Editing My 5G lawful interception notes (section)

==== AMF ====

The IRI-POI present in the AMF shall generate xIRI, when it detects the following specific events or information:
* Registration.
* Deregistration.
* Location update.
* Start of interception with already registered UE.
* Unsuccessful communication related attempt.
* A new identifier association for a UE matching one of the target identifiers is provided via LI_X1.

===== IRI Payload =====

{| class="wikitable sortable"
|-
! IRI Record Type !! Field name !! Description !! Source
|-
| AMFRegistration
|| location
|| Location information determined by the network during the registration, if available. Encoded as a userLocation parameter (location>locationInfo>userLocation) and, when Dual Connectivity is activated, as an additionalCellIDs parameter (location>locationInfo>additionalCellIDs), see Annex A.
|| 33.128 V17.0.0 § 6.2.2.2.2
|-
| AMFDeregistration
|| location
|| Location information determined by the network during the deregistration, if available. Encoded as a userLocation parameter (location>locationInfo>userLocation), see Annex A.
|| 33.128 V17.0.0 § 6.2.2.2.3
|-
| AMFLocationUpdate
|| location
|| Updated location information determined by the network. Depending on the service or message type from which the location information is extracted, it may be encoded in several forms (Annex A):
# as a userLocation parameter (location>locationInfo>userLocation) in the case the information is obtained from an NGAP message, except the LOCATION REPORT message (see TS 38.413 [23]);
# as a locationInfo parameter (location>locationInfo) in the case the information is obtained from a ProvideLocInfo (TS 29.518 [22], clause 6.4.6.2.6);
# as a locationPresenceReport parameter (location>locationPresenceReport) in the case the information is obtained from an AmfEventReport (TS 29.518 [22], clause 6.2.6.2.5) with event type Location-Report or Presence-In-AOI-Report;
# as a positionInfo parameter (location>positioningInfo>positionInfo) in the case the information is obtained from a ProvidePosInfo (TS 29.518 [22], clause 6.4.6.2.3) or a NotifiedPosInfo (TS 29.518 [22], clause 6.4.6.2.4).
|| 33.128 V17.0.0 § 6.2.2.2.4
|-
| AMFStartOfInterceptionWithRegisteredUE
|| location
|| Location information, if available. Encoded as a userLocation parameter (location>locationInfo>userLocation) and, when Dual Connectivity is activated, as an additionalCellIDs parameter (location>locationInfo>additionalCellIDs), see Annex A.
|| 33.128 V17.0.0 § 6.2.2.2.5
|-
| AMFUnsuccessfulProcedure
|| location
|| Location information determined during the procedure, if available. Encoded as a userLocation parameter (location>locationInfo>userLocation), see Annex A.
|| 33.128 V17.0.0 § 6.2.2.2.6
|-
| AMFIdentifierAssociation
|| location
|| Location information available when identifier association occurs. Encoded as a userLocation parameter (location>locationInfo>userLocation) and, when Dual Connectivity is activated, as an additionalCellIDs parameter (location>locationInfo>additionalCellIDs), see Annex A.
|| 33.128 V17.0.0 § 6.2.2.2.7
|}