ETSI TS 101 377-3-10 V1.1.1 (2001-03) Technical Specification GEO-Mobile Radio Interface Specifications; Part 3: Network specifications; Sub-part 10: Security Related Network Functions; GMR-2 03.020 GMR-2 03.020 2 ETSI TS 101 377-3-10 V1.1.1 (2001-03) Reference DTS/SES-002-03020 Keywords GMR, GSM, GSO, interface, MES, mobile, MSS, network, radio, satellite, security, S-PCN ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.:+33492944200 Fax:+33493654716 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice Individual copies of the present document can be downloaded from: http://www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://www.etsi.org/tb/status/ If you find errors in the present document, send your comment to: [email protected] Copyright Notification No part may be reproduced except as authorized by written permission. The copyright and the foregoing restriction extend to reproduction in all media. © European Telecommunications Standards Institute 2001. All rights reserved. ETSI GMR-2 03.020 3 ETSI TS 101 377-3-10 V1.1.1 (2001-03) Contents Intellectual Property Rights ..........................................................................................................................5 Foreword......................................................................................................................................................7 Introduction..................................................................................................................................................8 1 Scope..................................................................................................................................................9 2 References..........................................................................................................................................9 3 Definitions and abbreviations..............................................................................................................9 3.1 Definitions .................................................................................................................................................. 9 3.2 Abbreviations............................................................................................................................................ 10 4 General.............................................................................................................................................10 5 Subscriber identity confidentiality.....................................................................................................10 6 Subscriber identity authentication .....................................................................................................11 6.1 Generality ................................................................................................................................................. 11 6.2 The authentication procedure..................................................................................................................... 11 6.3 Subscriber authentication key management................................................................................................ 11 6.3.1 General authentication procedure ......................................................................................................... 12 6.3.2 Authentication at location updating in a new VLR, using TMSI............................................................ 13 6.3.3 Authentication at location updating in a new VLR, using IMSI............................................................. 13 6.3.4 Authentication at location updating in a new VLR, using TMSI, TMSI unknown in 'old' VLR .............. 14 6.3.5 Authentication at location updating in a new VLR, using TMSI, old VLR not reachable........................ 14 6.3.6 Authentication with IMSI if authentication with TMSI fails.................................................................. 14 6.3.7 Re-use of security related information in failure situations.................................................................... 14 7 Confidentiality of signalling information elements, connectionless data and user information elements on physical connections......................................................................................................14 7.1 Generality ................................................................................................................................................. 14 7.2 The ciphering method................................................................................................................................ 15 7.3 Key settings .............................................................................................................................................. 15 7.4 Ciphering key sequence number ................................................................................................................ 16 7.5 Starting of the ciphering and deciphering process....................................................................................... 16 7.6 Synchronization ........................................................................................................................................ 16 7.7 Handover .................................................................................................................................................. 17 7.8 Negotiation of the GMR-2-A5 algorithm ................................................................................................... 17 7.9 Ciphering of single-hop mobile-to-mobile connections............................................................................... 17 8 Synthetic summary ...........................................................................................................................17 Annex A (informative): Security issues related to signalling schemes and key management.........19 A.1 Introduction......................................................................................................................................19 A.2 Short description of the schemes .......................................................................................................19 Annex B (informative): Security information to be stored in the entities of the GMR-2 system ...33 B.1 Introduction......................................................................................................................................33 B.2 Entities and security information.......................................................................................................33 B.2.1 Home location register (HLR).................................................................................................................... 33 B.2.2 Visitor location register (VLR) .................................................................................................................. 33 B.2.3 Traffic channel equipment (TCE) .............................................................................................................. 33 B.2.4 Mobile Earth Station (MES) ...................................................................................................................... 33 B.2.5 Authentication centre (AuC)...................................................................................................................... 34 ETSI GMR-2 03.020 4 ETSI TS 101 377-3-10 V1.1.1 (2001-03) Annex C (normative): External specifications of security related algorithms..............................35 C.1 Specification for algorithm GMR-2-A5.............................................................................................35 C.1.1 Purpose..................................................................................................................................................... 35 C.1.2 Implementation indications........................................................................................................................ 35 C.1.3 External specifications of algorithm GMR-2-A5 ........................................................................................ 36 C.1.4 Internal specification of algorithm GMR-2-A5........................................................................................... 37 C.2 Algorithm A3 ...................................................................................................................................37 C.2.1 Purpose..................................................................................................................................................... 37 C.2.2 Implementation and operational requirements............................................................................................ 37 C.3 Algorithm A8 ...................................................................................................................................37