<http://www.accuris.ie/datnetint.htm> Accuris - Data Network Interception LMD-IP The LMD-IP is Accuris' IP mediation product, it mediates between the ISP's network and the Law Enforcement Monitoring Facility, delivering intercepted target traffic according to the relevant national standard. LMD-IP has been built on a component-based architecture, enabling the distribution of components where necessary to handle the intercept volumes and to tailor with the ISP's network. Features 7 Automatic activation/de-activation on all appropriate interception points. 7 Delivery of content and intercept related information in compliance with TIIT standards. 7 Support for warrant management. 7 Discrete billing capability. 7 Support for all Ethernet-based IP services (10MB/sec, 100MB/sec or 1GB/sec.) 7 Support for ATM and POS Benefits 7 Fully compliant with TIIT. 7 Passive interception ensures no impact on your network services. 7 Facility to manage multiple logical domains. 7 Architecture supports future value-added applications. 7 No software interception limits. 7 A product roadmap that is in step with the TIIT & ETSI standards as they evolve. 7 Deployed on non-proprietary hardware and software thus reducing operating and deployment costs. Common management system controls all interception services ensuring increased security and reduced operating costs. The Product The LMD-IP consists of five key components: 7 Intercept Management 7 Target Access Point (TAP) 7 Network Filter 7 Service Filter 7 Delivery Intercept Management This component is responsible for the activation/de-activation of the interception on the ISP's network at the start/end time indicated on the warrant. It passes the target's IP address to the Network and Service Filters and the appropriate LEMF delivery address to the Delivery module. TAP TAP splitters or layer 2 splitting can be used to replicate the IP data stream. This passive mechanism has the dual benefit of ensuring that the ISP's network is unaffected and that the target is unaware of the interception of the service. Prior to deployment, Accuris engineers assist ISP staff in determining the most efficient location to place TAPs on the network. Network Filter The Network Filter intelligently selects the IP packets of interest i.e. where the source/destination IP address is that of a registered IP target or a dial-in user is attempting to logon. Once identified this packet is then sent to the appropriate service filter. Service Filter The Service Filter is responsible for re-constituting the IP datagrams into their native service e.g. SMTP, POP3, etc. Delivery The delivery module is responsible for delivering the intercepted data and/or intercept related events to the LEMF according to the applicable national standard. -- ----------------- R. A. Hettinga <mailto: rah@ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'