When an operator first confronts the requirement to build a lawful interception capability, one of the earliest and most consequential decisions is whether to deploy a temporary, self-contained interception solution — often referred to as an LI box — or to invest in permanent, integrated infrastructure. Each approach has distinct advantages, limitations, and cost profiles, and the right choice depends on the operator’s size, growth trajectory, regulatory environment, and technical architecture. Making the wrong decision can result in either overspending on infrastructure that is underutilised, or relying on a temporary solution that cannot keep pace with growing obligations.
本文对临时……进行了详细比较 LI 解决方案 以及永久性基础设施，分析应作为决策依据的技术特性、运营影响和商业考量。无论您是进军新市场的移动虚拟网络运营商（MVNO）、正在扩展网络的区域运营商，还是希望实现本地化基础设施（LI）现代化能力的成熟运营商，本框架都将帮助您做出明智的选择。.
什么是临时LI框？
A 临时LI框 is a self-contained interception solution that can be deployed quickly to provide a lawful interception capability. These solutions are typically packaged as a pre-integrated appliance that combines capture, mediation and ETSI handover (ETSI TS 102 232); targets and routing for each order are set up in the box’s own configuration. They are designed to be deployed with minimal integration effort and to be operational much faster than a permanent build, once the secure connection to the agencies is in place.
Temporary LI boxes are often used in scenarios where speed of deployment is the primary concern. An MVNO preparing for a regulatory audit, an operator launching services in a new market under time pressure, or a provider that has received a compliance notice and needs to demonstrate interception capability quickly may all turn to a temporary solution as the fastest path to compliance. If your network carries the full obligation, whichever option you choose must pass the regulator’s acceptance. In Germany that is the BNetzA proof under § 19 TKÜV, which must be started within a month of launch (§ 170(1) no. 4 TKG) and repeated when the LI system is changed (§ 20 TKÜV). Small installations exempt under § 3(2) TKÜV (see below) need no standing proof, but must still implement every order.
典型的临时 LI 盒子以预配置包的形式提供核心拦截功能——目标配置、IRI 生成、CC 捕获以及符合 ETSI 标准的切换——只需少量定制即可连接到运营商的网络。 部分解决方案支持远程管理，可由供应商或托管服务提供商代表运营商进行操作，从而进一步缩短部署周期，并减轻运营商员工的运营负担。.
什么是永久性LI基础设施？
永久性LI基础设施是指一种完全集成、专为截获而设计的截获能力，旨在作为运营商网络架构的长期组成部分。 永久性解决方案通常以软件平台的形式部署在运营商自有服务器或虚拟化基础设施上，并与运营商的网络元素、用户管理系统及运营支持系统深度集成。.
永久性基础设施的设计旨在随运营商网络和用户基数的扩展而扩展，以支持大量并发截获，并能随着时间的推移适应新的网络技术和监管要求。它通常包括全面的搜查令管理工作流程、自动化配置能力、冗余和故障转移机制，以及详细的审计和报告功能。.
与临时解决方案相比，永久性LI基础设施的部署需要投入更多规划、集成工作和测试。从采购到具备全面运营能力，通常需要数月时间，且该项目需要LI解决方案供应商、网络设备供应商、运营商的工程和运营团队以及相关执法部门的技术联系人之间进行协调。.
两种方法的比较
对临时和永久性LI解决方案的比较涉及多个方面：部署速度、成本、可扩展性、集成深度、运维复杂性以及长期适用性。.
Deployment speed is the most obvious advantage of the temporary approach. A temporary LI box can be operational much sooner than permanent infrastructure, which typically requires several months, provided the secure connection to the agencies is in place. For operators facing imminent regulatory deadlines or compliance audits, the temporary solution may be the only viable option within the available timeframe.
这两种方案的成本结构存在显著差异。临时LI盒的初期资本支出通常低于永久性基础设施，因此对预算有限或对长期截获需求尚不明确的运营商而言颇具吸引力。 然而，从多年期的全生命周期成本来看，永久性基础设施可能更具优势，特别是对于用户基数不断增长、截获量持续增加的运营商而言。临时解决方案还可能伴随持续的租赁或订阅费用，这些费用会随着时间的推移而累积。.
可扩展性是一个关键的差异化因素。临时LI设备通常仅支持有限数量的并发截获，且仅适用于有限范围的网络技术。随着运营商网络的扩展和截获需求的增加，临时解决方案可能会达到其容量极限。 相比之下，永久性基础设施的设计具备可扩展性——无需更换整个系统，即可通过软件许可、增加处理资源或扩展存储空间来提升容量。.
Integration depth affects the quality and completeness of the interception capability. Temporary solutions typically integrate at a shallower level, often with protocol probes that can be deployed without modifying the network elements, so check carefully that they still capture every service in scope with complete IRI. Legal completeness requirements are the same for a temporary box as for a permanent system. Permanent infrastructure integrates more deeply with the network (interfacing directly with session border controllers, IMS core elements, subscriber databases and 5G network functions), which makes complete interception easier to maintain as the network and its services grow.
临时解决方案的运维复杂度通常较低，其设计初衷就是便于部署和运维。而永久性基础设施则需要更复杂的运维流程、技术娴熟的人员以及持续的维护。不过，永久性解决方案通常还提供更全面的管理、监控和报告功能，能够支持大规模的高效运营。.
In some countries the law itself sets the threshold. In Germany, telecommunications installations with no more than 10,000 connected users are exempt from permanent interception facilities (§ 3(2) TKÜV; international voice gateways excepted), but each order received must still be implemented. A temporary box deployed per order is the natural fit there.
决策框架
在临时和永久性LI基础设施之间做出选择时，应参考几个关键因素。首先是运营商的监管时间表。如果必须在几周内达到合规要求，临时解决方案可能是唯一的选择。如果时间表允许进行数月的规划和部署，那么永久性基础设施可能是可行的，也是更优的选择。.
第二个因素是运营商的增长轨迹。对于用户基数较小且增长前景不明朗的移动虚拟网络运营商（MVNO）而言，在可预见的未来，临时解决方案可能已足够。而对于用户基数庞大或增长迅速的运营商，或者正在拓展新市场或推出新服务的运营商，则应投资建设能够随业务规模扩展而扩展的永久性基础设施。.
第三个因素是运营商网络的复杂性。对于网络元素数量有限且仅采用单一技术代次的简单网络架构，临时解决方案便能有效满足其需求。而复杂的多厂商、多技术网络则需要永久性基础设施所能提供的更深层次的集成。.
第四个因素是运营商的长期合规策略。如果将合法截取视为一项一次性项目——即一个需要打勾的任务——那么采取临时解决方案可能会颇具吸引力。但如果将合法截取理解为一项持续的合规义务，且该义务将随着监管环境和网络的发展而演变，那么永久性基础设施便是更可持续的选择。.
混合方法
实际上，许多运营商采取了混合方案。他们部署临时LI箱以快速实现初步合规，同时规划并实施永久性基础设施。该临时解决方案起到过渡作用，在永久性系统部署期间提供必要的截获能力。一旦永久性基础设施投入运行，该临时解决方案便会被拆除或改作他用。.
The hybrid approach offers the best of both worlds — immediate compliance and long-term capability — but requires careful planning to ensure a smooth transition. The two systems must be managed in parallel during the overlap period, and the migration of active intercepts from the temporary to the permanent system must be handled without disruption. Operators considering this approach should plan the transition as part of the initial deployment and should select a temporary solution that can coexist with the permanent infrastructure during the migration period. Plan the cut-over per measure, so that no target is ever delivered by both systems at once. Some national rules (e.g. Germany, TR TKÜV 8.4 Part A, clause 3.1.2) forbid delivering the same content twice. Agree the switch-over with the regulator and the agencies in advance.
结论
在临时LI箱与永久性基础设施之间做出选择是一项战略决策，取决于运营商的具体情况——包括监管时间表、增长轨迹、网络复杂性以及长期合规策略。临时解决方案具有快速、简便的优势，而永久性基础设施则具备可扩展性、深度集成和长期可持续性。 对于许多运营商而言，将临时解决方案的即时性与永久性基础设施的长期能力相结合的混合方案，是实现持续合规的最务实途径。通过理解这些方案之间的权衡关系，并使决策与战略目标保持一致，运营商能够构建一套既能满足当前需求，又能适应未来要求的 LI 能力。.
托管服务需考虑的因素
除了临时和永久性解决方案之外，运营商还应考虑的第三种方案是 托管 LI简体中文（大陆） 服务模式。在此模式下，运营商的合法截取能力由一家专业的第三方服务商提供并运营。 托管服务提供商负责部署和维护法律截获基础设施（该基础设施可以是临时性的、永久性的，或两者兼有），并代表运营商处理截获操作的相关事务。对于缺乏运营复杂法律截获系统所需内部专业知识和资源的移动虚拟网络运营商（MVNO）及小型运营商而言，这种模式尤其具有吸引力。.
The managed service model shifts much of the technical and operational burden to the service provider, allowing the operator to focus on its core business. However, the legal responsibility for lawful interception remains with the operator, and the operator must ensure that the managed service arrangement meets all regulatory requirements, including confidentiality, data protection, and audit trail obligations, and the contractor must meet the same location and confidentiality rules as the operator (in Germany, § 14 TKÜV). The contractual relationship between the operator and the managed service provider must clearly define responsibilities, service levels, and escalation procedures to ensure that interception orders are handled correctly and within the required timescales.
相关文章
如需进一步了解相关主题，请浏览这些文章：
外部资源
以下外部资源提供了更多背景资料和官方文件：
