SIST EN 300 920 V7.1.1:2003
(Main)Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 7.1.1 Release 1998)
- Abstract
CR SMG#31
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST EN 300 920 V7.1.1:2003 is the Slovenian adoption of ETSI EN 300 920 Version 7.1.1 for GSM Phase 2+ digital cellular telecommunications systems. It specifies the security features available in a GSM PLMN, including subscriber identity confidentiality and authentication, user data confidentiality, and signalling confidentiality, for network operators, mobile stations and related infrastructure. It also points readers to the implementation aspects in GSM 03.20.
What does SIST EN 300 920 V7.1.1:2003 specify?
SIST EN 300 920 V7.1.1:2003 specifies the security features that are to be available in a GSM PLMN and the associated levels of protection. It is focused on security upgrades within GSM, and it excludes end-to-end security.
The document is organized into a short front matter, clause 1 on scope and references, clause 2 on the general security model, clause 3 on the five security features, and Annex A on change history.
| Annex | What it covers |
|---|---|
| Annex A | Change history |
What are the key requirements of SIST EN 300 920 V7.1.1:2003?
SIST EN 300 920 V7.1.1:2003 makes the five security features mandatory in both the fixed infrastructure and the mobile station. In practice, GSM PLMNs and MSs shall be able to support all five features, even though operators decide when to use them for their own subscribers.
Subscriber identity confidentiality
The standard requires the IMSI to be protected on signalling paths and says the network should use the TMSI to identify a mobile subscriber on the radio path. This matters because it limits identity disclosure and helps reduce location tracing.
When a location register fails, or when the MS has no TMSI available, open identification on the radio path is allowed. That gives operators a defined fallback for exceptional cases.
Subscriber identity authentication
The network may trigger authentication at registration, service access, subscriber data changes, first access after MSC/VLR restart, or when the cipher key sequence number mismatches. This means authentication is not just a one-time check, but part of several network control events.
If authentication fails and the failure is not due to network malfunction, access shall be denied. If the network malfunctions, the standard allows continued calls for an already registered and authenticated MS, but not for a new registration that cannot be authenticated.
User data confidentiality on physical connections
Encryption will normally be applied to all voice and non-voice communications. The MS can support more than one algorithm, the serving network selects one it supports, and the MS and network then use that choice.
If the MS does not support the ciphering algorithm(s) required by GSM 02.07, the network shall not provide service. The ME also checks whether ciphering is active and indicates problems to the user; that is the practical alert that traffic may no longer be protected.
Connectionless user data confidentiality
The standard covers user information sent in connectionless packet mode over a signalling channel, such as short messages. A note states that this protection is not applicable to SMS Cell Broadcast.
Signalling information element confidentiality
The standard protects selected signalling information elements exchanged between MSs and base stations after connection establishment, including IMEI, IMSI, and called or calling subscriber directory numbers in the listed cases. It also requires the IMSI to be stored securely in the SIM, the IMEI to resist tampering after final production, and the SVN security policy to be separate from the IMEI.
What terms does SIST EN 300 920 V7.1.1:2003 define?
The standard uses several key identities and network terms in its security requirements:
- IMSI (International Mobile Subscriber Identity) - the subscriber identity that the network protects from disclosure and authenticates.
- TMSI (Temporary Mobile Subscriber Identity) - the local number used on the radio path instead of the IMSI when available.
- IMEI (International Mobile Equipment Identity) - the equipment identity that shall not be changed after final production and shall resist tampering.
- MS (Mobile Station) - the subscriber-side device that participates in identification, authentication, and ciphering.
- ME (Mobile Equipment) - the equipment part that checks ciphering status and can show a user indication.
- SIM (Subscriber Identity Module) - the secure storage for the IMSI and the place where the ciphering indicator feature may be disabled.
- SVN (Software Version Number) - the software-related identifier whose security is handled separately from the IMEI.
Who uses SIST EN 300 920 V7.1.1:2003?
SIST EN 300 920 V7.1.1:2003 is used by GSM PLMN operators, network engineers, and equipment manufacturers who need to design, configure, or assess GSM security functions. It is also relevant to SIM and mobile equipment developers because it links security behaviour to the SIM, ME, and the radio path.
Quality and conformity teams use it when checking whether products and networks support the required security features, the algorithm negotiation rules, and the protection of identities and signalling data.
What changed in SIST EN 300 920 V7.1.1:2003 from the previous edition?
The change history shows a version update to 7.1.1 for publication. It also states that section 3.5.3 was modified to enhance IMEI security.
Which standards are used with SIST EN 300 920 V7.1.1:2003?
The standard names several related documents that support its use:
- GSM 01.04 - provides the abbreviations and acronyms used in the document.
- GSM 02.02 - defines bearer services referenced in the scope.
- GSM 02.03 - defines teleservices referenced in the scope.
- GSM 03.20 - describes security-related network functions and implementation aspects.
- GSM 11.11 - specifies the SIM-ME interface used for ciphering indicator behaviour.
What does the SIST EN 300 920 V7.1.1:2003 document contain?
The document contains short definition, purpose, and functional-requirement subsections for each of the five GSM security features. It also includes the network conditions for authentication, the algorithm selection logic for ciphering, and the protected signalling elements after connection establishment.
Annex A provides a change history table, which is useful for tracking how the security text evolved across versions.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST EN 300 920 V7.1.1:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 7.1.1 Release 1998)". This standard covers: CR SMG#31
CR SMG#31
SIST EN 300 920 V7.1.1:2003 is classified under the following ICS (International Classification for Standards) categories: 33.070.50 - Global System for Mobile Communication (GSM). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST EN 300 920 V7.1.1:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 7.1.1 Release 1998)33.070.50Globalni sistem za mobilno telekomunikacijo (GSM)Global System for Mobile Communication (GSM)ICS:Ta slovenski standard je istoveten z:EN 300 920 Version 7.1.1SIST EN 300 920 V7.1.1:2003en01-december-2003SIST EN 300 920 V7.1.1:2003SLOVENSKI
STANDARD
ETSIEN300920V7.1.1(2000-08)EuropeanStandard(Telecommunicationsseries)Digitalcellulartelecommunicationssystem(Phase2+);Securityaspects(GSM02.09version7.1.1Release1998)GLOBALSYSTEMFORMOBILECOMMUNICATIONSRSIST EN 300 920 V7.1.1:2003
ETSIETSIEN300920V7.1.1(2000-08)2(GSM02.09version7.1.1Release1998)ReferenceREN/SMG-010209Q7R1KeywordsDigitalcellulartelecommunicationssystem,GlobalSystemforMobilecommunications(GSM)ETSI650RoutedesLuciolesF-06921SophiaAntipolisCedex-FRANCETel.:+33492944200Fax:+33493654716SiretN°34862356200017-NAF742CAssociationàbutnonlucratifenregistréeàlaSous-PréfecturedeGrasse(06)N°7803/88ImportantnoticeIndividualcopiesofthepresentdocumentcanbedownloadedfrom:http://www.etsi.orgThepresentdocumentmaybemadeavailableinmorethanoneelectronicversionorinprint.Inanycaseofexistingorperceiveddifferenceincontentsbetweensuchversions,thereferenceversionisthePortableDocumentFormat(PDF).Incaseofdispute,thereferenceshallbetheprintingonETSIprintersofthePDFversionkeptonaspecificnetworkdrivewithinETSISecretariat.Usersofthepresentdocumentshouldbeawarethatthedocumentmaybesubjecttorevisionorchangeofstatus.InformationonthecurrentstatusofthisandotherETSIdocumentsisavailableathttp://www.etsi.org/tb/status/Ifyoufinderrorsinthepresentdocument,sendyourcommentto:editor@etsi.frCopyrightNotificationNopartmaybereproducedexceptasauthorizedbywrittenpermission.Thecopyrightandtheforegoingrestrictionextendtoreproductioninallmedia.©EuropeanTelecommunicationsStandardsInstitute2000.Allrightsreserved.SIST EN 300 920 V7.1.1:2003
ETSIETSIEN300920V7.1.1(2000-08)3(GSM02.09version7.1.1Release1998)ContentsIntellectualPropertyRights.4Foreword.41Scope.51.1References.51.2Abbreviations.52General.63SecurityfeaturesprovidedinaGSMPLMN.63.1Subscriberidentityconfidentiality.63.1.1Definition.63.1.2Purpose.63.1.3Functionalrequirements.73.2Subscriberidentityauthentication.73.2.1Definition.73.2.2Purpose.73.2.3Functionalrequirements.73.2.4Authenticationduringamalfunctionofthenetwork.73.3Userdataconfidentialityonphysicalconnections(VoiceandNon-voice).83.3.1Definition.83.3.2Purpose.83.3.3Functionalrequirements.83.4Connectionlessuserdataconfidentiality.83.4.1Definition.83.4.2Purpose.83.4.3Functionalrequirements.93.5Signallinginformationelementconfidentiality.93.5.1Definition.93.5.2Purpose.93.5.3Functionalrequirements.9AnnexA(informative):Changehistory.10History.11SIST EN 300 920 V7.1.1:2003
ETSIETSIEN300920V7.1.1(2000-08)4(GSM02.09version7.1.1Release1998)IntellectualPropertyRightsIPRsessentialorpotentiallyessentialtothepresentdocumentmayhavebeendeclaredtoETSI.TheinformationpertainingtotheseessentialIPRs,ifany,ispubliclyavailableforETSImembersandnon-members,andcanbefoundinETSISR000314:"IntellectualPropertyRights(IPRs);Essential,orpotentiallyEssential,IPRsnotifiedtoETSIinrespectofETSIstandards",whichisavailablefromtheETSISecretariat.LatestupdatesareavailableontheETSIWebserver(http://www.etsi.org/ipr).PursuanttotheETSIIPRPolicy,noinvestigation,includingIPRsearches,hasbeencarriedoutbyETSI.NoguaranteecanbegivenastotheexistenceofotherIPRsnotreferencedinETSISR000314(ortheupdatesontheETSIWebserver)whichare,ormaybe,ormaybecome,essentialtothepresentdocument.ForewordThisEuropeanStandard(Telecommunicationsseries)hasbeenproducedbyETSITechnicalCommitteeSpecialMobileGroup(SMG).Thepresentdocumentdefinessecurityfeatureswithinthedigitalcellulartelecommunicationssystem.ThecontentsofthepresentdocumentmaybesubjecttocontinuingworkwithinSMGandmaychangefollowingformalSMGapproval.ShouldSMGmodifythecontentsofthepresentdocumentitwillthenbere-submittedforformalapprovalproceduresbyETSIwithanidentifyingchangeofreleasedateandanincreaseinversionnumberasfollows:Version7.x.ywhere:7GSMPhase2+Release1998;xtheseconddigitisincrementedforchangesofsubstance,i.e.technicalenhancements,corrections,updates,etc.;ythethirddigitisincrementedwheneditorialonlychangeshavebeenincorporatedinthespecification.NationaltranspositiondatesDateofadoptionofthisEN:14July2000DateoflatestannouncementofthisEN(doa):31October2000DateoflatestpublicationofnewNationalStandardorendorsementofthisEN(dop/e):30April2001DateofwithdrawalofanyconflictingNationalStandard(dow):30April2001SIST EN 300 920 V7.1.1:2003
ETSIETSIEN300920V7.1.1(2000-08)5(GSM02.09version7.1.1Release1998)1ScopeBearerandTeleservices,asrespectivelydefinedinGSM02.02andGSM02.03,aretheobjectswhichtheGSMPLMNoperatorsoffertotheircustomers.Besidesthesebasictelecommunicationsservices,featureswhichaimatup-gradingthesebasicservicesneedalsotobeoffered.DuetotheuseofradiocommunicationsinaPLMN,whichareofaspecialnaturecomparedtoclassicaldistributiontransmissiontechniquesusedinthefixednetworks,suchacategoryoffeaturesisrelatedtosecurityaspects.InaGSMPLMN,boththeusersandthenetworkoperatorhavetobeprotectedagainstundesirableintrusionofthirdparties.However,measuresshouldbeprovidedforinordertoinsuremaximumprotectionoftherightsoftheindividualsconcerns.Asaconsequence,asecurityfeatureiseitherasupplementaryservicetoTeleorBearerservices,whichcanbeselectedbythesubscriber,oranetworkfunctioninvolvedintheprovisionofoneorseveraltelecommunicationservices.ThepurposeofthepresentdocumentistodefinethesecurityfeatureswhicharetobeavailableinaGSMPLMN,togetherwiththeassociatedlevelsofprotection.Thepresentdocumentisonlyconcernedwiththosesecurityfeatureswhichaimattheup-gradingofthesecurityinaGSMPLMN.Inparticular,end-to-endsecurityisoutsidethescopeofthepresentdocument.TheimplementationaspectsofsecurityfeaturesaredescribedinGSM03.20.1.1ReferencesThefollowingdocumentscontainprovisionswhich,throughreferenceinthistext,constituteprovisionsofthepresentdocument.• Referencesareeitherspecific(identifiedbydateofpublication,editionnumber,versionnumber,etc.)ornon-specific.• Foraspecificreference,subsequentrevisionsdonotapply.• Foranon-specificreference,thelatestversionapplies.• Anon-specificreferencetoanETSshallalsobetakentorefertolaterversionspublishedasanENwiththesamenumber.• ForthisRelease1998document,referencestoGSMdocumentsareforRelease1998versions(version7.x.y).[1]GSM01.04:"Digitalcellulartelecommunicationssystem(Phase2+);Abbreviationsandacronyms".[2]GSM02.02:"Digitalcellulartelecommunicationssystem(Phase2+);BearerServices(BS)supportedbyaGSMPublicLandMobileNetwork(PLMN)".[3]GSM02.03
...