Project

General

Profile

Baseband behavior on IMSI change » History » Version 7

neels, 02/26/2020 12:54 AM

1 1 neels
h1. Baseband behavior on IMSI change
2
3 4 neels
h1. With "Proactive SIM" REFRESH command
4
5 5 neels
According to ETSI TS 101 267 / 3GPP TS 11.14 section 6.4.7.1 "EF IMSI changing procedure", after changing EF-IMSI,
6
valid REFRESH qualifiers are
7 1 neels
8 5 neels
* "SIM Initialization and File Change Notification"
9
* "SIM Initialization and Full File Change Notification"
10
* "SIM Reset"
11 1 neels
12 5 neels
h2. ATT == 1 (Channel Description: Attach = yes)
13
14 6 neels
* Samsung Galaxy phone displays "Refreshing SIM" (notification bubble on display, probably annoying to the user)
15 5 neels
* immediate IMSI Detach
16 6 neels
* some seconds delay of being detached: Samsung Galaxy S4m = 15s; NOKIA 1100 = 8s
17 5 neels
* Location Updating (IMSI Attach) with previous TMSI (!)
18
* MSC has forgotten the TMSI due to IMSI detach (OsmoMSC peculiarity, usually an MSC should still have the TMSI)
19
* Identity Request & Response yields new IMSI
20 1 neels
21 7 neels
h2. ATT == 0 (Channel Description: Attach = no)
22 1 neels
23 7 neels
h3. ATT == 0, Nokia 1100
24
25
* omits IMSI Detach
26
* Nokia 1100 sends Location Updating (Periodic) immediately = changes identity at MSC immediately
27
28
h3. ATT == 0, Samsung Galaxy S4m 
29
30
* omits IMSI Detach
31
* does not send Location Updating = stays on previous TMSI = keeps old identity
32
* even after periodic LU period expired, still uses previous TMSI = still keeps old identity
33
  (due to omitted IMSI Detach, OsmoMSC still knows the TMSI; if we implement that OsmoMSC forgets the TMSI, the periodic LU should ask for the IMSI and change identity)
34
35 1 neels
h1. Phones Keep the TMSI
36
37
Even though the IMSI has changed, the Baseband uses the last TMSI, and hence looks as if it remained completely unchanged, keeps using the previous identity.
38
After a power cycle, it also uses the last TMSI.
39 5 neels
40 2 neels
When the MSC has forgotten the last TMSI (e.g. due to IMSI Detach), the Identity Request is answered with the new IMSI, and the phone has thus switched to the new identity.
41 1 neels
42 7 neels
* Needs to make sure the MSC forgets the TMSI.
43
* Investigate whether we can make the SIM forget the TMSI.
44
45 6 neels
46
h1. Without "Proactive SIM" REFRESH command
47
48
Just for your info, we should not omit the REFRESH.
49
50
| phone | directly when writing new IMSI to SIM file | on CM Service Request | after periodical LU period | after flight mode / phone restart | on Identity Request | 
51
| Nokia | no reaction                                | uses previous TMSI    | uses previous TMSI         | uses previous TMSI                | returns new IMSI |
52
| Samsung Galaxy S4m | no reaction                   | uses previous TMSI    | uses previous TMSI         | uses previous TMSI                | returns new IMSI |
Add picture from clipboard (Maximum size: 48.8 MB)