Editing My 5G lawful interception notes (section)

== 5G Functional Entities ==

=== Law Enforcement Agency (LEA)===
See 33.127 § 5.3.1

=== Point of Interception (POI) ===
See 33.127 § 5.3.2

POI detects target communications, derives the Intercept Related Information (IRI) or Content of Communication (CC) from target communications, and delivers the POI output as xIRI to MDF2 (IRI-POI) or as xCC to MDF3 (CC-POI). The POI may be embedded within a Network Function (NF) or separate from an NF with which it is associated. Multiple POIs may be involved in executing a warrant.

*Directly provisioned POIs are provisioned by Lawful Intercept Provisioning Function (LIPF)
*Triggered POIs are triggered by Triggering Function (TF) - see 33.127 § 5.3.3

=== Triggering Function (TF) ===
See 33.127 § 5.3.3

=== Mediation and Delivery Function (MDF) ===
See 33.127 § 5.3.4

=== Administration Function (ADMF) ===
See 33.127 § 5.3.5

Made up of four logical sub-functions:
* Lawful Intercept Control Function (LICF) - see 33.127 § 5.3.5.2
* Lawful Intercept Provisioning Function (LIPF) - see 33.127 § 5.3.5.3
* Identifier Query Function (IQF) - the function responsible for receiving and responding to dedicated LEA real-time queries for identifier associations. See 33.127 § 5.7.2.1 for further details.
* Certificate Authority (CA) - see 33.127 § 8.3

Within one ADMF there is one LICF, one IQF, and at least one and possibly more LIPFs.

=== System Information Retrieval Function (SIRF) ===
See 33.127 § 5.3.6

=== Law Enforcement Monitoring Facility (LEMF) ===
The LEMF receives the interception product as Handover Information (HI) or HI2 for IRI and HI3 for CC. LEMF is out of scope.