9.3 Identification

34.123-13GPPPart 1: Protocol conformance specificationRelease 15TSUser Equipment (UE) conformance specification

The purpose of this procedure is to check that the UE gives its identity as requested by the network. If this procedure does not work, it will not be possible for the network to rely on the identity claimed by the UE.

9.3.1 General Identification

9.3.1.1 Definition

9.3.1.2 Conformance requirement

1) When requested by the network the UE shall send its IMSI.

2) When requested by the network the UE shall send the TMSI which it was previously allocated.

3) When requested by the network the UE shall send its IMEI as stored in the UE.

4) When requested by the network the UE shall send its IMEISV as stored in the UE.

Reference(s)

TS 24.008 clause 4.3.3.

9.3.1.3 Test purpose

1) To verify that the UE sends identity information as requested by the system in the following cases: IMSI and TMSI are requested in non-security mode, IMEI is requested in security mode.

2) To verify that the UE sends its IMEI, when requested to do so, in non- security mode.

3) To verify that the UE sends its IMEISV, when requested to do so, in non- security mode.

9.3.1.4 Method of test

9.3.1.4.1 Identification

Initial conditions

– System Simulator:

– 1 cell, default values.

– User Equipment:

– the UE has a valid TMSI. It is "idle updated" on the cell.

Related ICS/IXIT statement(s)

IMEI of the UE.

IMEISV of the UE.

Test Procedure

The SS requests identity information from the UE:

– IMSI in non security mode;

– allocated TMSI in non security mode;

– IMEI in non security mode;

– IMEISV in non security mode;

– IMEI in security mode.

Expected sequence

Step

Direction

Message

Comments

UE

SS

1

Mobile terminated establishment of Radio Resource Connection

See TS 34.108 clause 7.1.2

Establishment Cause: Terminating Conversational Call.

2

PAGING RESPONSE

3

IDENTITY REQUEST

"Identity type" IE is IMSI.

4

IDENTITY RESPONSE

"Mobile identity" IE specifies the IMSI of the UE.

5

IDENTITY REQUEST

"Identity type" IE is TMSI.

6

IDENTITY RESPONSE

"Mobile identity" IE specifies the allocated TMSI of the UE.

6a

IDENTITY REQUEST

"Identity type" IE is IMEI.

6b

IDENTITY RESPONSE

"Mobile identity" IE specifies the IMEI of the UE.

6c

IDENTITY REQUEST

"Identity type" IE is IMEISV.

6d

IDENTITY RESPONSE

"Mobile identity" IE specifies the IMEISV of the UE.

7

SS

The SS starts ciphering and integrity protection.

8

Void

9

IDENTITY REQUEST

"Identity type" IE is IMEI.

10

IDENTITY RESPONSE

"Mobile identity" IE specifies the IMEI stored in the UE.

11

SS

The SS releases the RRC connection.

12

Void

Specific message contents

None.

9.3.1.5 Test requirement

1) At step 4 the UE shall send its IMSI.

2) At step 6 the UE shall send the TMSI which it was previously allocated.

3) At step 6b and step 10 the UE shall send its IMEI as stored in the UE.

4) At step 6d the UE shall send its IMEISV as stored in the UE.

9.3.2 Handling of IMSI shorter than the maximum length

9.3.2.1 Definition

9.3.2.2 Conformance requirement

The UE shall be capable of handling an IMSI that is not of the maximum length.

Reference(s)

TS 24.008 clause 10.5.1.4.

9.3.2.3 Test purpose

To check that the UE behaves correctly when activated with an IMSI of length less than the maximum length.

In this condition, the UE shall:

– perform location updating;

– answer to paging with IMSI;

– give the correct IMSI when asked by an IDENTITY REQUEST;

– attempt CM connection establishment when requested to;

– attempt IMSI detach when needed;

– erase its TMSI when the IMSI is sent by the network in a LOCATION UPDATING ACCEPT or a TMSI REALLOCATION COMMAND message.

9.3.2.4 Method of test

Initial conditions

– System Simulator:

– 1 cell, default values;

– IMSI attach/detach bit set to "1".

– User Equipment:

– the UE has no valid TMSI;

– it is "idle updated";

– the IMSI has the value 001011234.

Related ICS/IXIT statement(s)

On/Off switch – Yes/No.

Foreseen final state of UE

The UE has no valid TMSI. It is in "idle, updated".

Test Procedure

The UE is paged with its IMSI. The UE shall answer to paging and include the correct IMSI in the PAGING RESPONSE message. During call establishment, the SS asks for the IMSI of the UE. The UE shall answer by an IDENTITY RESPONSE message including the correct IMSI. During the active phase of the call, the SS modifies the scrambling code of DL DPCH. The UE performs call re-establishment. The TMSI REALLOCATION COMMAND including a TMSI is sent to the UE. The UE acknowledges this message. The call is released.

The UE is paged with its TMSI. The UE shall answer to paging and includes its TMSI in the PAGING RESPONSE message. During call establishment, the SS sends a TMSI REALLOCATION COMMAND including the IMSI to the UE. The UE shall acknowledge this message. The UE shall erase its TMSI. The call is released.

The UE is switched off or has its power source removed. The UE performs IMSI detach. The UE shall include the correct IMSI in the IMSI DETACH INDICATION message.

The UE is switched on or powered on. The UE performs IMSI attach. The UE shall include the correct IMSI in the LOCATION UPDATING REQUEST message. A TMSI is allocated to the UE.

The LAC of the cell is changed. The UE performs location updating. The SS includes the IMSI in the LOCATION UPDATING ACCEPT message.

A mobile originated CM connection is attempted. The UE shall include the correct IMSI in the CM SERVICE REQUEST message.

Expected sequence

Step

Direction

Message

Comments

UE

SS

1

Mobile terminated establishment of Radio Resource Connection

See TS 34.108 clause 7.1.2

"Initial UE identity" IE contains IMSI of UE.

Establishment cause: Terminating Conversational Call.

2

PAGING RESPONSE

"mobile identity" contains the IMSI of the UE.

3

IDENTITY REQUEST

"identity type" IE is IMSI.

4

IDENTITY RESPONSE

"mobile identity" IE contains the IMSI of the UE.

5

The call is established using the sequence of the generic terminating call set-up procedure.

6

The SS modifies the scrambling code of DL DPCH for generating lower layer failure.

Cell update procedure for radio link failure is performed

6a

Void

6b

Void

6c

Void

7

Void

8

Void

9

Void

10

Void

10a

AUTHENTICATION REQUEST

10b

AUTHENTICATION RESPONSE

10c

SS

The SS starts integrity protection.

10d

Void

11

TMSI REALLOCATION COMMAND

"mobile identity" contains a TMSI.

12

TMSI REALLOCATION COMPLETE

13

SS

The SS releases the RRC connection.

14

Void

15

Mobile terminated establishment of Radio Resource Connection

See TS 34.108 clause 7.1.2

"Initial UE identity" IE contains TMSI of UE.

Establishment cause: Terminating Conversational Call.

16

PAGING RESPONSE

"mobile identity" contains the TMSI of the UE.

17

AUTHENTICATION REQUEST

18

AUTHENTICATION RESPONSE

18a

SS

The SS starts integrity protection.

18b

Void

19

TMSI REALLOCATION COMMAND

"mobile identity" contains a IMSI of UE.

20

TMSI REALLOCATION COMPLETE

21

SS

The SS releases the RRC connection.

22

Void

23

UE

If possible (see ICS) the UE is switched off, otherwise the UE has its power source removed.
A Detach Request can be received in PS mode.

24

SS

If the UE was switched off it performs IMSI detach.

The SS verifies that the IE "Establishment cause" in the received RRC Connection REQUEST message is set to "Detach".

25

Void

26

Void

27

IMSI DETACH INDICATION

"mobile identity" contains IMSI of UE.

28

SS

The SS releases the RRC connection.

29

Void

30

UE

The UE is switched on or has power restored.

The subsequent GMM attach should be rejected if received in the PS mode

31

Void

32

Void

33

Void

34

LOCATION UPDATING REQUEST

"mobile identity" contains IMSI of UE.

35

LOCATION UPDATING ACCEPT

"mobile identity" contains a TMSI.

36

TMSI REALLOCATION COMPLETE

37

SS

The SS releases the RRC connection.

38

Void

39

SS

The SS changes the LAC of the cell.

40

SS

The SS verifies that the UE sends RRC Connection REQUEST message within 35s of the LAC being changed.

41

Void

42

Void

43

LOCATION UPDATING REQUEST

"mobile identity" contains TMSI of the UE.

44

LOCATION UPDATING ACCEPT

"mobile identity" contains IMSI of the UE.

45

SS

The SS releases the RRC connection.

46

Void

47

UE

a mobile originated CM connection is attempted.

48

Void

49

Void

50

Void

51

CM SERVICE REQUEST

"mobile identity" contains IMSI of the UE.

52

SS

The SS releases the RRC connection.

53

Void

Specific message contents

None.

9.3.2.5 Test requirement

At step 2 the UE shall answer to paging with IMSI.

At step 4 the UE shall answer to the SS with the correct IMSI in an IDENTITY RESPONSE message.

At step 19 the IMSI is sent by the network in a TMSI REALLOCATION COMMAND message, at step 27 the UE shall attempt IMSI detach.

At step 34 the UE shall perform location updating.

At step 44 the IMSI is sent by the network in a LOCATION UPDATING ACCEPT message, at step 51 the UE shall attempt CM connection establishment and include the correct IMSI in the CM SERVICE REQUEST message.