IIR-tutorial-1

USECUSECA3G Security: Background and ContextPeter HowardReReseseararchch and and Sta Standandarrdds Es EnnggiinneereerCommunications Security and Advanced DevelopmentVodafone Limitedpeter.howard@vf.vodafone.co.ukIIR Fraud and Security Conference, March 2000 - 1 - 3G Security: Background and ContextUSECAContents• Review of GSM security• Principles and objectives for 3G security• 3G threat analysis and security requirements captureIIR Fraud and Security Conference, March 2000 - 2 - 3G Security: Background and Context1USECAGSM security• One of the aspects of GSM that has played a significant part inits global appeal is its set of security features• GSM was the first public telephone system to use integratedcryptographic mechanisms• By virtue of GSM penetration, these mechanisms have achievedthe status of being the most widespread household use ofcryptography• GSM security model has been adopted, modified and extendedfor DECT, TETRA and now 3GPPIIR Fraud and Security Conference, March 2000 - 3 - 3G Security: Background and ContextUSECABackground• Security has always been an issue for mobile telephones– Scanners to eavesdrop calls– Re-chipped mobiles to commit fraud by making calls onsomeone else’s bill– Low power base stations to capture identities required to re-chip mobiles for organised cloning• Against this background, some GSM designers decided toprovide the system with an integrated set of security features• Others were concerned ...