOL]HGFRQWURORIH[DFWO\
®
Gaining Total Visibility for Lawful Interception
White Paper
- 5 -
In addition, law enforcement can share tools and data access among groups without contention and
centralize data monitoring in a network operations center.
Director Pro Network Controller switch provides law
enforcement with Deep Packet Inspection (DPI) capabilities
or credit card number. The product differs from other platforms
“deep” the packet is; or the location of the data to be matched within the packet.
With its history of leading innovation in monitoring and security solutions, Net Optics provides scalable,
easy-to-use products designed to support Lawful Interception projects, users, and goals. The company
offers equipment to telecoms and service providers who fall under the CALEA mandate, as well to LI
solution resellers. Net Optics solutions are purpose-built for LI, offering the performance, visibility, and
For further information about Tap technology for lawful interception applications:
http://www.netoptics.com
Net Optics, Inc.
5303 Betsy Ross Drive
Santa Clara, CA 95054
(408) 737-7777
info@netoptics.com
Disclaimer: Information contained herein is the sole and exclusive property of Net Optics Inc.
Your retention, possession or use of this information constitutes
your acceptance of these terms. Please note that the sender accepts no responsibility for viruses and it is your responsibility to scan attachments (if any).
BRAIN FORCE Software GmbH
Ohmstr. 12
63225 Langen
Germany
T.: +49 6103 906 767
netoptics@brainforce.com
www.network-taps.eu
www.twitter.com/bfchannel
Distributed by: