Vorlage 3a

Technical requirements for the handover interfaces for the execution of telecommunications surveillance

4.3.3 Secure email for interception orders and information requests

In order to support the use of secure email for processing the interception orders the

following requirements must be met:

Dedicated email addresses must be created and maintained by each organisation. This email address shall only be used for processing interception orders. These specific email addresses and corresponding public keys are exchanged bilaterally between the PTSS and each CSP.

 The CSP email address must follow the format LI_monitor@csp-domain. The CSP shall generate and maintain the corresponding OpenPGP key pair for this address.

 The PTSS maintain several email addresses to process orders and generate and maintain the corresponding OpenPGP key pairs.

There are two different types of orders that can be sent via secure email by the PTSS:

i) Orders for real-time interceptions that are using a subset of the HI-1 eWarrant defined in ETSI TS 103 120 V1.2.1, see section 4.3.3.1

ii) Orders for historical data and information requests that are using the retained data handover interface HI-A defined in ETSI TS 102 657 V1.17.1, see section 4.3.3.2

4.3.3.1 Message flow for secure email order processing for real-time interceptions

The contents of the interception orders via secure email include an XML file that is based on ETSI TS 103 120 V1.2.1 and an order form that is more easily readable by non technical personnel.

The ETSI TS 103 120 V1.2.1 based XML structure and elements are described in details in section 4.2.2.8.

4.3.3.1.1 Message flow for email activation order processing for real-time interceptions

The following figure shows the message flow of the secure email interception activation orders for real-time interceptions exchange between the PTSS and CSP in case of

succussful processing.