LALS

Lawful Access Location Services

Security →
Introduced in Rel-13 Also in: Security

LALS is a set of 3GPP standardized capabilities enabling law enforcement to request and receive a target subscriber's location information for lawful interception purposes.

Category
Security
Introduced
Rel-13
Where
Core Network › 5G Core
Also touches
1 segments
Specifications
6 specs
LALS Description Purpose Detected Changes Specifications

Description

Lawful Access Location Services (LALS) is a standardized framework within 3GPP that extends lawful interception (LI) capabilities to include the provisioning of real-time or historical location information of a target subscriber. It operates as a specialized service within the broader LI architecture, interfacing with network elements capable of determining UE location, such as the Gateway Mobile Location Centre (GMLC), Serving Mobile Location Centre (SMLC), or Location Management Function (LMF). The system is triggered by a lawful authorization from a Law Enforcement Agency (LEA), which is mediated through a Lawful Enforcement Monitoring Facility (LEMF). The 3GPP network's Administration Function (ADMF) and Delivery Functions (DFs) receive the authorized interception request and coordinate with the relevant location service nodes to collect the required location data.

The technical operation involves several key interfaces defined in the 33.1xx series specifications. The ADMF receives the lawful intercept order and distributes the relevant identities (e.g., IMSI, MSISDN) and location service parameters to the appropriate network Delivery Function. For location services, this is typically the DF for location information (DF-L). The DF-L then interfaces, via standardized reference points (e.g., X1_1, X2), with the core network location service infrastructure. This infrastructure could be the GMLC in 4G/5G networks or the SMLC in 2G/3G contexts. The location request is processed, and the resulting geographical coordinates (e.g., latitude, longitude, uncertainty) and timestamp are delivered back through the DF-L to the LEMF.

Security and integrity are paramount in LALS. All communications between the network operator's LI infrastructure (ADMF, DF) and the LEA's LEMF are highly secured, often using dedicated, isolated networks or strong encryption over IPsec tunnels. The system ensures that only properly authorized requests are actioned and that all activities are logged for audit purposes. LALS supports various location determination methods, including network-based (e.g., Cell-ID, timing advance, OTDOA), UE-based (e.g., A-GNSS), or hybrid techniques, with the specific method often dictated by the network capabilities and the precision required by the interception warrant. Its role is critical in balancing the operational needs of law enforcement with the strict privacy and legal compliance frameworks governing telecommunications.

Purpose & Motivation

LALS was created to address a specific gap in early lawful interception standards, which primarily focused on intercepting communication content (CC) and intercept related information (IRI) like call logs, but did not formally standardize the provisioning of location data. As mobile devices became ubiquitous, the location of a subscriber became a crucial piece of information for law enforcement and national security investigations. The lack of a standardized method led to proprietary, operator-specific implementations, which were inefficient for LEAs operating across multiple networks and jurisdictions.

The introduction of LALS in 3GPP Release 13 provided a unified, secure, and reliable technical standard for the lawful interception of location information. It solved the problem of interoperability between different network vendors' equipment and the diverse systems used by law enforcement agencies globally. By defining clear architectural roles, interfaces, and data formats, it ensured that location data could be requested and delivered in a consistent, verifiable, and legally admissible manner. This standardization was motivated by evolving legal requirements worldwide that mandated telecommunications providers to assist in lawful investigations, including providing real-time tracking capabilities under proper judicial oversight.

Furthermore, LALS addresses the technical and security challenges of integrating sensitive location services into the LI framework. It ensures that location requests are properly authenticated and authorized, that data delivery is secure and reliable, and that all actions are auditable to prevent misuse. This protects both the privacy of individuals and the integrity of the legal process, providing a necessary tool for modern criminal investigations while upholding fundamental rights.

Detected Changes Across Releases

from 3GPP Change Requests

Specific changes extracted from the „Change history“ tables of 3GPP specifications (76 CRs across 5 releases). Complements the general historical overview above with the evidence-based evolution of this function.

Studied in Rel-13, normative work from Rel-15.

Rel-15 10 changes

In Release 15, the LALS function was formally defined as the lawful action of making Location Services (LCS) available and providing that information to law enforcement. This release introduced specific technical clarifications and corrections for location reporting procedures, including for events like HSS registration termination and location information requests in EPS. It also added capabilities for providing additional location details and ensuring critical fixes for location reporting via the S8HR interface.

  • Lawful Interception for Non-IP Data Delivery with SCEF TS 33.107CR0306
  • Add additional location details TS 33.108CR0413
  • S8HR LI: Location reporting corrections in Annex J TS 33.107CR0301
  • Time of Location Stage 2 TS 33.107CR0302
  • Time of Location Stage 3 TS 33.108CR0404
  • Clarifications on the Location information derivation and delivery TS 33.128CR0020

+ 4 more changes

Rel-16 11 changes

In Release 16, the LALS (Lawful Access Location Services) function was enhanced to improve location update reporting for modern network architectures, specifically introducing support for Dual Connectivity scenarios in both EPS and 5G Core (AMF) contexts. The release also refined the service delivery mechanisms, including the delivery of multiple services and updates to location update triggering procedures. Furthermore, the enhancements included clarifications to service scoping, IRI record types, and necessary corrections to the LALS architecture diagrams and references.

  • Update Serving System and support of Subscriber Record Change and Cancel Location (x)IRIs TS 33.128CR0147
  • Enhanced EPS Location Update Reporting with Dual Connectivity TS 33.108CR0419
  • Enhanced AMF Location Update Reporting with Dual Connectivity TS 33.128CR0083
  • Delivery of Multiple Services TS 33.126CR0014
  • Changes to the architecture diagrams in the LALS clause TS 33.127CR0100
  • Location update triggering TS 33.128CR0038

+ 5 more changes

Rel-17 23 changes

In Release 17, the LALS function was enhanced with specific procedures for obtaining Measurement Reports for a target in both EPC and 5GC systems. The release also introduced formal support for Location Translation and provided clarifications on target identity handling and triggering mechanisms. Furthermore, updates were made to ensure the system's operation in a VPLMN and to align location services for non-3GPP access.

  • LI for NEF Services (NIDD included) TS 33.127CR0127
  • LI for SCEF services TS 33.127CR0128
  • LI for NEF Services (NIDD included) TS 33.128CR0201
  • LI for SCEF services TS 33.128CR0202
  • Separated Location Reporting TS 33.128CR0273
  • Clarification on ID Mapping Location Delivery TS 33.127CR0107

+ 17 more changes

Rel-18 26 changes

In Release 18, the LALS function introduced new capabilities including support for location information requests for both Target-to-Police (T2P) and Police-to-Target (P2T) scenarios, and the addition of a new location type for reporting IMS location information. The release also defined location acquisition interfaces for the EPC and enabled location-only reporting for EPS, while providing corrections and clarifications to existing procedures like periodic location reporting and provisioning details.

  • Location acquisition architectures TS 33.127CR0176
  • Support of location information request for both T2P and P2T requests in alignment with TS 33.128 TS 33.127CR0180
  • Location acquisition interfaces for the EPC TS 33.127CR0206
  • Intermediate Location LALS TS 33.127CR0210
  • Location Reporting for Identity Association Record TS 33.128CR0376
  • Location acquisition interfaces TS 33.128CR0396

+ 20 more changes

Rel-19 6 changes

In Release 19, the LALS (Lawful Access Location Services) function was enhanced with new capabilities for Location Dependent Interception (LDI) specifically for Non-Terrestrial Networks (NTN) and Multicast Broadcast Service Receivers (MBSR). The release also introduced more detailed location reporting by adding Cell Radio Information and coarse location data to the provided location structures, and clarified procedures for location acquisition based on measurement reporting and within RAN information.

  • Location Dependent Interception for NTN and MBSR TS 33.126CR0032
  • Location acquisition based on measurement reporting TS 33.127CR0241
  • Location acquisition based on measurement reporting TS 33.128CR0664
  • Addition of Cell Radio Information to location structures TS 33.128CR0701
  • Addition of coarse location to location structure TS 33.128CR0746
  • Clarification on location in RAN Information TS 33.128CR0700

Explore further

Broader topics and technologies where LALS plays a role.

Defining Specifications

3GPP specifications that define or reference LALS, with the latest known release. Sourced from the 3GPP document catalog — see methodology.

SpecificationTitleRelease
TS 33.106 vj00 Lawful Interception Requirements (Pre-Rel-15) Rel-19
TS 33.107 vj00 Lawful Interception Architecture & Functions Rel-19
TS 33.108 vj00 LI Handover Interface Specification Rel-19
TS 33.126 vj30 Lawful Interception Requirements Rel-19
TS 33.127 vj50 Lawful Interception Architecture and Functions Rel-19
TS 33.128 vj50 3GPP TS 33.128: Lawful Interception Protocols Rel-19