A method for enabling hanging lawful interception (LI) resources to be cleaned up in a mobile network that comprises a triggering function set and a data store, the triggering function set comprising a plurality of triggering functions, the data store comprising a plurality of auditing records corresponding to the plurality of triggering functions, the method comprising:
- causing each triggering function among the plurality of triggering functions to send an update request to the data store in response to being notified about a failed triggering function within the triggering function set, wherein each update request comprises a request to change ownership of an auditing record corresponding to the failed triggering function;
- selecting a triggering function as a new owner of the auditing record corresponding to the failed triggering function based at least in part on a match between a claimant attribute in the auditing record and a claimant field in the update request sent by the triggering function;
- and
- causing the new owner of the auditing record corresponding to the failed triggering function to send at least one request to a triggered point of interception (POI) to remove an LI resource corresponding to the failed triggering function.