Vorlage 3b

Vernehmlassung 2017/22: Entwürfe der Ausführungserlasse zum totalrevidierten Bundesgesetz betreffend die Überwachung des Post- und Fernmeldeverkehrs · 34 Seiten

Fedlex · Vorlage · Seite 6Fedlex · Vorlage

4 The LEMF

The LEMF production system is designed to be redundant, with a primary system and a secondary system at two separate sites. If there is a major breakdown at the primary system which cannot be fixed within a specific timeframe, a failover procedure can be initiated by the PTSS to make the secondary system active. Except from the service interruption during the failover procedure, it is transparent to the CSP which system is currently active. The LEMF can be accessed by virtual IP addresses distributed at both sites. Therefore, a CSP does not need to implement any manual processes for LEMF system failover.

In addition to the production system, there can be integration, test and training systems.

The details for connecting CSP systems to the LEMF systems are set out in bilateral connection agreements, which also contain a connection matrix.

CSP 1 N E N Network IIF/MD N E Element

Production LEMF

E

CSP - PTSS Production

Delivery Networks LEMF

CSP 2 Integration

N N Network

E LEMF

E Element IIF/MD Test

Production N E LEMF Training

Figure 1 Overview of the LEMF systems

5 General requirements for delivery networks

The following requirements apply to the delivery networks:

1. The DNs shall be built on existing products.

2. The DNs shall use functions already available, i.e. no new functions are to be specially developed for the DN.

3. The DNs are not “LI aware”, i.e. they are not developed specifically for lawful interception. Standard protocols and technologies shall be used.

4. The DN shall be designed in accordance with Annex 1, to ensure the timely

delivery of the intercepted data.

5. Based on a threat analysis for the DN’s specific architecture, protective measures shall be defined for the DN in question.