TIMER TIMER

NUM. VALUE
T3402 Default 12 min
T3410 15s

T3411 10S
T3412 Default 54 minute
T3417 5s
T3418 20s
T3420 15 S
T3421 15 S
T3430 15 S
T3442

Cause no cause
#3 Illegal UE-Multiple PLMN
#6 Illegal ME-Multiple PLMN
#7 PS service not allowed-single PLMN
#14 PS service not allowed in this PLMN-Single PLMN
#15 PS service not allowed in this TA
#25 Not authorized in this CSG-Multiple PLMN
11 Close subscriber group comes in SIB1
#11 PLMN not allowed
#12 Tracking area not allowed
#22 Congestion

Most of the usim which we are using with test equipment is based on what we call 3gpp Test Usim or Dummy XOR sim

Parameter
K
AMF(Authentication management function)
SQN
Input(MAC-A) RAND
Algorithm 3GPP 34.108

AUTN

Output
 IK

Output
CK

XRES

RES

Authentication failure is mostly due to wrong AUTN in the authentication information request message

Parameter Failure Code

MAC Code #20:MAC failure (Example)

Separation Bit (First bit of AMF) #26:Non-EPS authentication unacceptable (Example)

SQN #21:Synch failure (Example)

Abnormal cases

Invalid MAC code

SQN=000000000000 SQN=FFFFFFFFFFFF
AMF=8000 AMF=8000
K=  00112233445566778899AABBCCDDEEFF K=  00112233445566778899AABBCCDDEEFF

RAND=31323131353836343132313135383634 RAND=31323131353836343132313135383634
IK=  1302716D5043B9AB9B8AF9E5D8CB3123 IK=  1302716D5043B9AB9B8AF9E5D8CB3123
CK=  231302716D5043B9AB9B8AF9E5D8CB31 CK=  231302716D5043B9AB9B8AF9E5D8CB31
AUTN=02716D5043B9800031231302716DD043 AUTN=FD8E92AFBC458000CEDCECFD8E92D043

Authentication not accepted by the net

reject and re-aut
Precondition:UE receives an authentication reject as the result of an
Expected result:The ue shall set the status updated to EU3 roaming
Tracking area update
Cause no cause
#3 Illegal UE
#6 Illegal ME
#7 EPS service not allowed
#9 UE identity can not derived by the network
RLF(radio link fa
1) RRC connection restablishment success T310,T311
2)T301 expiry UE goes to idle state and initiate tracking area update In order to recover RRC connec
3)T311 expired ue does not initiate the rrc reestablishment procedure and goes into rrc idle mode
4)RRC connection re-establishment
UEreject
goes to idle state and initiate tracking ara update In order to recover RRC connecti
Handover fa
 UE S
STATE
EMM Deregistered
Emm registered
EMM registered initiated

EMM Deregistered-Attempting to attatch,Emm registered-Attempting

to update
EMM registered
EMM service request initiated
AUUPDATING INITIATED
AUUPDATING INITIATED
EMM DEREGISTERED INITIATED
EMM tracking area updating initiated
EMM REGISTERED

Configuration
UE>LTE1=RRC connection setup complete+Attatch request+PDN connectivity request
UE>LTE1=RRC connection setup complete+Attatch request+PDN connectivity request

Droped into the forbidden tracking area

Close subscriber group
CSG INDICATION=TRUE

Key generation of Test USIM

Dummy XOR sim
Input and output parameters of 3Gpp Tset USIM a
Description
Stored in USIM, Configured in Test Equipment
Stored in USIM, Configured in Test Equipment
Stored in USIM, Configured in Test Equipment (In live network, this value changes after every authentication. B
Usually generated randomly by test equipment
3GPP Test Algorithm

Authentication Key. Calculated by Algorithm on Test Equipment

 Integrity Key. Calculated by Algorithm on Test Equipment and
UE
Integrity Key. Calculated by Algorithm on Test Equipment and
UE
Expected Result. Calculated by Algorithm on Test Equipment

Result. Calculated by Algorithm on Test Equipment

Authentication failure

Remarks

Whenever find sync out of range

UE locally release the rrc connection and treat the active cell as barred

e
0
1
1

1
1
1
0
epted by the network / GUTI used / Authentication
reject and re-authentication
reject as the result of an authentication get rejected by the nnetwork
pdated to EU3 roaming not allowed,delete the stored GUTI,Last visited TAI,TAI list and Kasme keys and state will change to EMM deregist
king area update rejection causes
Resolve
nsiders the USIM as invalid for EPS services and non-EPS services and enters state EMM-DEREGISTERED
nsiders the USIM as invalid for EPS services and non-EPS services and enters state EMM-DEREGISTERED
nsiders the USIM as invalid for EPS services and non-EPS services and enters state EMM-DEREGISTERED
UE deletes any GUTI, last visited registered TAI, TAI list and KSI and enters the state EMM-DEREGISTERED and subsequently, U
RLF(radio link failure ) issues
r to recover RRC connection.
d goes into rrc idle mode
to recover RRC connection.
Handover failures
 UE SIDE TIMERS
CAUSE OF START

At attatch failure and attempt counter is equal to 5

or At tracking area update failure and attempt counter is equal to 5
Attatch request sent

At attach failure due to lower layer failures,T3410 timeout or at tracking area update failure due to lower layer failures
In EMM registered when emm connected mode is left
Service request sent extended service request sent
Authentication failure (EMM cause #20 "MAC failure" or #26 Non-EPS authentication unacceptable
Authentication failure(Cause=#21 "sync failure"2)
Detach request sent
Tracking area update request sent
Service request rejected with EMM cause #39 "cs domain temporary not available

Attatch Reject
Remark
UE considered USIM as invalid for EPS services as well as non-eps services and move into the state of EMM deregistere
nectivity request

SO ONLY SUBSCRIBER BELONGS FROM THIS GROUP MAY LATCH TO THE NETWORK othe user get attatch reject with EMM cause

Key generation of Test USIM

Input and output parameters of 3Gpp Tset USIM algorithm

network, this value changes after every authentication. But in test USIM, it is usually hardcoded as a fixed value)
 Authentication failure

I,TAI list and Kasme keys and state will change to EMM deregistered

rs state EMM-DEREGISTERED
rs state EMM-DEREGISTERED
rs state EMM-DEREGISTERED
and enters the state EMM-DEREGISTERED and subsequently, UE automatically initiates the attach procedure
 NORMAL STOP

Attatch request sent and Tracking area update sent

Attatch update received and attatch update reject

Attatch request sent and Tracking area update sent

When entering into EMM deregistered aand when entering into EMM connected state
bearer setup for the requested service or service request rejected
Authentication request received
Authentication request received
Detach accept received
Tracking area update received
Tracking area update request sent

use value #25

 ON
EXPIRY
initiation of attatch and tracking area update procedure
Start T3411 and T3402

Retransmission of attatch request or tracking area update request

Initiation of the periodic tau update procedure
Abort the procedure
On first expiry, the UE should consider the network as false
On first expiry, the UE should consider the network as false
RETX
EPS security context :CK and IK are then used as a key material to compute Kasme keys which are stored in EPS security conte
Forbidden PLMN:Forbiddenn plmn are added to the list when network will reject an attatch request message with cause value
Security mode rejection cause code:unidentified
Abnormal case:1)Success after several attempts due to no network response 2)Unsuccessful attatch after 5 attempts 3)Repea