What is GSM Authentication

What is GSM Authentication ?

GSM Authentication is a process of validation GSM Handset in the network for call establishment .A detailed description of the authentication process, involving the different GSM Network Elements is provided here.

 

GSM Authentication is based on subscriber-specific parameters and algorithms, which are available in both the mobile station (MS) and the authentication center (AC) . The subscriber identity module (SIM) in the GSM Handset uses this information to compute a further parameter for each authentication. This parameter is compared with one computed by the AC’s security box using the same methods and algorithms. If the two match then authentication has been performed successfully.

 

GSM Authentication can be activated by any type of attempt to establish a connection between the mobile station and the Network, e.g.:

 

  • Mobile originated call
  • Activation of supplementary services
  • Exchange of ”short messages”
  • Location update
  • IMSI attach

 Triplets:

 Authentication relies on the triple parameters. Upon executing the authentication procedure,the Auc system knows the mobile subscriber’s identity and then provides a triple which has already been created in advance by the AC’s security box. Each mobile subscriber has specific triples because they are computed from his secret authentication key (Ki). In fact, these triples are continuously created because after being used for subscriber authentication, each triple is replaced with a new one.

The triple consists of three parameters: a random number (RAND), a signed response (SRES), and a Cipher key (Kc).

  • RAND is randomly selected each time a triple has to be created.
  • SRES is used to perform the actual authentication of the mobile subscriber. It is computed from input parameters Ki and RAND, using cryptographic algorithm A3.

  • Kc is used to generate a ciphering and deciphering bit stream on the radio path. It is computed from the same input parameters Ki and RAND, but now using cryptographic algorithm A8.

Mode of Operation:

 The first actions are taken when the mobile subscriber is actually created and defined in HLR that is before he is known in the actual GSM network.

There, a secret authentication key ‘Ki’ and a version indicator for each of the algorithms A3 and A8 are assigned to his international mobile subscriber identity (IMSI).

  • The Authentication center (AC) Emulator is already equipped with one or more A3 and A8 algorithm versions on installation. To securely install the subscriber, his encrypted Ki and both version indicators are loaded into the AC from a command file or a specially secured administrative file. First, the subscriber is created in the AC by storing his IMSI and encrypted Ki in the subscriber database (with A2 algorithm using key K2). Then, the security box computes for him one semi-permanent and five transient triples, which are stored in the triple database.
  • If the subscriber exists in the AC and the authentication triples are thereby created, then appropriate subscriber data can be administered in the HLR.
  • The IMSI, the Ki and the algorithms A3 and A8 themselves are stored on the SIM, according to the previously selected indicators.

 

Once the mobile subscriber is known in the actual PLMN, he can initiate access to the individual network elements. A mobile station (MS) initiates a procedure to access the PLMN for one of the following events.

  • When the mobile subscriber activates his equipment after being inactive, the MS can either initiate a location updating procedure when he roams into another location area, or it can start an IMSI attach procedure provided the subscriber remains within the location area in which he is already registered.

 

  • When the MS answers to a paging after detecting that its subscriber is paged upon listening to the paging channel: either to answer a normal call or to receive a short message from a service center.

 

  • When the subscriber originates a normal call or wants to leave a short message in a service center.

 

  • When the mobile subscriber activates a supplementary service.

 

The access procedure is started by allocating a signalling channel to the MS for the message transfer of equipment and signalling data and to convey the subscriber’s identity.

This means that the radio resource connection with the network has already been established. Network access is given after performing the security functions initiated by the network and involving the SIM.

The following sections describe the tasks within each network element as far as subscriber authentication is concerned. The execution of this functional sequence as described further, implies a co-operation between the MS and the BSS, the MSC, the VLR, GSM HLR, and the AC

Call flow for Authentication:

The diagram below depicts the procedure of Authentication during Registration in GSM Network.

The call flow is as follows:

1. At location Update

 

2. Subsequent Authentication

If all the RAND (of the 5) are consumed then the Auth_info will be sent by the S-SMSC to the HLR, else it will use one of the RAND to create SRES.

Messages used during Authentication:

MAP_SEND_AUTHENTICATION_INFO

This service is used between the VLR and the HLR for the VLR to retrieve authentication information from the HLR. The VLR requests some sets of RAND/SRES/Kc vectors. This message is also used between SGSN and HLR during Authentication, while registering in Data Network.

The Parameters in this message are as follows:

Invoke ID

This parameter identifies corresponding service primitives. The parameter is supplied by the MAP service-user and must be unique over each service-user/service-provider interface.

AuthenticationSetList

Sets of one to five authentication vectors are transferred from the HLR to the VLR or from the HLR to the SGSN, if the outcome of the service was successful.

 User error

 One of the following error causes shall be sent by the user in case of unsuccessful outcome of the service, depending on the respective failure reason:

  • Unknown subscriber;
  • Unexpected data value;
  • System failure;
  • Data missing.

Provider error

This parameter is used to indicate a protocol related type of error:

  • Duplicated invoke Id;
  • Not supported service;
  • Mistyped parameter;
  • Resource limitation;
  • Initiating release, i.e. the peer has already initiated release of the dialogue and the service has to be released;
  • Unexpected response from the peer;
  • Service completion failure;
  • No response from the peer;
  • Invalid response received.

The MSC Sends an Authentication Request to the M.S with the RAND Value received from the AuC/HLR . The Handset computes the SRES , using the Ki and the RAND (A3 Algorithm) and forwards the same in the Authentication Response to the MSC. THE MSC matches the SRES value received from the Handset and HLR/AuC , and if the two values match the Authentication has passed.

Registration Process of Handset in GSM Network

The call Flow for Registration is as follows:

In Registration, two scenarios will be discussed.

The S-MSC/VLR retrieves the IMSI and triplets from the Old MSC/VLR, based on TMSI stored in the Handset.

In this scenario, the S-MSC sends the MAP_SEND_IDENTIFICATION (OLD TMSI) to the Old VMSC/VLR based on the TMSI value received from the Handset. The authentication triplets are received by the S-SMSC.

Messages used during Registration:

MAP_SEND_IDENTIFICATION

This service is used between the VLR and the HLR for the VLR to retrieve authentication information from the HLR. The VLR requests up to five authentication vectors. Also this service is used between the SGSN and the HLR for the SGSN to retrieve authentication information from the HLR. The SGSN requests up to five authentication vectors.

Number of requested vectors

A number indicating how many authentication vectors the new VLR is prepared to receive. The previous VLR shall not return more vectors than indicated by this parameter.

This parameter shall be present in the first (or only) request of the dialogue. If multiple service requests are present in a dialogue then this parameter shall not be present in any service request other than the first one

 Authentication Set

A list of up to five authentication sets is returned, if there are any available.

User error

This parameter is mandatory if the service fails. The following error may be used, depending on the nature of the fault:

  • Unidentified subscriber.

MAP_UPDATE_LOCATION

MSC Address

This parameter refers to the ISDN number of an MSC.The MSC address is used for short message delivery only, and for each incoming call set-up attempt, the MSRN will be requested from the VLR.

VLR number

This parameter refers to the ISDN number of a VLR.

LMSI

This parameter refers to a local identity allocated by the VLR to a given subscriber for internal management of data in the VLR. LMSI shall not be sent to the SGSN. It is an operator option to provide the LMSI from the VLR; it is mandatory for the HLR to support the LMSI handling procedures.

Supported CAMEL Phases

This parameter indicates which phases of CAMEL are supported. Must be present if a CAMEL phase different from phase 1 is supported. Otherwise may be absent.

 SoLSA Support Indicator

This parameter is used by the VLR to indicate to the HLR in the Update Location indication that SoLSA is supported. If this parameter is not included in the Update Location indication and the Subscriber is marked as only allowed to roam in Subscribed LSAs, then the HLR shall reject the roaming and indicate to the VLR that roaming is not allowed to that Subscriber in the VLR.

Long FTN Supported

This parameter indicates that the VLR supports Long Forwarded-to Numbers

Offered CAMEL 3 CSIs

This parameter indicates the CAMEL phase 3 CSIs offered in the VMSC/VLR.

 Inform Previous Network Entity

This parameter is used by the VLR to ask the HLR to inform the previous network entity about the update by sending the previous network entity a Cancel Location message. It is used in case Super-Charger is supported in the network and the serving network entity has not been able to inform the previous network entity that MS has moved, that is if it has not sent Send Identification to the previous serving entity.

 HLR number

This parameter refers to the ISDN number of an HLR.The presence of this parameter is mandatory in case of successful HLR updating.

User error

  • Unknown Subscriber.
  • Roaming Not allowed.
  • System Failure.
  • Unexpected data Value.

Provider error

 This parameter is used to indicate a protocol related type of error:

  • Duplicated invoke Id;
  • Not supported service;
  • Mistyped parameter;
  • Resource limitation;
  • Initiating release, i.e. the peer has already initiated release of the dialogue and the service has to be released;
  • Unexpected response from the peer;
  • Service completion failure;
  • No response from the peer;
  • Invalid response received.

 

MAP_INSERT_SUBSCRIBER_DATA

This service is used by an HLR to update a VLR with certain subscriber data in the following occasions:

  • The operator has changed the subscription of one or more supplementary services, basic services or data of a subscriber. Note that in case of withdrawal of a Basic or Supplementary service this primitive shall not be used;
  • The operator has applied, changed or removed Operator Determined Barring;
  • The subscriber has changed data concerning one or more supplementary services by using a subscriber procedure;
  • The HLR provides the VLR with subscriber parameters at location updating of a subscriber or at restoration.

Also this service is used by an HLR to update an SGSN with certain subscriber data in the following occasions:

  • If the GPRS subscription has changed;
  • If the network access mode is changed;
  • The operator has applied, changed or removed Operator Determined Barring;
  • The subscriber has changed data concerning one or more supplementary services by using a subscriber procedure;
  • The HLR provides the SGSN with subscriber parameters at GPRS location updating of a subscriber. If the Super‑Charger functionality is supported the HLR may not need to provide the SGSN with subscriber parameters. See 3GPP TS 23.116.

MAP_CANCEL_LOCATION_SERVICE

This service is used between HLR and VLR to delete a subscriber record from the VLR. It may be invoked automatically when an MS moves from one VLR area to another, to remove the subscriber record from the old VLR, or by the HLR operator to enforce a location updating from the VLR to the HLR, e.g. on withdrawal of a subscription.

Cancellation Type

This parameter indicates the reason of location cancellation. It is defined in 3GPP TS 23.060 [104].

User Error

 If the cancellation fails, an error cause is to be returned by the VLR or by the SGSN.

  • Unexpected data value.
  • Data missing.

 Provider Error

This parameter is used to indicate a protocol related type of error:

  • Duplicated invoke Id;
  • Not supported service;
  • Mistype parameter;
  • Resource limitation;
  • Initiating release, i.e. the peer has already initiated release of the dialogue and the service has to be released;
  • Unexpected response from the peer;
  • Service completion failure;
  • No response from the peer;Invalid response received.

 

 

 

 

 

 

 

 

 

 

 

 

Related Posts

204 thoughts on “What is GSM Authentication”

  1. Hi! I would like to invite you to join Sweaty Quid, a quality marketplace for freelancers where you can find the right freelancers for your business and sell your own services at no cost. Get started right now and register at sweatyquid.com and If you have any questions, do let me know! Welcome to the mothership

    Reply

  2. Have you ever considered about including a little bit more than just your articles? I mean, what you say is important and everything. But think about if you added some great images or videos to give your posts more, “pop”! Your content is excellent but with pics and video clips, this blog could certainly be one of the most beneficial in its field. Good blog!

    Reply

  10. Hello would you mind stating which blog platform you’re working with?
    I’m going to start my own blog soon but I’m having a hard time
    making a decision between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your layout seems different then most blogs and I’m looking for
    something completely unique. P.S Sorry for being off-topic but I had to ask!

    Reply

  13. It¦s really a nice and helpful piece of information. I¦m glad that you simply shared this useful info with us. Please stay us informed like this. Thank you for sharing.

    Reply

  14. I’m really inspired together with your writing skills as well as with the layout in your weblog. Is this a paid subject or did you customize it your self? Either way stay up the nice quality writing, it’s rare to peer a nice weblog like this one nowadays.

    Reply

  16. We are a group of volunteers and opening a new scheme in our community. Your website provided us with valuable info to work on. You have done an impressive job and our entire community will be grateful to you.

    Reply

  18. Hi, I do believe this is a great blog. I stumbledupon it 😉 I’m going to return yet again since i have saved as a
    favorite it. Money and freedom is the greatest way to change,
    may you be rich and continue to guide other people.

    Reply

  19. Thank you for some other informative website. The place
    else may I get that type of info written in such a perfect way?
    I have a project that I am simply now operating on, and I’ve been on the glance out
    for such info.

    Reply

  20. I don’t even know how I ended up here, but I thought this post was good.
    I don’t know who you are but definitely you’re going
    to a famous blogger if you aren’t already 😉 Cheers!

    Reply

  21. I blog often and I truly thank you for your content.
    This article has truly peaked my interest. I am going to book mark your blog and keep checking for new details
    about once a week. I subscribed to your Feed as well.

    Reply

  22. I must thank you for the efforts you have put in penning this website.
    I’m hoping to check out the same high-grade content from you
    later on as well. In fact, your creative writing abilities
    has motivated me to get my own blog now 😉

    Reply

  26. Howdy! I know this is kind of off-topic but I needed to ask.
    Does managing a well-established blog like yours take a large
    amount of work? I am completely new to running
    a blog but I do write in my journal every day. I’d
    like to start a blog so I can share my own experience and views online.
    Please let me know if you have any kind of recommendations or tips for new aspiring blog owners.
    Appreciate it!

    Reply

    1. Yes. Time required to manage properly a blog including some idea n knowledge about posts you want to update.

      Like page layouts and front size , how to use headers.

      Main thing you should know about SEO also

      Reply

  27. Have you ever thought about writing an ebook
    or guest authoring on other sites? I have a blog based upon on the same ideas you discuss and would really like to have you share some stories/information. I
    know my readers would appreciate your work.
    If you are even remotely interested, feel free to send me an e-mail.

    Reply

  28. Aw, this was an extremely good post. Taking the time and actual effort
    to create a top notch article… but what can I say… I hesitate a whole lot and never manage
    to get nearly anything done.

    Reply

  29. Hello there! Quick question that’s entirely off topic. Do you
    know how to make your site mobile friendly? My
    site looks weird when viewing from my iphone.
    I’m trying to find a template or plugin that might be able to resolve this
    problem. If you have any recommendations, please share.
    Thank you!

    Reply

  31. I don’t know if it’s just me or if perhaps everybody else experiencing problems
    with your site. It appears like some of the written text on your
    content are running off the screen. Can somebody else please comment and let me know if this is
    happening to them as well? This could be a issue with my web browser because I’ve had this
    happen before. Appreciate it

    Reply

  33. I’ve learn some good stuff here. Definitely price bookmarking for
    revisiting. I surprise how so much effort you place to make this kind of magnificent informative website.

    Reply

  34. Pretty great post. I just stumbled upon your weblog and wanted to
    say that I’ve truly loved browsing your blog posts.
    In any case I’ll be subscribing for your feed and I hope you write once more
    soon!

    Reply

  35. Have you ever thought about creating an e-book or guest authoring on other blogs?

    I have a blog based upon on the same subjects you discuss
    and would love to have you share some stories/information.
    I know my viewers would value your work. If you’re even remotely interested, feel
    free to send me an e-mail.

    Reply

  36. An outstanding share! I have just forwarded this onto a
    co-worker who has been conducting a little homework on this.
    And he in fact bought me breakfast due to the fact that I found it for
    him… lol. So let me reword this…. Thank YOU for the meal!!
    But yeah, thanks for spending time to talk about this topic here on your web page.

    Reply

  38. My brother suggested I might like this web site. He was once entirely right.

    This publish truly made my day. You cann’t imagine simply how so much time I had spent for this information! Thanks!

    Reply

  39. That is very interesting, You’re an excessively professional blogger.
    I have joined your feed and stay up for in search of extra of your fantastic post.
    Also, I have shared your site in my social networks

    Reply

  42. Write more, thats all I have to say. Literally, it seems as though you relied on the video
    to make your point. You definitely know what youre talking
    about, why waste your intelligence on just posting videos to your site when you
    could be giving us something enlightening to read?

    Reply

  44. Have you ever considered about adding a little bit
    more than just your articles? I mean, what you say is
    important and all. Nevertheless think about if
    you added some great visuals or video clips to give your posts more, “pop”!

    Your content is excellent but with images
    and clips, this site could certainly be one of the best in its niche.
    Excellent blog!

    Reply

  45. Hey I know this is off topic but I was wondering if you knew
    of any widgets I could add to my blog that automatically tweet my newest
    twitter updates. I’ve been looking for a plug-in like this
    for quite some time and was hoping maybe you would have some experience with something like this.
    Please let me know if you run into anything. I truly enjoy reading your blog and I look forward to your new updates.

    Reply

  46. What’s Going down i am new to this, I stumbled upon this I’ve found It absolutely useful and it has
    helped me out loads. I hope to contribute & aid different users like its aided me.
    Good job.

    Reply

  48. Good way of explaining, and pleasant post to take
    facts concerning my presentation subject, which i am going to convey in institution of higher education.

    Reply

  49. An impressive share! I’ve just forwarded this onto a
    coworker who had been conducting a little homework on this.
    And he in fact bought me dinner because I found
    it for him… lol. So allow me to reword this….
    Thanks for the meal!! But yeah, thanks for spending
    some time to discuss this issue here on your internet site.

    Reply

  50. Thanks for any other informative blog. Where else may just I get that type of info
    written in such an ideal way? I have a challenge that I’m
    just now running on, and I have been at the glance out for such information.

    Reply

  52. This is very interesting, You’re a very skilled blogger.

    I have joined your feed and look forward to seeking more of your wonderful post.
    Also, I have shared your website in my social networks!

    Reply

  54. It’s a pity you don’t have a donate button!
    I’d certainly donate to this excellent blog! I guess for now i’ll settle for book-marking and adding
    your RSS feed to my Google account. I look forward to brand
    new updates and will talk about this website with my
    Facebook group. Talk soon!

    Reply

  64. Hello There. I found your blog using google. This is an extremely well written article.

    I’ll make sure too bookmark it and return to read more of your useful information. Thanks for thee post.

    I’ll certainly return.

    Reply

  67. I’m very happy to discover this page. I need to to thank you
    for ones time just for this fantastic read!
    I definitely really liked every little biit of it and I have you
    bookmarked to check out new things in your blog.

    Reply

  68. Very nice post. Ijust stumbled upon your blog and wanted to sayy that I’ve truly enjoyed surfing around your blog posts.
    In any case I wkll be subscribing to your feed aand
    I hope you write again veery soon!

    Reply

  72. Sweet blog! I found it while searching on Yahoo News. Do you have any suggestions on how to
    get listed in Yahoo News? I’ve been trying for a while but I never
    seem to get there! Many thanks

    Reply

  73. Hi! Someone in my Facebook group shared this
    website with us so I came to look it over. I’m definitely
    enjoying the information. I’m bookmarking and will be tweeting this to my followers!
    Terrific blog and wonderful style and design.

    Reply

  75. Hi there superb website! Does running a blog like this take a massive amount work?
    I have no understanding of computer programming but I was hoping
    to start my own blog in the near future. Anyhow, should you have any recommendations
    or techniques for new blog owners please share.
    I understand this is off topic however I simply needed to ask.
    Thanks!

    Reply

  76. Wonderful post but I was wanting to know if you
    could write a litte more on this subject? I’d be very thankful if you
    could elaborate a little bit more. Appreciate it!

    Reply

  77. This is very interesting, You are an excessively professional blogger.
    I have joined your feed and look ahead to in the hunt for extra of
    your wonderful post. Additionally, I have shared your web site in my social networks

    Reply

  79. Really interesting information, I am sure this post has touched all internet users,
    its really really pleasant piece of writing on uilding up new website.

    Reply

  80. I’m very happy to discover this page. I need too to thyank youu for ones time just for this fantastic read!
    I definitely really liked every little bit of it and I
    have you bookmarked to check out new things in your blog.

    Reply

  83. Its like you read my mind! You seem to know a lot about this, like you wrote the book in it or something. I think that you could do with some pics to drive the message home a little bit, but other than that, this is fantastic blog. An excellent read. I will definitely be back.

    Reply

  87. I have found very interesting your article.It’s pretty
    worth enough for me. In my view, if all wwebsite
    owners and bloggers made goo content as you did, the web will be
    a lot more usefu than ever before.

    Reply

  89. Hello! I wish to say that this poost is awesome, great written annd come with approximatesly all
    important infos. I’d like to look extra posts lie this!
    🙂

    Reply

  93. Hello! I wish tto say that this post is awesome, great written and come with approximately all important infos.

    I’d like to loo extra posts like this! 🙂

    Reply

  96. Nice post. I wass checking continuoysly this blog and I’m impressed!
    Veryy useful information specially the last part 🙂 I cae for such info a lot.
    I was looking for this particular information for a long time.
    Thank you and best off luck.

    Reply

  101. I think this is one of the most important ibformation for me.
    And i aam glad reading your article. But wanna remark
    on few general things, Thee web site style is perfect, the articles
    is rerally great!

    Reply

  109. Hello everyone, it’s myy first visit at this website,
    and piece of writing is genuinely fruitful desiogned forr me, keep up posting ssuch articles or reviews.

    Reply

  112. You really make it appear so easy together with your presentation however I
    find this topic to be really one thing which I think I might by
    no means understand. It kind of feels too complicated and very huge for me.

    I am taking a look ahead to your next publish, I’ll attempt to get
    the hold of it!

    Reply

  113. Fascinating blog! Is your theme custom made or did you download it from somewhere?
    A theme like yours with a few simple tweeks would really make my blog
    stand out. Please let me know where you got your theme. Appreciate it

    Reply

  114. I’ve been browsing online greater than three hours nowadays, yet
    I by no means discovered any interesting article like yours.
    It’s pretty value sufficient for me. In my opinion, if all webmasters and
    bloggers made good content as you did, the internet will
    be a lot more useful than ever before.

    Reply

  116. Hi there, I found your blog by means of Google at the same time as
    searching for a related topic, your website got here up, it appears to be
    like good. I have bookmarked it in my google bookmarks.
    Hi there, simply was alert to your weblog via Google, and found that it is really informative.
    I’m going to watch out for brussels. I will appreciate in the event you proceed this in future.
    Lots of other folks shall be benefited from your writing.
    Cheers!

    Reply

  119. Greetings! Very useful advice in this particular post! It’s the little changes
    that will make the most important changes. Many thanks
    for sharing!

    Reply

  120. My brother recommended I might like this blog. He was entirely
    right. This post actually made my day. You cann’t
    imagine just how much time I had spent for this information! Thanks!

    Reply

  121. Useful information. Fortunate me I discovered your web site
    by chance, and I’m shocked why this twist of fate didn’t happened earlier!
    I bookmarked it.

    Reply

  122. Hello my family member! I want to say that this article is amazing,
    great written and come with approximately all important infos.

    I’d like to see more posts like this .

    Reply

  124. Hey there! I’ve been reading your web site for a long time now and finally got
    the bravery to go ahead and give you a shout out from
    New Caney Texas! Just wanted to tell you keep up the good job!

    Reply

  129. Excellent post. I was checking continuously this bllog and I am impressed!
    Extremely useful information. I care foor such information a lot.

    I was looking for this certain information for a very long time.Thank you
    and good luck.

    Reply

  135. It’s amazing to pay a quick visit this web page and reading the views of all colleagues on the topic of
    this paragraph, while I am also zealous of getting
    knowledge.

    Reply

  136. My partner and I stumbled over here by a different web page and thought I might as well check things out.
    I like what I see so i am just following you. Look forward to checking out your web page yet again.

    Reply

  138. Hello! I simply wish to give you a huge thumbs up for the great information you have here on this post.
    I am returning to your web site for more soon.

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *