SIST ETS 300 823 E1:2003
(Main)Universal Personal Telecommunication (UPT); UPT phase 2; Functional specification of the interface of a UPT Integrated Circuit Card (ICC) and Public Switched Telephone Network (PSTN), Integrated Services Digital Network (ISDN) and Global System for Mobile communications (GSM) terminals (one pass and multiple pass authentication)
- Abstract
This ETS describes the mechanical, electrical and logical interface between card and the mentioned terminals. This includes the specification of card data and operations as well as of the necessary terminal functions for the communication between card and terminals.
- Status
- Published
- Publication Date
- 30-Nov-2003
- Current Stage
- 6060 - National Implementation/Publication (Adopted Project)
- Start Date
- 01-Dec-2003
- Due Date
- 01-Dec-2003
- Completion Date
- 01-Dec-2003
SIST ETS 300 823 E1:2003 is the Slovenian adoption of ETS 300 823 Edition 1 from ETSI. It specifies the functional interface between a Universal Personal Telecommunication (UPT) Integrated Circuit Card (ICC) and Public Switched Telephone Network (PSTN), Integrated Services Digital Network (ISDN) and Global System for Mobile communications (GSM) terminals. The document is for terminal manufacturers, card suppliers, network implementers and test laboratories that need to design, check or declare conformance for UPT phase 2 card interfaces and security procedures.
What does SIST ETS 300 823 E1:2003 specify?
SIST ETS 300 823 E1:2003 specifies the interface for the operational phase of UPT, using ETS 300 477 as the base and adding the changes needed for the PIM2 application. It covers the card-to-terminal interface, the data stored on the card, the commands used to operate it, and the application protocol for authentication and service access.
The standard is organized as a delta document. It keeps the clause numbering of ETS 300 477 so the two documents can be compared directly, and it adds three normative annexes for card and terminal conformance checking.
| Annex | What it covers |
|---|---|
| Annex A | Plug-in UPT card |
| Annex B | Implementation Conformance Statement (ICS) for the PIM2 |
| Annex C | Implementation Conformance Statement (ICS) for the CAD |
The scope also limits itself to the card and the accepting terminal. It does not cover administrative management phase topics, the internal technical realization of the card or CAD beyond what is visible at the interface, or the information flow between the CAD and the network.
What are the key requirements of SIST ETS 300 823 E1:2003?
SIST ETS 300 823 E1:2003 keeps the physical and electrical framework of ETS 300 477, but changes the logical model, security behavior, command use and file contents for PIM2. In practice, that means implementers must check both the inherited requirements and the new PIM2-specific ones.
Logical structure and application separation
Clause 6 changes the logical model so that the UPT2 dedicated file is used, and it notes that both PIM1 and PIM2 can be implemented on the same card as separate applications. For a reader, this means one physical card may have to support more than one UPT-related application without mixing their data or identifiers.
Security and authentication
Clause 7 makes the security model specific to PIM2. If PIM1 and PIM2 are on the same card, they use different authentication keys, and the card holder verification for the relevant CHV1 must succeed before internal authentication can run.
Clause 7.2.2 defines the two-pass strong authentication flow: the terminal performs card holder verification, starts a timer, obtains PUI and CT from the card, receives RAND from the authenticating entity, sends RAND to the card for calculation of an Authentication Code (AC), and then forwards PUI, CT and AC to the authenticating entity. In practice, implementers must support a timed authentication sequence, not just a single exchange.
Clause 7.5 identifies the data stored for identification and secret use: PUI, LPIN, SLPIN and K. This matters because these elements support subscriber identification, card holder verification, unblocking and authentication processing.
Commands and command flow
Clauses 8 and 9 define the command set and command coding used by the card interface. The required command set includes SELECT, READ BINARY, UPDATE BINARY, VERIFY CHV, CHANGE CHV, UNBLOCK CHV, INTERNAL AUTHENTICATION and GET RESPONSE, with SW1 and SW2 returned after each command. In practice, a terminal or card firmware must handle these commands consistently to read files, manage CHV and complete authentication.
File contents and directory structure
Clause 10 defines the elementary files used by the application, including CHV1, ID, DIR, LANG, NAME, CT, PUI, PST, TV, MTV, ADN, LND and EXT1. It also changes the PIM2 application identifier and removes EF SEQ. For buyers and integrators, this tells them which data objects a compliant card is expected to expose for selection, identity, dialing and telecom use.
Clause 10 also says the CAD should interpret TON and NPI information when handling dialling data. That is important when a card is used in a multi-application environment, because the same number formatting may need to work with other applications that ignore those fields.
Application protocol
Clause 11 defines the application protocol around reading, updating and selecting files, PIM2 initialization, PIM2 session handling, timer use, CHV verification, two-pass strong authentication, and application selection. It also notes that the service provider’s telephone number can be read before authentication to allow automatic dialing through telecommunication features in the PIM. For implementers, this is the part that ties file access and security together in a working terminal flow.
Conformance checking
Annex B and Annex C provide ICS proformas for the PIM2 and the CAD. These are the checklists used to declare which requirements are supported and whether the implementation is conformant. In practice, they are the basis for supplier declarations, test planning and purchase specifications.
What terms does SIST ETS 300 823 E1:2003 define?
- PIM1 - Personal Identification Module according to ETS 300 477; it is the earlier UPT application referenced when a card supports both applications.
- PIM2 - Personal Identification Module according to this ETS; it is the UPT phase 2 application defined by this document.
- Card Accepting Device (CAD) - The terminal or device that accepts the UPT card and runs the interface procedures.
- Card Holder Verification (CHV) - The verification step used to confirm the card holder before protected functions are allowed.
- Authenticating Entity (AE) - The network-side entity that issues the random challenge and receives authentication data.
- Random challenge (RAND) - The random number sent from the network to the card system for authentication.
- Universal Personal Telecommunication (UPT) - The telecommunication service context for which the card and terminal interface is specified.
Who uses SIST ETS 300 823 E1:2003?
SIST ETS 300 823 E1:2003 is used by UPT card suppliers, terminal manufacturers, telecom equipment developers and test laboratories that need to build or assess compatible cards and accepting devices. It is also relevant to quality managers and buyers who need a conformance basis for procurement or acceptance testing.
The document is particularly relevant to teams working on PSTN, ISDN and GSM terminals that interact with UPT cards, because it defines the command set, file structure, authentication flow and ICS declarations they must support.
What changed in SIST ETS 300 823 E1:2003 from the previous edition?
This edition is a delta document built on ETS 300 477. The changes stated in the document include:
- the logical model is adapted for PIM2 and can coexist with PIM1 on one card
- security is updated for two-pass strong authentication
- PIM2 uses its own authentication key if PIM1 and PIM2 share a card
- function and command texts are updated for internal authentication and RAND-based challenge handling
- the EF structure is changed, including the PIM2 application identifier and removal of EF SEQ
- the application protocol is updated from one-pass to two-pass strong authentication
- new ICS proformas are provided for the PIM2 and the CAD
Which standards are used with SIST ETS 300 823 E1:2003?
- ETS 300 477 - the base UPT phase 2 interface specification that this ETS amends and extends.
- ETS 300 790 - the UPT phase 2 security architecture, used for the authentication data elements and secure-answer procedure.
- CCITT Recommendation E.164 - the numbering plan reference used for telephone number handling examples and formats.
What does the SIST ETS 300 823 E1:2003 document contain?
The document contains the scope, normative references, definitions, the logical model, security services, function descriptions, command descriptions, EF contents and the application protocol. It also includes annexes with conformance proformas for PIM2 and CAD implementations.
A large part of the document is expressed through tables and checklists in the ICS annexes. These tables identify mandatory, optional and conditional capabilities for physical characteristics, electronic signals, ATR structure, command support, security features and application protocol behavior.
It also includes a procedure figure for two-pass strong authentication, showing the sequence between card selection, reading PUI and CT, running INTERNAL AUTHENTICATION and forwarding the authentication result to the network. That makes the document useful not only for design, but also for implementation testing and compliance review.
Get Certified
Connect with accredited certification bodies for this standard
ANCE
Mexican certification and testing association.
Intertek Slovenia
Intertek testing, inspection, and certification services in Slovenia.
LNE (Laboratoire National de Métrologie et d'Essais)
French national laboratory for metrology and testing.
Sponsored listings
Frequently Asked Questions
SIST ETS 300 823 E1:2003 is a standard published by the Slovenian Institute for Standardization (SIST). Its full title is "Universal Personal Telecommunication (UPT); UPT phase 2; Functional specification of the interface of a UPT Integrated Circuit Card (ICC) and Public Switched Telephone Network (PSTN), Integrated Services Digital Network (ISDN) and Global System for Mobile communications (GSM) terminals (one pass and multiple pass authentication)". This standard covers: This ETS describes the mechanical, electrical and logical interface between card and the mentioned terminals. This includes the specification of card data and operations as well as of the necessary terminal functions for the communication between card and terminals.
This ETS describes the mechanical, electrical and logical interface between card and the mentioned terminals. This includes the specification of card data and operations as well as of the necessary terminal functions for the communication between card and terminals.
SIST ETS 300 823 E1:2003 is classified under the following ICS (International Classification for Standards) categories: 33.040.35 - Telephone networks; 33.070.50 - Global System for Mobile Communication (GSM); 33.080 - Integrated Services Digital Network (ISDN). The ICS classification helps identify the subject area and facilitates finding related standards.
SIST ETS 300 823 E1:2003 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-december-2003
6YHWRYQHRVHEQHWHOHNRPXQLNDFLMH 837 ±837ID]D±)XQNFLMVNDVSHFLILNDFLMD
YPHVQLNDþLSQHNDUWLFH ,&& VLVWHPD837LQMDYQHJDNRPXWLUDQHJDWHOHIRQVNHJD
RPUHåMD 3671 GLJLWDOQHJDRPUHåMD]LQWHJULUDQLPLVWRULWYDPL ,6'1 LQ
JOREDOQHJDVLVWHPDPRELOQLKNRPXQLNDFLM *60 HQNUDWQDLQYHþNUDWQD
DYWHQWLNDFLMD
Universal Personal Telecommunication (UPT); UPT phase 2; Functional specification of
the interface of a UPT Integrated Circuit Card (ICC) and Public Switched Telephone
Network (PSTN), Integrated Services Digital Network (ISDN) and Global System for
Mobile communications (GSM) terminals (one pass and multiple pass authentication)
Ta slovenski standard je istoveten z: ETS 300 823 Edition 1
ICS:
33.040.35 Telefonska omrežja Telephone networks
33.070.50 Globalni sistem za mobilno Global System for Mobile
telekomunikacijo (GSM) Communication (GSM)
33.080 Digitalno omrežje z Integrated Services Digital
integriranimi storitvami Network (ISDN)
(ISDN)
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN ETS 300 823
TELECOMMUNICATION December 1997
STANDARD
Source: NA Reference: DE/NA-064010
ICS: 33.020
Key words: UPT, CARD, PSTN, GSM, ISDN
Universal Personal Telecommunication (UPT);
UPT phase 2;
Functional specification of the interface of a UPT
Integrated Circuit Card (ICC) and
Public Switched Telephone Network (PSTN),
Integrated Services Digital Network (ISDN) and
Global System for Mobile communications (GSM) terminals
(one pass and multiple pass authentication)
ETSI
European Telecommunications Standards Institute
ETSI Secretariat
Postal address: F-06921 Sophia Antipolis CEDEX - FRANCE
Office address: 650 Route des Lucioles - Sophia Antipolis - Valbonne - FRANCE
X.400: c=fr, a=atlas, p=etsi, s=secretariat - Internet: secretariat@etsi.fr
Tel.: +33 4 92 94 42 00 - Fax: +33 4 93 65 47 16
Copyright Notification: No part may be reproduced except as authorized by written permission. The copyright and the
foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 1997. All rights reserved.
Page 2
ETS 300 823: December 1997
Whilst every care has been taken in the preparation and publication of this document, errors in content,
typographical or otherwise, may occur. If you have comments concerning its accuracy, please write to
"ETSI Editing and Committee Support Dept." at the address shown on the title page.
Page 3
ETS 300 823: December 1997
Contents
Foreword .5
1 Scope .7
2 Normative references.8
3 Definitions, symbols and abbreviations.8
3.1 Definitions .8
3.2 Symbols .8
3.3 Abbreviations .8
4 Physical characteristics.8
5 Electronic signals and transmission protocols .8
6 Logical model .9
7 Security services and facilities .9
7.1 Authentication key.9
7.2 Algorithms and processes .9
7.2.1 Card Holder Verification (CHV) .9
7.2.2 Strong authentication .9
7.3 File access conditions.9
7.4 Function access condition .10
7.5 Identification, keying and algorithm information.10
8 Description of the functions.10
9 Description of the commands.10
10 Contents of the EFs.10
11 Application protocol .11
11.1 General procedures .11
11.2 PIM management procedures .11
11.3 CHV related procedures .11
11.4 UPT security related procedures .11
11.4.1 Two-pass strong authentication (M).11
11.5 Telecommunication procedures .12
11.6 General information procedures .12
Annex A (normative): Plug-in UPT card .13
Annex B (normative): Implementation Conformance Statement (ICS) for the PIM2.14
B.1 ICS proforma for the PIM2 .14
B.2 Identification of the implementation, product supplier and test laboratory client.14
B.3 Identification of the standard .14
B.4 Global statement of conformance .15
B.5 Interpretation of the tables.15
B.6 Physical characteristics.15
Page 4
ETS 300 823: December 1997
B.6.1 ID-1 size . 16
B.6.2 Plug-in size. 16
B.6.3 Contacts . 16
B.7 Electronic signals and transmission protocols. 17
B.7.1 Supply voltage VCC (contact C1). 17
B.7.2 Reset RST (contact C2). 17
B.7.3 Clock CLK (contact C3).17
B.7.4 I/O (contact C7). 18
B.7.5 States . 18
B.7.6 Answer To Reset (ATR). 19
B.8 Logical model. 20
B.9 Security features and facilities. 20
B.10 Description of functions . 21
B.11 Contents of the EFs. 21
Annex C (normative): Implementation Conformance Statement (ICS) for the CAD . 22
UPT
C.1 ICS proforma for the CAD . 22
UPT
C.2 Identification of the implementation, product supplier and test laboratory client . 22
C.3 Identification of the standard. 22
C.4 Global statement of conformance . 23
C.5 Interpretation of the tables. 23
C.6 Physical characteristics . 24
C.7 Electronic signals and transmission protocols. 24
C.7.1 Supply voltage VCC (contact C1). 25
C.7.2 Reset RST (contact C2). 25
C.7.3 Clock CLK (contact C3).25
C.7.4 I/O (contact C7). 25
C.7.5 States . 26
C.7.6 Answer To Reset (ATR). 26
C.8 Security features and facilities. 26
C.9 Coding of the commands. 27
C.10 Application protocol . 27
History. 28
Page 5
ETS 300 823: December 1997
Foreword
This European Telecommunication Standard (ETS) has been produced by the Network Aspects (NA)
Technical Committee of the European Telecommunications Standards Institute (ETSI).
Transposition dates
Date of adoption: 21 November 1997
Date of latest announcement of this ETS (doa): 31 March 1998
Date of latest publication of new National Standard
or endorsement of this ETS (dop/e): 30 September 1998
Date of withdrawal of any conflicting National Standard (dow): 30 September 1998
Page 6
ETS 300 823: December 1997
Blank page
Page 7
ETS 300 823: December 1997
1 Scope
This European Telecommunication Standard (ETS) in combination with ETS 300 477 [1] defines the
interface between the Universal Personal Telecommunication (UPT) card and the Card Accepting Device
(CAD) for the operational phase. It also defines those aspects of the internal organization of the UPT card
which are related to the operational phase.
This ETS relates to the interface between a UPT card and Public Switched Telephone Network (PSTN),
Integrated Services Digital Network (ISDN) and Global System for Mobile (GSM) communications
terminals. These interfaces are completely described by ETS 300 477 [1] plus the additions and
modifications contained in this ETS; i.e. this ETS is a delta document.
The following clauses from ETS 300 477 [1] are amended or modified in this ETS:
- logical model (combined PIM1/PIM2);
- security (two pass strong authentication);
- functions (internal authentication);
- commands (internal authentication);
- Elementary Files (EF , EF );
SEQ DIR
- Application Protocol (AP) (two pass strong authentication);
- Implementation Conformance Statement (ICS) proformas.
The clause numbering of ETS 300 477 [1] is kept in order to ease comparisons. Unmodified clauses and
subclauses are marked appropriately.
This ETS together with ETS 300 477 [1] defines:
- the requirements for the physical characteristics of the UPT card, the electrical signals and the
transmission protocol;
- the model which shall be used as a basis for the design of the logical structure of the UPT card;
- the security features;
- the interface functions;
- the commands for operating the interface functions;
- the contents of the files required for the UPT application;
- the service set to be supported in the UPT card;
- the application protocol (security, services, etc.);
- the Implementation Conformance Statement (ICS) proformas.
This ETS does not specify any aspects related to the administrative management phase. Any internal
technical realization of either the UPT card or the CAD are only specified where these reflect over the
interface. This ETS does not specify any of the security algorithms which may be used.
The information flow between the CAD and the network is outside the scope of this ETS.
UPT
Page 8
ETS 300 823: December 1997
2 Normative references
This ETS incorporates by dated and undated reference, provisions from other publications. These
normative references are cited at the appropriate places in the text and the publications are listed
hereafter. For dated references, subsequent amendments to or revisions of any of these publications
apply to this ETS only when incorporated in it by amendment or revision. For undated references the latest
edition of the publication referred to applies.
[1] ETS 300 477: "Universal Personal Telecommunication (UPT); UPT Phase 2;
Functional specification of the interface of a UPT Integrated Circuit Card (ICC)
and Card Accepting Devices (CADs); UPT card accepting Dual Tone Multiple
Frequency (DTMF) device".
[2] ETS 300 790: "Universal Personal Telecommunication (UPT); Security
architecture for UPT phase 2; Specification".
[3] CCITT Recommendation E.164: "Numbering plan for the ISDN era".
3 Definitions, symbols and abbreviations
3.1 Definitions
For the purposes of this ETS, the following definitions apply, together with those contained in
ETS 300 477 [1]:
PIM1: Personal Identification Module according to ETS 300 477 [1].
PIM2: Personal Identification Module according to this ETS.
3.2 Symbols
For the purposes of this ETS, the symbols contained in ETS 300 477 [1] apply.
3.3 Abbreviations
For the purposes of this ETS, the following abbreviations apply, together with those of ETS 300 477 [1]:
AE Application Entity
AP Application Protocol
CT Cordless Telephone
ICS Implementation Conformance Statement
ISDN Integrated Services Digital Network
PSTN Public Switched Telephone Network
RAND Random challenge sent by the network to be used for authentication
4 Physical characteristics
The same text as in ETS 300 477 [1] is valid.
5 Electronic signals and transmission protocols
The same text as in ETS 300 477 [1] is valid.
Page 9
ETS 300 823: December 1997
6 Logical model
The same text as in ETS 300 477 [1] is valid with the following modifications:
In subclause 6.4, "DF " is replaced by "DF ", and the following note is added:
UPT UPT2
NOTE: Both PIM1 and PIM2 can be implemented in one card, each representing its own
application.
7 Security services and facilities
The same text as in ETS 300 477 [1], clause 7 is valid with the following modifications:
PIM is replaced by PIM2, and "ETS 300 391-1" is replaced by "ETS 300 790 [2]".
7.1 Authentication key
The same text as in ETS 300 477 [1] subclause 7.1 is valid with the following addition:
If both PIM1 and PIM2 are implemented in the same card, then they shall use a different authentication
key.
7.2 Algorithms and processes
The same text is valid with reference "ETS 300 790 [2]" instead of "ETS 300 391-1".
7.2.1 Card Holder Verification (CHV)
The same text as in ETS 300 477 [1] subclause 7.2.1 is valid, with the addition of the following note:
NOTE: If both PIM1 and PIM2 are implemented in the same card, for security reasons, two
different CHVs should be used for PIM1 and PIM2.
7.2.2 Strong authentication
The two pass strong authentication process works as follows:
1) a successful card holder verification is performed;
2) a timer is started in the CAD . If a time-out occurs the PIM shall be RESET by the CAD . No
UPT UPT
further authentication attempts can be made until a new card holder verification has been
performed;
3) the authentication procedure is activated by the user (if the time-out has not been reached),
whereby the following steps take place;
4) the PUI and the CT are obtained from the PIM and are sent to the Authenticating Entity (AE) in an
authentication request;
5) the AE sends a random number RAND to the CAD in an authentication request;
UPT
6) the RAND is given to the PIM, which calculates an Authentication Code (AC) and returns it to the
CAD ;
UPT
7) the CAD sends the PUI, CT and AC to the authenticating entity;
UPT
8) if the authentication fails, steps 3) to 7) can be repeated, as long as the time-out has not been
reached.
7.3 File access conditions
The same text as in ETS 300 477 [1] subclause 7.3 is valid.
Page 10
ETS 300 823: December 1997
7.4 Function access condition
The same text as in ETS 300 477 [1] subclause 7.4 is valid.
7.5 Identification, keying and algorithm information
The following data used for identification and secret keys are stored in the PIM:
- PUI (for identification of a UPT subscriber);
- LPIN (for card holder verification);
- SLPIN (for unblocking of the relevant CHV1);
- K (secret key for the authentication algorithm).
8 Description of the functions
The same text as in ETS 300 477 [1] is valid with the following modifications:
- "DF " is replaced by "DF ".
UPT UPT2
In subclause 8.10, the input is "challenge (RAND)" instead of "challenge (n)".
9 Description of the commands
The same text as in ETS 300 477 [1] is valid with the following modification:
- In subclause 9.3.10, "challenge (sequence number)" is replaced by "challenge (RAND)".
10 Contents of the EFs
The same text as in ETS 300 477 [1] is valid with the following modifications:
- "DF " is replaced by "DF ".
UPT UPT2
-EF is deleted from figure 9.
SEQ
In subclause 10.2.3, "UPT application" is replaced by "PIM2 application".
In subclause 10.2.3, the following note is added:
NOTE 1: The PIM2 application identifier is different from the UPT application identifier.
Subclause 10.3.3 is deleted.
In subclause 10.4, note 2 is replaced by the following text:
NOTE 2: The CAD should interpret the TON and NPI information.
UPT
As EF is part of the DF it may be used by UPT and also other applications
ADN TELECOM
in a multi-application card. If the other application does not recognize the use of TON
and NPI, then the information relating to the national dialling plan should be held within
the data item dialling number and the TON and NPI fields set to UNKNOWN. This
format would be acceptable for UPT operation and also for the other application where
the TON and NPI fields should be ignored.
Page 11
ETS 300 823: December 1997
EXAMPLE: PIM storage of an International Number using CCITT
Recommendation E.164 [3] numbering plan.
TON NPI Digit field
UPT application 001 0001 abc.
Other application compatible with UPT 000 0000 xxx.abc.
where "abc." denotes the subscriber number digits (including its country code), and
"xxx." denotes escape digits or a national prefix replacing TON and NPI.
11 Application protocol
The same text as in ETS 300 477 [1], clause 11, is valid except that "one-pass strong authentication" is
replaced by "two-pass strong authentication".
11.1 General procedures
The same text as in ETS 300 477 [1], subclause 11.1, is valid.
11.2 PIM management procedures
The same text as in ETS 300 477 [1], subclause 11.2, is valid except that "one-pass strong authentication"
is repl
...