{"id":2146,"date":"2026-05-20T08:00:00","date_gmt":"2026-05-20T07:00:00","guid":{"rendered":"https:\/\/ic-services.io\/?p=2146"},"modified":"2026-10-21T14:12:24","modified_gmt":"2026-10-21T13:12:24","slug":"hi1-hi2-hi3-%ed%95%a9%eb%b2%95%ec%a0%81-%ea%b0%90%ec%b2%ad-%ec%9d%b8%ed%84%b0%ed%8e%98%ec%9d%b4%ec%8a%a4","status":"publish","type":"post","link":"https:\/\/ic-services.io\/ko\/resources\/blog\/hi1-hi2-hi3-lawful-interception-interfaces\/","title":{"rendered":"HI1 \ub300 HI2 \ub300 HI3: \uc138 \uac00\uc9c0 \ud569\ubc95\uc801 \uac10\uccad \uc778\ud130\ud398\uc774\uc2a4\uc5d0 \ub300\ud55c \uc774\ud574"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Understanding HI1 HI2 HI3 interfaces is fundamental to implementing lawful interception correctly. At the heart of every lawful interception system lies a set of standardised interfaces that govern how intercepted communications are managed, processed, and delivered to law enforcement. In the ETSI framework \u2014 the dominant standard for LI in Europe and much of the world \u2014 these interfaces are designated HI1, HI2, and HI3. Together, they form the complete handover architecture that connects an operator&#8217;s network to the <a href=\"https:\/\/ic-services.io\/ko\/%ec%a0%9c%ed%92%88\/%ec%86%8c%ed%94%84%ed%8a%b8%ec%9b%a8%ec%96%b4-%ec%86%94%eb%a3%a8%ec%85%98\/%eb%b2%95-%ec%a7%91%ed%96%89-%ea%b0%90%ec%8b%9c-%ec%8b%9c%ec%84%a4\/\">\ubc95 \uc9d1\ud589 \uac10\uc2dc \uc2dc\uc124<\/a> (LEMF). Despite their fundamental importance, the distinctions between these three interfaces are frequently misunderstood, even by professionals working in the telecommunications and law enforcement sectors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 \uac01 \uc778\ud130\ud398\uc774\uc2a4\uac00 \ubb34\uc5c7\uc744 \uc804\ub2ec\ud558\uace0, \uc5b4\ub5bb\uac8c \uc791\ub3d9\ud558\uba70, \uc65c \uc911\uc694\ud55c\uc9c0\uc5d0 \ub300\ud574 \uba85\ud655\ud558\uace0 \uc790\uc138\ud55c \uc124\uba85\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. HI1, HI2, HI3\uc5d0 \ub300\ud55c \uc774\ud574\ub294 \ub2e8\uc21c\ud55c \ud559\ubb38\uc801 \uc5f0\uc2b5\uc774 \uc544\ub2c8\ub77c \ud569\ubc95\uc801\uc778 \uac10\uccad \uc2dc\uc2a4\ud15c\uc744 \uc124\uacc4, \uc870\ub2ec, \ubc30\ud3ec \ub610\ub294 \uc6b4\uc601\ud558\ub294 \ub370 \uad00\uc5ec\ud558\ub294 \ubaa8\ub4e0 \uc0ac\ub78c\uc5d0\uac8c \ud544\uc218\uc801\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">HI1 HI2 HI3 \uc778\ud130\ud398\uc774\uc2a4 \uc774\ud574<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before examining each interface individually, it is important to understand where they sit within the broader LI architecture. The ETSI model divides the interception process into several functional components. In the classic ETSI model (TS 101 671), the key components on the operator&#8217;s side are the internal interception function (IIF), which performs the actual interception within the network, and the <a href=\"https:\/\/ic-services.io\/ko\/%ec%a0%9c%ed%92%88\/%ec%86%8c%ed%94%84%ed%8a%b8%ec%9b%a8%ec%96%b4-%ec%86%94%eb%a3%a8%ec%85%98\/%eb%a6%ac-%eb%af%b8%eb%94%94%ec%97%90%ec%9d%b4%ec%85%98-%ed%94%8c%eb%9e%ab%ed%8f%bc\/\">\uc911\uc7ac \uae30\ub2a5<\/a> (MF), which translates the intercepted data into the standardised formats required by the handover interfaces. Current ETSI and 3GPP architectures (TS 104 007, TS 103 221, 3GPP TS 33.127) call them the point of interception (POI) and the mediation and delivery function (MDF). On the law enforcement side, the LEMF receives the intercepted data and provides tools for analysis and investigation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138 \uac1c\uc758 HI \uc778\ud130\ud398\uc774\uc2a4\ub294 \uc6b4\uc601\uc790\uc758 \ub3c4\uba54\uc778\uacfc \ubc95 \uc9d1\ud589 \ub3c4\uba54\uc778\uc758 \uacbd\uacc4\ub97c \ub118\ub098\ub4ed\ub2c8\ub2e4. HI1\uc740 \uad00\ub9ac \uad50\ud658\uc744 \ucc98\ub9ac\ud558\uace0, HI2\ub294 \uac10\uccad \uad00\ub828 \uc815\ubcf4\ub97c \uc804\ub2ec\ud558\uba70, HI3\uc740 \ud1b5\uc2e0 \ub0b4\uc6a9\uc744 \uc804\ub2ec\ud569\ub2c8\ub2e4. \uac01 \uc778\ud130\ud398\uc774\uc2a4\ub294 \ub3c5\ub9bd\uc801\uc73c\ub85c \uc791\ub3d9\ud558\uc9c0\ub9cc, \uc644\uc804\ud55c \uac10\uccad \uc791\uc5c5\uc744 \uc9c0\uc6d0\ud558\ub824\uba74 \uc138 \uc778\ud130\ud398\uc774\uc2a4\uac00 \ubaa8\ub450 \ud568\uaed8 \uc791\ub3d9\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uae30\ub2a5\uc744 \ubcc4\ub3c4\uc758 \uc778\ud130\ud398\uc774\uc2a4\ub85c \ubd84\ub9ac\ud558\uba74 \uac10\uccad\uc758 \uad00\ub9ac, \uba54\ud0c0\ub370\uc774\ud130 \ubc0f \ucf58\ud150\uce20 \uce21\uba74\uc744 \uac01\uae30 \ub2e4\ub978 \uc694\uad6c\uc0ac\ud56d\uc5d0 \ub530\ub77c \uad00\ub9ac, \ubcf4\uc548 \ubc0f \ucc98\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">HI1: \uad00\ub9ac \uc778\ud130\ud398\uc774\uc2a4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HI1\uc740 \ubc95 \uc9d1\ud589 \uae30\uad00\uacfc \uc6b4\uc601\uc790 \uac04\uc758 \uad00\ub9ac \uc778\ud130\ud398\uc774\uc2a4\uc785\ub2c8\ub2e4. \uc8fc\uc694 \ubaa9\uc801\uc740 \ubc95 \uc9d1\ud589 \uae30\uad00\uc758 \uac10\uccad \uba85\ub839\uc744 \uc6b4\uc601\uc790\uc5d0\uac8c \uc804\ub2ec\ud558\uace0 \ud65c\uc131\ud654\ubd80\ud130 \uc218\uc815, \ube44\ud65c\uc131\ud654\uc5d0 \uc774\ub974\uae30\uae4c\uc9c0 \uac10\uccad\uc758 \uc218\uba85 \uc8fc\uae30\ub97c \uad00\ub9ac\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. HI1\uc740 \uac10\uccad \ud504\ub85c\uc138\uc2a4\uc758 \uba85\ub839 \ubc0f \uc81c\uc5b4 \ucc44\ub110\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ubc95 \uc9d1\ud589 \uae30\uad00\uc740 HI1\uc744 \ud1b5\ud574 \ub300\uc0c1\uc758 \uc2e0\uc6d0(\uc804\ud654\ubc88\ud638, IMSI, IMEI, IP \uc8fc\uc18c, \uc774\uba54\uc77c \uc8fc\uc18c \ub610\ub294 \uae30\ud0c0 \uc2dd\ubcc4\uc790\ub85c \uc9c0\uc815\ub420 \uc218 \uc788\uc74c), \uac10\uccad \ubc94\uc704(\ucf58\ud150\uce20\ub9cc, \uba54\ud0c0\ub370\uc774\ud130\ub9cc \ub610\ub294 \ub458 \ub2e4), \uc2b9\uc778\ub41c \uae30\uac04, \ud2b9\uc815 \ub9e4\uac1c \ubcc0\uc218 \ub610\ub294 \uc81c\ud55c \uc0ac\ud56d\uc744 \ud3ec\ud568\ud55c \uac10\uccad \uba85\ub839\uc758 \uc138\ubd80 \uc815\ubcf4\ub97c \uc804\ub2ec\ud569\ub2c8\ub2e4. \uc6b4\uc601\uc790\ub294 \uc8fc\ubb38 \uc218\uc2e0\uc744 \uc2b9\uc778\ud558\uace0 \ud65c\uc131\ud654\ub97c \ud655\uc778\ud55c \ud6c4 \ucc28\ub2e8 \uc0c1\ud0dc\ub97c \ub2e4\uc2dc \ubcf4\uace0\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c HI1\uc740 \uae30\uc874 \uac10\uccad\uc5d0 \ub300\ud55c \uc218\uc815(\uc608: \uae30\uac04 \uc5f0\uc7a5, \ub300\uc0c1 \uc2dd\ubcc4\uc790 \ubcc0\uacbd \ub610\ub294 \ubc94\uc704 \uc870\uc815)\uacfc \uc2b9\uc778 \ub9cc\ub8cc \ub610\ub294 \ucde8\uc18c \uc2dc \uac10\uccad\uc758 \ube44\ud65c\uc131\ud654\ub3c4 \ucc98\ub9ac\ud569\ub2c8\ub2e4. \uc77c\ubd80 \uad6c\ud604\uc5d0\uc11c HI1\uc740 \uc601\uc7a5 \ubc88\ud638, \uc0ac\uac74 \ucc38\uc870 \ubc0f \uc6b4\uc601\uc790 \uc751\ub2f5 \ucf54\ub4dc\uc640 \uac19\uc740 \uad00\ub9ac \uba54\ud0c0\ub370\uc774\ud130\uc758 \uad50\ud658\ub3c4 \uc9c0\uc6d0\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The implementation of HI1 varies significantly between jurisdictions and operators. In some countries, HI1 is a fully automated, machine-to-machine interface using defined protocols and message formats. In others, it remains a largely manual process, with interception orders delivered by fax, secure email, or physical document and acknowledged through similar channels. ETSI TS 103 120 now defines a complete electronic HI1 protocol, and 3GPP requires 5G networks to support it, but national legal and institutional arrangements still vary widely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HI1\uc740 \ud604\uc7ac \uc9c4\ud589 \uc911\uc778 \uac10\uccad \uc791\uc5c5\uc5d0 \ub300\ud55c \ubbfc\uac10\ud55c \uc815\ubcf4\ub97c \ub2f4\uace0 \uc788\uae30 \ub54c\ubb38\uc5d0 \ubcf4\uc548\uc740 \ub9e4\uc6b0 \uc911\uc694\ud55c \ubb38\uc81c\uc785\ub2c8\ub2e4. HI1\uc5d0 \ub300\ud55c \ubb34\ub2e8 \uc561\uc138\uc2a4\ub294 \ub300\uc0c1\uc5d0 \ub300\ud55c \uac10\uccad\uc758 \uc874\uc7ac\ub97c \ub4dc\ub7ec\ub0b4\uac70\ub098 \ubb34\ub2e8 \uac10\uccad\uc758 \ud65c\uc131\ud654\ub97c \ud5c8\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub530\ub77c\uc11c \uad6c\ud604 \uc2dc \uac15\ub825\ud55c \uc778\uc99d, \uc554\ud638\ud654, \uc561\uc138\uc2a4 \uc81c\uc5b4 \ubc0f \uac10\uc0ac \ub85c\uae45\uc744 \ud3ec\ud568\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">HI2: \uc778\ud130\uc149\ud2b8 \uad00\ub828 \uc815\ubcf4 \uc778\ud130\ud398\uc774\uc2a4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HI2\ub294 \uac10\uccad \uad00\ub828 \uc815\ubcf4(IRI)\ub97c LEMF\uc5d0 \uc804\ub2ec\ud558\uae30 \uc704\ud55c \uc778\ud130\ud398\uc774\uc2a4\uc785\ub2c8\ub2e4. IRI\ub294 \uac10\uccad\ub41c \ud1b5\uc2e0\uacfc \uad00\ub828\ub41c \uba54\ud0c0\ub370\uc774\ud130\ub85c, \uc2e4\uc81c \ucf58\ud150\uce20 \uc5c6\uc774 \ub204\uac00, \uc5b8\uc81c, \uc5b4\ub514\uc11c, \uc5b4\ub5bb\uac8c \ud1b5\uc2e0\uc744 \ud588\ub294\uc9c0\uc5d0 \ub300\ud55c \uc815\ubcf4\uc785\ub2c8\ub2e4. HI2\ub294 \uc885\uc885 \uba54\ud0c0\ub370\uc774\ud130 \uc778\ud130\ud398\uc774\uc2a4\ub85c \uc124\uba85\ub418\uba70, \uc774 \uc778\ud130\ud398\uc774\uc2a4\uac00 \uc804\ub2ec\ud558\ub294 \uc815\ubcf4\ub294 \ubc95 \uc9d1\ud589 \uae30\uad00\uc758 \uc218\uc0ac\uc5d0 \ub9e4\uc6b0 \uc911\uc694\ud558\uba70, \uc885\uc885 \ucf58\ud150\uce20 \uc790\uccb4\ub9cc\ud07c \ub610\ub294 \uadf8 \uc774\uc0c1\uc758 \uc218\uc0ac\uc801 \uac00\uce58\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The IRI delivered over HI2 typically includes the identities of the communicating parties (calling and called numbers, IMSI, IMEI), the time and duration of the communication, the type of service (voice, SMS, data), the network elements involved, cell identifiers and location information, IP addresses and port numbers, and signalling information such as SIP headers or Diameter messages. The specific data elements included in the IRI vary depending on the type of communication and the network technology, and are defined in the applicable handover standard: ETSI TS 102 232-2 to -7 for IP-based services, ETSI TS 101 671 \/ 3GPP TS 33.108 for legacy mobile and circuit-switched services, and 3GPP TS 33.128 for 5G.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HI2 data is encoded using ASN.1 (Abstract Syntax Notation One), which provides a formal, structured format for representing the IRI data elements. The use of ASN.1 ensures that the data can be unambiguously encoded and decoded across different implementations, supporting interoperability between operators and <a href=\"https:\/\/ic-services.io\/ko\/%ec%86%94%eb%a3%a8%ec%85%98\/%eb%b2%95-%ec%a7%91%ed%96%89-%ea%b8%b0%ea%b4%80%ec%9d%98-%ea%b0%90%ec%8b%9c\/\">\ubc95 \uc9d1\ud589 \uae30\uad00<\/a>. HI2 and HI3 are protected either by a private managed network, by a VPN (for example the IPsec crypto boxes mandated in Germany), or by TLS 1.2\/1.3 with certificate-based mutual authentication, depending on the national framework; delivery uses TCP to ensure reliable, in-order delivery.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the complexities of HI2 is the need to generate IRI events in real time as the intercepted communication progresses. For a voice call, this means generating events for call setup, ringing, answer, call modification (such as hold or conference), and call release. For a data session, it means generating events for session establishment, address allocation, bearer activation, and session termination. The interception points in the network detect the call or session events, and the mediation function turns them into standard IRI records with accurate timestamps.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HI2\ub294 \uc704\uce58 \ucd94\uc801, \ub124\ud2b8\uc6cc\ud06c \ubd84\uc11d, \uc0dd\ud65c \ud328\ud134 \ud3c9\uac00\uc640 \uad00\ub828\ub41c \uc218\uc0ac\uc5d0 \ud2b9\ud788 \uc911\uc694\ud569\ub2c8\ub2e4. HI2\ub97c \ud1b5\ud574 \uc804\ub2ec\ub418\ub294 \uba54\ud0c0\ub370\uc774\ud130\ub294 \uc5ec\ub7ec \uc720\ud615\uc758 \ubc94\uc8c4 \uc218\uc0ac\uc5d0 \ud575\uc2ec\uc774 \ub418\ub294 \ud1b5\uc2e0 \ud328\ud134, \uc9c0\ub9ac\uc801 \uc774\ub3d9, \ub124\ud2b8\uc6cc\ud06c \uc0ac\uc6a9 \ud328\ud134\uc744 \ubc1d\ud600\ub0bc \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc6b4\uc601\uc790\uc5d0\uac8c \uc788\uc5b4 HI2 \ub370\uc774\ud130\uc758 \uc644\uc804\uc131\uacfc \uc815\ud655\uc131\uc744 \ubcf4\uc7a5\ud558\ub294 \uac83\uc740 LI \uc2dc\uc2a4\ud15c\uc758 \ud575\uc2ec \ud488\uc9c8 \uc9c0\ud45c\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">HI3: \ucee4\ubba4\ub2c8\ucf00\uc774\uc158 \uc778\ud130\ud398\uc774\uc2a4\uc758 \ub0b4\uc6a9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HI3 is the interface for delivering the content of communications (CC) to the LEMF. CC is the actual substance of the intercepted communication \u2014 the voice audio, the web pages viewed, the emails sent and received, the files transferred. (SMS is the classic exception: in 3GPP networks its text is delivered as IRI over HI2.) HI3 is the interface that carries the material that law enforcement needs to understand what the target is communicating, as opposed to the metadata about how and when the communication occurs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CC \ub370\uc774\ud130\uc758 \ud615\uc2dd\uacfc \uc6a9\ub7c9\uc740 \uac00\ub85c\ucc44\ub294 \ud1b5\uc2e0 \uc720\ud615\uc5d0 \ub530\ub77c \ub9e4\uc6b0 \ub2e4\uc591\ud569\ub2c8\ub2e4. \uc74c\uc131 \ud1b5\ud654\uc758 \uacbd\uc6b0, CC\ub294 \uc2e4\uc2dc\uac04 \uc624\ub514\uc624 \uc2a4\ud2b8\ub9bc\uc73c\ub85c, \uc77c\ubc18\uc801\uc73c\ub85c AMR(Adaptive Multi-Rate) \ub610\ub294 G.711\uacfc \uac19\uc740 \ud45c\uc900 \ucf54\ub371\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc778\ucf54\ub529\ub429\ub2c8\ub2e4. \ub370\uc774\ud130 \uc138\uc158\uc758 \uacbd\uc6b0, CC\ub294 \uc6f9 \ud2b8\ub798\ud53d, \uc774\uba54\uc77c \uba54\uc2dc\uc9c0, \ud30c\uc77c \uc804\uc1a1, \uc2a4\ud2b8\ub9ac\ubc0d \ubbf8\ub514\uc5b4 \ubc0f \uae30\ud0c0 \ubaa8\ub4e0 \uc720\ud615\uc758 IP \uae30\ubc18 \ud1b5\uc2e0\uc744 \ud3ec\ud568\ud558\uc5ec \ub300\uc0c1\uc5d0\uc11c \uad50\ud658\ud558\ub294 IP \ud328\ud0b7\uc73c\ub85c \uad6c\uc131\ub429\ub2c8\ub2e4. \ub2e8\uc77c \ub370\uc774\ud130 \ucc28\ub2e8\uc73c\ub85c \uc0dd\uc131\ub418\ub294 \ub370\uc774\ud130\uc758 \uc591\uc740 \uc74c\uc131 \ucc28\ub2e8\uc73c\ub85c \uc0dd\uc131\ub418\ub294 \ub370\uc774\ud130\uc758 \uc591\ubcf4\ub2e4 \ud6e8\uc52c \ub354 \ud074 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HI3 delivery must be real-time for voice and near-real-time for data. The intercepted content must be delivered to the LEMF with minimal latency to support time-critical investigations. For IP-based handover (ETSI TS 102 232), all content, including voice, is wrapped in PS-PDUs and sent over TCP (protected by a VPN or TLS). Captured RTP media becomes the payload of these PDUs rather than being sent as RTP. Legacy circuit-switched handover uses ISDN bearer channels instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The handling of encrypted content on HI3 is one of the most challenging aspects of modern LI. If the target&#8217;s communications are encrypted at the application layer (for example, using end-to-end encryption in a messaging application), the operator may only be able to deliver the encrypted content on HI3, which is of limited value to law enforcement. Operators must remove any encryption they apply or manage themselves, or supply the keys (3GPP TS 33.126). End-to-end encryption applied by an over-the-top application is outside the operator&#8217;s control, so the operator can only deliver that content as it sees it \u2014 and the growing prevalence of such encryption is creating a widening gap between what law enforcement expects and what operators can deliver.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uc138 \uac00\uc9c0 \uc778\ud130\ud398\uc774\uc2a4\uac00 \ud568\uaed8 \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In a typical interception operation, the three interfaces work together as follows. First, the law enforcement agency transmits an interception order to the operator via HI1, specifying the target, the scope, and the duration. The operator&#8217;s <a href=\"https:\/\/ic-services.io\/ko\/%ec%a0%9c%ed%92%88\/%ec%86%8c%ed%94%84%ed%8a%b8%ec%9b%a8%ec%96%b4-%ec%86%94%eb%a3%a8%ec%85%98\/%ed%95%a9%eb%b2%95%ec%a0%81%ec%9d%b8-%ea%b0%90%ec%b2%ad-%ea%b4%80%eb%a6%ac-%ec%8b%9c%ec%8a%a4%ed%85%9c\/\">LI \uad00\ub9ac \uc2dc\uc2a4\ud15c<\/a> processes the order, validates the warrant, and provisions the points of interception (POIs) and the mediation function over X1 to begin intercepting the target&#8217;s communications.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the target initiates or receives a communication, the POIs capture the relevant signalling and content and pass them to the mediation function over X2 and X3. The mediation function processes this data, turning the detected events into IRI records encoded in ASN.1 format for delivery over HI2, and encapsulating the CC for delivery over HI3. Both streams are transmitted securely to the LEMF, where they are correlated and presented to investigators.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ubc95 \uc9d1\ud589 \uae30\uad00\uc740 HI1\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc0c1\ud0dc \uc5c5\ub370\uc774\ud2b8\ub97c \uc694\uccad\ud558\uac70\ub098, \ucc28\ub2e8 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc218\uc815\ud558\uac70\ub098, \ube44\ud65c\uc131\ud654 \uba85\ub839\uc744 \ub0b4\ub9ac\ub294 \ub4f1 \uac10\uccad\uc774 \uc9c4\ud589\ub418\ub294 \ub3d9\uc548 \uad00\ub9ac \ubaa9\uc801\uc73c\ub85c \ud65c\uc131 \uc0c1\ud0dc\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uac10\uccad\uc774 \uc885\ub8cc\ub418\uba74 \uc6b4\uc601\uc790\ub294 HI1\uc744 \ud1b5\ud574 \ube44\ud65c\uc131\ud654\ub97c \ud655\uc778\ud558\uace0 HI2 \ubc0f HI3\uc744 \ud1b5\ud574 IRI \ubc0f CC\uc758 \uc804\uc1a1\uc744 \uc911\ub2e8\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uc6b4\uc601\uc790\ub97c \uc704\ud55c \uc2e4\ubb34\uc801 \uace0\ub824 \uc0ac\ud56d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138 \uac00\uc9c0 HI \uc778\ud130\ud398\uc774\uc2a4\ub97c \uad6c\ud604\ud558\ub294 \uc6b4\uc601\uc790\ub294 \uba87 \uac00\uc9c0 \uc2e4\uc9c8\uc801\uc778 \uace0\ub824 \uc0ac\ud56d\uc744 \ud574\uacb0\ud574\uc57c \ud569\ub2c8\ub2e4. \uccab \ubc88\uc9f8\ub294 \uc2dc\uc2a4\ud15c \ud06c\uae30 \uc870\uc815\uc785\ub2c8\ub2e4. HI2 \ubc0f HI3 \uc778\ud130\ud398\uc774\uc2a4\ub294 \ub370\uc774\ud130 \uc190\uc2e4\uc774\ub098 \uacfc\ub3c4\ud55c \uc9c0\uc5f0 \uc2dc\uac04 \uc5c6\uc774 \uc608\uc0c1\ub418\ub294 \ub3d9\uc2dc \uc778\ud130\uc149\ud2b8 \uc591\uc744 \ucc98\ub9ac\ud560 \uc218 \uc788\ub3c4\ub85d \ud06c\uae30\ub97c \uc870\uc815\ud574\uc57c \ud569\ub2c8\ub2e4. \ub370\uc774\ud130\uac00 \ub9ce\uc740 \uc778\ud130\uc149\ud2b8\uc758 \uacbd\uc6b0 HI3\uc758 \ub300\uc5ed\ud3ed \uc694\uad6c \uc0ac\ud56d\uc774 \uc0c1\ub2f9\ud560 \uc218 \uc788\uc73c\ubbc0\ub85c \uc6b4\uc601\uc790\ub294 \uc804\uc1a1 \uc778\ud504\ub77c\uac00 \uc801\uc808\ud558\uac8c \ud504\ub85c\ube44\uc800\ub2dd\ub418\uc5b4 \uc788\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second consideration is security. All three interfaces carry sensitive information and must be protected against unauthorised access, eavesdropping, and tampering. This requires a protected delivery path (a private network, VPN or TLS with mutual authentication, as the national framework prescribes) and comprehensive audit logging. Security failures on any of the three interfaces can compromise the integrity of the interception process and potentially expose sensitive law enforcement operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc138 \ubc88\uc9f8 \uace0\ub824 \uc0ac\ud56d\uc740 \uc0c1\ud638 \uc6b4\uc6a9\uc131\uc785\ub2c8\ub2e4. \uc6b4\uc601\uc790\ub294 HI \uad6c\ud604\uc774 \uad00\ud560 \uc9c0\uc5ed\uc758 \ubc95 \uc9d1\ud589 \uae30\uad00\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \uc2dc\uc2a4\ud15c\uacfc \ud638\ud658\ub418\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\ub97c \uc704\ud574\uc11c\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \uacf5\uc2dd\uc801\uc778 \uc0c1\ud638\uc6b4\uc6a9\uc131 \ud14c\uc2a4\ud2b8\uac00 \ud544\uc694\ud558\uba70, \uc774\ub294 \uc2dc\uac04\uc774 \ub9ce\uc774 \uc18c\uc694\ub420 \uc218 \uc788\ub294 \ud504\ub85c\uc138\uc2a4\uc785\ub2c8\ub2e4. \uc6b4\uc601\uc790\ub294 \uac1c\ubc1c \ud504\ub85c\uc138\uc2a4 \ucd08\uae30\uc5d0 \ud574\ub2f9 \uad6d\uac00\uc758 \ubc95 \uc9d1\ud589 \uae30\uad00 \uae30\uc220 \ub2f4\ub2f9\uc790\uc640 \ud611\ub825\ud558\uc5ec \ud638\ud658\uc131 \ubb38\uc81c\ub97c \ud30c\uc545\ud558\uace0 \ud574\uacb0\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uacb0\ub860<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HI1, HI2, HI3 \uc778\ud130\ud398\uc774\uc2a4\ub294 ETSI \ud569\ubc95\uc801 \uac10\uccad \ud578\ub4dc\uc624\ubc84 \uc544\ud0a4\ud14d\ucc98\uc758 \uc911\ucd94\ub97c \ud615\uc131\ud569\ub2c8\ub2e4. HI1\uc740 \uad00\ub9ac \uc81c\uc5b4 \ucc44\ub110\uc744 \uc81c\uacf5\ud558\uace0, HI2\ub294 \uc870\uc0ac\uc5d0 \ud544\uc218\uc801\uc778 \ud48d\ubd80\ud55c \uba54\ud0c0\ub370\uc774\ud130\ub97c \uc81c\uacf5\ud558\uba70, HI3\ub294 \uac10\uccad\ub41c \ud1b5\uc2e0\uc758 \uc2e4\uc81c \ucf58\ud150\uce20\ub97c \uc804\ub2ec\ud569\ub2c8\ub2e4. \uc774\ub7ec\ud55c \uae30\ub2a5\uc744 \ud568\uaed8 \uc0ac\uc6a9\ud558\uba74 \ud1b5\uc2e0 \uc0ac\uc5c5\uc790\uc640 \ubc95 \uc9d1\ud589 \uae30\uad00\uc758 \uc694\uad6c\ub97c \ubaa8\ub450 \uc9c0\uc6d0\ud558\ub294 \uc644\ubcbd\ud55c \ud45c\uc900 \uae30\ubc18 \uac10\uccad \uae30\ub2a5\uc744 \uad6c\ud604\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ucd5c\uc2e0 \ud1b5\uc2e0 \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c \ud569\ubc95\uc801\uc778 \uac10\uccad \uc2dc\uc2a4\ud15c\uc758 \uc124\uacc4, \ubc30\ud3ec \ub610\ub294 \uc6b4\uc601\uc5d0 \uad00\uc5ec\ud558\ub294 \ubaa8\ub4e0 \uc0ac\ub78c\uc740 \uac01 \uc778\ud130\ud398\uc774\uc2a4\uc758 \uace0\uc720\ud55c \uc5ed\ud560, \uae30\uc220 \uc694\uad6c \uc0ac\ud56d \ubc0f \uc2e4\uc9c8\uc801\uc778 \uacfc\uc81c\ub97c \uc774\ud574\ud558\ub294 \uac83\uc774 \ud544\uc218\uc801\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Proper implementation of HI1 HI2 HI3 interfaces is essential for <a href=\"https:\/\/ic-services.io\/ko\/%ec%86%94%eb%a3%a8%ec%85%98\/%ed%95%a9%eb%b2%95%ec%a0%81%ec%9d%b8-%ea%b0%90%ec%b2%ad\/\">\ud569\ubc95\uc801 \uac10\uccad \uaddc\uc815 \uc900\uc218<\/a>. Operators must test their HI1 HI2 HI3 implementations thoroughly before going live.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\uad00\ub828 \uae30\uc0ac<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uad00\ub828 \uc8fc\uc81c\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \ubb38\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/ic-services.io\/ko\/?p=2144\">ETSI TS 103 120 Explained: The Electronic HI1 Warrant Interface<\/a><\/li>\n<li><a href=\"https:\/\/ic-services.io\/ko\/?p=2150\">IRI\uc640 CC: \uc2e4\uc81c\ub85c \uac00\ub85c\ucc44\uae30 \uad00\ub828 \uc815\ubcf4\uac00 \uc2e4\uc81c\ub85c \uc758\ubbf8\ud558\ub294 \uac83<\/a><\/li>\n<li><a href=\"https:\/\/ic-services.io\/ko\/?p=2154\">5G\uc758 X1\/X2\/X3 \uc778\ud130\ud398\uc774\uc2a4: 3GPP LI \uc544\ud0a4\ud14d\ucc98 \uc124\uba85<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\uc678\ubd80 \ub9ac\uc18c\uc2a4<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\uc74c \uc678\ubd80 \ub9ac\uc18c\uc2a4\uc5d0\uc11c \ucd94\uac00 \ucee8\ud14d\uc2a4\ud2b8\uc640 \uacf5\uc2dd \ubb38\uc11c\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.etsi.org\/technologies\/lawful-interception\" target=\"_blank\" rel=\"noopener noreferrer\">ETSI \ud569\ubc95\uc801 \uac10\uccad \ud45c\uc900<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Understanding HI1 HI2 HI3 interfaces is fundamental to implementing lawful interception correctly. At the heart of every lawful interception system [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":2352,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[10],"tags":[],"class_list":["post-2146","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technical-standards-architecture"],"uagb_featured_image_src":{"full":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet.jpg",1127,750,false],"thumbnail":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet-150x150.jpg",150,150,true],"medium":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet-300x200.jpg",300,200,true],"medium_large":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet-768x511.jpg",768,511,true],"large":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet-1024x681.jpg",1024,681,true],"1536x1536":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet.jpg",1127,750,false],"2048x2048":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet.jpg",1127,750,false],"trp-custom-language-flag":["https:\/\/ic-services.io\/wp-content\/uploads\/2026\/06\/hi1-hi2-hi3-lawful-interception-interfaces-ethernet-18x12.jpg",18,12,true]},"uagb_author_info":{"display_name":"David Son","author_link":"https:\/\/ic-services.io\/ko\/author\/david\/"},"uagb_comment_info":0,"uagb_excerpt":"Understanding HI1 HI2 HI3 interfaces is fundamental to implementing lawful interception correctly. At the heart of every lawful interception system [&hellip;]","_links":{"self":[{"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/posts\/2146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/comments?post=2146"}],"version-history":[{"count":7,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/posts\/2146\/revisions"}],"predecessor-version":[{"id":2701,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/posts\/2146\/revisions\/2701"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/media\/2352"}],"wp:attachment":[{"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/media?parent=2146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/categories?post=2146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ic-services.io\/ko\/wp-json\/wp\/v2\/tags?post=2146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}