LI Mirror IMS State Function

Description

The LI Mirror IMS State Function (LMISF) is a specialized functional entity within the 3GPP Lawful Interception (LI) architecture for IP Multimedia Subsystem (IMS) networks. Its primary role is to replicate, or 'mirror,' the registration and session state information of a target user (subscriber) from the IMS core elements to the Lawful Interception Management Function (LIMF) and subsequently to the Law Enforcement Monitoring Facility (LEMF). The LMISF acts as an intermediary that collects non-content-related Interception Related Information (IRI) pertaining to IMS services, such as VoIP calls, video sessions, and messaging over IMS.

Architecturally, the LMISF is typically collocated with or closely integrated into key IMS Call Session Control Functions (CSCFs), specifically the Serving-CSCF (S-CSCF) and potentially the Proxy-CSCF (P-CSCF). It interfaces internally with these CSCFs to tap into the signaling flows and state machines that manage user registrations, session initiations (via SIP INVITE), session modifications, and session terminations. The LMISF does not intercept the media content (voice, video packets) itself; that task is handled by other LI functions like the Media Gateway or Packet Data Gateway. Instead, it focuses on the signaling metadata.

Operationally, when a target user registers with the IMS network or establishes a session, the relevant CSCF triggers the LMISF. The LMISF then formats this state information into standardized IRI reports as defined in 3GPP TS 33.107. These reports include details such as the target's identity (e.g., SIP URI), the identities of communication partners, session start/stop times, and the type of service invoked. The reports are delivered securely via the Handover Interface (HI) to the Administration Function (ADMF) and then to the LEMF. The LMISF ensures that the mirrored state is accurate and timely, providing law enforcement with a real-time or near-real-time view of the target's IMS activity.

The LMISF's design must adhere to strict security and integrity requirements to prevent unauthorized access or tampering. It operates under the control of the ADMF, which activates interception based on a lawful warrant. Its implementation is crucial for operators to comply with national lawful interception regulations for next-generation communication services that are increasingly based on all-IP IMS platforms, replacing traditional circuit-switched telephony.

Purpose & Motivation

The LMISF was introduced in 3GPP Release 14 to address the evolution of communication services towards all-IP networks based on the IMS. As operators deployed Voice over LTE (VoLTE), Voice over Wi-Fi (VoWiFi), and Rich Communication Services (RCS) using IMS, existing lawful interception solutions designed for circuit-switched voice and packet data services were insufficient. These solutions could not easily capture the signaling state and session control information inherent in SIP-based IMS protocols.

Its creation was motivated by regulatory requirements worldwide that mandate telecommunications operators to provide Lawful Interception capabilities for authorized surveillance. The LMISF solves the problem of how to efficiently and reliably extract the necessary IRI from the complex, stateful IMS core without impacting the performance or scalability of the CSCFs. It provides a standardized, vendor-neutral method for mirroring IMS state, ensuring interoperability between different vendors' IMS and LI systems.

By centralizing the state mirroring function, the LMISF simplifies the LI architecture for IMS. It avoids the need for law enforcement agencies to understand the intricate details of IMS signaling, as the LMISF translates these into consistent IRI reports. This approach future-proofs lawful interception as networks evolve towards 5G core, where IMS for voice and messaging remains a key service layer, ensuring continuous compliance as technology advances.

Key Features

• Mirrors IMS registration and session state information (e.g., from S-CSCF) for a target subscriber to the LI system.
• Generates standardized Interception Related Information (IRI) reports for IMS-based services like VoLTE and ViLTE.
• Interfaces internally with IMS CSCFs to monitor SIP signaling events (REGISTER, INVITE, BYE).
• Delivers IRI reports over the secure Handover Interface (HI) to the Lawful Interception Management Function.
• Operates under strict administrative control via the ADMF, ensuring activation only under lawful authorization.
• Focuses on non-content (signaling) interception, complementing content interception functions in the media path.

Evolution Across Releases

Defining Specifications