5G Security · Pro
Lawful interception in 5G
LI Architecture Overview
Lawful interception enables authorized government agencies to intercept communications under judicial warrant. 5G defines a specific LI architecture with clear separation between provisioning, metadata collection, and content capture. The ADMF (Administration Function) receives warrants and provisions the relevant NFs for interception. IRI-POI captures signaling metadata from the AMF and SMF, while CC-POI captures user-plane content from the UPF. Delivery functions MDF2 and MDF3 format and deliver the intercepted data to law enforcement agencies through standardized handover interfaces.