SIST ETS 300 920 E2:2003
(Main)Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 5.1.1)
- Abstract
Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the GSM PLMN operators offer to their cus tomers. Besides these basic telecommunications services, features whic h aim at up grading these basic services need also to be offered. Due to the use of radiocommunications in a PLMN, which are of a special na ture compared to classical distribution transmission techniques used i n the fixed networks, such a category of features is related to securi ty aspects. In a GSM PLMN, both the users and the network operator have to be prot ected against undesirable intrusion of third parties. However, measure s should be provided for in order to insure maximum protection of the rights of the individuals concerns. As a consequence, a security featu re is either a supplementary service to Tele or Bearer services, which can be selected by the subscriber, or a network function involved in the provision of one or several telecommunication services. The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up grading of the security in a GSM PLMN. In particular, end to end security is outside the scope of this ETS. The implementation aspects of security features are described in GSM 0 3.20.
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST ETS 300 920 E2:2003 is the Slovenian standard identical to ETS 300 920 Edition 2 for Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects. It specifies the security features that are to be available in a GSM PLMN and the levels of protection associated with them, for GSM PLMN operators and the mobile station side. The document focuses on security upgrades in the radio-access part of the system; end-to-end security and implementation details are outside its scope.
What does SIST ETS 300 920 E2:2003 specify?
SIST ETS 300 920 E2:2003 covers security features for GSM PLMNs, starting from the service context in GSM bearer services and teleservices. Clause 1 gives the scope, normative references and abbreviations, clause 2 sets the general security model, and clause 3 describes five security features with a definition, purpose and functional requirements.
The standard is organized around these features:
- subscriber identity confidentiality
- subscriber identity authentication
- user data confidentiality on physical connections
- connectionless user data confidentiality
- signalling information element confidentiality
In practice, the document tells implementers what must be protected on the radio path, what can be left open, and where GSM 03.20 carries the implementation aspects.
What are the key requirements of SIST ETS 300 920 E2:2003?
System-wide support and operator control
SIST ETS 300 920 E2:2003 requires the five security features to be supportable on both the fixed infrastructure side and the MS side. Operators may choose whether to use them for their own subscribers on the HPLMN, but for roaming subscribers the use is mandatory unless all affected PLMN operators agree otherwise. This means security capability is not optional in the equipment design, even when activation is.
Subscriber identity confidentiality
Clause 3.1 requires the IMSI to stay confidential on the radio path. The standard uses the TMSI as the local identity, and open identification is allowed only during location register failure or when the MS has no TMSI available. In practice, signaling should avoid exposing permanent subscriber identity except in those limited cases.
Subscriber identity authentication
Clause 3.2 requires the network to verify that the claimed IMSI or TMSI is genuine, especially for location updating, service access, first access after MSC/VLR restart, or cipher key sequence mismatch. If authentication fails for reasons other than network malfunction, access shall be denied. The separate malfunction rules distinguish between already registered MSs, failed reauthentication and new registrations, so the network must implement the exact call-permission behavior.
User data confidentiality on physical connections
Clause 3.3 says voice and non-voice traffic is normally ciphered. The MS signals which of up to seven ciphering algorithms it supports, the network selects one it can support, and the ME must indicate to the user when ciphering is not active or drops during handover. This affects both ciphering negotiation and user notification, and the SIM can disable the indicator.
Connectionless and signalling confidentiality
Clause 3.4 extends confidentiality to connectionless packet mode over signalling channels, with a note that SMS Cell Broadcast is not covered. Clause 3.5 protects selected signalling information elements after connection establishment, including IMEI, IMSI, and calling/called subscriber directory numbers, while the connection setup fields remain unprotected. The clause also states that the IMEI needs physical protection, the IMSI is stored securely in the SIM, and the SVN is managed separately from the IMEI.
What terms does SIST ETS 300 920 E2:2003 define?
- GSM - Global System for Mobile communications, the system named in the title and scope.
- PLMN - Public Land Mobile Network, the mobile network addressed by the standard.
- IMSI - International Mobile Subscriber Identity, the subscriber identity that must be protected and authenticated.
- IMEI - International Mobile Equipment Identity, a user-related signalling element that is protected after connection setup.
- SIM - Subscriber Identity Module, where the IMSI is stored securely.
- ME - Mobile Equipment, the handset-side equipment that checks the ciphering indicator.
- TMSI - Temporary Mobile Subscriber Identity, the local number used on the radio path instead of IMSI.
Who uses SIST ETS 300 920 E2:2003?
GSM PLMN operators use this standard to decide which security features to provide and when to activate them. Network vendors, handset manufacturers and SIM-related implementers use it to build support for authentication, ciphering, IMSI handling and signalling protection. Quality, conformity and procurement teams use it to check that infrastructure and MS products can support the required security functions, especially for roaming users.
What changed in SIST ETS 300 920 E2:2003 from the previous edition?
SIST ETS 300 920 E2:2003 is the second edition of ETS 300 920, identified in the document history as the December 1997 version.
Which standards are used with SIST ETS 300 920 E2:2003?
- GSM 01.04 - provides the abbreviations and acronyms used in the document.
- GSM 02.02 - defines the bearer services that form part of the service context.
- GSM 02.03 - defines the teleservices that form part of the service context.
- GSM 03.20 - covers the security related network functions and the implementation aspects of these security features.
- GSM 11.11 - covers the SIM-ME interface, relevant to SIM handling and the ciphering indicator.
- GSM 02.07 - is referenced for the ciphering algorithms used with user data confidentiality.
What does the SIST ETS 300 920 E2:2003 document contain?
The document contains a foreword, scope, normative references, abbreviations, a general security rationale and clause 3 with the five security features. Each feature is presented with a definition, a purpose and functional requirements, so the reader can see what must be protected and when. The text also covers operator choice, roaming behavior, algorithm selection, ciphering indication and which signalling elements stay unprotected during connection setup.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST ETS 300 920 E2:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 5.1.1)". This standard covers: Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the GSM PLMN operators offer to their cus tomers. Besides these basic telecommunications services, features whic h aim at up grading these basic services need also to be offered. Due to the use of radiocommunications in a PLMN, which are of a special na ture compared to classical distribution transmission techniques used i n the fixed networks, such a category of features is related to securi ty aspects. In a GSM PLMN, both the users and the network operator have to be prot ected against undesirable intrusion of third parties. However, measure s should be provided for in order to insure maximum protection of the rights of the individuals concerns. As a consequence, a security featu re is either a supplementary service to Tele or Bearer services, which can be selected by the subscriber, or a network function involved in the provision of one or several telecommunication services. The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up grading of the security in a GSM PLMN. In particular, end to end security is outside the scope of this ETS. The implementation aspects of security features are described in GSM 0 3.20.
Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the GSM PLMN operators offer to their cus tomers. Besides these basic telecommunications services, features whic h aim at up grading these basic services need also to be offered. Due to the use of radiocommunications in a PLMN, which are of a special na ture compared to classical distribution transmission techniques used i n the fixed networks, such a category of features is related to securi ty aspects. In a GSM PLMN, both the users and the network operator have to be prot ected against undesirable intrusion of third parties. However, measure s should be provided for in order to insure maximum protection of the rights of the individuals concerns. As a consequence, a security featu re is either a supplementary service to Tele or Bearer services, which can be selected by the subscriber, or a network function involved in the provision of one or several telecommunication services. The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up grading of the security in a GSM PLMN. In particular, end to end security is outside the scope of this ETS. The implementation aspects of security features are described in GSM 0 3.20.
SIST ETS 300 920 E2:2003 is classified under the following ICS (International Classification for Standards) categories: 33.070.50 - Global System for Mobile Communication (GSM). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST ETS 300 920 E2:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-december-2003
'LJLWDOQLFHOLþQLWHOHNRPXQLNDFLMVNLVLVWHP ID]D ±9DUQRVWQLYLGLNL *60
UD]OLþLFD
Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM
02.09 version 5.1.1)
Ta slovenski standard je istoveten z: ETS 300 920 Edition 2
ICS:
33.070.50 Globalni sistem za mobilno Global System for Mobile
telekomunikacijo (GSM) Communication (GSM)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN ETS 300 920
TELECOMMUNICATION December 1997
STANDARD Second Edition
Source: SMG Reference: RE/SMG-010209QR1
ICS: 33.020
Key words: Digital cellular telecommunications system, Global System for Mobile communications (GSM)
R
GLOBAL SYSTEM FOR
MOBILE COMMUNICATIONS
Digital cellular telecommunications system (Phase 2+);
Security aspects
(GSM 02.09 version 5.1.1)
ETSI
European Telecommunications Standards Institute
ETSI Secretariat
Postal address: F-06921 Sophia Antipolis CEDEX - FRANCE
Office address: 650 Route des Lucioles - Sophia Antipolis - Valbonne - FRANCE
X.400: c=fr, a=atlas, p=etsi, s=secretariat - Internet: secretariat@etsi.fr
Tel.: +33 4 92 94 42 00 - Fax: +33 4 93 65 47 16
Copyright Notification: No part may be reproduced except as authorized by written permission. The copyright and the
foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 1997. All rights reserved.
Page 2
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
Whilst every care has been taken in the preparation and publication of this document, errors in content,
typographical or otherwise, may occur. If you have comments concerning its accuracy, please write to
"ETSI Editing and Committee Support Dept." at the address shown on the title page.
Page 3
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
Contents
Foreword .5
1 Scope .7
1.1 Normative references .7
1.2 Abbreviations .7
2 General.8
3 Security features provided in a GSM PLMN.8
3.1 Subscriber identity confidentiality. 8
3.1.1 Definition .8
3.1.2 Purpose .8
3.1.3 Functional requirements.9
3.2 Subscriber identity authentication .9
3.2.1 Definition .9
3.2.2 Purpose .9
3.2.3 Functional requirements.9
3.2.4 Authentication during a malfunction of the network .10
3.3 User data confidentiality on physical connections (Voice and Non-voice).10
3.3.1 Definition .10
3.3.2 Purpose .10
3.3.3 Functional requirements.10
3.4 Connectionless user data confidentiality.11
3.4.1 Definition .11
3.4.2 Purpose .11
3.4.3 Functional requirements.11
3.5 Signalling information element confidentiality.11
3.5.1 Definition .11
3.5.2 Purpose .11
3.5.3 Functional requirements.11
History.12
Page 4
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
Blank page
Page 5
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
Foreword
This second edition European Telecommunication Standard (ETS) has been produced by the Special
Mobile Group (SMG) of the European Telecommunications Standards Institute (ETSI).
This ETS defines security features within the digital cellular telecommunications system.
The specification from which this ETS has been derived was originally based on CEPT documentation,
hence the presentation of this ETS may not be entirely in accordance with the ETSI/PNE Rules.
Transposition dates
Date of adoption of this ETS: 5 December 1997
Date of latest announcement of this ETS (doa): 31 March 1998
Date of latest publication of new National Standard
or endorsement of this ETS (dop/e): 30 September 1998
Date of withdrawal of any conflicting National Standard (dow): 30 September 1998
Page 6
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
Blank page
Page 7
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
1 Scope
Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the
GSM PLMN operators offer to their customers. Besides these basic telecommunications services,
features which aim at up-grading these basic services need also to be offered. Due to the use of
radiocommunications in a PLMN, which are of a special nature compared to classical distribution
transmission techniques used in the fixed networks, such a category of features is related to security
aspects.
In a GSM PLMN, both the users and the network operator have to be protected against undesirable
intrusion of third parties. However, measures should be provided for in order to insure maximum
protection of the rights of the individuals concerns. As a consequence, a security feature is either a
supplementary service to Tele or Bearer services, which can be selected by the subscriber, or a network
function involved in the provision of one or several telecommunication services.
The purpose of this European Telecommunication Standard (ETS) is to define the security features which
are to be available in a GSM PLMN, together with the associated levels of protection. This ETS is only
concerned with those security features which aim at the up-grading of the security in a GSM PLMN. In
particular, end-to-end security is outside the scope of this ETS.
The implementation aspects of security features are described in GSM 03.20.
1.1 Normative references
This ETS incorporates by dated and undated reference, provisions from other publications. These
normative references are cited at the appropriate places in the text and the publications are listed
hereafter. For dated references, subsequent amendments to or revisions of any of these publications
apply to this ETS only when incorporated in it by amendment or revision. For undated references, the
latest edition of the publication referred to applies.
[1] GSM 01.04 (ETR 350): "Digital cellular telecommunications system (Phase 2+);
Abbreviations and acronyms".
[2] GSM 02.02 (ETS 300 904): "Digital cellular telecommunications system
(Phase 2+); Bearer Services (BS) supported by a GSM Public Land Mobile
Network (PLMN)".
[3] GSM 02.03 (ETS 300 905): "Digital cellular telecommunications system
(Phase 2+); Teleservices supported by a GSM Public Land Mobile Network
(PLMN)".
[4] GSM 03.20 (ETS 300 929): "Digital cellular telecommunications system
(Phase 2+); Security related network functions".
[5] GSM 11.11 (ETS 300 977): "Digital cellular telecommunications system
(Phase 2+); Specification of the Subscriber Identity Module - Mobile Equipment
(SIM - ME) interface".
1.2 Abbreviations
Abbreviations used in this ETS are listed in GSM 01.04.
Page 8
ETS 300 920 (GSM 02.09 version 5.1.1): December 1997
2 General
The use of radiocommunications for transmission to the mobile subscribers makes PLMNs particularly
sensitive to:
- misuse of their resources by unauthorized persons using manipulated Mobile Stations, who try to
impersonate authorized subscribers; and
- eavesdropping of the various information which are exchanged on the radio path.
It can be seen that PLMNs intrinsically do not provide the same level of protection to their operators and
subscribers as the traditional telecommunication networks provide. This fact leads to the need to
implement security features in a GSM PLM
...