Conceptio › Archive › ECMA International

ECMA Internationalopen access

ECMA-306 — Private Integrated Services Network (PISN) - Inter-exchange signalling protocol - Wireless Terminal Authentication supplementary services (QSIG-WTMAU) (December 2001)

ECMA International · ECMA International

ECMA International · Standards · License: Open Access

authentication ecma ecmainternational exchange integrated inter network pisn

ecma, standard, ecma international, specification, ecma-306, ecma 306, 306, private, integrated, services, network, pisn, inter-exchange, signalling, protocol, wireless, terminal, authentication, supplementary, qsig-wtmau

S tandard ECMA-306

2nd Edition - December 2001

Standardizing Information

and

Communication

Systems

Private Integrated Services Network (PISN) Inter-Exchange Signalling Protocol Wireless Terminal Authentication Supplementary Services

Phone: +41 22 849.60.00 - Fax: +41 22 849.60.01 - URL: http://www.ecma.ch - Internet: [email protected]

S tandard ECMA-306

2nd Edition - December 2001

Standardizing

Information

and

Communication

Systems

Private Integrated Services Network (PISN) Inter-Exchange Signalling Protocol Wireless Terminal Authentication Supplementary Services (QSIG-WTMAU)

Phone: +41 22 849.60.00 - Fax: +41 22 849.60.01 - URL: http://www.ecma.ch - Internet: [email protected] IW

Ecma-306.doc

14-01-02 10,45

Brief History

This Standard is one of a series of ECMA Standards defining Wireless Terminal Mobility (WTM) services and signalling protocols applicable to Private Integrated Services Networks (PISNs). The series uses ISDN concepts as developed by ITU-T and conforms to the framework of International Standards for Open Systems Interconnection as defined by ISO/IEC. This particular Standard specifies the signalling protocol for use at the Q reference point in support of the Wireless Terminal Authentication supplementary services. The protocol defined in this Standard forms part of the PSS1 protocol (informally known as QSIG). This Standard is based upon the practical experience of ECMA member companies and the results of their active and continuous participation in the work of ISO/IEC JTC1, ITU-T, ETSI and other international and national standardization bodies. It represents a pragmatic and widely based consensus. Compared to the 1st edition of Standard ECMA-306 (published by ECMA in June 2000), this 2nd Edition incorporates migration to ASN.1 version 1997.

Adopted as 2nd Edition of Standard ECMA-306 by the General Assembly of December 2001.

- i -

Table of contents 1

Scope

Conformance

References (normative)

Terms and definitions 4 . 1 E x te r n a l d e f in itio n s 4 . 2 O th e r d e f in itio n s 4.2.1 Authentication Server PINX

2 2 3 3

Symbols and abbreviated terms

Signalling protocol for the support of SS-WTAT 6 . 1 S S - W T A T d e s c r ip tio n 6 . 2 S S - W T A T o p e r a tio n a l r e q u ir e me n ts 6.2.1 Re q u ir e me n ts o n a V is ito r P I N X 6.2.2 Re q u ir e me n ts o n a H o me P I N X 6.2.3 Re q u ir e me n ts o n th e A u th e n tic a tio n S e r v e r P I N X 6.2.4 Re q u ir e me n ts o n a T r a n s it P I N X 6 . 3 S S - W T A T c o d in g r e q u ir e me n ts 6.3.1 Operations 6.3.2 I n f o r ma t i o n e l e me n t s 6.3.3 Messages 6 . 4 S S - W T A T s ta te d e f in itio n s 6.4.1 S t a t e s a t t h e H o me P I N X f o r i n i t i a t i o n o f S S - W T A T 6.4.2 S t a t e s a t t h e H o me P I N X f o r r e q u es t i n g a u t h e n t i c a t i o n p a r a me t e r s 6.4.3 S t a t e s a t t h e H o me P I N X w h e n f etc h in g a u th e n tic a tio n p a r a me te r s 6.4.4 States at the Visitor PINX for execution of SS-WTAT 6.4.5 S t a t e s a t t h e V i s i t o r P I N X f o r r e q u e s t i n g a u t h e n t i c a t i o n p a r a me t e r s 6.4.6 States at the Authentication Server PINX 6 . 5 S S - W T A T S ig n a llin g p r o c e d u r e s 6.5.1 A c t i o n s a t t h e H o me P I N X f o r i n i t i a t i o n o f S S - W T A T 6.5.2 A c tio n s a t th e H o me P I N X f o r r e q u e s tin g a u th e n tic a tio n p a r a me te r s 6.5.3 A c tio n s a t th e H o me P I N X w h e n f e tc h in g a u th e n tic a tio n p a r a me te r s 6.5.4 Actions at the Visitor PINX for local initiation of SS-WTAT 6.5.5 A c tio n s a t th e V is ito r P I N X f o r e x e c u tio n o f S S - W T A T 6.5.6 A c t i o n s a t t h e V i s i t o r P I N X f o r r e q u e s t i n g a u t h e n t i c a t i o n p a r a me t e r s 6.5.7 Actions at the Authentication Server PINX 6.5.8 Actions at a Transit PINX 6 . 6 S S - W T A T I mp a c t o f in te r w o r k in g w ith p u b lic I S D N s 6 . 7 S S - W T A T I mp a c t o f in te r w o r k in g w ith n o n - I S D N s 6 . 8 P r o to c o l in te r a c tio n s b e tw e e n S S - W T A T an d o th e r s u p p le me n ta r y s e r v ic e s a n d A N F s

3 3 3 3 3 3 3 4 4 7 7 7 7 8 8 8 8 8 8 9 9 10 10 11 11 12 12 12 12 12

- ii -

6.8.1 I n t e r a c t i o n w i t h C a l l i n g N a me I d e n t i f i c a t i o n P r e s e n t a t i o n ( S S - C N I P ) 6.8.2 I n t e r a c t i o n w i t h C o n n e c t e d N a me I d e n t i f i c a t i o n P r e s e n t a t i o n ( S S - C O N P ) 6.8.3 I n t e r a c t i o n w i t h C o mp l e t i o n o f C a l l s t o B u s y S u b s c r i b e r ( S S - C C B S ) 6.8.4 I n te r a c tio n w ith Co mp le tio n o f Ca lls o n N o Re p ly ( S S - CCN R) 6.8.5 Interaction with Call Transfer (SS-CT) 6.8.6 I n te r a c tio n w ith Ca ll F o r w a r d in g U n c o n d itio n a l ( S S - CF U ) 6.8.7 I n t e r a c t i o n w i t h C a l l F o r w a r d in g B u s y ( S S - C F B ) 6.8.8 I n te r a c tio n w ith Ca ll F o r w a r d in g N o Re p ly ( S S - CF N R) 6.8.9 Interaction with Call Deflection (SS-CD) 6.8.10 I n t e r a c t i o n w i t h P a t h R e p l a c e me n t ( A N F - P R ) 6.8.11 Interaction with Call Offer (SS-CO) 6.8.12 Interaction with Call Intrusion (SS-CI) 6.8.13 Interaction with Do Not Disturb (SS-DND) 6.8.14 I n t e r a c t i o n w i t h D o N o t D is t u r b O v e r r i d e ( S S - D N D O ) 6.8.15 I n te r a c tio n w ith A d v ic e O f Ch a r g e ( S S - A O C) 6.8.16 Interaction with Recall (SS-RE) 6.8.17 Interaction with Call Interception (ANF-CINT) 6.8.18 I n te r a c tio n w ith T r a n s it Co u n te r ( A N F - T C) 6.8.19 I n t e r a c t i o n w i t h R o u te R e s t r i c t i o n C l a s s ( A N F - R R C ) 6.8.20 I n t e r a c t i o n w i t h Me s s a g e W a i t i n g I n f o r ma t i o n ( S S - MW I ) 6.8.21 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l L o c a t i o n R e g is t r a t i o n ( S S - W T L R ) 6.8.22 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l i n f o r ma t i o n e x c h a n g e ( A N F - W T I N F O ) 6.8.23 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l I n c o min g C a l l ( A N F - W T MI ) 6.8.24 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l O u t g o in g C a l l ( A N F - W T M O ) 6.8.25 Interaction with Authentication of the PISN (SS-WTAN) 6 . 9 S S - W T A T p a r a me t e r v a l u e s ( t i me r s ) 6.9.1 T i me r T 1 6.9.2 T i me r T 2 6.9.3 T i me r T 3

13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 14 14 14 14 14 14 14 14 14 14 14

Signalling protocol for the support of SS-WTAN 7 . 1 S S - W T A N d e s c r ip tio n 7 . 2 S S - W T A N o p e r a tio n a l r e q u ir e me n ts 7.2.1 Re q u ir e me n ts o n th e V is ito r P I N X 7.2.2 Re q u ir e me n ts o n th e H o me P I N X 7.2.3 Re q u ir e me n ts o n th e A u th e n tic a tio n S e r v e r P I N X 7.2.4 Re q u ir e me n ts o n a T r a n s it P I N X 7 . 3 S S - W T A N c o d in g r e q u ir e me n ts 7.3.1 Operations 7.3.2 I n f o r ma t i o n e l e me n t s 7.3.3 Messages 7 . 4 S S - W T A N s ta te d e f in itio n s 7.4.1 States at the Visitor PINX 7.4.2 S t a t e s a t t h e H o me P I N X 7.4.3 States at the Authentication Server PINX 7 . 5 S S - W T A N s ig n a llin g p r o c e d u r e s

14 14 15 15 15 15 15 15 15 15 15 15 15 15 16 16

- iii -

7.5.1 Actions at the Visitor PINX 7.5.2 A c t i o n s a t t h e H o me P I N X 7.5.3 Actions at the Authentication Server PINX 7.5.4 Actions at a Transit PINX for authentication of a PISN 7 . 6 S S - W T A N imp a c t o f in te r w o r k in g w ith p u b lic I S D N s 7 . 7 S S - W T A N imp a c t o f in te r w o r k in g w ith n o n - I S D N s 7 . 8 P r o to c o l in te r a c tio n s b e tw e e n S S - W T A N a n d o th e r s u p p le me n ta r y s e r v ic e s a n d A N F s 7.8.1 I n t e r a c t i o n w i t h C a l l i n g N a me I d e n t i f i c a t i o n P r e s e n t a t i o n ( S S - C N I P ) 7.8.2 I n t e r a c t i o n w i t h C o n n e c t e d N a me I d e n t i f i c a t i o n P r e s e n t a t i o n ( S S - C O N P ) 7.8.3 I n t e r a c t i o n w i t h C o mp l e t i o n o f C a l l s t o B u s y S u b s c r i b e r ( S S - C C B S ) 7.8.4 I n te r a c tio n w ith Co mp le tio n o f Ca lls o n N o Re p ly ( S S - CCN R) 7.8.5 Interaction with Call Transfer (SS-CT) 7.8.6 I n te r a c tio n w ith Ca ll F o r w a r d in g U n c o n d itio n a l ( S S - CF U ) 7.8.7 I n t e r a c t i o n w i t h C a l l F o r w a r d in g B u s y ( S S - C F B ) 7.8.8 I n te r a c tio n w ith Ca ll F o r w a r d in g N o Re p ly ( S S - CF N R) 7.8.9 Interaction with Call Deflection (SS-CD) 7.8.10 I n t e r a c t i o n w i t h P a t h R e p l a c e me n t ( A N F - P R ) 7.8.11 Interaction with Call Offer (SS-CO) 7.8.12 Interaction with Call Intrusion (SS-CI) 7.8.13 Interaction with Do Not Disturb (SS-DND) 7.8.14 I n t e r a c t i o n w i t h D o N o t D is t u r b O v e r r i d e ( S S - D N D O ) 7.8.15 I n te r a c tio n w ith A d v ic e O f Ch a r g e ( S S - A O C) 7.8.16 Interaction with Recall (SS-RE) 7.8.17 Interaction with Call Interception (ANF-CINT) 7.8.18 I n te r a c tio n w ith T r a n s it Co u n te r ( A N F - T C) 7.8.19 I n t e r a c t i o n w i t h R o u te R e s t r i c t i o n C l a s s ( A N F - R R C ) 7.8.20 I n t e r a c t i o n w i t h Me s s a g e W a i t i n g I n f o r ma t i o n ( S S - MW I ) 7.8.21 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l L o c a t i o n R e g is t r a t i o n ( S S - W T L R ) 7.8.22 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l i n f o r ma t i o n e x c h a n g e ( A N F - W T I N F O ) 7.8.23 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l I n c o min g C a l l ( A N F - W T MI ) 7.8.24 I n t e r a c t i o n w i t h W ir e l e s s T e r mi n a l O u t g o in g C a l l ( A N F - W T M O ) 7.8.25 Interaction with Authentication of the PISN (SS-WTAT) 7 . 9 S S - W T A N p a r a me t e r v a l u e s ( t i me r s ) 7.9.1 T i me r T 4 7.9.2 T i me r T 5

16 16 17 18 18 18 18 18 18 18 18 18 18 18 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 19 20

A n n e x A - P r o t o c o l I m p l e m e n t a t i o n C o n fo r m a n c e S t a t e m e n t ( P I C S ) p r o f o r m a

Annex B - Imported ASN.1 definitions

A n n e x C - Ex a m p le s o f m e s s a g e s e q u e n c e s

A n n e x D - S p e c i f i c a t i o n a n d D e s c r i p t i o n L a n gu a g e ( S D L ) r e p r e s e n t a t i o n o f p r o c e d u r e s

A n n e x E - A S N . 1 d e f in it io n s a c c o r d in g t o I TU - T R e c s . X . 2 0 8 / X . 2 0 9

Scope This Standard specifies the signalling protocol for the support of the Wireless Terminal Authentication supplementary services (SS-WTAT and SS-WTAN) at the Q reference point between Private Integrated services Network eXchanges (PINXs) connected together within a Private Integrated Services Network (PISN). Authentication of a WTM user (SS-WTAT) is a supplementary service that enables a PISN, as a security measure, to validate the identity provided by the WTM user. Authentication of the PISN (SS-WTAN) is a supplementary service that enables a served WTM user, as a security measure, to validate the identity of the PISN. The mechanisms used in these services are based on the challenge and response method of authentication. Authentication algorithms to be used by these supplementary services are outside the scope of this Standard. The Q reference point is defined in ECMA-133. Service specifications are produced in three stages and according to the method specified in ITU-T Rec. I.130. This Standard contains the stage 3 specification for the Q reference point and satisfies the requirements identified by the stage 1 and stage 2 specifications in ECMA-305. The signalling protocol for SS-WTAT and SS-WTAN uses certain aspects of the generic procedures for the control of supplementary services specified in ECMA-165. This Standard also specifies additional signalling protocol requirements for the support of interactions at the Q reference point between SS-WTAT / SS-WTAN and other supplementary services and ANFs. This Standard is applicable to PINXs which can interconnect to form a PISN.

Conformance In order to conform to this Standard, a PINX shall satisfy the requirements identified in the Protocol Implementation Conformance Statement (PICS) proforma in annex A.

References (normative) The following standards contain provisions which, through reference in this text, constitute provisions of this Standard. All standards are subject to revision, and parties to agreements based on this Standard are encouraged to investigate the possibility of applying the most recent editions of the standards indicated below. In the case of references to ECMA Standards that are aligned with ISO/IEC International Standards, the number of the appropriate ISO/IEC International Standard is given in brackets after the ECMA reference. ECMA-133

Private Integrated Services Network (PISN) - Reference Configuration for PISN Exchanges (PINX) (International Standard ISO/IEC 11579-1)

ECMA-142

Private Integrated Services Network (PISN) - Circuit Mode 64kbit/s Bearer Services Service Description, Functional Capabilities and Information Flows (International Standard ISO/IEC 11574)

ECMA-155

Private Integrated Services Networks - Addressing (International Standard ISO/IEC 11571)

ECMA-165

Private Integrated Services Network (PISN) - Generic Functional Protocol for the Support of Supplementary Services - Inter-Exchange Signalling Procedures and Protocol (International Standard ISO/IEC 11582)

ECMA-301

Private Integrated Services Network (PISN) - Specification, Functional Model and Information Flows - Wireless Terminal Location Registration Supplementary Service and Wireless Terminal Information Exchange Additional Network Feature (International Standard ISO/IEC 15428)

- 2 -

ECMA-302

Private Integrated Services Network (PISN) - Inter-Exchange Signalling Protocol Wireless Terminal Location Registration Supplementary Service and Wireless Terminal Information Exchange Additional Network Feature (International Standard ISO/IEC 15429)

ECMA-305

Private Integrated Services Network (PISN) - Specification, Functional Model and Information Flows - Wireless Terminal Authentication Supplementary Services (International Standard ISO/IEC 15432)

ITU-T Rec. I.112

Vocabulary of terms for ISDNs (1993)

ITU-T Rec. I.130

Method for the characterization of telecommunication services supported by an ISDN and network capabilities of an ISDN (Blue Book) (1988)

ITU-T Rec. I.210

Principles of telecommunication services supported by an ISDN and the means to describe them (1993)

ITU-T Rec. Q.950

Supplementary services protocols, structure and general principles (2000)

ITU-T Rec. Z.100

Specification and description language (1999)

Terms and definitions For the purposes of this Standard the following definitions apply.

4.1

External definitions This Standard uses the following terms defined in other documents: – Application Protocol Data Unit (APDU)

(ECMA-165)

– Coordination Function

(ECMA-165)

– End PINX

(ECMA-165)

– Home Data Base (HDB)

(ECMA-301)

– Home PINX

(ECMA-301)

– Interpretation APDU

(ECMA-165)

– Network Facility Extension (NFE)

(ECMA-165)

– Originating PINX

(ECMA-165)

– PISN Number

(ECMA-155)

– Private Integrated Services Network (PISN)

(ECMA-133)

– Private Integrated services Network eXchange (PINX)

(ECMA-133)

– Signalling

(ITU-T Rec. I.112)

– Supplementary Service

(ITU-T Rec. I.210)

– Supplementary Services Control Entity

(ECMA-165)

– Terminating PINX

(ECMA-165)

– Transit PINX

(ECMA-165)

– User

(ECMA-142)

– Visitor area

(ECMA-301)

– Visitor PINX

(ECMA-301)

– WTM user

(ECMA-305)

– WTM user’s identity

(ECMA-301)

- 3 -

4.2

Other definitions

4.2.1

Authentication Server PINX The PINX that contains the functionality to compute a challenge for a WTM user.

Symbols and abbreviated terms

ANF

Additional Network Feature

APDU

Application Protocol Data Unit

ASN.1

Abstract Syntax Notation no. 1

HDB

Home Data Base

ISDN

Integrated Services Digital Network

NFE

Network Facility Extension

PICS

Protocol Implementation Conformance Statement

PINX

Private Integrated services Network eXchange

PISN

Private Integrated Services Network

SDL

Specification and Description Language

SS-WTAN

Supplementary service - Authentication of a PISN

SS-WTAT

Supplementary service - Authentication of a WTM user

Wireless Terminal

WTM

Wireless Terminal Mobility

Signalling protocol for the support of SS-WTAT

6.1

SS-WTAT description SS-WTAT is a supplementary service which enables the PISN, as a security measure, to validate the identity provided by the WTM user. This is done by sending specific information to the WTM user and awaiting a response. If the received response is the expected response then authentication has passed successfully.

6.2

SS-WTAT operational requirements

6.2.1

Requirements on a Visitor PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for an Originating and Terminating PINX, shall apply.

6.2.2

Requirements on a Home PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for an Originating and Terminating PINX, shall apply.

6.2.3

Requirements on the Authentication Server PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for a Terminating PINX, shall apply.

6.2.4

Requirements on a Transit PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for a Transit PINX, shall apply.

- 4 -

6.3

SS-WTAT coding requirements

6.3.1

O p e r a t io n s The operations defined in Abstract Syntax Notation number 1 (ASN.1) in table 1 shall apply. The notation is in accordance with ITU-T Rec. X.680 and X.690. The ITU-T Rec. X.208 and X.209 superseded version is in annex E. Table 1 - Operations in support of Authentication services

WTM-Authentication–Operations-asn1-97 {iso standard pss1-authentication (15433) authentication–operations-asn1-97 (1)} DEFINITIONS EXPLICIT TAGS ::= BEGIN IMPORTS

OPERATION, ERROR FROM Remote-Operations-Information-Objects {joint-iso-itu-t(2) remote-operations(4) informationObjects(5) version1(0)} EXTENSION, Extension{} FROM Manufacturer-specific-service-extension-class-asn1-97 {iso standard pss1-generic-procedures (11582) msi-class-asn1-97 (11)} invalidServedUserNr FROM General-Error-List {ccitt recommendation q 950 general-error-list (1)} PartyNumber FROM Addressing-Data-Elements-asn1-97 {iso(1) standard(0) pss1-generic-procedures(11582) addressing-data-elements-asn1-97(20)};

WTMAuth-Operations OPERATION ::= {authWtmUser | getWtatParam | wtatParamEnq | getWtanParam | wtanParamEnq | transferAuthParam} -- The following three operations shall apply to SS-WTAT -authWtmUser

OPERATION ::= { -- from Home PINX to Visitor PINX-ARGUMENT AuthWtmArg RESULT AuthWtmRes ERRORS { temporarilyUnavailable | invalidServedUserNr | notAuthorized | paramNotAvailable | unspecified} CODE local : 72}

getWtatParam

OPERATION ::= { -- from Visitor PINX to Home PINX -ARGUMENT WtatParamArg RESULT WtatParamRes ERRORS { invalidServedUserNr | notAuthorized | paramNotAvailable | temporarilyUnavailable | unspecified} CODE local : 73}

wtatParamEnq

OPERATION ::= { -- from Home PINX to Authentication Server PINX-ARGUMENT WtatParamArg RESULT WtatParamRes ERRORS { invalidServedUserNr | paramNotAvailable | unspecified} CODE local : 74}

AuthWtmArg ::=

SEQUENCE

{ wtmUserId WtmUserId, calcWtatInfo [ 1 ] IMPLICIT CalcWtatInfo OPTIONAL, dummyExtension DummyExtension OPTIONAL}

- 5 -

T a b l e 1 - O p e r a t i o n s i n s u p p o r t o f A ut h e n t i c a t i o n s e r v i c e s ( c o n t i n u e d ) AuthWtmRes ::=

WtatParamArg ::=

SEQUENCE

{ autWtmResValue dummyExtension

ENUMERATED {auth-res-correct (0), auth-res-incorrect (1) }, DummyExtension OPTIONAL}

{ wtmUserId canCompute authChallenge dummyExtension

WtmUserId, CanCompute OPTIONAL, AuthChallenge OPTIONAL, DummyExtension OPTIONAL}

-- The presence of element canCompute indicates that the Visitor PINX is able to --- compute a challenge and the expected response from session key information -WtatParamRes ::=

SEQUENCE

{wtatParamInfo dummyExtension

WtatParamInfo, DummyExtension OPTIONAL}

-- The following two operations shall apply to SS-WTAN -getWtanParam

OPERATION ::= { -- from Visitor PINX to Home PINX -ARGUMENT WtanParamArg RESULT WtanParamRes ERRORS { invalidServedUserNr | notAuthorized | paramNotAvailable | temporarilyUnavailable | unspecified} CODE local : 75}

wtanParamEnq

OPERATION ::= { -- from Home PINX to Authentication Server PINX-ARGUMENT WtanParamArg RESULT WtanParamRes ERRORS { invalidServedUserNr | paramNotAvailable | unspecified} CODE local : 76}

WtanParamArg ::=

SEQUENCE

{ wtmUserId authChallenge authAlgorithm canCompute dummyExtension

WtmUserId, AuthChallenge, AuthAlgorithm, CanCompute OPTIONAL, DummyExtension OPTIONAL}

-- The presence of element canCompute indicates that the Visitor PINX is able to --- compute the response from session key information -WtmUserId ::=

CHOICE

{ pisnNumber PartyNumber, -- The PISN number of the WTM user, -- always a Complete Number. alternativeId AlternativeId }

AlternativeId ::=

OCTET STRING(SIZE(1..20))

WtanParamRes ::=

SEQUENCE

{wtanParamInfo dummyExtension

WtanParamInfo, DummyExtension OPTIONAL}

- 6 -

T a b l e 1 - O p e r a t i o n s i n s u p p o r t o f A ut h e n t i c a t i o n s e r v i c e s ( c o n t i n u e d ) -- The following unconfirmed operation shall apply when interaction between SS-WTAT and ANF-WTINFO -transferAuthParam

OPERATION ::= { -- from Home PINX to Visitor PINX -ARGUMENT SEQUENCE { wtatParamInfo WtatParamInfo, dummyExtension DummyExtension OPTIONAL} RETURN RESULT FALSE ALWAYS RESPONDS FALSE CODE local : 77}

WtatParamInfo ::=

SEQUENCE

AuthKey ::=

OCTET STRING (SIZE(1..16)) -- Authentication key --

WtanParamInfo ::=

CHOICE

AuthSessionKeyInfo ::= SEQUENCE

{authAlgorithm wtatParamInfoChoice authSessionKeyInfo calcWtatInfo authKey challLen

{authSessionKeyInfo calcWtanInfo

AuthAlgorithm, CHOICE { [ 1 ] IMPLICIT AuthSessionKeyInfo, [ 2 ] IMPLICIT CalcWtatInfo, [ 3 ] IMPLICIT AuthKey, [ 4 ] IMPLICIT INTEGER(1..8) } }

[ 1 ] IMPLICIT AuthSessionKeyInfo, [ 2 ] IMPLICIT CalcWtanInfo}

{authSessionKey AuthSessionKey, calculationParam CalculationParam}

CalcWtatInfo ::=

SEQUENCE SIZE(1..5) OF CalcWtatInfoUnit

CalcWtatInfoUnit ::=

SEQUENCE

{authChallenge AuthChallenge, authResponse AuthResponse, derivedCipherKey [1] IMPLICIT DerivedCipherKey OPTIONAL, calculationParam [2] IMPLICIT CalculationParam OPTIONAL} -- included if required by the authentication algorithm in use --

CalcWtanInfo ::=

SEQUENCE

{authResponse AuthResponse, calculationParam CalculationParam OPTIONAL} -- included if required by the authentication algorithm in use --

DummyExtension ::=

CHOICE

AUTH-ALG

::= CLASS { &id DefinedIDs UNIQUE, &Type OPTIONAL }

{extension sequOfExtn

[5] IMPLICIT Extension{{WTMAuthExtSet}}, [6] IMPLICIT SEQUENCE OF Extension{{WTMAuthExtSet}} }

DefinedIDs ::= INTEGER { ct2 (0), dect (1), gsm (2), pci (3), pwt (4), us-gsm (5), phs (6), tetra (7) } (0..255) AuthAlgSet AUTH-ALG ::= {...} AuthAlgorithm ::=

AuthChallenge ::=

SEQUENCE authAlg param

{ AUTH-ALG.&id({AuthAlgSet}), AUTH-ALG.&Type({AuthAlgSet}{@.authAlg}) OPTIONAL }

OCTET STRING (SIZE(1..8))

-- Randomly generated parameter --

- 7 -

T a b l e 1 - O p e r a t i o n s i n s u p p o r t o f A ut h e n t i c a t i o n s e r v i c e s ( c o n c l u d e d ) AuthResponse ::=

OCTET STRING (SIZE(1..4))

-- WTAT: Expected response value --- WTAN: Response value from network --

AuthSessionKey ::=

OCTET STRING (SIZE(1..16)) -- Authentication session key--

CalculationParam ::=

OCTET STRING (SIZE(1..8))

-- Parameter used when calculating --- the authentication session key from --- the real authentication key. It may be --- transferred to the WTM user during --- both WTAT and WTAN. --

CanCompute ::=

NULL

-- indicates capability of computing --- challenge and/or response value --

DerivedCipherKey ::=

OCTET STRING (SIZE(1..8))

-- derived cipher key may be computed --- when computing challenge and --- expected response values--

WTMAuthExtSet EXTENSION ::= {...} notAuthorized paramNotAvailable temporarilyUnavailable unspecified

END

ERROR ERROR ERROR ERROR ::={ PARAMETER CODE

::= ::= ::=

{CODE local : 1007 } {CODE local : 1017 } {CODE local : 1000 }

Extension{{WTMAuthExtSet}} local : 1008}

-- of WTM-Authentication–Operations-asn1-97

6.3.2 Information elements 6.3.2.1 Facility information element APDUs of the operations defined in 6.3.1 shall be coded in the Facility information element in accordance with ECMA-165. When conveying the invoke APDUs of operations defined in 6.3.1, the destinationEntity data element of the NFE shall contain value endPINX. When conveying the invoke APDUs of operations defined in 6.3.1, the Interpretation APDU shall either be omitted or be included with the value rejectAnyUnrecognisedInvokePdu. 6.3.2.2

6.3.3

6.4

Other information elements Any other information elements (e.g. Calling party number, Called party number) shall be coded in accordance with ECMA-165. Messages The Facility information element shall be conveyed in the messages as specified in clause 10 of ECMA-165.

SS-WTAT state definitions

6.4.1

6.4.1.1

S t a t e s a t t h e H o m e P I N X f o r in it ia t io n o f S S - W TA T The procedures for the Home PINX for initiation of SS-WTAT are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user. S t a t e W t a t H o m e I n it I d le Initiation of SS-WTAT in the Home PINX is not in progress.

- 8 -

6.4.1.2 6.4.2

S t a t e W t a t H o m e I n it ia t in g An authWtmUser invoke APDU has been sent to the Visitor PINX. States at the Home PINX for requesting authentication parameters The procedures for the Home PINX for requesting authentication parameters are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user.

6.4.2.1

S t a t e W t a t H o m e R e q u e s t I d le Ready for receipt of a getWtatParam invoke APDU from the Visitor PINX.

6.4.2.2

S t a t e W t a t H o m e R e q u e s t in g A getWtatParam invoke APDU has been received from the Visitor PINX.

6.4.3

States at the Home PINX when fetching authentication parameters The procedures for the Home PINX when fetching authentication parameters are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user.

6.4.3.1

S t a t e W t a t H o m e F e t c h I d le Fetching of authentication parameters from the Authentication Server PINX during SS-WTAT is not in progress.

6.4.3.2

S t a t e W t a t H o m e F e t c h in g A wtatParamEnq invoke APDU has been sent to the Authentication Server PINX.

6.4.4

S t a t e s a t t h e V is it o r P I N X f o r e x e c u t io n o f S S - W TA T The procedures for the Visitor PINX for execution of SS-WTAT are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user.

6.4.4.1

S t a t e W t a t V is it Ex e c I d le Execution of SS-WTAT is not in progress.

6.4.4.2

S t a t e W t a t V is it Ex e c u t in g An authWtmUser invoke APDU has been received from the Home PINX and execution of SS-WTAT is in progress.

6.4.5

S t a t e s a t t h e V is it o r P I N X f o r r e q u e s t i n g a u t h e n t i c a t i o n p a r a m e t e r s The procedures for the Visitor PINX for requesting authentication parameters are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user.

6.4.5.1

S t a t e W t a t V is it R e q u e s t I d le Request for authentication parameters from the Home PINX during SS-WTAT is not in progress.

6.4.5.2

S t a t e W t a t V is it R e q u e s t in g A getWtatParam invoke APDU has been sent to the Home PINX.

6.4.6

States at the Authentication Server PINX The procedures for the Authentication Server PINX are written in terms of the following conceptual states existing within the SS-WTAT Supplementary Service Control entity in that PINX in association with a particular request for authentication of a WTM user.

6.4.6.1

6.5

S t a t e W t a t A u t h e n t ic a t io n I d le Ready for receipt of a wtatParamEnq invoke APDU from the Home PINX.

SS-WTAT Signalling procedures Examples of message sequences are shown in annex C.

- 9 -

6.5.1

6.5.1.1

A c t io n s a t t h e H o m e P I N X f o r in it ia t io n o f S S - W TA T The SDL representation of procedures at the Home PINX for initiation of SS-WTAT is shown in D.1 of annex D. Normal procedures On determining that SS-WTAT is to be invoked without providing challenge and response values to the Visitor PINX, the Home PINX shall send an authWtmUser invoke APDU to the Visitor PINX where element calcWtatInfo is omitted. On determining that the SS-WTAT is to be invoked with challenge and response values provided to the Visitor PINX, the Home PINX shall use the procedures of 6.5.3 for enquiry to the Authentication Server PINX to fetch challenge and response values. On receipt of challenge and response values from the Authentication Server PINX, the Home PINX shall send an authWtmUser invoke APDU to the Visitor PINX containing the element calcWtatInfo. The authWtmUser invoke APDU shall be sent to the Visitor PINX using the call reference of a callindependent signalling connection. The call-independent signalling connection shall be established (or used, if an appropriate connection is already available) in accordance with the procedures specified in 7.3 of ECMA-165. The Home PINX shall enter state WtatHomeInitiating and start timer T1. On receipt of the authWtmUser return result APDU, the Home PINX shall stop timer T1 and enter state WtatHomeInitIdle. NOTE 1 Confirmation of the authentication of the WTM user should be indicated to the initiating entity. The Home PINX is responsible for clearing the call-independent signalling connection towards the Visitor PINX. This may occur on receipt of a return result APDU. Alternatively, the signalling connection may be retained for other applications, if appropriate.

6.5.1.2

Ex c e p t io n a l p r o c e d u r e s On receipt of an authWtmUser return error or reject APDU from the Visitor PINX, the Home PINX shall stop timer T1 and enter state WtatHomeInitIdle. If timer T1 expires (i.e. the authWtmUser invoke APDU is not answered by the Visitor PINX), the Home PINX shall enter state WtatHomeInitIdle. NOTE 2 Failure of the authentication of the WTM user should be indicated to the initiating entity. The Home PINX is responsible for clearing the call-independent signalling connection towards the Visitor PINX. This may occur on receipt of a return error or reject APDU or on expiry of timer T1. Alternatively, the signalling connection may be retained for other applications, if appropriate.

6.5.2

Actions at the Home PINX for requesting authentication parameters The SDL representation of procedures at the Home PINX for requesting authentication parameters is shown in D.2 of annex D.

6.5.2.1

Normal procedures On receipt of a getWtatParam invoke APDU using the call reference of a call-independent signalling connection (as specified in 7.3 of ECMA-165), the Home PINX shall check that the received WTM user’s identity is valid and that the WTM user is authorized for SS-WTAT. The Home PINX shall then enter state WtatHomeRequesting and initiate fetching of the authentication parameters from the Authentication Server PINX using the procedures of 6.5.3. When the authentication parameters are available, the Home PINX shall answer the getWtatParam invoke APDU with a return result APDU containing the authentication parameters received from the Authentication Server PINX. The Home PINX shall enter state WtatHomeRequestIdle.

6.5.2.2

Ex c e p t io n a l p r o c e d u r e s If the received WTM user’s identity is not valid, the Home PINX shall answer the getWtatParam invoke APDU with a return error APDU containing the error invalidServedUserNr and remain in state WtatHomeRequestIdle.

- 10 -

If the WTM user is not authorized for SS-WTAT, the Home PINX shall answer the getWtatParam invoke APDU with a return error APDU containing the error notAuthorized and remain in state WtatHomeRequestIdle. If authentication parameters are not received for any reason during the procedures of 6.5.3, the Home PINX shall answer the getWtatParam invoke APDU with a return error APDU and enter state WtatHomeRequestIdle. In case of time out, error value temporarilyUnavailable shall be included. In all other cases, error paramNotAvailable shall be included. 6.5.3

A c t io n s a t t h e H o m e P I N X wh e n f e t c h i n g a u t h e n t i c a t i o n p a r a m e t e r s The SDL representation of procedures at the Home PINX when fetching authentication parameters from the Authentication Server PINX is shown in D.3 of annex D. When a Home PINX also provides Authentication Server PINX functionality, the joint requirements of 6.5.3 (for a Home PINX) and 6.5.7 (for an Authentication Server PINX) shall apply, with the exception that any communication between the Home PINX functionality and the Authentication Server PINX functionality will be an intra-PINX matter. The messages specified for sending from the Home PINX towards the Authentication Server PINX or vice versa will not appear on any inter-PINX link.

6.5.3.1

Normal procedures On receipt of a request for fetching authentication parameters, the Home PINX shall send a wtatParamEnq invoke APDU to the Authentication Server PINX using the call reference of a callindependent signalling connection. Element canCompute shall be omitted, unless the Visitor PINX has indicated (by element canCompute in the argument of a getWtatParam invoke APDU) that it is able to compute its own challenge and response. Element authChallenge shall be included if it was provided by the Visitor PINX. The call-independent signalling connection shall be established (or used, if an appropriate connection is already available) in accordance with the procedures specified in 7.3 of ECMA-165. The Home PINX shall enter state WtatHomeFetching and start timer T2. On receipt of the wtatParamEnq return result APDU, the Home PINX shall stop timer T2 and enter state WtatHomeFetchIdle. The Home PINX is responsible for clearing the call-independent signalling connection towards the Authentication Server PINX. This may occur on receipt of a return result APDU. Alternatively, the signalling connection may be retained for other applications, if appropriate.

6.5.3.2

Ex c e p t io n a l p r o c e d u r e s On receipt of a wtatParamEnq return error or reject APDU from the Authentication Server PINX, the Home PINX shall stop timer T2 and enter state WtatHomeFetchIdle. If timer T2 expires (i.e. the wtatParamEnq invoke APDU is not answered by the Authentication Server PINX), the Home PINX shall enter state WtatHomeFetchIdle. The Home PINX is responsible for clearing the call-independent signalling connection towards the Authentication Server PINX. This may occur on receipt of a return error or reject APDU or on expiry of timer T2. Alternatively, the signalling connection may be retained for other applications, if appropriate.

6.5.4

6.5.4.1

A c t io n s a t t h e V is it o r P I N X f o r lo c a l in it ia t io n o f S S - W TA T The SDL representation of procedures at the Visitor PINX for requesting authentication parameters from the Home PINX is shown in D.5 of annex D. Normal procedures On determining that SS-WTAT is to be invoked and when the authentication parameters are not available in the Visitor PINX for this WTM user, the Visitor PINX shall use the procedures of 6.5.6 to make an enquiry to the Home PINX in order to get the authentication parameters. Element authChallenge may be included if the Visitor PINX is capable of calculating a challenge. If the Visitor PINX is capable of calculating challenge and response values, the element canCompute shall be included. On receipt of the authentication parameters from the Home PINX, SS-WTAT shall be executed.

- 11 -

6.5.4.2

6.5.5

6.5.5.1

Ex c e p t io n a l p r o c e d u r e s If the authentication parameters were not received during the procedures of 6.5.6, SS-WTAT will not be executed. A c t io n s a t t h e V is it o r P I N X f o r e x e c u t io n o f S S - W TA T The SDL representation of procedures at the Visitor PINX for execution of SS-WTAT is shown in D.4 of annex D. Normal procedures On receipt of an authWtmUser invoke APDU using the call reference of a call-independent signalling connection (as specified in 7.3 of ECMA-165) and when either element calcWtatInfo is included or authentication parameters for this WTM user are already available at the Visitor PINX, a request for authentication shall be sent to the WTM user and the Visitor PINX shall enter state WtatVisitExecuting. If the element calcWtatInfo is not included in the authWtmUser invoke APDU and when the authentication parameters for this WTM user are not available at the Visitor PINX, the Visitor PINX shall enter state WtatVisitExecuting. During this state the Visitor PINX shall use the procedures of 6.5.6 to make an enquiry to the Home PINX to request the authentication parameters. Element authChallenge may be included if the Visitor PINX is capable of calculating a challenge. If the Visitor PINX is capable of calculating challenge and response values, the element canCompute shall be included. On receipt of the authentication parameters from the Authentication Server PINX, a request for authentication shall be sent to the WTM user. On receipt of the Authentication result from the WTM user, the Visitor PINX shall check the received result. If the Authentication result from the WTM user is correct, the Visitor PINX shall answer the authWtmUser invoke APDU with a return result APDU indicating authentication result correct. If the Authentication result is incorrect, the Visitor PINX shall answer the authWtmUser invoke APDU with a return result APDU indicating authentication result incorrect. The Visitor PINX shall enter state WtatVisitExecIdle.

6.5.5.2

Ex c e p t io n a l p r o c e d u r e s If authentication parameters are not received for any reason during the procedures of 6.5.6, the Visitor PINX shall answer the authWtmUser invoke APDU with a return error APDU and enter state WtatVisitExecIdle. If the authentication request is not answered by the WTM user, the Visitor PINX shall answer the authWtmUser invoke APDU with a return error APDU containing the error temporarilyUnavailable and enter state WtatVisitExecIdle.

6.5.6

6.5.6.1

A c t io n s a t t h e V is it o r P I N X f o r r e q u e s t i n g a u t h e n t i c a t i o n p a r a m e t e r s The SDL representation of procedures at the Visitor PINX for requesting authentication parameters from the Home PINX is shown in D.5 of annex D. Normal procedures In order to make an enquiry to the Home PINX to request the authentication parameters for a WTM user, the Visitor PINX shall send a getWtatParam invoke APDU to the Home PINX using the call reference of a call-independent signalling connection. The call-independent signalling connection shall be established (or used, if an appropriate connection is already available) in accordance with the procedures specified in 7.3 of ECMA-165. The Visitor PINX shall start timer T3 and enter state WtatVisitRequesting. On receipt of the getWtatParam return result APDU, the Visitor PINX shall stop timer T3 and enter state WtatVisitRequestIdle. If the element wtatParamInfo contains authentication session key, the Visitor PINX shall calculate the challenge and the expected response. If the element wtatParamInfo contains calcWtatInfo no calculation is necessary. The Visitor PINX is responsible for clearing the call-independent signalling connection towards the Home PINX. This may occur on receipt of a return result APDU. Alternatively, the signalling connection may be retained for other applications, if appropriate.

- 12 -

6.5.6.2

Ex c e p t io n a l p r o c e d u r e s On receipt of a getWtatParam return error or reject APDU from the Home PINX, the Visitor PINX shall stop timer T3 and enter state WtatVisitRequestIdle. If timer T3 expires (i.e. the getWtatParam invoke APDU is not answered by the Home PINX), the Visitor PINX shall enter state WtatVisitRequestIdle. The Visitor PINX is responsible for clearing the call-independent signalling connection towards the Home PINX. This may occur on receipt of a return error or reject APDU or on expiry of timer T3. Alternatively, the signalling connection may be retained for other applications, if appropriate.

6.5.7

A c t io n s a t t h e A u t h e n t ic a t io n S e r v e r P I N X The SDL representation of procedures at the Authentication Server PINX is shown in D.6 of annex D.

6.5.7.1

Normal procedures On receipt of a wtatParamEnq invoke APDU using the call reference of a call-independent signalling connection (as specified in 7.3 of ECMA-165), the Authentication Server PINX shall check that the received WTM user’s identity is valid and retrieve the authentication parameters if available. Further processing depends on the application: •

If it is required by the application or if the element canCompute is not included in the wtatParamEnq invoke APDU, the Authentication Server PINX shall generate challenge(s) unless one is provided, and use the authentication keys to compute the expected response value(s), and answer the wtatParamEnq invoke APDU with a return result APDU where element wtatParamInfo contains the calculated authentication information (choice calcWtatInfo).

•

If the element canCompute is included in the wtatParamEnq invoke APDU and if it is not required by the application to compute a challenge and the expected response value, the Authentication Server PINX shall answer the wtatParamEnq invoke APDU with a return result APDU where element wtatParamInfo contains the authentication session key (choice authSessionKeyInfo).

•

Choices authKey and challLen shall not be used in the wtatParamEnq return result APDU.

The wtatParamEnq return result APDU shall contain the authentication algorithm in use. The Authentication Server PINX shall remain in state WtatAuthenticationIdle. 6.5.7.2

Ex c e p t io n a l p r o c e d u r e s If the received WTM user’s identity is not valid, the Authentication Server PINX shall answer the wtatParamEnq invoke APDU with a return error APDU containing the error invalidServedUserNr and remain in state WtatAuthenticationIdle. If the authentication parameters are not available, the Authentication Server PINX shall answer the wtatParamEnq invoke APDU with a return error APDU containing the error paramNotAvailable. The Authentication Server PINX shall remain in state WtatAuthenticationIdle.

6.5.8

6.6

A c t io n s a t a Tr a n s it P I N X No special actions are required in support of authentication of a WTM user.

SS-WTAT Impact of interworking with public ISDNs Not applicable.

6.7

SS-WTAT Impact of interworking with non-ISDNs Not applicable.

6.8

Protocol interactions between SS-WTAT and other supplementary services and ANFs This clause specifies protocol interactions with other supplementary services and ANFs for which stage 3 Standards had been published at the time of publication of this Standard. For interactions with supplementary services and ANFs for which stage 3 Standards are published subsequent to the publication of this Standard, see those other stage 3 Standards.

- 13 -

NOTE 3 Additional interactions that have no impact on the signalling protocol at the Q reference point can be found in the relevant stage 1 specifications. NOTE 4 Simultaneous conveyance of APDUs for SS-WTAT and another supplementary service or ANF in the same message, each in accordance with the requirements of its respective stage 3 Standard, does not, on its own, constitute a protocol interaction. 6.8.1

Interaction with Calling Name Identification Presentation (SS-CNIP) No protocol interaction.

6.8.2

Interaction with Connected Name Identification Presentation (SS-CONP) No protocol interaction.

6.8.3

Interaction with Completion of Calls to Busy Subscriber (SS-CCBS) No protocol interaction.

6.8.4

I n t e r a c t i o n wit h C o m p l e t i o n o f C a l l s o n N o R e p l y ( S S - C C N R ) No protocol interaction.

6.8.5

I n t e r a c t io n wit h C a ll Tr a n s f e r ( S S - C T) No protocol interaction.

6.8.6

I n t e r a c t io n wit h C a ll F o r wa r d in g U n c o n d it io n a l ( S S - C F U ) No protocol interaction.

6.8.7

I n t e r a c t io n wit h C a ll F o r wa r d in g Bu s y ( S S - C F B) No protocol interaction.

6.8.8

I n t e r a c t i o n wit h C a l l F o r wa r d i n g N o R e p l y ( S S - C F N R ) No protocol interaction.

6.8.9

Interaction with Call Deflection (SS-CD) No protocol interaction.

6.8.10

Interaction with Path Replacement (ANF-PR) No protocol interaction.

6.8.11

I n t e r a c t i o n wit h C a l l O f f e r ( S S - C O ) No protocol interaction.

6.8.12

I n t e r a c t i o n wit h C a l l I n t r u s i o n ( S S - C I ) No protocol interaction.

6.8.13

I n t e r a c t i o n wit h D o N o t D i s t u r b ( S S - D N D ) No protocol interaction.

6.8.14

Interaction with Do Not Disturb Override (SS-DNDO) No protocol interaction.

6.8.15

I n t e r a c t io n wit h A d v ic e O f C h a r g e ( S S - A O C ) No protocol interaction.

6.8.16

Interaction with Recall (SS-RE) No protocol interaction.

6.8.17

Interaction with Call Interception (ANF-CINT) No protocol interaction.

6.8.18

I n t e r a c t io n wit h Tr a n s it C o u n t e r ( A N F - TC ) No protocol interaction.

- 14 -

6.8.19

I n t e r a c t i o n wit h R o u t e R e s t r i c t i o n C l a s s ( A N F - R R C ) No protocol interaction.

6.8.20

I n t e r a c t io n wit h M e s s a g e W a it in g I n f o r m a t io n ( S S - M W I ) No protocol interaction.

6.8.21

Interaction with Wireless Terminal Location Registration (SS-WTLR) No protocol interaction.

6.8.22

Interaction with Wireless Terminal information exchange (ANF-WTINFO) The following protocol interaction shall apply if ANF-WTINFO is supported in accordance with ECMA-302.

6.8.22.1

A c t io n s a t t h e H o m e P I N X On receipt of a getRRCInf invoke APDU the Home PINX may obtain authentication parameters and include a transferAuthParam invoke APDU in the same message as the getRRCInf return result APDU. The invoke APDU shall contain element wtatParamInfo with choice authKey or challLen.

6.8.22.2

A c t io n s a t t h e V is it o r P I N X When the element wtatParamInfo is received in the transferAuthParam invoke APDU, the authentication information may be stored in the Visitor PINX. It may later be used by the Visitor PINX during authentication of the WTM user.

6.8.23

I n t e r a c t i o n w i t h W i r e l e s s Te r m i n a l I n c o m i n g C a l l ( A N F - W T M I ) No protocol interaction.

6.8.24

I n t e r a c t i o n w i t h W i r e l e s s Te r m i n a l O u t g o i n g C a l l ( A N F - W T M O ) No protocol interaction.

6.8.25

I n t e r a c t i o n wit h A u t h e n t i c a t i o n o f t h e P I S N ( S S - W T A N ) No protocol interaction.

6.9

SS-WTAT parameter values (timers)

6.9.1

Timer T1 Timer T1 operates at the Home PINX during state WtatHomeInitiating. Its purpose is to protect against the absence of a response to the authWtmUser invoke APDU. Timer T1 shall have a value not less than 15 s.

6.9.2

Timer T2 Timer T2 operates at the Home PINX during state WtatHomeFetching. Its purpose is to protect against the absence of a response to the wtatParamEnq invoke APDU. Timer T2 shall have a value not less than 15 s.

6.9.3

Timer T3 Timer T3 operates at the Visitor PINX during state WtatVisitRequesting. Its purpose is to protect against the absence of a response to the getWtatParam invoke APDU. Timer T3 shall have a value not less than 15 s.

7 7.1

Signalling protocol for the support of SS-WTAN SS-WTAN description SS-WTAN is a supplementary service which enables the WTM user, as a security measure, to validate the identity of the PISN, prior to accepting certain instructions from it. This is done by sending specific information to the PISN and awaiting a response. If the received response is the expected response then authentication has passed successfully.

- 15 -

7.2

SS-WTAN operational requirements

7.2.1

Requirements on the Visitor PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for an Originating PINX, shall apply.

7.2.2

Requirements on the Home PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for a Terminating and an Originating PINX, shall apply.

7.2.3

7.2.4

Requirements on a Transit PINX Generic procedures for the call-independent control (connection-oriented) of supplementary services, as specified in ECMA-165 for a Transit PINX, shall apply.

7.3

SS-WTAN coding requirements

7.3.1

O p e r a t io n s The operations getWtanParam and wtanParamEnq defined in the Abstract Syntax Notation number 1 (ASN.1) in table 1 in 6.3.1 shall apply to SS-WTAN.

7.3.2 Information elements 7.3.2.1 Facility information element APDUs of the operations defined in 7.3.1 shall be coded in the Facility information element in accordance with ECMA-165. When conveying the invoke APDU of operations defined in 7.3.1, the destinationEntity data element of the NFE shall contain value endPINX. When conveying the invoke APDU of operations defined in 7.3.1, the interpretation APDU shall either be omitted or be included with the value rejectAnyUnrecognisedInvokePdu. 7.3.2.2

7.3.3

7.4

SS-WTAN state definitions

7.4.1

S t a t e s a t t h e V is it o r P I N X The procedures for the Visitor PINX are written in terms of the following conceptual states existing within the SS-WTAN Supplementary Service Control entity in that PINX in association with a particular request for authentication of a PISN.

7.4.1.1

S t a t e W t a n V is it R e q u e s t I d le SS-WTAN is not in progress.

7.4.1.2

S t a t e W t a n V is it R e q u e s t in g A getWtanParam invoke APDU has been sent.

7.4.2

7.4.2.1

States at the Home PINX The procedures for the Home PINX are written in terms of the following conceptual states existing within the SS-WTAN Supplementary Service Control entity in that PINX in association with a particular request for authentication of a PISN. S t a t e W t a n H o m e R e q u e s t I d le Ready for receipt of a getWtanParam invoke APDU.

- 16 -

7.4.2.2 7.4.3

States at the Authentication Server PINX The procedures for the Authentication Server PINX are written in terms of the following conceptual states existing within the SS-WTAN Supplementary Service Control entity in that PINX in association with a particular request for authentication of a PISN.

7.4.3.1

7.5

S t a t e W t a n H o m e F e t c h in g A wtanParamEnq invoke APDU has been sent.

S t a t e W t a n A u t h e n t ic a t io n I d le Ready for receipt of a wtanParamEnq invoke APDU.

SS-WTAN signalling procedures Examples of message sequences are shown in annex B.

7.5.1

A c t io n s a t t h e V is it o r P I N X The SDL representation of procedures at the Visitor PINX is shown in D.7 of annex D. These procedures apply only when the Visitor PINX does not already have authentication parameters available for carrying out SS-WTAN.

7.5.1.1

Normal procedures On receipt of a valid authentication request from the WTM user and in order to make a request to the Home PINX to get the authentication parameters for this WTM user, the Visitor PINX shall send a getWtanParam invoke APDU to the Home PINX containing the challenge which was received from the WTM user and using the call reference of a call-independent signalling connection. If the Visitor PINX is able to compute a response value, the element canCompute shall be included in the getWtanParam invoke APDU. The call-independent signalling connection shall be established (or used, if an appropriate connection is already available) in accordance with the procedures specified in 7.3 of ECMA-165. The Visitor PINX shall enter state WtanVisitRequesting and start timer T4. On receipt of the getWtanParam return result APDU, the Visitor PINX shall stop timer T4. The element wtanParamInfo contains either the authentication session key for the WTM user or the calculated response value. If it contains the authentication session key, the Visitor PINX shall use it and the challenge received from the WTM user to compute the response value for sending to the WTM user in acceptance of the authentication request. If the return result APDU contains the calculated response value, this value shall be used for sending to the WTM user in acceptance of the authentication request. The Visitor PINX shall enter state WtanVisitRequestIdle. The Visitor PINX is responsible for clearing the call-independent signalling connection towards the Home PINX. This may occur on receipt of a return result APDU. Alternatively, the signalling connection may be retained for other applications, if appropriate.

7.5.1.2

Ex c e p t io n a l p r o c e d u r e s On receipt of a getWtanParam return error or reject APDU from the Home PINX, the Visitor PINX shall stop timer T4. A response shall be sent to the WTM user indicating rejection of the authentication request, and the Visitor PINX shall enter state WtanVisitRequestIdle. If timer T4 expires (i.e. the getWtanParam invoke APDU is not answered by the Home PINX), a response shall be sent to the WTM user indicating rejection of the authentication request, and the Visitor PINX shall enter state WtanVisitRequestIdle. The Visitor PINX is responsible for clearing the call-independent signalling connection towards the Home PINX. This may occur on receipt of a return error or reject APDU or on expiry of timer T4. Alternatively, the signalling connection may be retained for other applications, if appropriate.

7.5.2

A c t io n s a t t h e H o m e P I N X The SDL representation of procedures at the Home PINX is shown in D.8 of annex D. When a Home PINX also provides Authentication Server PINX functionality, the joint requirements of 7.5.2 (for a Home PINX) and 7.5.3 (for an Authentication Server PINX) shall apply, with the exception that any communication between the Home PINX functionality and the Authentication Server PINX

- 17 -

functionality will be an intra-PINX matter. The messages specified for sending from the Home PINX towards the Authentication Server PINX or vice versa will not appear on any inter-PINX link. 7.5.2.1

Normal procedures On receipt of a getWtanParam invoke APDU using the call reference of a call-independent signalling connection (as specified in 7.3 of ECMA-165), the Home PINX shall check that the received WTM user’s identity is valid and that the WTM user is authorized for the SS-WTAN. If authorized, the Home PINX shall then send a wtanParamEnq invoke APDU to the Authentication Server PINX, containing the received challenge and using the call reference of a call-independent signalling connection. The call-independent signalling connection shall be established (or used, if an appropriate connection is already available) in accordance with the procedures specified in 7.3 of ECMA-165. The Home PINX shall enter state WtanHomeFetching and start timer T5. On receipt of the wtanParamEnq return result APDU, the Home PINX shall stop timer T5 and answer the getWtanParam invoke APDU with a return result APDU containing the information received in the wtanParamEnq return result APDU. The Home PINX shall enter state WtanHomeRequestIdle. The Home PINX is responsible for clearing the call-independent signalling connection towards the Authentication Server PINX. This may occur on receipt of a return result APDU. Alternatively, the signalling connection may be retained for other applications, if appropriate.

7.5.2.2

Ex c e p t io n a l p r o c e d u r e s If the received WTM user’s identity is not valid, the Home PINX shall answer the getWtanParam invoke APDU with a return error APDU containing the error invalidServedUserNr and remain in state WtanHomeRequestIdle. If the WTM user is not authorized for SS-WTAN, the Home PINX shall answer the getWtanParam invoke APDU with a return error APDU containing the error notAuthorized and remain in state WtanHomeRequestIdle. On receipt of a wtanParamEnq return error APDU from the Authentication Server PINX, the Home PINX shall stop timer T5 and answer the getWtanParam invoke APDU with the received error in a return error APDU and enter state WtanHomeRequestIdle. On receipt of a wtanParamEnq reject APDU from the Authentication Server PINX, the Home PINX shall stop timer T5 and answer the getWtanParam invoke APDU with error paramNotAvailable in a return error APDU and enter state WtanHomeRequestIdle. If timer T5 expires (i.e. the wtanParamEnq invoke APDU is not answered by the Authentication Server PINX), the Home PINX shall answer the getWtanParam invoke APDU with a return error APDU containing the error value temporarilyUnavailable and enter state WtanHomeRequestIdle. The Home PINX is responsible for clearing the call-independent signalling connection towards the Authentication Server PINX. This may occur on receipt of a return error or reject APDU or on expiry of timer T5. Alternatively, the signalling connection may be retained for other applications, if appropriate.

7.5.3 7.5.3.1

A c t io n s a t t h e A u t h e n t ic a t io n S e r v e r P I N X The SDL representation of procedures at the Authentication Server PINX is shown in D.9 of annex D. Normal procedures On receipt of a wtanParamEnq invoke APDU using the call reference of a call-independent signalling connection (as specified in 7.3 of ECMA-165), the Authentication Server PINX shall check that the received WTM user’s identity is valid and retrieve the authentication parameters if available. Further processing depends on the application: •

If it is required by the application or if the element canCompute is not included in the wtanParamEnq invoke APDU, the Authentication Server PINX shall use the received challenge to compute a response value and answer the wtanParamEnq invoke APDU with a return result APDU where element wtanParamInfo contains the calculated response value (choice calcWtanInfo).

- 18 -

•

If the element canCompute is included in the wtanParamEnq invoke APDU and if it is not required by the application to compute the expected response value, the Authentication Server PINX shall answer the wtanParamEnq invoke APDU with a return result APDU where element wtanParamInfo contains the authentication session key (choice authSessionKeyInfo).

The Authentication Server PINX shall remain in state WtanAuthenticationIdle. 7.5.3.2

Ex c e p t io n a l p r o c e d u r e s If the received WTM user’s identity is not valid, the Authentication Server PINX shall answer the wtanParamEnq invoke APDU with a return error APDU containing the error invalidServedUserNr and remain in state WtanAuthenticationIdle. If the authentication parameters are not available, the Authentication Server PINX shall answer the wtanParamEnq invoke APDU with a return error APDU containing the error paramNotAvailable. The Authentication Server PINX shall remain in state WtanAuthenticationIdle.

7.5.4

7.6

A c t io n s a t a Tr a n s it P I N X f o r a u t h e n t ic a t io n o f a P I S N No special actions are required in support of authentication of a PISN.

SS-WTAN impact of interworking with public ISDNs Not applicable.

7.7

SS-WTAN impact of interworking with non-ISDNs Not applicable.

7.8

Protocol interactions between SS-WTAN and other supplementary services and ANFs This clause specifies protocol interactions with other supplementary services and ANFs for which stage 3 Standards had been published at the time of publication of this Standard. For interactions with supplementary services and ANFs for which stage 3 Standards are published subsequent to the publication of this Standard, see those other stage 3 Standards. NOTE 5 Additional interactions that have no impact on the signalling protocol at the Q reference point can be found in the relevant stage 1 specifications. NOTE 6 Simultaneous conveyance of APDUs for SS-WTAN and another supplementary service or ANF in the same message, each in accordance with the requirements of its respective stage 3 Standard, does not, on its own, constitute a protocol interaction.

7.8.1

Interaction with Calling Name Identification Presentation (SS-CNIP) No protocol interaction.

7.8.2

Interaction with Connected Name Identification Presentation (SS-CONP) No protocol interaction.

7.8.3

Interaction with Completion of Calls to Busy Subscriber (SS-CCBS) No protocol interaction.

7.8.4

I n t e r a c t i o n wit h C o m p l e t i o n o f C a l l s o n N o R e p l y ( S S - C C N R ) No protocol interaction.

7.8.5

I n t e r a c t io n wit h C a ll Tr a n s f e r ( S S - C T) No protocol interaction.

7.8.6

I n t e r a c t io n wit h C a ll F o r wa r d in g U n c o n d it io n a l ( S S - C F U ) No protocol interaction.

7.8.7

I n t e r a c t io n wit h C a ll F o r wa r d in g Bu s y ( S S - C F B) No protocol interaction.

- 19 -

7.8.8

I n t e r a c t i o n wit h C a l l F o r wa r d i n g N o R e p l y ( S S - C F N R ) No protocol interaction.

7.8.9

Interaction with Call Deflection (SS-CD) No protocol interaction.

7.8.10

Interaction with Path Replacement (ANF-PR) No protocol interaction.

7.8.11

I n t e r a c t i o n wit h C a l l O f f e r ( S S - C O ) No protocol interaction.

7.8.12

I n t e r a c t i o n wit h C a l l I n t r u s i o n ( S S - C I ) No protocol interaction.

7.8.13

I n t e r a c t i o n wit h D o N o t D i s t u r b ( S S - D N D ) No protocol interaction.

7.8.14

Interaction with Do Not Disturb Override (SS-DNDO) No protocol interaction.

7.8.15

I n t e r a c t io n wit h A d v ic e O f C h a r g e ( S S - A O C ) No protocol interaction.

7.8.16

Interaction with Recall (SS-RE) No protocol interaction.

7.8.17

Interaction with Call Interception (ANF-CINT) No protocol interaction.

7.8.18

I n t e r a c t io n wit h Tr a n s it C o u n t e r ( A N F - TC ) No protocol interaction.

7.8.19

I n t e r a c t i o n wit h R o u t e R e s t r i c t i o n C l a s s ( A N F - R R C ) No protocol interaction.

7.8.20

I n t e r a c t io n wit h M e s s a g e W a it in g I n f o r m a t io n ( S S - M W I ) No protocol interaction.

7.8.21

Interaction with Wireless Terminal Location Registration (SS-WTLR) No protocol interaction.

7.8.22

Interaction with Wireless Terminal information exchange (ANF-WTINFO) No protocol interaction.

7.8.23

I n t e r a c t i o n w i t h W i r e l e s s Te r m i n a l I n c o m i n g C a l l ( A N F - W T M I ) No protocol interaction.

7.8.24

I n t e r a c t i o n w i t h W i r e l e s s Te r m i n a l O u t g o i n g C a l l ( A N F - W T M O ) No protocol interaction.

7.8.25

I n t e r a c t i o n wit h A u t h e n t i c a t i o n o f t h e P I S N ( S S - W T A T ) No protocol interaction.

7.9 7.9.1

SS-WTAN parameter values (timers) Timer T4 Timer T4 operates at the Visitor PINX during state WtanVisitRequesting. Its purpose is to protect against the absence of a response to the getWtanParam invoke APDU. Timer T4 shall have a value not less than 15 s.

- 20 -

7.9.2

Timer T5 Timer T5 operates at the Home PINX during state WtanHomeFetching. Its purpose is to protect against the absence of a response to the wtanParamEnq invoke APDU. Timer T5 shall have a value not less than 15 s.

- 21 -

Annex A ( n o r ma tiv e )

Protocol Implementation Conformance Statement (PICS) proforma

A.1

Introduction The supplier of a protocol implementation which is claimed to conform to this Standard shall complete the following Protocol Implementation Conformance Statement (PICS) proforma. A completed PICS proforma is the PICS for the implementation in question. The PICS is a statement of which capabilities and options of the protocol have been implemented. The PICS can have a number of uses, including use:

A.2

by the protocol implementor, as a check list to reduce the risk of failure to conform to the Standard through oversight;

by the supplier and acquirer, or potential acquirer, of the implementation, as a detailed indication of the capabilities of the implementation, stated relative to the common basis for understanding provided by the Standard's PICS proforma;

by the user or potential user of the implementation, as a basis for initially checking the possibility of interworking with another implementation - while interworking can never be guaranteed, failure to interwork can often be predicted from incompatible PICS's;

by a protocol tester, as the basis for selecting appropriate tests against which to assess the claim for conformance of the implementation.

Instructions for completing the PICS proforma

A.2.1

General structure of the PICS proforma The PICS proforma is a fixed format questionnaire divided into sub-clauses each containing a group of individual items. Each item is identified by an item number, the name of the item (question to be answered), and the reference(s) to the clause(s) that specifies (specify) the item in the main body of this Standard. The "Status" column indicates whether an item is applicable and if so whether support is mandatory or optional. The following terms are used: m

mandatory (the capability is required for conformance to the protocol);

optional (the capability is not required for conformance to the protocol, but if the capability is implemented it is required to conform to the protocol specifications);

o.<n>

optional, but support of at least one of the group of options labelled by the same numeral <n> is required;

prohibited;

c.<cond>

conditional requirement, depending on support for the item or items listed in condition <cond>;

<item>:m

simple conditional requirement, the capability being mandatory if item number <item> is supported, otherwise not applicable;

<item>:o

simple conditional requirement, the capability being optional if item number <item> is supported, otherwise not applicable.

Answers to the questionnaire items are to be provided either in the "Support" column, by simply marking an answer to indicate a restricted choice (Yes or No), or in the "Not Applicable" column (N/A).

- 22 -

A.2.2

Additional information Items of Additional Information allow a supplier to provide further information intended to assist the interpretation of the PICS. It is not intended or expected that a large quantity will be supplied, and a PICS can be considered complete without any such information. Examples might be an outline of the ways in which a (single) implementation can be set up to operate in a variety of environments and configurations. References to items of Additional Information may be entered next to any answer in the questionnaire, and may be included in items of Exception information.

A.2.3

Exception information It may occasionally happen that a supplier will wish to answer an item with mandatory or prohibited status (after any conditions have been applied) in a way that conflicts with the indicated requirement. No preprinted answer will be found in the Support column for this. Instead, the supplier is required to write into the support column an x.<i> reference to an item of Exception Information, and to provide the appropriate rationale in the Exception item itself. An implementation for which an Exception item is required in this way does not conform to this Standard. A possible reason for the situation described above is that a defect in the Standard has been reported, a correction for which is expected to change the requirement not met by the implementation.

- 23 -

A.3

PICS proforma for SS-WTAT

A.3.1

Implementation identification

Supplier

Contact point for queries about the PICS

Implementation Name(s) and Version(s)

Other information necessary for full identification, e.g., name(s) and version(s) for machines and/or operating systems; system name(s) Only the first three items are required for all implementations; other information may be completed as appropriate in meeting the requirement for full identification. The terms Name and Version should be interpreted appropriately to correspond with a suppliers terminology (e.g., Type, Series, Model).

A.3.2

Protocol summary

Protocol version

1.0

Addenda Implemented (if applicable) Amendments Implemented Have any exception items been required (see A.2.3)?

Date of statement

No [ ] Yes [ ] (The answer Yes means that the implementation does not conform to this Standard)

- 24 -

A.3.3

General

Item

Question/feature

Behaviour as Visitor PINX for SS-WTAT

o.1

Yes [ ] No [ ]

Behaviour as Home PINX for SS-WTAT (separate from an Authentication Server PINX)

o.1

Yes [ ] No [ ]

Behaviour as combined Home PINX and Authentication Server PINX

o.1

Yes [ ] No [ ]

Behaviour as Authentication Server PINX for SS-WTAT (separate from a Home PINX)

o.1

Yes [ ] No [ ]

A.3.4

References

Status

N/A

Support

Procedures

Item

Question/feature

References

Status

N/A

Support

Support of ECMA-165 procedures at a Visitor PINX

6.2.1

A1:m

[]

m: Yes [ ]

Support of ECMA-165 procedures at a Home PINX

6.2.2

c.1

[]

m: Yes [ ]

Support of ECMA-165 procedures Authentication Server PINX

6.2.3

A4:m

[]

m: Yes [ ]

Signalling procedures at a Visitor PINX for receiving request from Home PINX for SS-WTAT with challenge and expected response

6.5.5

A1:o

[]

Yes [ ] No [ ]

Signalling procedures at a Visitor PINX for receiving request from Home PINX for SS-WTAT without challenge and expected response

6.5.5

A1:o

[]

Yes [ ] No [ ]

Support of procedures for initiation of SS-WTAT at the Visitor PINX

6.5.4

A1:m

[]

m: Yes [ ]

Signalling procedures at a Visitor PINX for requesting authentication parameters from Home PINX

6.5.6

A1:m

[]

m: Yes [ ]

Support of procedures for calculation challenge/response at the Visitor PINX

6.5.6

A1:o

[]

Yes [ ] No [ ]

Signalling procedures at a Home PINX for initiation of SS-WTAT without challenge and expected response

6.5.1

c.2

[]

Yes [ ] No [ ]

B10

Signalling procedures at a Home PINX for initiation of SS-WTAT with challenge and expected response

6.5.1

c.2

[]

Yes [ ] No [ ]

B11

Signalling procedures at a Home PINX for receiving request from Visitor PINX for authentication parameters

6.5.2

c.1

[]

m: Yes [ ]

- 25 -

B12

Signalling procedures at a Home PINX for fetching authentication parameters from Authentication Server PINX

6.5.3

A2:m

[]

m: Yes [ ]

B13

Signalling procedures at an Authentication Server PINX

6.5.7

A4:m

[]

m: Yes [ ]

c.1: if A2 or A3 then mandatory, else N/A c.2: if A2 or A3 then optional, else N/A

A.3.5

Coding

Item

Question/feature

References

Status

N/A

Support

Sending of authWtmUser invoke APDU and receipt of return result and return error APDUs

6.3

c.3

[]

m: Yes [ ]

Sending of getWtatParam invoke APDU and receipt of return result and return error APDUs

6.3

A1:m

[]

m: Yes [ ]

Sending of wtatParamEnq invoke APDU and receipt of return result and return error APDUs

6.3

A2:m

[]

m: Yes [ ]

Receipt of authWtmUser invoke APDU and sending of return result and return error APDUs

6.3

A1:o

[]

Yes [ ] No [ ]

Receipt of getWtatParam invoke APDU and sending of return result and return error APDUs

6.3

B11:m

[]

m: Yes [ ]

Receipt of wtatParamEnq invoke APDU and sending of return result and return error APDUs

6.3

A4:m

[]

m: Yes [ ]

c.3: if B9 or B10 then mandatory, else N/A

A.3.6

Timers

Item

Question/feature

References

Status

N/A

Support

Support of timer T1

6.9.1

c.4

[]

m: Yes [ ] Value [. . . .]

Support of timer T2

6.9.2

A2:m

[]

m: Yes [ ] Value [. . . .]

Support of timer T3

6.9.3

A1:m

[]

m: Yes [ ] Value [. . . .]

c.4: if B9 or B10 then mandatory, else N/A

- 26 -

A.3.7

Protocol interactions with ANF-WTINFO

Item

Question/feature

Reference

Status

N/A

Support of ANF-WTINFO

Interactions at Home PINX

6.8.22.1

E1:o

[]

o: Yes [ ] No [ ]

Interactions at Visitor PINX

6.8.22.2

E1:o

[]

o: Yes [ ] No [ ]

Support Yes [ ] No [ ]

- 27 -

A.4

PICS proforma for SS-WTAN

A.4.1

Implementation identification

Supplier

Contact point for queries about the PICS

Implementation Name(s) and Version(s)

A.4.2

Protocol summary

Protocol version

1.0

Addenda Implemented (if applicable) Amendments Implemented Have any exception items been required (see A.2.3)?

Date of statement

No [ ] Yes [ ] (The answer Yes means that the implementation does not conform to this Standard)

- 28 -

A.4.3

General

Item

Question/feature

Behaviour as Visitor PINX for SS-WTAN

o.1

Yes [ ] No [ ]

Behaviour as Home PINX for SS-WTAN (separate from an Authentication Server PINX)

o.1

Yes [ ] No [ ]

Behaviour as combined Home PINX and Authentication Server PINX

o.1

Yes [ ] No [ ]

Behaviour as Authentication Server PINX for SS-WTAN (separate from a Home PINX)

o.1

Yes [ ] No [ ]

A.4.4

References

Status

N/A

Support

Procedures

Item

Question/feature

References

Status

N/A

Support

Support of ECMA-165 Visitor PINX

procedures

7.2.1

A1:m

[]

m: Yes [ ]

Support of Home PINX

procedures

7.2.2

c.1

[]

m: Yes [ ]

Support of ECMA-165 procedures Authentication Server PINX

7.2.3

A4:m

[]

m: Yes [ ]

Signalling procedures at a Visitor PINX

7.5.1

A1:m

[]

m: Yes [ ]

Support of procedures for calculation of response value at the Visitor PINX

7.5.1

A1:o

[]

Yes [ ] No [ ]

Signalling procedures at a Home PINX for receiving request from Visitor PINX for authentication parameters

7.5.2

c.1

[]

m: Yes [ ]

Signalling procedures at a Home PINX for fetching authentication parameters from Authentication Server PINX

7.5.2

A2:m

[]

m: Yes [ ]

Signalling procedures at an Authentication Server PINX

7.5.3

A4:m

[]

m: Yes [ ]

ECMA-165

c.1: if A2 or A3 then mandatory, else N/A

- 29 -

A.4.5

Coding

Item

Question/feature

References

Status

N/A

Support

Sending of getWtanParam invoke APDU and receipt of return result and return error APDUs

7.3

A1:m

[]

m: Yes [ ]

Sending of wtanParamEnq invoke APDU and receipt of return result and return error APDUs

7.3

A2:m

[]

m: Yes [ ]

Receipt of getWtanParam invoke APDU and sending of return result and return error APDUs

7.3

c.2

[]

m: Yes [ ]

Receipt of wtanParamEnq invoke APDU and sending of return result and return error APDUs

7.3

A4:m

[]

m: Yes [ ]

c.2: if A2 or A3 then mandatory, else N/A

A.4.6

Timers

Item

Question/feature

References

Status

N/A

Support

Support of timer T4

7.9.1

A1:m

[]

m: Yes [ ] Value [. . . .]

Support of timer T5

7.9.2

A2:m

[]

m: Yes [ ] Value [. . . .]

- 30 -

- 31 -

Annex B ( in f o r ma tiv e )

Imported ASN.1 definitions

The content of this annex has been deleted to remove duplicate ASN.1 definitions defined elsewhere.

- 32 -

- 33 -

Annex C ( in f o r ma tiv e )

Examples of message sequences

This annex describes some typical message flows for SS-WTAT and SS-WTAN. The following conventions are used in the figures of this annex. 1.

The following notation is used: Call-independent signalling connection message containing SS-WTAT/SS-WTAN information Call-independent signalling connection message without SS-WTAT/SS-WTAN information Symbolic primitive carrying SS-WTAT/SS-WTAN information

xxx.inv xxx.res xxx.err

Invoke APDU for operation xxx Return result APDU for operation xxx Return error APDU for operation xxx

The figures show messages exchanged via Protocol Control between PINXs involved in SS-WTAT/SS-WTAN. Only messages relevant to SS-WTAT/SS-WTAN are shown.

Only the relevant information content (i.e. remote operation APDUs) is listed below each message name. The Facility information elements containing remote operation APDUs and notifications are not explicitly shown. Information with no impact on SS-WTAT/SS-WTAN is not shown.

Some interactions with users are included in the form of symbolic primitives. The actual protocol at the terminal interface is outside the scope of this Standard.

- 34 -

C.1

Successful authentication of a WTM user (SS-WTAT); the Visitor PINX initiates SS-WTAT Figure C.1 shows an example message flow of successful authentication of a WTM user. The Visitor PINX initiates SS-WTAT; authentication parameters are not available in the Visitor PINX. The Authentication Server PINX is the Home PINX. WTM user

Visitor PINX

Transit PINX

Home PINX

SETUP

getWtatParam.inv

SETUP

getWtatParam.inv CALL PROCEEDING CALL PROCEEDING CONNECT CONNECT

getWtatParam.res

Request

Authentication

Response

F ig u r e C . 1 - Ex a m p le m e s s a g e f lo w f o r a u t h e n t ic a t io n o f a W TM u s e r

- 35 -

C.2

Successful authentication of a WTM user (SS-WTAT); the Home PINX initiates SS-WTAT without including challenge and response values Figure C.2 shows an example message flow of successful authentication of a WTM user. The Home PINX initiates SS-WTAT without including challenge and response values; authentication parameters are not available in the Visitor PINX. The Authentication Server PINX is not the Home PINX. WTM user

Visitor PINX

Transit PINX

Home PINX

Transit PINX

Authentication Server PINX

SETUP SETUP

authWtmUser.inv

authWtmUser.inv CALL PROCEEDING

CALL PROCEEDING

SETUP

getWtatParam.inv

SETUP

getWtatParam.inv CALL PROCEEDING CALL PROCEEDING

SETUP

wtatParamEnq.inv CALL PROCEEDING

SETUP

wtatParamEnq.inv CALL PROCEEDING

CONNECT CONNECT CONNECT CONNECT

wtatParamEnq.res

getWtatParam.res

Request

Authentication

Response CONNECT

authWtmUser.res

CONNECT

authWtmUser.res

F ig u r e C . 2 - Ex a m p le m e s s a g e f lo w f o r a u t h e n t ic a t io n o f a W TM u s e r

- 36 -

C.3

Successful authentication of a WTM user (SS-WTAT); the Home PINX initiates SS-WTAT with challenge and response values included Figure C.3 shows an example message flow of successful authentication of a WTM user. The Home PINX initiates SS-WTAT with challenge and response values included. The Authentication Server PINX is not the Home PINX. WTM user

Visitor PINX

Transit PINX

Home PINX

Transit PINX

Authentication Server PINX

SETUP

wtatParamEnq.inv CALL PROCEEDING

SETUP

wtatParamEnq.inv CALL PROCEEDING

CONNECT CONNECT SETUP SETUP

authWtmUser.inv

wtatParamEnq.res

authWtmUser.inv CALL PROCEEDING

CALL PROCEEDING

Request

Authentication Authentication

Response CONNECT

authWtmUser.res

CONNECT

authWtmUser.res

F ig u r e C . 3 - Ex a m p le m e s s a g e f lo w f o r a u t h e n t ic a t io n o f a W TM u s e r

- 37 -

C.4

Successful authentication of a PISN (SS-WTAN); parameters retrieved from Home PINX Figure C.4 shows an example message flow of successful authentication of a PISN. The Authentication Server PINX is not the Home PINX. WTM user

Visitor PINX

Transit PINX

Home PINX

Authentication Server PINX

Transit PINX

Request

Authentication

SETUP

getWtanParam.inv CALL PROCEEDING

SETUP

getWtanParam.inv

SETUP

CALL PROCEEDING

wtanParamEnq.inv CALL PROCEEDING

SETUP

wtanParamEnq.inv CALL PROCEEDING

CONNECT CONNECT CONNECT CONNECT Authentication

wtanParamEnq.res

getWtanParam.res

Response

F ig u r e C . 4 - Ex a m p le m e s s a g e f lo w f o r a u t h e n t ic a t io n o f a P I S N

- 38 -

- 39 -

Annex D ( in f o r ma tiv e )

Specification and Description Language (SDL) representation of procedures

The diagrams in this annex use the Specification and Description Language defined in ITU-T Recommendation Z.100. Each diagram represents the behaviour of an SS-WTAT or SS-WTAN Supplementary Service Control entity at a particular type of PINX. In accordance with the protocol model described in ECMA-165, the Supplementary Service Control entity uses, via the Coordination Function, the services of Generic Functional Transport Control and Basic Call Control. Where an output symbol represents a primitive to the Coordination Function, and that primitive results in a message being sent, the output symbol bears the name of the message and any remote operations APDU(s) or notification(s) contained in that message. Where an input symbol represents a primitive from the Coordination Function, and that primitive is the result of a message being received, the input symbol bears the name of the message and any remote operations APDU(s) or notification(s) contained in that message. The following abbreviations are used: inv.

invoke APDU

res.

return result APDU

err.

return error APDU

rej.

reject APDU

- 40 -

D.1

SDL representation at the Home PINX for initiation of SS-WTAT Figure D.1 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Home PINX for initiation of SS-WTAT. Input signals from the left and output signals to the left represent internal primitives. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages sent to and received from the Visitor PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatHome InitIdle

Initiate WTAT without including challange/response values

Initiate WTAT with challange/ response values included

Prior to this request the procedures for fetching authentication parameters from the Authentication Server PINX have been employed

Message with authWtmUser.inv

Start T1

WtatHome Initiating

Message with authWtmUser.res

Stop T1

Indication of WTAT successful or not successful

Message with authWtmUser.err

Message with authWtmUser.rej

T1 Expiry

Stop T1

No response from WTM user, parameters not available, invalid user, user not authorized or timer expiry

WtatHome InitIdle

Figure D.1 - SDL representation at the Home PINX for initiation of SS-WTAT

- 41 -

D.2

SDL representation of SS-WTAT at the Home PINX for requesting authentication parameters Figure D.2 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Home PINX for requesting authentication parameters from the Visitor PINX. Input signals from the left and output signals to the left represent internal primitives. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received from and sent to the Visitor PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatHome RequestIdle

Message with getWtatParam.inv

Valid WTM user’s identity ? Yes

Message with getWtatParam.err

WTM user authorized ? Yes Fetch authentication parameters

WtatHome RequestIdle WtatHome Requesting

During this state the procedures for fetching authentication parameters from the Authentication Server PINX are employed

Authentication parameters

Failure to obtain authentication parameters

Message with getWtatParam.res

Message with getWtatParam.err

WtatHome RequestIdle

Figure D.2 - SDL representation of SS-WTAT at the Home PINX for requesting authentication parameters

- 42 -

D.3

SDL representation of SS-WTAT at the Home PINX when fetching authentication parameters Figure D.3 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Home PINX when fetching authentication parameters from the Authentication Server PINX. Input signals from the left and output signals to the left represent internal primitives. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages sent to and received from the Authentication Server PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatHome FetchIdle

Fetch authentication parameters

Message with wtatParamEnq.inv

Start T2

WtatHome Fetching

Message with wtatParamEnq.res

Stop T2

Authentication parameters

Message with wtatParamEnq.err

Message with wtatParamEnq.rej

T2 Expiry

Stop T2

Failure to obtain authentication parameters

WtatHome FetchIdle

Figure D.3 - SDL representation of SS-WTAT at the Home PINX when fetching authentication parameters

- 43 -

D.4

SDL representation at the Visitor PINX for execution of SS-WTAT Figure D.4 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Visitor PINX for execution of SS-WTAT. Input signals from the left and output signals to the left represent internal primitives. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received from and sent to the Home PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatVisit ExecIdle

Message with authWtmUser.inv

Start WTAT execution

WtatVisit Executing

Authentication execution completed either succeeded or not succeeded

Message with authWtmUser.res

During this state the procedures for requesting authentication parameters from the Home PINX are employed if authentication parameters are not received or available.

No response from WTM user

Failure to obtain authentication parameters

Message with authWtmUser.err

WtatVisit ExecIdle

Figure D.4 - SDL representation at the Visitor PINX for execution of SS-WTAT

- 44 -

D.5

SDL representation of SS-WTAT at the Visitor PINX for requesting authentication parameters Figure D.5 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Visitor PINX for requesting authentication parameters. Input signals from the left and output signals to the left represent internal primitives. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages sent to and received from the Home PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatVisit RequestIdle

Request authentication parameters

Message with getWtatParam.inv

Start T3

WtatVisit Requesting

Message with getWtatParam.res

Stop T3

Authentication parameters received

Message with getWtatParam.err

Message with getWtatParam.rej

T3 Expiry

Stop T3

Failure to obtain authentication parameters

WtatVisit RequestIdle

Figure D.5 - SDL representation of SS-WTAT at the Visitor PINX for requesting authentication parameters

- 45 -

D.6

SDL representation of SS-WTAT at the Authentication Server PINX Figure D.6 shows the behaviour of an SS-WTAT Supplementary Service Control entity within the Authentication Server PINX. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received from and sent to the Home PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtatAuthentication Idle

Message with wtatParamEnq.inv

Valid WTM user’s identity ? Yes

Message with wtatParamEnq.err

WtatAuthentication Idle

Authentication parameters available ? Yes Computation of chall. and resp. required or necessary ?

Yes

No Include authentication session key in result

Compute challange(s) and expected response vaule(s) and include in result

Message with wtatParamEnq.res

WtatAuthentication Idle

Figure D.6 - SDL representation of SS-WTAT at the Authentication Server PINX

- 46 -

D.7

SDL representation of SS-WTAN at the Visitor PINX Figure D.7 shows the behaviour of an SS-WTAN Supplementary Service Control entity within the Visitor PINX. Input signals from the left and output signals to the left represent primitives to and from the WTM user. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received from and sent to the Home PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtanVisit RequestIdle

Authentication request

Message with getWtanParam.inv

Start T4

WtanVisit Requesting

Message with getWtanParam.res

Message with getWtanParam.err

Message with getWtanParam.rej

T4 Expiry

Stop T4 Stop T4

Yes

Response received ? No

Authentication response, Rejection

Compute response WtanVisit RequestIdle Authentication response, Accepted

WtanVisit RequestIdle

Figure D.7 - SDL representation of SS-WTAN at the Visitor PINX

- 47 -

D.8

SDL representation of SS-WTAN at the Home PINX Figure D.8 shows the behaviour of an SS-WTAN Supplementary Service Control entity within the Home PINX. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received and sent. Also protocol timer expiry is indicated by an input signal from the right.

WtanHome RequestIdle

Message with getWtanParam.inv from Visitor PINX

Valid WTM user’s identity ? Yes

Message with getWtanParam.err to Visitor PINX

WTM user authorized ? Yes Message with wtanParamEnq.inv to Authentication Server PINX

WtanHome RequestIdle Start T5

WtanHome Fetching

Message with wtanParamEnq.res from Authentication Server PINX

Stop T5

Message with getWtanParam.res to Visitor PINX

Message with wtanParamEnq.err from Authentication Server PINX

Message with wtanParamEnq.rej from Authentication Server PINX

T5 Expiry

Stop T5

Message with getWtanParam.err to Visitor PINX

WtanHome RequestIdle

Figure D.8 - SDL representation of SS-WTAN at the Home PINX

- 48 -

D.9

SDL representation of SS-WTAN at the Authentication Server PINX Figure D.9 shows the behaviour of an SS-WTAN Supplementary Service Control entity within the Authentication Server PINX. Input signals from the right and output signals to the right represent primitives to and from the Co-ordination Function in respect of messages received from and sent to the Home PINX. Also protocol timer expiry is indicated by an input signal from the right.

WtanAuthentication Idle

Message with wtanParamEnq.inv

Valid WTM user’s identity ? Yes

Message with wtanParamEnq.err

WtanAuthentication Idle

Authentication parameters available ? Yes Computation of response required or necessary ?

Yes

No Include authentication session key in result

Compute response and include in result

Message with wtanParamEnq.res

WtanAuthentication Idle

Figure D.9 - SDL representation of SS-WTAN at the Authentication Server PINX

- 49 -

Annex E ( n o r ma tiv e )

ASN.1 definitions according to ITU-T Recs. X.208 / X.209

This annex lists all ASN.1 modules as they were defined in the first edition of ECMA-306, i.e. based on ITU-T Recommendations X.208 / X.209. Starting with the second edition the ASN.1 modules within ECMA-306 comply with ITU-T Recommendations X.680 / X.690. Please note that regardless of which version of these modules is used as a base of a QSIG implementation, the line encoding remains unchanged. Changes in future editions to modules based on X.680 / X.690 ASN.1 are not reflected in the modules in this annex. Ta b le E. 1 - W TM - A u t h e n t ic a t io n - O p e r a t io n s – b a s e d o n I TU - T R e c s . X . 2 0 8 / X . 2 0 9 WTM-Authentication-Operations {iso standard pss1-authentication (15433) authentication-operations (0)} DEFINITIONS EXPLICIT TAGS ::= BEGIN IMPORTS

OPERATION, ERROR FROM Remote-Operation-Notation {joint-iso-ccitt(2) remote-operations(4) notation (0)} Extension FROM Manufacturer-specific-service-extension-definition {iso standard pss1-generic-procedures (11582) msi-definition (0)} invalidServedUserNumber FROM General-Error-List {ccitt recommendation q 950 general-error-list (1)} PartyNumber FROM Addressing-Data-Elements {iso(1) standard(0) pss1-generic-procedures(11582) addressing-data-elements(9)};

-- The following three operations shall apply to SS-WTAT -AuthWtmUser ::=

OPERATION ARGUMENT RESULT ERRORS

-- from Home PINX to Visitor PINX-AuthWtmArg AuthWtmRes { temporarilyUnavailable, invalidServedUserNumber, notAuthorized, paramNotAvailable, unspecified}

GetWtatParam ::=

OPERATION ARGUMENT RESULT ERRORS

-- from Visitor PINX to Home PINX -WtatParamArg WtatParamRes { invalidServedUserNumber, notAuthorized, paramNotAvailable, temporarilyUnavailable, unspecified}

WtatParamEnq ::=

OPERATION ARGUMENT RESULT ERRORS

-- from Home PINX to Authentication Server PINX-WtatParamArg WtatParamRes { invalidServedUserNumber, paramNotAvailable, unspecified}

AuthWtmArg ::=

SEQUENCE

{ wtmUserId WtmUserId, calcWtatInfo [ 1 ] IMPLICIT CalcWtatInfo OPTIONAL, dummyExtension DummyExtension OPTIONAL}

- 50 -

Ta b le E. 1 - W TM - A u t h e n t ic a t io n - O p e r a t io n s – b a s e d o n I TU - T R e c s . X . 2 0 8 / X . 2 0 9 ( c o n t in u e d ) AuthWtmRes ::=

WtatParamArg ::=

SEQUENCE

{ ENUMERATED dummyExtension

{auth-res-correct (0), auth-res-incorrect (1) }, DummyExtension OPTIONAL}

{ wtmUserId canCompute authChallenge dummyExtension

WtmUserId, CanCompute OPTIONAL, AuthChallenge OPTIONAL, DummyExtension OPTIONAL}

-- The presence of element canCompute indicates that the Visitor PINX is able to --- compute a challenge and the expected response from session key information -WtatParamRes ::=

SEQUENCE

{wtatParamInfo dummyExtension

WtatParamInfo, DummyExtension OPTIONAL}

-- The following two operations shall apply to SS-WTAN -GetWtanParam ::=

OPERATION -- from Visitor PINX to Home PINX -ARGUMENT WtanParamArg RESULT WtanParamRes ERRORS { invalidServedUserNumber, notAuthorized, paramNotAvailable, temporarilyUnavailable, unspecified}

WtanParamEnq ::=

OPERATION -- from Home PINX to Authentication Server PINX-ARGUMENT WtanParamArg RESULT WtanParamRes ERRORS { invalidServedUserNumber, paramNotAvailable, unspecified}

WtanParamArg ::=

SEQUENCE

{ wtmUserId authChallenge authAlgorithm canCompute dummyExtension

WtmUserId, AuthChallenge, AuthAlgorithm, CanCompute OPTIONAL, DummyExtension OPTIONAL}

-- The presence of element canCompute indicates that the Visitor PINX is able to --- compute the response from session key information -WtmUserId ::=

CHOICE

{ pisnNumber PartyNumber, -- The PISN number of the WTM user, -- always a Complete Number. alternativeId AlternativeId }

AlternativeId ::=

OCTET STRING(SIZE(1..20))

WtanParamRes ::=

SEQUENCE

{wtanParamInfo dummyExtension

WtanParamInfo, DummyExtension OPTIONAL}

-- The following unconfirmed operation shall apply when interaction between SS-WTAT and ANF-WTINFO -TransferAuthParam ::= OPERATION -- from Home PINX to Visitor PINX -ARGUMENT SEQUENCE {wtatParamInfo dummyExtension

WtatParamInfo, DummyExtension OPTIONAL}

- 51 -

Ta b le E. 1 - W TM - A u t h e n t ic a t io n - O p e r a t io n s – b a s e d o n I TU - T R e c s . X . 2 0 8 / X . 2 0 9 ( c o n t in u e d ) WtatParamInfo ::=

SEQUENCE

AuthKey ::=

OCTET STRING (SIZE(1..16)) -- Authentication key --

WtanParamInfo ::=

CHOICE

AuthSessionKeyInfo ::= SEQUENCE

{authAlgorithm AuthAlgorithm, CHOICE { authSessionKeyInfo [ 1 ] IMPLICIT AuthSessionKeyInfo, calcWtatInfo [ 2 ] IMPLICIT CalcWtatInfo, authKey [ 3 ] IMPLICIT AuthKey, challLen [ 4 ] IMPLICIT INTEGER(1..8) } }

{authSessionKeyInfo calcWtanInfo

[ 1 ] IMPLICIT AuthSessionKeyInfo, [ 2 ] IMPLICIT CalcWtanInfo}

{authSessionKey AuthSessionKey, calculationParam CalculationParam}

CalcWtatInfo ::=

SEQUENCE SIZE(1..5) OF CalcWtatInfoUnit

CalcWtatInfoUnit ::=

SEQUENCE

CalcWtanInfo ::=

SEQUENCE

{authResponse AuthResponse, calculationParam CalculationParam OPTIONAL} -- included if required by the authentication algorithm in use --

DummyExtension ::=

CHOICE

AuthAlgorithm ::=

SEQUENCE

AuthChallenge ::=

OCTET STRING (SIZE(1..8))

-- Randomly generated parameter --

AuthResponse ::=

OCTET STRING (SIZE(1..4))

-- WTAT: Expected response value --- WTAN: Response value from network --

AuthSessionKey ::=

OCTET STRING (SIZE(1..16)) -- Authentication session key--

CalculationParam ::=

OCTET STRING (SIZE(1..8))

-- Parameter used when calculating --- the authentication session key from --- the real authentication key. It may be --- transferred to the WTM user during --- both WTAT and WTAN. --

CanCompute ::=

NULL

-- indicates capability of computing --- challenge and/or response value --

DerivedCipherKey ::=

OCTET STRING (SIZE(1..8))

-- derived cipher key may be computed --- when computing challenge and --- expected response values--

{extension sequOfExtn

[5] IMPLICIT Extension, [6] IMPLICIT SEQUENCE OF Extension}

{ authAlg

INTEGER { ct2 (0), dect (1), gsm (2), pci (3), pwt (4), us-gsm (5), phs (6), tetra (7) } (0..255), ANY DEFINED BY authAlg OPTIONAL}

- 52 -

Ta b le E. 1 - W TM - A u t h e n t ic a t io n - O p e r a t io n s – b a s e d o n I TU - T R e c s . X . 2 0 8 / X . 2 0 9 ( c o n c lu d e d ) authWtmUser getWtatParam wtatParamEnq getWtanParam wtanParamEnq transferAuthParam

AuthWtmUser GetWtatParam WtatParamEnq GetWtanParam WtanParamEnq TransferAuthParam

::= ::= ::= ::= ::= ::=

localValue 72 localValue 73 localValue 74 localValue 75 localValue 76 localValue 77

notAuthorized paramNotAvailable temporarilyUnavailable unspecified

ERROR ERROR ERROR Unspecified

::= ::= ::= ::=

localValue 1007 localValue 1017 localValue 1000 localValue 1008

Unspecified ::=

ERROR

END

-- of WTM-Authentication-Operations

PARAMETER Extension

Free printed copies can be ordered from: ECMA 114 Rue du Rhône CH-1204 Geneva Switzerland Fax: Email:

+41 22 849.60.01 [email protected]

Files of this Standard can be freely downloaded from the ECMA web site (www.ecma.ch). This site gives full information on ECMA, ECMA activities, ECMA Standards and Technical Reports.

ECMA 114 Rue du Rhône CH-1204 Geneva Switzerland See inside cover page for obtaining further soft or hard copies.

ECMA-306 — Private Integrated Services Network (PISN) - Inter-exchange signalling protocol - Wireless Terminal Authentication supplementary services (QSIG-WTMAU) (December 2001)

Related documents