SIST ETS 300 506 E2:2003
(Main)Digital cellular telecommunications system (Phase 2); Security aspects (GSM 02.09 version 4.4.1)
- Abstract
The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up-grading of the security in a GSM PLMN. In particular, end-to-end security is outside the scope of this ETS.
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST ETS 300 506 E2:2003 is the Slovenian adoption of ETS 300 506 Edition 2, Digital cellular telecommunications system (Phase 2); Security aspects (GSM 02.09 version 4.4.1). It defines the security features that are to be available in a GSM Public Land Mobile Network (PLMN) and the associated levels of protection. The document is written for GSM network operators, infrastructure and mobile station implementers, and anyone responsible for security support in Phase 2 systems.
What does SIST ETS 300 506 E2:2003 specify?
SIST ETS 300 506 E2:2003 specifies which security features a GSM PLMN should provide and how those features are meant to protect signalling and user information on the radio path. It focuses on security upgrades within the GSM PLMN, not on end-to-end security.
The document is organized into a foreword, clause 1 on scope, clause 2 on the general security model, and clause 3 on five security features. Clause 1 also points to normative references and abbreviations, while clause 3 splits each feature into definition, purpose, and functional requirements.
What are the key requirements of SIST ETS 300 506 E2:2003?
SIST ETS 300 506 E2:2003 requires the GSM PLMN and the MS side to support the full set of security features. In practice, this means the network and the terminal must be able to handle the same security functions, even if the operator does not always activate them.
Clause 2 sets two protection levels. Where a feature from clause 3 is provided, radio-path protection for that item is intended to be comparable to fixed-network protection; where no special provision is made, the radio-path protection is treated as null.
Identity protection and authentication
- Subscriber identity confidentiality uses a local identifier, the Temporary Mobile Subscriber Identity (TMSI), instead of exposing the IMSI on the radio path when the feature is used. This matters because it reduces the chance of tracking a subscriber by listening to signalling.
- The IMSI may be revealed in open identification only in specific failure cases, such as a location register failure or when the MS has no TMSI available.
- Subscriber identity authentication is triggered for changes in subscriber-related data, access to services, first access after MSC/VLR restart, or a cipher key sequence number mismatch. If authentication fails and the network is not malfunctioning, access is denied.
- During network malfunction, the standard distinguishes between already registered and not yet registered MSs. In practice, this keeps calls going for already authenticated users while still blocking new registration that cannot be authenticated.
Confidentiality of user data and signalling
- User data confidentiality on physical connections applies to voice and non-voice traffic channels. Encryption is normally used, the infrastructure selects the ciphering algorithm, and the MS and network negotiate from up to seven supported algorithms.
- The ME checks that ciphering is active and alerts the user if it stops, including during handover. The SIM may disable the ciphering indicator feature; otherwise it is enabled by default.
- Connectionless user data confidentiality protects packet-mode user information on signalling channels, such as short messages, but not SMS Cell Broadcast.
- Signalling information element confidentiality protects selected signalling fields after connection establishment. The document specifically treats IMEI, IMSI, and calling and called subscriber numbers as protected user-related signalling items.
What terms does SIST ETS 300 506 E2:2003 define?
- GSM PLMN - The GSM Public Land Mobile Network that offers bearer and teleservices and must support the security features in this ETS.
- IMSI - The subscriber identity that is protected, authenticated, and kept from unnecessary disclosure on the radio path.
- TMSI - A temporary local number used to identify the subscriber on the radio path instead of exposing the IMSI.
- MS - The mobile station, which must support the security features defined for Phase 2.
- ME - The mobile equipment, which checks ciphering status and presents the ciphering indicator to the user.
- SIM - The Subscriber Identity Module, which can disable the ciphering indicator feature and stores the IMSI securely.
- VLR - The visitor location register, named in the authentication triggers for subscriber-related changes.
- HLR - The home location register, also named in the authentication triggers for subscriber-related changes.
Who uses SIST ETS 300 506 E2:2003?
GSM network operators use this standard to decide which security features their PLMN must support and when they may be activated. That is especially relevant for roaming agreements, authentication behavior, and ciphering policy.
Mobile station and infrastructure manufacturers use it to design interoperable support for IMSI confidentiality, authentication, ciphering, and signalling protection. Quality and security teams use it to check that the terminal, SIM, and network handle handover, registration failures, and algorithm negotiation in the expected way.
What changed in SIST ETS 300 506 E2:2003 from the previous edition?
SIST ETS 300 506 E2:2003 corresponds to ETS 300 506 Edition 2. The document history in the standard records an original first edition, Amendment 1 to that first edition, and the later second edition published in January 1998.
Which standards are used with SIST ETS 300 506 E2:2003?
- GSM 01.04 - Provides the abbreviations and acronyms used in the standard.
- GSM 02.02 - Defines bearer services supported by the GSM PLMN.
- GSM 02.03 - Defines teleservices supported by the GSM PLMN.
- GSM 03.20 - Covers security-related network functions and the implementation aspects of security features.
- GSM 11.11 - Covers the SIM-ME interface, including SIM control of the ciphering indicator.
- GSM 02.07 - Defines the ciphering algorithms referred to in the user data confidentiality requirements.
What does the SIST ETS 300 506 E2:2003 document contain?
The document contains the foreword, transposition dates, scope, normative references, abbreviations, a general security model, and a clause-by-clause description of five GSM security features. Each feature is presented with a definition, its purpose, and functional requirements, and subscriber authentication also includes special handling for network malfunction.
It is a functional and architectural security specification rather than a test method document. For implementers, the most useful parts are the negotiated ciphering behavior, the authentication triggers, the treatment of TMSI and IMSI, and the rules for protecting signalling fields after connection establishment.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST ETS 300 506 E2:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Digital cellular telecommunications system (Phase 2); Security aspects (GSM 02.09 version 4.4.1)". This standard covers: The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up-grading of the security in a GSM PLMN. In particular, end-to-end security is outside the scope of this ETS.
The purpose of this European Telecommunication Standard (ETS) is to de fine the security features which are to be available in a GSM PLMN, to gether with the associated levels of protection. This ETS is only conc erned with those security features which aim at the up-grading of the security in a GSM PLMN. In particular, end-to-end security is outside the scope of this ETS.
SIST ETS 300 506 E2:2003 is classified under the following ICS (International Classification for Standards) categories: 33.070.50 - Global System for Mobile Communication (GSM). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST ETS 300 506 E2:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-december-2003
'LJLWDOQLFHOLþQLWHOHNRPXQLNDFLMVNLVLVWHP ID]D ±9DUQRVWQLYLGLNL *60
UD]OLþLFD
Digital cellular telecommunications system (Phase 2); Security aspects (GSM 02.09
version 4.4.1)
Ta slovenski standard je istoveten z: ETS 300 506 Edition 2
ICS:
33.070.50 Globalni sistem za mobilno Global System for Mobile
telekomunikacijo (GSM) Communication (GSM)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN ETS 300 506
TELECOMMUNICATION January 1998
STANDARD Second Edition
Source: SMG Reference: RE/SMG-010209PR1
ICS: 33.020
Key words: Digital cellular telecommunications system, Global System for Mobile communications (GSM)
R
GLOBAL SYSTEM FOR
MOBILE COMMUNICATIONS
Digital cellular telecommunications system (Phase 2);
Security aspects
(GSM 02.09 version 4.4.1)
ETSI
European Telecommunications Standards Institute
ETSI Secretariat
Postal address: F-06921 Sophia Antipolis CEDEX - FRANCE
Office address: 650 Route des Lucioles - Sophia Antipolis - Valbonne - FRANCE
X.400: c=fr, a=atlas, p=etsi, s=secretariat - Internet: secretariat@etsi.fr
Tel.: +33 4 92 94 42 00 - Fax: +33 4 93 65 47 16
Copyright Notification: No part may be reproduced except as authorized by written permission. The copyright and the
foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 1998. All rights reserved.
Page 2
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
Whilst every care has been taken in the preparation and publication of this document, errors in content,
typographical or otherwise, may occur. If you have comments concerning its accuracy, please write to
"ETSI Editing and Committee Support Dept." at the address shown on the title page.
Page 3
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
Contents
Foreword .5
1 Scope .7
1.1 Normative references .7
1.2 Abbreviations .7
2 General.8
3 Security features provided in a GSM PLMN.8
3.1 Subscriber identity confidentiality. 8
3.1.1 Definition .8
3.1.2 Purpose .8
3.1.3 Functional requirements.9
3.2 Subscriber identity authentication .9
3.2.1 Definition .9
3.2.2 Purpose .9
3.2.3 Functional requirements.9
3.2.4 Authentication during a malfunction of the network .10
3.3 User data confidentiality on physical connections (Voice and Non-voice).10
3.3.1 Definition .10
3.3.2 Purpose .10
3.3.3 Functional requirements.10
3.4 Connectionless user data confidentiality.11
3.4.1 Definition .11
3.4.2 Purpose .11
3.4.3 Functional requirements.11
3.5 Signalling information element confidentiality.11
3.5.1 Definition .11
3.5.2 Purpose .11
3.5.3 Functional requirements.11
History.12
Page 4
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
Blank page
Page 5
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
Foreword
This European Telecommunication Standard (ETS) has been produced by the Special Mobile Group
(SMG) of the European Telecommunications Standards Institute (ETSI).
This ETS defines security features within the digital cellular telecommunications system.
The specification from which this ETS has been derived was originally based on CEPT documentation,
hence the presentation of this ETS may not be entirely in accordance with the ETSI/PNE Rules.
Transposition dates
Date of adoption of this ETS: 5 December 1997
Date of latest announcement of this ETS (doa): 30 April 1998
Date of latest publication of new National Standard
or endorsement of this ETS (dop/e): 31 October 1998
Date of withdrawal of any conflicting National Standard (dow): 31 October 1998
Page 6
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
Blank page
Page 7
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
1 Scope
Bearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the
GSM PLMN operators offer to their customers. Besides these basic telecommunications services,
features which aim at up-grading these basic services need also to be offered. Due to the use of
radiocommunications in a PLMN, which are of a special nature compared to classical distribution
transmission techniques used in the fixed networks, such a category of features is related to security
aspects.
In a GSM PLMN, both the users and the network operator have to be protected against undesirable
intrusion of third parties. However, measures should be provided for in order to insure maximum
protection of the rights of the individuals concerns. As a consequence, a security feature is either a
supplementary service to Tele or Bearer services, which can be selected by the subscriber, or a network
function involved in the provision of one or several telecommunication services.
The purpose of this European Telecommunication Standard (ETS) is to define the security features which
are to be available in a GSM PLMN, together with the associated levels of protection. This ETS is only
concerned with those security features which aim at the up-grading of the security in a GSM PLMN. In
particular, end-to-end security is outside the scope of this ETS.
The implementation aspects of security features are described in GSM 03.20.
1.1 Normative references
This ETS incorporates by dated and undated reference, provisions from other publications. These
normative references are cited at the appropriate places in the text and the publications are listed
hereafter. For dated references, subsequent amendments to or revisions of any of these publications
apply to this ETS only when incorporated in it by amendment or revision. For undated references, the
latest edition of the publication referred to applies.
[1] GSM 01.04 (ETR 100): "Digital cellular telecommunications system (Phase 2);
Abbreviations and acronyms".
[2] GSM 02.02 (ETS 300 501): "Digital cellular telecommunications system
(Phase 2); Bearer Services (BS) supported by a GSM Public Land Mobile
Network (PLMN)".
[3] GSM 02.03 (ETS 300 502): "Digital cellular telecommunications system
(Phase 2); Teleservices supported by a GSM Public Land Mobile Network
(PLMN)".
[4] GSM 03.20 (ETS 300 534): "Digital cellular telecommunications system
(Phase 2); Security related network functions".
[5] GSM 11.11 (ETS 300 608): "Digital cellular telecommunications system
(Phase 2); Specification of the Subscriber Identity Module - Mobile Equipment
(SIM - ME) interface".
1.2 Abbreviations
Abbreviations used in this ETS are listed in GSM 01.04.
Page 8
ETS 300 506 (GSM 02.09 version 4.4.1): January 1998
2 General
The use of radiocommunications for transmission to the mobile subscribers makes PLMNs particularly
sensitive to:
- misuse of their resources by unauthorised persons using manipulated Mobile Stations, who try to
impersonate authorized subscribers; and
- eavesdropping of the various information which are exchanged on the radio path.
It can be seen that PLMNs intrinsically do not provide the same level of protection to their operators and
subscribers as the traditional telecommunication networks provide. This fact leads to the need to
implement security features in a GSM PLMN in order to pro
...