SIST EN 301 002-1:2000

SLOVENSKI STANDARD
3SIST EN 301 002-1:
01-december-
'LJLWDOQRRPUHåMH]LQWHJULUDQLPLVWRULWYDPL,6'13RVWRSNLYDURYDOQHJDRURGMD
6(73URWRNROGLJLWDOQHQDURþQLãNHVLJQDOL]DFLMHãW'66GHO
6SHFLILNDFLMDSURWRNROD
Integrated Services Digital Network (ISDN); Security tools (SET) procedures; Digital
Subscriber Signalling System No. one (DSS1) protocol; Part 1: Protocol specification
Ta slovenski standard je istoveten z: EN 301 002-1 V1.2.4
ICS:
33.080 Digitalno omrežje z Integrated Services Digital
integriranimi storitvami Network (ISDN)
(ISDN)
3SIST EN 301 002-1: en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EN 301 002-1 V1.2.4 (1998-10)
European Standard (Telecommunications series)
Integrated Services Digital Network (ISDN);
Security tools (SET) procedures;
Digital Subscriber Signalling System No. one (DSS1) protocol;
Part 1: Protocol specification

2 EN 301 002-1 V1.2.4 (1998-10)
Reference
DEN/SPS-05123-1 (9a090iqo.PDF)
Keywords
ISDN, DSS1, security, protocol
ETSI
Postal address
F-06921 Sophia Antipolis Cedex - FRANCE
Office address
650 Route des Lucioles - Sophia Antipolis
Valbonne - FRANCE
Tel.: +33 4 92 94 42 00  Fax: +33 4 93 65 47 16
Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88
Internet
secretariat@etsi.fr
http://www.etsi.org
Copyright Notification
No part may be reproduced except as authorized by written permission.
The copyright and the foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 1998.
All rights reserved.
ETSI
3 EN 301 002-1 V1.2.4 (1998-10)
Contents
Intellectual Property Rights.4
Foreword .4
1 Scope.6
2 References.6
2.1 Normative references. 6
2.2 Informative references . 7
3 Definitions.7
4 Abbreviations.7
5 Description.8
6 Operational requirements.8
6.1 Provision and withdrawal. 8
6.2 Requirements on the originating network side. 8
6.3 Requirements on the destination network side. 8
7 Coding requirements .9
7.1 Coding of the Facility information element components . 9
7.2 Coding of the information elements. 10
8 State definitions .10
9 Signalling procedures at the coincident S and T reference point .10
9.1 Activation . 10
9.2 Deactivation. 11
9.3 Registration. 11
9.3.1 Normal operation . 11
9.3.2 Exceptional procedures . 12
9.4 Erasure. 12
9.5 Interrogation . 12
9.6 Invocation and operation . 13
9.6.1 Normal operation . 13
9.6.2 Exceptional procedures . 13
9.7 Notification of possible fraudulent use . 13
10 Procedures for interworking with private ISDNs .13
11 Interaction with other networks .14
12 Interaction with other supplementary services.14
13 Parameter values (timers).14
14 Dynamic description (SDL diagrams) .14
Annex A (informative): Signalling flows.19
Annex B (informative): Assignment of object identifier values.20
History.21
ETSI
4 EN 301 002-1 V1.2.4 (1998-10)
Intellectual Property Rights
IPRs essential or potentially essential to the present document may have been declared to ETSI. The information
pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found
in SR 000 314: "Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect
of ETSI standards", which is available free of charge from the ETSI Secretariat. Latest updates are available on the
ETSI Web server (http://www.etsi.org/ipr).
Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee
can be given as to the existence of other IPRs not referenced in SR 000 314 (or the updates on the ETSI Web server)
which are, or may be, or may become, essential to the present document.
Foreword
This European Standard (Telecommunications series) has been produced by ETSI Technical Committee Signalling
Protocols and Switching (SPS).
The present document is part 1 of a multi-part standard covering the Digital Subscriber Signalling System No. one
(DSS1) protocol specification for the Integrated Services Digital Network (ISDN) Security tools (SET) procedures, as
described below:
Part 1: "Protocol specification";
Part 2: "Protocol Implementation Conformance Statement (PICS) proforma specification";
Part 3: "Test Suite Structure and Test Purposes (TSS&TP) specification for the user";
Part 4: "Abstract Test Suite (ATS) and partial Protocol Implementation eXtra Information for Testing (PIXIT)
proforma specification for the user";
Part 5: "Test Suite Structure and Test Purposes (TSS&TP) specification for the network";
Part 6: "Abstract Test Suite (ATS) and partial Protocol Implementation eXtra Information for Testing (PIXIT)
proforma specification for the network".
In accordance with CCITT Recommendation I.130, the following three level structure is used to describe the
supplementary telecommunication services as provided by European public telecommunications operators under the
pan-European ISDN:
- Stage 1: is an overall service description, from the user's standpoint;
- Stage 2: identifies the functional capabilities and information flows needed to support the service described in
stage 1; and
- Stage 3: defines the signalling system protocols and switching functions needed to implement the service
described in stage 1.
The present document details the stage 3 aspects (signalling system protocols and switching functions) needed to
support the SET procedures. The stage 1 aspects are detailed in EN 301 132.
NOTE: Currently no stage 2 document exists.
ETSI
5 EN 301 002-1 V1.2.4 (1998-10)
National transposition dates
Date of adoption of this EN: 30 October 1998
Date of latest announcement of this EN (doa): 31 January 1999
Date of latest publication of new National Standard
or endorsement of this EN (dop/e): 31 July 1999
Date of withdrawal of any conflicting National Standard (dow): 31 July 1999
ETSI
6 EN 301 002-1 V1.2.4 (1998-10)
1 Scope
This first part of EN 301 002 specifies the stage three of the Security tools (SET) procedures for the pan-European
Integrated Services Digital Network (ISDN) as provided by the European public telecommunications operators at the
T reference point or coincident S and T reference point (as defined in ITU-T Recommendation I.411 [2]) by means of
the Digital Subscriber Signalling System No. one (DSS1) protocol. Stage three identifies the protocol procedures and
switching functions needed to support a telecommunications service (see CCITT Recommendation I.130 [10]).
In addition, the present document specifies the protocol requirements at the T reference point where the service is
provided to the user via an intermediate private ISDN.
The present document does not specify the additional protocol requirements where the service is provided to the user via
a telecommunications network that is not an ISDN.
The SET procedures are a means of providing an appropriate level of security and protection to the user of a given
telecommunication service.
Further parts of the present document specify the method of testing required to identify conformance to the present
document.
The present document is applicable to equipment supporting the SET procedures, to be attached at either side of a
T reference point or coincident S and T reference point when used as an access to the public ISDN.
2 References
References may be made to:
a) specific versions of publications (identified by date of publication, edition number, version number, etc.), in
which case, subsequent revisions to the referenced document do not apply; or
b) all versions up to and including the identified version (identified by "up to and including" before the version
identity); or
c) all versions subsequent to and including the identified version (identified by "onwards" following the version
identity); or
d) publications without mention of a specific version, in which case the latest version applies.
A non-specific reference to an ETS shall also be taken to refer to later versions published as an EN with the same
number.
2.1 Normative references
[1] EN 300 196-1: "Integrated Services Digital Network (ISDN); Generic functional protocol for the
support of supplementary services; Digital Subscriber Signalling System No. one (DSS1) protocol;
Part 1: Protocol specification".
[2] ITU-T Recommendation I.411 (1993): "ISDN user-network interfaces; Reference configurations".
[3] CCITT Recommendation X.208 (1988): "Specification of Abstract Syntax Notation One
(ASN.1)".
[4] CCITT Recommendation X.219 (1988): "Remote operations: Model, notation and service
definition".
[5] ITU-T Recommendation Z.100 (1993): "Specification and Description Language (SDL)".
ETSI
7 EN 301 002-1 V1.2.4 (1998-10)
2.2 Informative references
[6] EN 301 132: "Integrated Services Digital Network (ISDN); Security tools (SET) for use within
telecommunication services".
[7] ETR 232 (1995): "Security Techniques Advisory Group (STAG); Glossary of security
terminology".
[8] ITU-T Recommendation E.164 (1997): "The international public telecommunications numbering
plan".
[9] ITU-T Recommendation I.112 (1993): "Vocabulary of terms for ISDNs".
[10] CCITT Recommendation I.130 (1988): "Method for the characterization of telecommunication
services supported by an ISDN and network capabilities of an ISDN".
[11] ITU-T Recommendation I.210 (1993): "Principles of telecommunication services supported by an
ISDN and the means used to describe them".
3 Definitions
For the purposes of the present document, the following definitions apply:
Integrated Services Digital Network (ISDN): See ITU-T Recommendation I.112 [9], definition 308.
ISDN number: A number conforming to the numbering plan and structure specified in ITU-T Recommendation
E.164 [8].
invoke component: See EN 300 196-1 [1], subclause 8.2.2.1. Where reference is made to a "xxxx" invoke component,
an invoke component is meant with its operation value set to the value of the operation "xxxx".
network: The DSS1 protocol entity at the network side of the user-network interface.
Personal Identification Number (PIN): See ETR 232 [7].
reject component: See EN 300 196-1 [1], subclause 8.2.2.4.
return error component: See EN 300 196-1 [1], subclause 8.2.2.3. Where reference is made to a "xxxx" return error
component, a return error component is meant which is related to a "xxxx" invoke component.
return result component: See EN 300 196-1 [1], subclause 8.2.2.2. Where reference is made to a "xxxx" return result
component, a return result component is meant which is related to a "xxxx" invoke component.
security tool: See EN 301 132 [6], clause 3.
served user: The user to whom the SET procedures are provided in combination with a telecommunication service.
service; telecommunication service: See ITU-T Recommendation I.112 [9], definition 201.
supplementary service: See ITU-T Recommendation I.210 [11], subclause 2.4.
user: The DSS1 protocol entity at the user side of the user-network interface.
4 Abbreviations
For the purposes of the present document, the following abbreviations apply:
ASN.1 Abstract Syntax Notation one
DSS1 Digital Subscriber Signalling System No. one
ISDN Integrated Services Digital Network
OAM Operation And Maintenance
ETSI
8 EN 301 002-1 V1.2.4 (1998-10)
PIN Personal Identification Number
SDL Specification and Description Language
SET Security Tools
5 Description
The SET procedures allow a served user to be provided with a PIN. The PIN is used when accessing a
telecommunication service to ensure that this service is used with an appropriate level of security. The served user can
change the PIN at any time after initial provision.
6 Operational requirements
6.1 Provision and withdrawal
The SET procedures shall be provided in connection with the provision of certain telecommunication services, and shall
consists of the initial registration of the PIN. This initial registration is performed by the network provider, after
selection of the PIN by the served user. The PIN shall either be related to an ISDN number, or to an access or set of
accesses, depending on how the telecommunication service using the PIN, is provided. The PIN shall consist of a
minimum of 4 alphanumeric characters. The maximum number of characters is a network option, but shall not exceed 12
alphanumeric characters.
Withdrawal of the SET procedures is outside the scope of the present document.
The served user may, as a network option , be notified when one or more attempts (but less than the blocking limit N
whereby all procedures using the PIN are blocked) have been made to use an invalid PIN, either during the operation of
a telecommunication service using the PIN, or during the PIN registration procedure. The blocking limit N whereby all
procedures using the PIN are blocked, is also a network option.
The network options are summarized in table 1.
Table 1: Network options for the SET procedures
Network option Value
Notification of possible fraudulent use no
yes
Maximum number of PIN characters 4 to 12
Blocking limit N‡ 3
6.2 Requirements on the originating network side
Not applicable.
6.3 Requirements on the destination network side
Not applicable.
ETSI
9 EN 301 002-1 V1.2.4 (1998-10)
7 Coding requirements
7.1 Coding of the Facility information element components
Table 2 shows the definitions of the operations and errors required for the SET procedures using ASN.1 as specified in
CCITT Recommendation X.208 [3] and using the OPERATION and ERROR macro as defined in figure 4 of
CCITT Recommendation X.219 [4].
The formal definition of the component types to encode these operations and errors is provided in clause D.1 of
EN 300 196-1 [1].
The
...