Vorlage 3b

Vernehmlassung 2017/22: Entwürfe der Ausführungserlasse zum totalrevidierten Bundesgesetz betreffend die Überwachung des Post- und Fernmeldeverkehrs · 34 Seiten

Fedlex · Vorlage · Seite 20Fedlex · Vorlage

ASR: Aggregation Service Router

CO: Central Office

CSP: Communication Service Provider

DF: Distribution Function

LEMF: Law Enforcement Monitoring Function

ODF: Optical Distribution Frame

OF: Optical Fibre

ONT-SR: Optical Network Terminal – Service Router

MF: Mediation Function

WAN: Wide Area Network

ASN.1 LI-HP

LEMF site 1 PTSS CSP

CO1 DN-HP ODF

DDF

OF ASR LEMF ONT-

SR (instances) WAN

MF/

DF1

DN-HP ODF

DDF

CO2 OF ONT- ASR

SR

LEMF site 2 Figure 14 IP DN Variant B: Direct connection of a CSP to the PTSS

8.2.2.1 Threat analysis of the IP DN Variant B: Direct connection of a CSP to the PTSS

The bilateral connection agreements shall define specific protective measures for the following points:

 Confidentiality (including data protection)

 Authentication

 Authorised access availability (i.e. no refusal of authorised access to network

elements, saved information, information flows, services and applications but not in terms of general availability)

 Data integrity

 Non-repudiation (incontestability of receipt of the data, similar to a registered letter with acknowledgment of receipt)

8.2.2.2 Scalability of the IP DN Variant B: Direct connection of a CSP to the PTSS

The scalability of the DN in this variant is restricted by the technology and interfaces used. The details are addressed in the bilateral connection agreements between the PTSS and the CSPs..

8.2.3 IP DN sub-variant B1: Shared access infrastructure

The providers of a shared access infrastructure may offer other CSPs the possibility of sharing the available access media between two co-locations of a shared access provider and both co-locations of the PTSS. The DN-HPs are described in Figure 16. This allows CSP to take advantage of their existing interconnection points with a provider of a shared access infrastructure (e.g. fibre access) and to get a direct connection to PTSS without having to build it physically.