Avamprogetto 2a

Technical requirements for the handover interfaces for the execution of telecommunications surveillance

denoting a response. No signing and encryption is necessary for this step as the original email was already signed and encrypted.

 Once the CSP has gathered the requested data, two different cases may occur:

i) If an HI-B interface based on HTTPS or SFTP exists between the PTSS and the CSP this step is not necessary as the delivery of the results will act as the confirmation.

ii) The CSP may use the secure email method as the HI-B interface and deliver the results as a signed and encrypted attachment in the form of a XML or alternatively a spreadsheet file.

 Acknowledgement: two different cases may occur:

i) If the CSP delivers the results through the HI-B interface based on HTTPS or SFTP the acknowledgement from PTSS will be sent trhough the same interface.

ii) If the results are delivered via secure email the PTSS will acknowledge the reception of the email message to the CSP by sending a simple email response with no content. No signing and encryption is necessary for this step.

4.3.3.2.2 Message flow for failed email order processing for retained data

In case of failure or rejection of the interception order by the CSP the message flows remains

the same as described in section 4.3.3.2.1; however, in step  the CSP shall inform the PTSS of the error/failure or rejection of the order by adding:

i) the corresponding notification and explanation in the administrative confirmation form.

ii) a prefix "Error" in the email's subject line.

Then in step  the PTSS will acknowledge the reception of the error/failure message.

4.3.3.2.3 Message flow for cancellation email order processing for retained data

The PTSS may cancel an interception activation order that has already been sent to the CSP, as long as the CSP has not yet executed the order, i.e. for historical data activations if the historical data has not been sent yet.

In order to be effective, the cancellation order must be issued immediately by PTSS in order to avoid that the CSP activates the interception. For that purpose the PTSS must immediately contact the CSP by telephone and request the cancellation of the order. If the CSP confirms that the activation order can be cancelled then the initial cancellation request made by telephone must be promptly confirmed by PTSS in writing by sending a complete cancellation order to the CSP, either by email.

If the cancellation process fails because the CSP had already performed the retained data order before the cancellation could take place, the PTSS shall issue a deactivation order to terminate the retained data order.

If the cancellation process fails because the CSP had already sent the retained data before the cancellation could take place, the PTSS shall inform the recipient that the concerned retained data must be destroyed.