SIST EN 300 920 V6.0.1:2003
(Main)Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 6.0.1 Release 1997)
- Abstract
Upgrade from Phase 2+ to Release 1997
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST EN 300 920 V6.0.1:2003 is the Slovenian adoption of ETSI EN 300 920 V6.0.1 for digital cellular telecommunications system (Phase 2+) security aspects. It specifies the security features available in a GSM PLMN and the levels of protection associated with them. The document is aimed at GSM PLMN operators and at the network and mobile station sides that must support these features.
What does SIST EN 300 920 V6.0.1:2003 specify?
SIST EN 300 920 V6.0.1:2003 defines security features that upgrade security in a GSM PLMN. It focuses on protection over the radio path and leaves end-to-end security outside its scope.
The standard is organized into a short front section and a requirements section. It contains:
- Clause 1 - scope, normative references, and abbreviations
- Clause 2 - general security principles for a GSM PLMN
- Clause 3 - security features and their functional requirements
- Annex A - informative change history
| Annex | What it covers |
|---|---|
| Annex A | Change history |
The scope ties the document to security features that support bearer and teleservices in GSM PLMNs. It also points to GSM 03.20 for implementation aspects.
What are the key requirements of SIST EN 300 920 V6.0.1:2003?
SIST EN 300 920 V6.0.1:2003 requires five security features to be supported on both the fixed infrastructure side and the MS side. In practice, this means all GSM PLMNs and all MSs are expected to be able to support every feature, even though the operator decides when to use them for its own subscribers on the HPLMN.
Subscriber identity confidentiality
Clause 3.1 requires the International Mobile Subscriber Identity (IMSI) to be kept confidential on the radio path. The standard uses the Temporary Mobile Subscriber Identity (TMSI) for local identification, which reduces the chance of tracing a subscriber from signaling exchanges. Open identification is allowed only in cases such as location register failure or when no TMSI is available.
Subscriber identity authentication
Clause 3.2 requires the network to verify that the claimed subscriber identity is genuine. Authentication may be triggered by changes to subscriber-related information, service access, first network access after restart of MSC/VLR, or a cipher key sequence number mismatch. If authentication fails for reasons other than network malfunction, access shall be denied.
Clause 3.2.4 also defines what happens during a network malfunction. Existing registered and already authenticated mobile stations may continue calls, but a new registration attempt that cannot be authenticated because of the malfunction shall not be permitted. This matters for service continuity while still blocking unauthenticated entry.
User data confidentiality on physical connections
Clause 3.3 requires encryption for voice and non-voice communications on traffic channels. The mobile station signals which ciphering algorithms it supports, up to seven, and the serving network selects one according to its priority order. The network shall not serve an MS that lacks the required ciphering support referenced by GSM 02.07.
The ME also checks that ciphering is active and warns the user if it is not, including during handover. The ciphering indicator may be disabled by the SIM, and the trigger point for warning must be at call initiation or handover completion at the latest. In practice, this is the document section that governs whether users can see that traffic is protected.
Connectionless user data confidentiality
Clause 3.4 covers packet-mode user information sent over signaling channels, such as short messages. A note states that this protection is not applicable to SMS Cell Broadcast. That distinction matters because not every short-message service is treated the same way.
Signalling information element confidentiality
Clause 3.5 protects selected signaling fields after connection establishment. The connection setup fields themselves are not protected, but later user-related signaling elements such as IMEI, IMSI, and called or calling directory numbers are protected when used. The clause also requires physical protection of the IMEI and separate security policy treatment for the SVN.
What terms does SIST EN 300 920 V6.0.1:2003 define?
- Public Land Mobile Network (PLMN) - the mobile network environment whose users and operator are protected by the security features in this standard.
- Mobile Station (MS) - the subscriber's mobile equipment that must support the security features defined here.
- International Mobile Subscriber Identity (IMSI) - the subscriber identity that the standard protects from disclosure on the radio path.
- Temporary Mobile Subscriber Identity (TMSI) - the local identity used instead of IMSI to reduce exposure of the subscriber identity.
- International Mobile Equipment Identity (IMEI) - the equipment identity that is protected in signaling after connection establishment.
- Software Version Number (SVN) - the software-related identifier whose security is treated separately from the IMEI.
- Subscriber Identity Module (SIM) - the module that can disable the ciphering indicator feature and stores the IMSI securely.
Who uses SIST EN 300 920 V6.0.1:2003?
SIST EN 300 920 V6.0.1:2003 is used by GSM PLMN operators, network equipment designers, and mobile station manufacturers. It is also relevant to SIM and ME implementers because the standard defines how authentication, ciphering support, and the ciphering indicator behave.
In practice, the document helps teams decide:
- which security features must be supported
- when authentication is triggered
- how ciphering algorithms are selected
- how IMSI, IMEI, and signaling data are handled
- what the user should be told if protection is unavailable
What changed in SIST EN 300 920 V6.0.1:2003 from the previous edition?
Annex A records the earlier evolution of the document, including clarifications, control of encryption, a security policy for SVNs, corrections to user data confidentiality features, an upgrade to Phase 2+ version 5.0.0, and an upgrade to Release 1997 version 6.0.0. The document history then shows version 6.0.0 in January 1999 and publication of version 6.0.1 in May 1999.
Which standards are used with SIST EN 300 920 V6.0.1:2003?
- GSM 01.04 - provides the abbreviations and acronyms used in the document.
- GSM 02.02 - defines the bearer services that the security features apply to.
- GSM 02.03 - defines the teleservices covered by the GSM PLMN context.
- GSM 03.20 - covers security related network functions and the implementation aspects of the security features.
- GSM 11.11 - specifies the SIM-ME interface, which is relevant to the ciphering indicator and SIM behavior.
- GSM 02.07 - is referenced for the ciphering algorithms that the MS must support.
What does the SIST EN 300 920 V6.0.1:2003 document contain?
The document contains the scope, references, abbreviations, a general security model, and five security feature clauses with definitions, purposes, and functional requirements. It also includes detailed behavior for authentication, ciphering, and signaling protection, including special cases such as network malfunction and handover.
Annex A provides the change history. The overall content is requirement-focused and intended to guide implementation and verification of GSM security behavior on the network and mobile station sides.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST EN 300 920 V6.0.1:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 6.0.1 Release 1997)". This standard covers: Upgrade from Phase 2+ to Release 1997
Upgrade from Phase 2+ to Release 1997
SIST EN 300 920 V6.0.1:2003 is classified under the following ICS (International Classification for Standards) categories: 33.070.50 - Global System for Mobile Communication (GSM). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST EN 300 920 V6.0.1:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.Digital cellular telecommunications system (Phase 2+) (GSM); Security aspects (GSM 02.09 version 6.0.1 Release 1997)33.070.50Globalni sistem za mobilno telekomunikacijo (GSM)Global System for Mobile Communication (GSM)ICS:Ta slovenski standard je istoveten z:EN 300 920 Version 6.0.1SIST EN 300 920 V6.0.1:2003en01-december-2003SIST EN 300 920 V6.0.1:2003SLOVENSKI
STANDARD
EN 300 920 V6.0.1 (1999-05)European Standard (Telecommunications series)Digital cellular telecommunications system (Phase 2+);Security aspects(GSM 02.09 version 6.0.1 Release 1997)GLOBAL SYSTEM
FOR MOBILE COMMUNICATIONSRSIST EN 300 920 V6.0.1:2003
ETSIEN 300 920 V6.0.1 (1999-05)2GSM 02.09 version 6.0.1 Release 1997ReferenceDEN/SMG-010209Q6 (8io0300o.PDF)KeywordsDigital cellular telecommunications system,Global System for Mobile communications (GSM)ETSIPostal addressF-06921 Sophia Antipolis Cedex - FRANCEOffice address650 Route des Lucioles - Sophia AntipolisValbonne - FRANCETel.: +33 4 92 94 42 00
Fax: +33 4 93 65 47 16Siret N° 348 623 562 00017 - NAF 742 CAssociation à but non lucratif enregistrée à laSous-Préfecture de Grasse (06) N° 7803/88Internetsecretariat@etsi.frIndividual copies of this ETSI deliverablecan be downloaded fromhttp://www.etsi.orgCopyright NotificationNo part may be reproduced except as authorized by written permission.The copyright and the foregoing restriction extend to reproduction in all media.© European Telecommunications Standards Institute 1999.All rights reserved.SIST EN 300 920 V6.0.1:2003
ETSIEN 300 920 V6.0.1 (1999-05)3GSM 02.09 version 6.0.1 Release 1997ContentsIntellectual Property Rights.4Foreword.41Scope.51.1Normative references.51.2Abbreviations.52General.53Security features provided in a GSM PLMN.63.1Subscriber identity confidentiality.63.1.1Definition.63.1.2Purpose.63.1.3Functional requirements.73.2Subscriber identity authentication.73.2.1Definition.73.2.2Purpose.73.2.3Functional requirements.73.2.4Authentication during a malfunction of the network.73.3User data confidentiality on physical connections (Voice and Non-voice).83.3.1Definition.83.3.2Purpose.83.3.3Functional requirements.83.4Connectionless user data confidentiality.83.4.1Definition.83.4.2Purpose.83.4.3Functional requirements.93.5Signalling information element confidentiality.93.5.1Definition.93.5.2Purpose.93.5.3Functional requirements.9Annex A (informative):Change history.10History.11SIST EN 300 920 V6.0.1:2003
ETSIEN 300 920 V6.0.1 (1999-05)4GSM 02.09 version 6.0.1 Release 1997Intellectual Property RightsIPRs essential or potentially essential to the present document may have been declared to ETSI. The informationpertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be foundin SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respectof ETSI standards", which is available free of charge from the ETSI Secretariat. Latest updates are available on theETSI Web server (http://www.etsi.org/ipr).Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guaranteecan be given as to the existence of other IPRs not referenced in SR 000 314 (or the updates on the ETSI Web server)which are, or may be, or may become, essential to the present document.ForewordThis European Standard (Telecommunications series) has been produced by the Special Mobile Group (SMG) of theEuropean Telecommunications Standards Institute (ETSI).This EN defines security features within the digital cellular telecommunications system.The contents of this standard may be subject to continuing work within SMG and may change following formal SMGapproval. Should SMG modify the contents of this standard it will then be re-submitted for formal approval proceduresby ETSI with an identifying change of release date and an increase in version number as follows:Version 6.x.ywhere:6GSM Phase 2+ Release 1997xthe second digit is incremented for changes of substance, i.e. technical enhancements, corrections, updates,etc.;ythe third digit is incremented when editorial only changes have been incorporated in the specification.Proposed national transposition datesDate of adoption of this EN:28 May 1999Date of latest announcement of this EN (doa):31 August 1999Date of latest publication of new National Standardor endorsement of this EN (dop/e):29 February 2000Date of withdrawal of any conflicting National Standard (dow):29 February 2000SIST EN 300 920 V6.0.1:2003
ETSIEN 300 920 V6.0.1 (1999-05)5GSM 02.09 version 6.0.1 Release 19971ScopeBearer and Teleservices, as respectively defined in GSM 02.02 and GSM 02.03, are the objects which the GSM PLMNoperators offer to their customers. Besides these basic telecommunications services, features which aim at up-gradingthese basic services need also to be offered. Due to the use of radiocommunications in a PLMN, which are of a specialnature compared to classical distribution transmission techniques used in the fixed networks, such a category of featuresis related to security aspects.In a GSM PLMN, both the users and the network operator have to be protected against undesirable intrusion of thirdparties. However, measures should be provided for in order to insure maximum protection of the rights of theindividuals concerns. As a consequence, a security feature is either a supplementary service to Tele or Bearer services,which can be selected by the subscriber, or a network function involved in the provision of one or severaltelecommunication services.The purpose of this EN is to define the security features which are to be available in a GSM PLMN, together with theassociated levels of protection. This EN is only concerned with those security features which aim at the up-grading ofthe security in a GSM PLMN. In particular, end-to-end security is outside the scope of this EN.The implementation aspects of security features are described in GSM 03.20.1.1Normative referencesThe following documents contain provisions which, through reference in this text, constitute provisions of the presentdocument.-References are either specific (identified by date of publication, edition number, version number, etc.) ornon-specific.-For a specific reference, subsequent revisions do not apply.-For a non-specific reference, the latest version applies.-A non-specific reference to an ETS shall also be taken to refer to later versions published as an EN with the samenumber.[1]GSM 01.04: "Digital cellular telecommunications system (Phase 2+); Abbreviations andacronyms".[2]GSM 02.02: "Digital cellular telecommunications system (Phase 2+); Bearer Services (BS)supported by a GSM Public Land Mobile Network (PLMN)".[3]GSM 02.03: "Digital cellular telecommunications system (Phase 2+); Teleservices supported by aGSM Public Land Mobile Network (PLMN)".[4]GSM 03.20: "Digital cellular telecommunications system (Phase 2+); Security related networkfunctions".[5]GSM 11.11: "Digital cellular telecommunications system (Phase 2+); Specification of theSubscriber Identity Module - Mobile Equipment (SIM - ME) interface".1.2AbbreviationsAbbreviations used in this EN are listed in GSM 01.04.2GeneralThe use of radiocom
...