Avamprogetto 2a

Consultazione 2017/22: Progetto di legislazione esecutiva relativa alla revisione totale della legge federale sulla sorveglianza della corrispondenza postale e del traffico delle telecomunicazioni · 194 pagine

Fedlex · Progetto · Pagina 49Fedlex · Progetto

Technical requirements for the handover interfaces for the execution of telecommunications surveillance

 Once the interception order has been activated the CSP sends back the filled-in order form as a signed and encrypted attachement. The CSP shall use the CREATEResponse action in the XML file (see details in section 4.3.3.1.5).

 PTSS will acknowledge the reception of the filled in order form to the CSP by sending a simple email response with no content. No signing and encryption is necessary for this step.

4.3.3.1.2 Message flow for email deactivation order processing for real-time interceptions

The following figure shows the message flow of the secure email interception deactivation orders for real-time interceptions exchange between the PTSS and CSP in case of

succussful processing.

CSP PTSS

Admin. Admin.

Function Function

Adm. Adm.

Deactivation Order

(e-mail)

Encryption: KCpub1 and KPpub1

Signed: KPpr11

Subject: Interception Type & reference

Content: XML (HI-1, Update Request, LITask)

+ Order form

Order reception confirmation

Encryption: KPpub1 and KCpub1

Signed: already signed

2 Subject: Re: Interception Type &

reference

Content: None

Confirmation of execution

Encryption: KPpub1

Signed: KCpr1

3 Subject: Re: Interception Type &

reference

Content: XML (HI-1, Update Response, LITask)

+ Order form

Acknowledgement of confirmation of execution

Encryption: KCpub1 and KPpub1

Signed: already signed4

Subject: Re: Re: Interception Type &

reference

Content: none

Used OpenPGP keys:

KPpub1 = public key from PTSS / KPpr1= private key from PTSS

KCpub1 = public key from CSP / KCpr1= private key from CSP

Figure 4-13: Message flow for email deactivation order processing for real-time interceptions