Vorlage 3a

Technical requirements for the handover interfaces for the execution of telecommunications surveillance

4.2 XML over HTTP Exchange

4.2.1 General

The administrative interface using XML over HTTPS may be used to support several administrative processes as mentioned in the tables above in 4.1. The following table enumerates the three interception ordering processes that use HTTPS as a transport method.

Handover interface Section

HI1 XML over HTTP administrative interface for ordering the real-time 4.2.2

interceptions (HI-1 eWarrant ETSI TS 103 120 V1.2.1)

Ad hoc HI1 XML over HTTP administrative interface for ordering the 4.2.3

real-time interceptions

HI-A XML over HTTP administrative interface for ordering the retained 4.2.4

data (Historical data and Information Requests) (HI-A ETSI TS 102

657 V1.17.1)

4.2.2 HI-1 XML over HTTP administrative interface for ordering the real-time interceptions (HI-1 eWarrant ETSI TS 103 120 V1.2.1)

HI-1 eWarrant can use the encoding and delivery format XML as described in ETSI TS 103 120 V1.2.1 clause 9.2 and HTTP transport as described in clause 9.3. The requirements and options for this handover interface are detailed in this section.

The overall architecture used between the PTSS and CSP follows the scenario shown in ETSI TS 103 120 V1.2.1 Annex A.3 for a single "Central Authority".

Figure 4-1: HI-1 administrative interface for real-time interception orders

4.2.2.1 Transport security

Implementations shall support HTTPS as defined in IETF RFC 2818, including the support for mutual authentication through bidirectional certificate usage according to ETSI TS 103 120 V1.2.1 clause 9.3.4.

The exchange of the certificates and security requirements (such as key management, key length and the choice of cryptographic algorithm) is an implementation issue and shall be agreed bilaterally between the PTSS and the CSP.