Sim Usim Csim and Isim
Sim Usim Csim and Isim
Sim Usim Csim and Isim
James Ni
04/22/2013
SIM
Authentication Key (Ki) - 128-bit unique key for each SIM, also stored in AuC/HSS
two passwords:
USIM
UMTS SIM
Similar to GSM SIM
More capabilities allowing 3G UMTS services
Stronger Authentication and Security capabilities
Larger and securer phone book
Key information stored
similar to GSM SIM
Additional information to support UMTS services
CSIM
CDMA SIM
Similar to GSM SIM
runs on a UICC
file structure derived from the R-UIM card
For cdmaOne/CDMA2000
Key parameters
Identifications
Encryption keys
Phone Number
List of services available
MIN+ESN prior to introduction of IMSI, MIN for identifying the subscriber and MIN+ESN for registration and authentication
IMSI (international mobile subscriber identifier).
TMSI (temporary mobile subscriber identifier, for position security).
UIMID (hardware identifier) - a pseudo value if EUIMID is in use.
EUIMID Either short form (based on MEID) or long form (based on ICCID).
ICCID Present even if it is not used as EUIMID
MEID (hardware identifier).
Call Control
SMS
BCMCS Broadcast
IP Location
CDMA2000 Parameters
Stats
Misc.
ISIM
ISIM Application Dedicated File (ADF) Contains multiple Elementary Files (EFs)
P-CSCF address
Generic Bootstrapping Architecture (GBA),
HTTP Digest
GBA-based Local Key Establishment Mechanism,
Support of P-CSCF discovery for IMS local break out
ISIM
ISIM Application Dedicated File (ADF) Contains multiple Elementary Files (EFs)
In roaming case
Serving MSC/VLR and HLR returns TLDN
TLDN is used to route the call
CAVE Authentication
CDMA Authentication
HLR/AuC:
(SSD RAND, ESN, A-key) SSD
SSD RAND, MIN, ESN deliver to Serving MSC and Mobile
Mobile Station:
(SSD RAND, ESN, A-key) SSD
Authentication
Global challenge: to all mobile stations using a particular radio
channel
Unique challenge: to a individual mobile station
Done at location updates time or service originating time
Authentication results are compared at
Either the serving MSC (when SSD is shared)
Or the HLR/AuC (when SSD is not shared)
8
AKA Authentication
IMS Authentication
HSS:
Generates and passes (RAND, AUTN, XRES, CK, IK) to S-CSCF via MAA
S-CSCF:
Relays (RAND, AUTN, CK, IK) to P-CSCF via 401(REGISTER), keeps XRES
P-CSCF:
Relays (RAND, AUTN) to Mobile Station via 401(REGISTER)
Mobile Station:
Calculates RES and send with REGISTER to IMS core
S-CSCF:
Compare RES and XRES to complete the authentication
Notes:
IMS Registration(TS.23.228)
What are registered?
Public User Identity:
It shall be possible to register multiple public identities via single IMS
registration
It shall be possible to register a Public User Identity that is
simultaneously shared across multiple contact addresses
Registration of a Public User Identity shall not affect the status of already
registered Public User Identity(s)
When multiple UEs share the same public identity(s), each UE shall be
able to register its contact address(es) with IMS.
IMS Registration(TS.23.228)
What is sent from S-CSCF to HSS
Public User Identity
Private User Identity
S-CSCF name
MDN/MSISDN+IMSI as Temporary
IMPU
When ISIM is not available (for legacy non-IMS
access devices)
IMSI + MDN/MSISDN is used as temporary IMPU for
registration and authentication
This is only for early IMS deployment and can only be
a temporary solution