11 3GPP AAA Server/Proxy – EIR

29.2733GPP3GPP EPS AAA interfacesEvolved Packet System (EPS)Release 18TS

11.1 Functionality

11.1.1 General

The definition of the reference point between the 3GPP AAA Server or 3GPP AAA Proxy and the EIR and its functionality is specified in clauses 7.2 and 16.2 in 3GPP TS 23.402 [3].

The 3GPP AAA Server/Proxy – EIR reference point is used to check the Mobile Equipment’s identity status (e.g. to check that it has not been stolen, or, to verify that it does not have faults).

11.1.2 Procedures Description

11.1.2.1 ME Identity Check

11.1.2.1.1 General

The Mobile Equipment Identity Check Procedure shall be used between the 3GPP AAA Server and the EIR if the TWAN or ePDG is in the HPLMN, or between the 3GPP AAA Proxy and the EIR if the TWAN or ePDG is in the VPLMN, to check the Mobile Equipment’s identity status (e.g. to check that it has not been stolen, or, to verify that it does not have faults).

The Diameter Identity of the EIR is locally configured in the 3GPP AAA Server and 3GPP AAA Proxy.

This procedure is mapped to the commands ME-Identity-Check-Request/Answer (ECR/ECA) in the Diameter application specified in clause 7 of 3GPP TS 29.272 [29].

Table 11.1.2.1.1/1 specifies the involved information elements for the request.

Table 11.1.2.1.1/2 specifies the involved information elements for the answer.

Table 11.1.2.1.1/1: ME Identity Check Request

Information element name

Mapping to Diameter AVP

Cat.

Description

Terminal Information

Terminal-Information

M

This information element shall contain the information about the used mobile equipment i.e. the IMEI. Within this Information Element, only the IMEI and the Software-Version AVPs shall be used on the 3GPP AAA Server/Proxy – EIR interface.

IMSI

User-Name (See IETF RFC 6733 [58])

O

This information element shall contain the user IMSI, formatted according to 3GPP TS 23.003 [3], clause 2.2.

Table 11.1.2.1.1/2: ME Identity Check Answer

Information element name

Mapping to Diameter AVP

Cat.

Description

Result

Result-Code / Experimental-Result

M

This IE shall contain the result of the operation.

The Result-Code AVP shall be used to indicate success / errors as defined in the Diameter base protocol (see IETF RFC 6733 [58]).

The Experimental-Result AVP shall be used for errors. This is a grouped AVP which shall contain the 3GPP Vendor ID in the Vendor-Id AVP, and the error code in the Experimental-Result-Code AVP.

The following errors are applicable in this case:

– Unknown equipment

Equipment Status

Equipment-Status

C

This information element shall contain the status of the requested mobile equipment as defined in 3GPP TS 22.016 [13].

It shall be present if the result of the ME Identity Check is DIAMETER_SUCCESS.

11.1.2.1.2 3GPP AAA Server Detailed Behaviour

The 3GPP AAA Server shall make use of this procedure to check the ME identity, if the 3GPP AAA Server is configured to check the IMEI with the EIR and if the ePDG or TWAN is in the HPLMN.

Terminal-Information, when sent by the 3GPP AAA Server to the EIR, shall contain the IMEI AVP, and it may contain also the Software-Version AVP.

IMSI may be sent together with Terminal Information to the EIR for operator-determined purposes.

When receiving the ME Identity Check answer from the EIR, the 3GPP AAA Server shall check the result code and the equipment status. Dependent upon the result, the 3GPP AAA Server shall determine whether to continue or stop the authentication and authorization procedure, see clause 5.1.2.1 and 7.1.2.1.

11.1.2.1.3 3GPP AAA Proxy Detailed Behaviour

The 3GPP AAA Proxy shall make use of this procedure to check the ME identity, if the 3GPP AAA Proxy is configured to check the IMEI with the EIR and if the ePDG or TWAN is in the VPLMN.

Terminal-Information, when sent by the 3GPP AAA Proxy to the EIR, shall contain the IMEI AVP, and it may contain also the Software-Version AVP.

IMSI may be sent together with Terminal Information to the EIR for operator-determined purposes.

When receiving the ME Identity Check answer from the EIR, the 3GPP AAA Proxy shall check the result code and the equipment status. Dependent upon the result, the 3GPP AAA Server shall determine whether to continue or stop the authentication and authorization procedure, see clause 5.1.2.1 and 7.1.2.1.

11.1.2.1.4 EIR Detailed Behaviour

See clause 6.2.1.3 of 3GPP TS 29.272 [29].

11.2 Protocol Specification

11.2.1 General

The 3GPP AAA Server/Proxy – EIR reference point shall be based on Diameter, as defined in IETF RFC 6733 [58]. It shall be defined as an IETF vendor specific Diameter application, where the vendor is 3GPP. The vendor identifier assigned by IANA to 3GPP (http://www.iana.org/assignments/enterprise-numbers) is 10415.

The Diameter application used over the 3GPP AAA Server/Proxy – EIR reference point is the S13/S13′ Diameter application, and the application identifier is 16777252 (allocated by IANA).

11.2.2 Commands

11.2.2.1 ME Identity Check

11.2.2.1.1 ME-Identity-Check-Request (ECR) Command

See clause 7.2.19 of 3GPP TS 29.272 [29].

11.2.2.1.2 ME-Identity-Check-Answer (ECA) Command

See clause 7.2.20 of 3GPP TS 29.272 [29].

11.2.3 Information Elements

11.2.3.1 General

The following table specifies the Diameter AVPs re-used by the 3GPP AAA Server/Proxy – EIR interface protocol from existing Diameter Applications, including a reference to their respective specifications and when needed, a short description of their use for the 3GPP AAA Server/Proxy – EIR interface.

Any other AVPs from existing Diameter Applications, except for the AVPs from Diameter Base Protocol, do not need to be supported. The AVPs from Diameter base protocol specified in IETF RFC 6733 [58] are not included in table 11.2.3.1/1, but they may be re-used for the 3GPP AAA Server/Proxy – EIR protocol.

Table 11.2.3.1/1: Diameter AVPs re-used for the 3GPP AAA Server/Proxy – EIR interface

Attribute Name

Reference

Comments

M-bit

Terminal-Information

3GPP TS 29.272 [29]

User-Name

IETF RFC 6733 [58]

Equipment-Status

3GPP TS 29.272 [29]

11.2.4 Session Handling

The Diameter sessions between the 3GPP AAA Server and the EIR, and between the 3GPP AAA Proxy and the EIR, shall be handled as specified for the Diameter sessions between the MME and the EIR in clause 7.1.4 of 3GPP TS 29.272 [29].

Annex A (informative):
Trusted WLAN authentication and authorization procedure