Understanding Germany’s lawful interception requirements is essential for international carriers. Auslandskopfüberwachung is one of the most critical compliance requirements for telecommunications providers operating in Germany. AKÜ applies to operators of network nodes that switch publicly available voice calls to or from abroad: international gateways of fixed, mobile and VoIP networks, and voice transit carriers. Unlike normal interception, it also applies to transit networks without subscriber lines and to networks with no more than 10,000 users, which are otherwise exempt (§ 3(2) sentence 2 TKÜV). Pure internet transit and peering are not covered. This obligation is established in Germany’s Telecommunications Act (Telekommunikationsgesetz, TKG) and the Telecommunications Surveillance Ordinance (Telekommunikations-Überwachungsverordnung, TKÜV). In practice, implementing Auslandskopfüberwachung represents a significant technical and organizational challenge that demands specialized expertise and close coordination with the Federal Network Agency (Bundesnetzagentur, BNetzA).
아우스앤드스콥퓌버워칭(AKÜ)이란 무엇인가요?
Auslandskopfüberwachung, often abbreviated as AKÜ, is a legally mandated measure for the lawful interception of telecommunications between domestic and foreign networks in Germany. The term “Auslandskopf” (literally “foreign head”) refers to the network gateway point where domestic telecommunications traffic is handed over to a foreign network. At this point, network operators must be able to intercept and extract the telecommunications traffic of specific target persons upon an interception order (a court order under the StPO, or an order under the G10 Act for the intelligence services) and deliver it to the authorized agencies (berechtigte Stellen), such as the Federal Intelligence Service (Bundesnachrichtendienst, BND), federal and state police authorities, or the domestic intelligence services. Auslandskopfüberwachung covers international voice calls (fixed, mobile and VoIP) and encompasses the capture, filtering, and secure transmission of communication content and the related event data (IRI) to the authorized requesting agencies (Bedarfsträger).
법적 프레임워크: TKG § 170 및 TKÜV
AKÜ is defined in § 4(2) of the Telecommunications Surveillance Ordinance (TKÜV): calls between an unknown domestic line and a foreign number named in the order must be captured at the international gateway. The general duty to keep facilities comes from 독일 전기통신법(TKG) § 170조, which governs the implementation of surveillance measures and the provision of information; § 3(2) sentence 2 TKÜV extends AKÜ to transit and small networks. The technical design is agreed individually with the BNetzA (§ 4(2) sentence 2 TKÜV). Under § 170 (1) No. 1 TKG, every operator of a telecommunications system used to provide publicly accessible telecommunications services is obligated to maintain, at their own expense, technical facilities for the implementation of legally mandated surveillance measures and to make organizational provisions for their immediate execution from the moment of commencing operations. The 통신 감시 조례(TKÜV) further specifies these requirements, detailing the technical and organizational aspects of implementation including handover point specifications, transmission of the surveillance copy, security requirements, confidentiality obligations, and logging procedures. As with any interception, the copy must be delivered without encryption or compression that the operator itself applied (§ 8(3) TKÜV).
누가 아우스 랜드 코프 오버 워칭을 이행할 의무가 있나요?
The obligation to implement Auslandskopfüberwachung applies to operators of network nodes that switch publicly available voice calls to or from abroad. This includes international gateways of fixed, mobile and VoIP networks, voice transit carriers routing calls between Germany and foreign countries, and VoIP providers offering international call services. Because § 3(2) sentence 2 TKÜV lifts the transit and small-network exemptions for such nodes, it also applies to transit networks without subscriber lines and to networks with no more than 10,000 users, which are otherwise exempt. Pure internet transit, peering and interconnection nodes are not covered (§ 3(2) No. 2 TKÜV). Companies without their own network infrastructure that offer international voice services via the facilities of other operators must, under § 170 (2) TKG, choose an operator that can implement interception orders and tell the BNetzA which services they offer and who implements the orders.
AKÜ 구현을 위한 기술 요구 사항
해외 통신 감청을 기술적으로 구현하려면 여러 구성 요소로 구성된 복잡한 인프라가 필요합니다. 국제 게이트웨이에서 관련 통신 트래픽을 식별, 필터링 및 추출할 수 있는 합법적인 감청 플랫폼을 구축해야 합니다. 감시 사본을 승인된 기관에 전송하는 작업은 일반적으로 암호화된 연결을 통해 이루어집니다. SINA 박스 (Secure Inter-Network Architecture), which ensures tamper-proof communication between the network operator and the requesting agencies. The interfaces must comply with the Technical Directive issued by the BNetzA and be implemented according to the TR TKÜV, which today requires IP-based handover (ETSI TS 102 232-1 with -5/-6 for voice services; 3GPP TS 33.108/33.128 for mobile networks). Additionally, strict security requirements under the TKÜV must be observed, including access control, logging of all access events, deletion of order data after the measure expires, and a legally compliant role-based access concept as prescribed by the BNetzA.
The Technical Concept: BNetzA Acceptance Process
의무 네트워크 사업자는 아우스 랜드스콥퓌버바훙을 시행하기 전에 세부적인 세부 사항을 준비해야 합니다. technical concept (Konzept, the documents under § 19(2) TKÜV) and submit it to the Federal Network Agency. This concept describes the technical architecture, organizational procedures, and security measures for the AKÜ implementation; for AKÜ the design is agreed individually with the BNetzA (§ 4(2) sentence 2 TKÜV). The BNetzA checks the proof of compliance in an acceptance test, in which it verifies the technical facilities and organizational provisions on site. It does not approve or license the operator. Under § 170 (1) No. 4 TKG, the operator must send the documents and agree a test date with the BNetzA without delay, and no later than one month after starting operations. Preparing a concept that passes the acceptance test requires in-depth knowledge of the regulatory requirements and practical experience with BNetzA 승인 procedures.
해외 규정 준수의 주요 과제
Auslandskopfüberwachung poses numerous challenges for carriers and network operators. The initial investment costs for procuring and deploying the technical infrastructure are substantial, particularly for smaller providers. Connecting to the agencies through the TKÜV-VPN with an approved crypto box (currently the SINA box) requires specific security expertise and compliance with strict cryptographic standards. Ongoing operations include the timely execution of incoming surveillance orders, maintenance of technical systems, regular updates in line with amended Technical Directives, and the preparation of billing for completed measures. Furthermore, the BNetzA can order renewed inspections at any time to verify continued compliance. Errors or delays in implementation can result in significant regulatory penalties, making it essential for operators to have a reliable and proven solution in place.
ICS: Auslandskopfüberwachung을 위한 서비스형 파트너
경험이 풍부한 합법적인 감청 서비스 제공업체로서, ICS(국제 Carrier 서비스) offers a complete AKÜ-as-a-Service solution for carriers, network operators, and providers in Germany. Our service covers the full lifecycle of Auslandskopfüberwachung compliance: preparation of the technical concept that you, as the obligated operator, submit to the BNetzA (§ 170 (1) No. 4 TKG), deployment and operation of the lawful interception platform as your Erfüllungsgehilfe under § 5 (3) TKÜV, connection to the requesting agencies through the TKÜV-VPN with an approved crypto box, support during the BNetzA acceptance test, timely and legally compliant processing of incoming AKÜ orders, and ongoing reporting and billing management. By outsourcing Auslandskopfüberwachung to ICS, network operators save significant capital and operating expenses, reduce their compliance risk, and can focus on their core business. AKÜ 솔루션 is modular and supports fixed, mobile and VoIP voice traffic, allowing us to tailor the solution to the specific requirements of each customer.
지금 행동하세요: 해외 규정 준수 보장하기
The legal obligation for Auslandskopfüberwachung takes effect from the moment a provider commences operations. Any operator switching international voice calls in Germany that has not yet met its AKÜ requirements risks sanctions from the Federal Network Agency. Contact ICS today to learn how our AKÜ-as-a-Service solution can implement your Auslandskopfüberwachung obligations cost-effectively, while you remain the obligated operator.
외부 리소스
다음 외부 리소스에서 추가 컨텍스트와 공식 문서를 확인할 수 있습니다:
