漫游中的合法截取场景给运营商带来了复杂的管辖权和技术挑战。国际漫游是移动通信的一项基本功能，它使用户在出国旅行时能够使用其本国运营商的服务。对于合法截取而言，漫游增添了一层复杂性，给运营商带来了挑战，, 执法机构, ，以及监管机构。当目标用户接入外国网络时，关于谁可以截获其通信、依据何种法律授权以及通过何种技术手段进行截获等问题，相比纯粹的国内情境而言，会变得复杂得多。.
本文探讨了漫游场景下合法截获的法律、技术及运营层面，涵盖了入境漫游（外国用户漫游至您的网络）和出境漫游（您的用户漫游至外国网络）两种情况。 对于服务于国际客户的运营商以及调查具有跨境流动性的目标对象的执法机构而言，理解这些动态至关重要。.
漫游中的合法截获是如何运作的
漫游场景下合法截获的法律框架由属地管辖原则所决定。 各国的截取权限通常仅限于在其领土内发生或涉及其电信基础设施的通信。当目标用户进行国际漫游时，通信数据既会经过被访问国的网络，也会经过本国的信令基础设施，从而导致管辖权重叠及潜在的法律冲突。.
对于入境漫游，被访问网络运营商须遵守被访问国的法律。如果当地执法机关针对漫游用户签发了有效的截取令，被访问网络运营商必须予以执行，如同对待任何国内用户一样。 用户虽为外国运营商的客户，但这并不免除被访问运营商执行截获的义务。.
For outbound roaming, the situation is more complex. The home operator typically retains control over the subscriber’s signalling and may, depending on the network architecture, continue to handle certain aspects of the subscriber’s communications. The radio access and serving gateway are in the visited network, but in most deployments data sessions and VoLTE calls are home-routed (S8HR), so the content still passes through the home operator’s gateway. Only with local breakout does the content stay in the visited network, leaving the home operator with limited access to the content even though it retains control of the subscriber’s identity and signalling.
跨境合作机制，例如《司法互助条约》（MLATs）和欧盟的《欧洲调查令》（EIO），为向其他国家当局请求截获协助提供了框架。然而，这些机制往往效率低下且行政负担沉重，因此不适合用于时间紧迫的截获行动。 欧盟的 《电子证据条例》, which has applied since 18 August 2026, speeds up cross-border access to stored data, but it does not cover real-time interception. Under the EIO Directive, a Member State can ask another for technical assistance with interception (Art. 30). If it can intercept without help, for example because the traffic is home-routed, it must notify the Member State where the target is, which can object within 96 hours (Art. 31).
漫游LI的技术维度
漫游的技术架构直接影响了截获操作可在何处以及如何进行。在传统的漫游架构中，被访问网络负责无线接入和本地呼叫路由，而归属网络则负责认证、用户管理以及某些信令功能。 截获点取决于需要截获的内容以及哪个网络能够访问相关流量。.
In circuit-switched roaming, calls made by the roamer are switched by the visited network’s MSC, so the visited network can intercept them; calls to the roamer pass the home network’s gateway MSC first. The terms local breakout (LBO) and home routing (HR) apply to data and IMS roaming.
对于数据会话，路由方式取决于流量是经由主运营商路由（通过主运营商的 PGW/UPF）还是本地分流。 采用“回程路由”的数据会使主运营商能够访问用户平面流量，从而可在主运营商的 PGW/UPF 上进行拦截。而“本地分流”则使被访问运营商能够访问用户平面流量，而主运营商仅能看到信令信息。.
在 5G 漫游架构中，流量路由的选项更加灵活，但也更为复杂。5G 漫游架构同时支持“本网路由”（HR）和“本地分流”（LBO）两种模型，所采用的具体模型会影响截取操作的执行位置。 3GPP LI规范针对漫游场景进行了说明，并定义了HR和LBO配置下的截取点。.
入境漫游：拦截外国用户
当外国用户漫游至您的网络时，当地执法部门可能会要求截获该用户的通信。作为被访问网络运营商，您必须能够识别漫游用户、启动截获操作，并将截获的数据交付给当地执法部门。 技术上的挑战包括：根据漫游用户的外国 IMSI 或 MSISDN 识别其身份；截获可能部分由用户本网处理的通信；以及生成能准确反映漫游上下文的 IRI。.
Your LI system must support the interception of roaming subscribers, including the ability to target by foreign identifier and to capture communications regardless of whether they are home-routed or locally broken out. For home-routed VoLTE (S8HR), the visited network sees no IMS signalling of its own; it needs the S8HR LI functions defined by 3GPP (TS 33.127) and roaming partners that disable IMS signalling encryption towards it. Some countries, such as Germany, instead deliver all of the inbound roamer’s data traffic. Location reporting also changes: the visited network must report the inbound roamer’s location itself, while the home network can only report what it sees, such as the visited network’s identity. Testing your LI capability with roaming scenarios should be part of your regular compliance testing programme.
出境漫游：当您的用户身处国外时
When your subscriber roams onto a foreign network, your ability to intercept their communications depends on the traffic routing architecture. If the subscriber’s data is home-routed through your PGW or UPF, you retain access to the user-plane traffic and can technically perform interception at your own infrastructure. Whether you may do so is a legal question. Some countries restrict interception of targets who are abroad: in Germany, for example, communications are not captured while the network knows the device is abroad, unless they involve a domestic line (§ 4 TKÜV). Within the EU, the intercepting state must also notify the Member State where the target is located. If the traffic is locally broken out in the visited network, you lose access to the user-plane traffic and cannot intercept the content of communications. You may still have access to signalling information (IRI) related to the subscriber’s activities, depending on the roaming architecture.
当由于本地接入的原因，无法通过您自身的网络基础设施截获用户的通信时，您必须将这一限制告知执法部门。执法部门随后可通过利用现有的跨境合作机制，向用户漫游所在国的有关当局申请进行截获。这一流程可能较为缓慢，但这是符合法律规定的正当途径。.
Operators should detect when a target starts or stops roaming and report this to the agency, and suspend or resume interception as the warrant and national law require. Routing must never be changed for individual targets, because interception has to remain undetectable and must not alter the target’s service (e.g. § 5(4) TKÜV in Germany).
实用建议
对于在漫游场景下管理LI的运营商，建议采取以下几个切实可行的步骤。首先，确保您的LI系统支持对入网漫游用户和出网漫游用户（在基于流量路由的技术可行范围内）的拦截。 其次，应充分了解本网络的漫游架构及其对截获覆盖范围的影响，并向执法部门明确记录任何限制条件。第三，应针对漫游场景测试 LI 能力，包括入境和出境漫游、经主网路由和本地分流的流量，以及各种目标识别方法。.
第四，建立与执法部门就漫游相关限制进行沟通的流程，并建立支持跨境合作请求的流程。 第五，密切关注5G漫游架构的发展以及漫游场景下不断演进的LI标准，以确保您的LI能力能够跟上网络变化的步伐。漫游领域正在迅速演变，新的路由选项、新的双边协议以及新的监管要求，都会影响运营商在漫游场景下拦截通信的能力。.
结论
漫游为合法截获带来了重大的法律、技术和运营方面的复杂性。领土管辖权、流量路由架构以及跨境合作机制之间的相互作用意味着，漫游场景下的截获绝不像国内截获那样简单直接。 运营商必须理解这些复杂性，构建能够有效处理漫游场景的合法截取系统，并就任何限制与执法部门保持透明沟通。随着5G技术的推进，漫游架构不断演进，维持截取覆盖范围的机会在扩大，但实施的复杂性也在增加。 对于服务于国际用户且必须在跨境范围内保持合法截获合规性的运营商而言，积极规划并持续参与标准制定和监管要求至关重要。.
IPX 和漫游枢纽的维度
The role of IPX (IP Packet eXchange) providers and roaming hubs adds another dimension to the LI challenge in roaming. These intermediary platforms facilitate the exchange of traffic between operators and may have visibility into signalling and, in some architectures, user-plane traffic. The question of whether IPX providers have lawful interception obligations is still evolving, and the answer varies by jurisdiction. In Germany, for example, pure interconnection networks without subscriber lines need no LI precautions, except nodes that switch voice traffic to other countries (§ 3(2) TKÜV). Operators should understand how their roaming traffic flows through IPX providers and what implications this has for interception coverage.
在某些漫游架构中，IPX提供商可能会提供诸如流量优化或本地分流辅助等增值服务，这些服务会影响目标流量的路由。这些服务可能会改变截获点的位置，并可能导致截获覆盖范围出现漏洞，运营商必须识别并解决这些问题。 了解漫游流量完整的端到端路径——从用户设备经由被访问网络、IPX提供商直至本网——对于确保能在适当的点位进行拦截至关重要。.
运营商还应考虑双边漫游协议对合法截获的影响。此类协议通常侧重于商业条款、服务质量和流量交换安排，但很少涉及合法截获问题。 在漫游协议中纳入合法截取条款——或者至少在相关技术文档中予以说明——有助于确保双方明确各自在截取漫游流量方面的责任和能力。随着5G时代新型漫游模式的出现，流量路由和网络功能部署的选项比前几代网络更加多样化，这一点显得尤为重要。.
随着国际数据流量的增加，漫游合法截获的情景将变得更加复杂。运营商必须确保其漫游 合法截获能力 符合所有适用的监管要求。.
相关文章
如需进一步了解相关主题，请浏览这些文章：
外部资源
以下外部资源提供了更多背景资料和官方文件：
