SIST EN 300 920 V7.0.1:2003
(Main)Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 7.0.1 Release 1998)
- Abstract
Upgrade to Release 1998
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST EN 300 920 V7.0.1:2003 is the Slovenian adoption of ETSI EN 300 920 Version 7.0.1. It covers security aspects for the Digital cellular telecommunications system (Phase 2+) (GSM), Release 1998. The document defines the security features available in a GSM PLMN and the protection they provide for subscribers, mobile stations, and network operators.
What does SIST EN 300 920 V7.0.1:2003 specify?
SIST EN 300 920 V7.0.1:2003 specifies the GSM security features that should be available in a GSM PLMN and the associated levels of protection. It is focused on radio-path security and on features that upgrade basic telephony and bearer services.
The document is organized into:
- Clause 1 - Scope, references, and abbreviations
- Clause 2 - General security background and protection levels
- Clause 3 - The security features provided in a GSM PLMN
- Annex A - Change history
| Annex | What it covers |
|---|---|
| A | Informative change history |
What are the key requirements of SIST EN 300 920 V7.0.1:2003?
SIST EN 300 920 V7.0.1:2003 makes five security features mandatory to support on both the fixed infrastructure side and the MS side. In practice, every GSM PLMN and every MS shall be able to support them, even though an operator may decide when to use them for its own subscribers on the HPLMN.
IMSI confidentiality and TMSI use
Clause 3.1 requires subscriber identity confidentiality for the IMSI. The practical mechanism is the use of the Temporary Mobile Subscriber Identity (TMSI) on the radio path, with extra measures to prevent indirect disclosure from signalling addresses. If the location register fails or the MS has no TMSI, open identification is allowed.
Subscriber identity authentication
Clause 3.2 requires authentication when the network changes subscriber data, grants service access, or after first access following MSC/VLR restart, and also when the cipher key sequence number does not match. If authentication fails and the failure is not due to network malfunction, access to the GSM PLMN is denied. Clause 3.2.4 also sets the rule for network malfunction: an already registered and authenticated MS may continue service, but a new registration that cannot be authenticated is not permitted.
User data confidentiality on physical connections
Clause 3.3 covers voice and non-voice traffic channels. Encryption is normally applied, and the MS signals which of up to seven ciphering algorithms it supports. The serving network selects one from the supported set and may refuse service if the MS does not support the ciphering algorithms required by GSM 02.07. The Mobile Equipment (ME) must indicate when confidentiality is off or has stopped, including during handover, and the SIM may disable that indicator.
Connectionless user data confidentiality
Clause 3.4 protects connectionless packet-mode user data on signalling channels, such as short messages. The note in the clause says this protection is not applicable to SMS Cell Broadcast. For users and implementers, that means connectionless signalling carrying private user data needs separate confidentiality handling.
Signalling information element confidentiality
Clause 3.5 protects selected signalling information elements exchanged between MSs and base stations after connection establishment. The connection setup fields themselves are not protected, but later user-related elements such as IMEI, IMSI, and calling or called subscriber directory numbers are protected when used. The clause also states that the IMEI needs physical protection, the IMSI is stored securely in the SIM, and the security policy for the Software Version Number (SVN) is separate from that of the IMEI.
What terms does SIST EN 300 920 V7.0.1:2003 define?
- IMSI (International Mobile Subscriber Identity) - the subscriber identity whose confidentiality and authentication are central to the document.
- TMSI (Temporary Mobile Subscriber Identity) - the local identity used on the radio path instead of exposing the IMSI.
- MS (Mobile Station) - the subscriber-side equipment that must support the security features.
- PLMN (Public Land Mobile Network) - the GSM mobile network in which these security features are applied.
- HPLMN (Home Public Land Mobile Network) - the home network where operator discretion applies for its own subscribers.
- ME (Mobile Equipment) - the equipment side that checks ciphering status and presents the ciphering indicator.
- SVN (Software Version Number) - a version identifier whose security policy is treated separately from the IMEI.
Who uses SIST EN 300 920 V7.0.1:2003?
SIST EN 300 920 V7.0.1:2003 is used by GSM network operators, infrastructure vendors, and mobile station manufacturers. It is also relevant to SIM and ME designers because it sets behavior for identity handling, ciphering support, and user indicators.
Quality and compliance teams use it to check that GSM products and networks support the required security functions across normal operation, roaming, and malfunction cases. It is also useful for procurement teams that need to confirm that equipment can participate in GSM security at the required level.
What changed in SIST EN 300 920 V7.0.1:2003 from the previous edition?
Annex A records the change history for the document family. It shows earlier updates for clarifications, control of encryption, the security policy for SVN, and corrections to the user data confidentiality feature. It also records the upgrade to Release 1998 and the final version update to 7.0.1 for publication.
Which standards are used with SIST EN 300 920 V7.0.1:2003?
- GSM 01.04 - provides the abbreviations and acronyms used in the document.
- GSM 02.02 - defines the bearer services that the security features protect.
- GSM 02.03 - defines the teleservices that the security features protect.
- GSM 03.20 - gives the security-related network functions and the implementation aspects referenced in the text.
- GSM 11.11 - defines the SIM - ME interface, including the SIM control of the ciphering indicator.
- GSM 02.07 - is cited for the ciphering algorithms used when selecting user data confidentiality.
What does the SIST EN 300 920 V7.0.1:2003 document contain?
The document contains requirement text rather than worked examples or calculations. Clause 3 provides the core technical content: definitions, purposes, and functional requirements for IMSI confidentiality, authentication, user data confidentiality, connectionless confidentiality, and signalling information element confidentiality.
It also includes the operational conditions that matter in practice, such as authentication triggers, handover behavior, ciphering algorithm selection, and what happens when the network malfunctions. Annex A gives a short version history that helps readers trace the development of the specification.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST EN 300 920 V7.0.1:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 7.0.1 Release 1998)". This standard covers: Upgrade to Release 1998
Upgrade to Release 1998
SIST EN 300 920 V7.0.1:2003 is classified under the following ICS (International Classification for Standards) categories: 33.070.50 - Global System for Mobile Communication (GSM). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST EN 300 920 V7.0.1:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-december-2003
'LJLWDOQLFHOLþQLWHOHNRPXQLNDFLMVNLVLVWHP ID]D ±9DUQRVWQLYLGLNL *60
UD]OLþLFDL]GDMD
Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM
02.09 version 7.0.1 Release 1998)
Ta slovenski standard je istoveten z: EN 300 920 Version 7.0.1
ICS:
33.070.50 Globalni sistem za mobilno Global System for Mobile
telekomunikacijo (GSM) Communication (GSM)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
European Standard (Telecommunications series)
Digital cellular telecommunications system (Phase 2+);
Security aspects
(GSM 02.09 version 7.0.1 Release 1998)
R
GLOBAL SYSTEM FOR
MOBILE COMMUNICATIONS
(GSM 02.09 version 7.0.1 Release 1998) 2 ETSI EN 300 920 V7.0.1 (2000-01)
Reference
REN/SMG-010209Q7
Keywords
Digital cellular telecommunications system,
Global System for Mobile communications (GSM)
ETSI
Postal address
F-06921 Sophia Antipolis Cedex - FRANCE
Office address
650 Route des Lucioles - Sophia Antipolis
Valbonne - FRANCE
Tel.:+33492944200 Fax:+33493654716
Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88
Internet
secretariat@etsi.fr
Individual copies of this ETSI deliverable
can be downloaded from
http://www.etsi.org
If you find errors in the present document, send your
comment to: editor@etsi.fr
Important notice
This ETSI deliverable may be made available in more than one electronic version or in print. In any case of existing or
perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF).
In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network
drive within ETSI Secretariat.
Copyright Notification
No part may be reproduced except as authorized by written permission.
The copyright and the foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 2000.
All rights reserved.
ETSI
(GSM 02.09 version 7.0.1 Release 1998) 3 ETSI EN 300 920 V7.0.1 (2000-01)
Contents
Intellectual Property Rights.4
Foreword.4
1 Scope .5
1.1 References .5
1.2 Abbreviations .5
2 General .6
3 Security features provided in a GSM PLMN.6
3.1 Subscriber identity confidentiality.6
3.1.1 Definition.6
3.1.2 Purpose .6
3.1.3 Functional requirements.7
3.2 Subscriber identity authentication .7
3.2.1 Definition.7
3.2.2 Purpose .7
3.2.3 Functional requirements.7
3.2.4 Authentication during a malfunction of the network.7
3.3 User data confidentiality on physical connections (Voice and Non-voice) .8
3.3.1 Definition.8
3.3.2 Purpose .8
3.3.3 Functional requirements.8
3.4 Connectionless user data confidentiality .8
3.4.1 Definition.8
3.4.2 Purpose .8
3.4.3 Functional requirements.9
3.5 Signalling information element confidentiality.9
3.5.1 Definition.9
3.5.2 Purpose .9
3.5.3 Functional requirements.9
Annex A (informative): Change history .10
History .11
ETSI
(GSM 02.09 version 7.0.1 Release 1998) 4 ETSI EN 300 920 V7.0.1 (2000-01)
Intellectual Property Rights
IPRs essential or potentially essential to the present document may have been declared to ETSI. The information
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found
in SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect
of ETSI standards", which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server
(http://www.etsi.org/ipr).
Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee
can be given as to the existence of other IPRs not referenced in SR 000 314 (or the updates on the ETSI Web server)
which are, or may be, or may become, essential to the present document.
Foreword
This European Standard (Telecommunications series) has been produced by the Special Mobile Group (SMG).
The present document defines security features within the digital cellular telecommunications system.
The contents of the present document may be subject to continuing work within SMG and may change following formal
SMG approval. Should SMG modify the contents of the present document it will then be re-submitted for formal
approval procedures by ETSI with an identifying change of release date and an increase in version number as follows:
Version 7.x.y
where:
7 GSM Phase 2+ Release 1998;
x the second digit is incremented for changes of substance, i.e. technical enhancements, corrections, updates,
etc.;
y the third digit is incremented when editorial only changes have been incorporated in the specification.
National transposition dates
Date of adoption of this EN: 31 December 1999
Date of latest announcement of this EN (doa): 31 March 2000
Date of latest publication of new National Standard
or endorsement of this EN (dop/e): 30 September 2000
Date of withdrawal of any conflicting National Standard (dow): 30 September 2000
ETSI
(GSM 02.09 version 7.0.1 Release 1998) 5 ETSI EN 300 920 V7.0.1 (2000-01)
1 Scope
Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the GSM PLMN
operators offer to their customers. Besides these basic telecommunications services, features which aim at up-grading
these basic services need also to be offered. Due to the use of radiocommunications in a PLMN, which are of a special
nature compared to classical distribution transmission techniques used in the fixed networks, such a category of features
is related to security aspects.
In a GSM PLMN, both the users and the network operator have to be protected against undesirable intrusion of third
parties. However, measures should be provided for in order to insure maximum protection of the rights of the
individuals concerns. As a consequence, a security feature is either a supplementary service to Tele or Bearer services,
which can be selected by the subscriber, or a network function involved in the provision of one or several
telecommunication services.
The purpose of the present document is to define the security features which are to be available in a GSM PLMN,
together with the associated levels of protection. The present document is only concerned with those security features
which aim at the up-grading of the security in a GSM PLMN. In particular, end-to-end security is outside the scope of
the present document.
The implementation aspects of security features are described in GSM 03.20.
1.1 References
The following documents contain provisions which, through reference in this text, constitute provisions of the present
document.
• References are either specific (identified by date of publication, edition number, version number, etc.) or
non-specific.
• For a specific reference, subsequent revisions do not apply.
• For a non-specific reference, the latest version applies.
• A non-specific reference to an ETS shall also be taken to refer to later versions published as an EN with the same
number.
• For this Release 1998 document, references to GSM documents are for Release 1998 versions (version 7.x.y).
[1] GSM 01.04: "Digital cellular telecommunications system (Phase 2+); Abbreviations and
acronyms".
[2] GSM 02.02: "Digital cellular telecommunications system (Phase 2+); Bearer Services (BS)
supported by a GSM Public Land Mobile Network (PLMN)".
[3] GSM 02.03: "Digital cellular telecommunications system (Phase 2+); Teleservices supported by a
GSM Public Land Mobile Network (PLMN)".
[4] GSM 03.20: "Digital cellular telecommunications system (Phase 2+); Security related network
fun
...