MOBILE COMMUNICATION SYSTEMS AND SECURITY

Transcription

1 MOBILE COMMUNICATION SYSTEMS AND SECURITY Man Young Rhee Endowed Chair Professor Kyung Нее University, Republic of Korea IEEE IEEE PRESS IEEE Communications Society, Sponsor John Wiley & Sons (Asia) Pte Ltd

2 Contents Preface Acknowledgement About the Author Abbreviations xi xvii xix xxi 1 Global System for Mobile Communications GSM Bandwidth Allocation GSM System Architecture Mobile Station (SIM + ME) Base Station Subsystem (BSS) Network Subsystem (NSS) Operating Subsystem (OSS) GSM Transmission Network Architecture Message Management Layer (Layer 3) Data Link Layer (Layer 2) Physical Layer (Layer 1) Signaling Channels on the Air Interface Broadcast Channels (BCHs) Common Control Channels (CCCHs) Dedicated Control Channel (DCCH) GSM Security Architecture GSM Authentication GSM Confidentiality Multiple Encryption Encryption by AES Rijndael Algorithm 24 2 cdmaone IS-95A Technology Reverse CDMA Channel Reverse Traffic Channel Access Channel Multiplex Option i Information Multiplex Option 2 Information 65

3 VI Contents 2.2 Forward CDMA Channel Pilot Channel Sync Channel Paging Channel Forward Traffic Channel 86 3 General Packet Radio Service (GPRS) GPRS System Architecture GPRS Network Support Nodes Reference Points and Data Transfer Interfaces Signaling Transfer Interfaces GPRS-PLMN Backbone Networks GPRS Logical Functions Network Access Control Packet Transfer and Routing Mobility Management State Models for Location Management State Transitions of a Mobile Station Packet Mobility Management (I u Mode) Layered Protocol Architecture of Transmission Plane User Plane for A/G b Mode Control Plane for A/G b Mode Control Plane for I u Mode GPRS Ciphering Algorithm Parameters for Algorithm Design GPRS Encryption Algorithm 3 (GEA3) Ciphering and Deciphering Third-generation Partnership Projects (3GPP and 3GPP2) G Partnership Projects Evolution of Mobile Radio Technologies G Mobile Radio Technologies G Mobile Radio Technologies G Mobile Radio Technologies (Situation and Status of 3G) Cryptographic Protocols Applicable to Wireless Security Technologies Universal Mobile Telecommunication System (UMTS) UMTS Standardization FDD/TDD Modes for UTRA Operation UMTS Architecture UTRAN Architecture UTRAN Terrestrial Interface Horizontal Layers Vertical Planes UTRAN-CN Interface via I 138

4 Contents I u CS Protocol Structure I u PS Protocol Structure UMTS Security Related Features KASUMI Encryption Function User and Signaling Data Confidentiality KGCORE (Core Keystream Generation Function) Summary of Four Confidentiality Functions Key Scheduling UTRAN Overall Functions UTRAN I ub Interface Protocol Structure UTRAN I ur Interface Protocol Structure 165 High Speed Downlink Packet Access (HSDPA) Basic Structure of HS-DSCH Protocol Structure HS-DSCH Physical Layer Model Overview of HSDPA Enhancement Technologies CQI Enhancement (FDD Mode) Multiple Simultaneous Transmission to a UE Within Sub-Frame Code Reuse for Downlink HS-DSCH Fast Signalling Between Node В and UE Fast Adaptive Emphasis ACK/NACK Transmit Power Reduction for HS-DPCCH Fractional Dedicated Physical Channel (F-DPCH) HS-DSCH MAC Architecture UE Side Overall Architecture MAC-d Entity MAC-c/sh Entity MAC-hs Entity MAC-ehs Entity HS-DSCH MAC Architecture UTRAN Side Overall MAC Architecture MAC-c/sh Entity MAC-hs Entity MAC-ehs Entity Overview of HSDPA Techniques to Support UTRA Adaptive Modulation and Coding (AMC) Hybrid ARQ (HARQ) Fast Cell Selection Multiple Input Multiple Output Antenna Processing Handling for Error Cases Orthogonal Frequency Division Multiplexing (OFDM) OFDM Modulation Scheme Signal Processing Over OFDM Transceiver Prospect of OFDM-based Applications 195

5 viii Contents 7 CDMA2000 lx High Rate Packet Data System (lxev-do) Architectural Reference Protocol Model Air Interface Layering Protocol Application Layer Protocols Multi-Flow Packet Application Stream Layer Protocol Protocol Initialization Procedures and Messages for the InConfiguration and InUse Instances Session Layer Protocol Default Session Management Protocol (SMP) Default Address Management Protocol (AMP) Default Session Configuration Protocol Connection Layer Protocol Data Encapsulation for InUse Protocol Instance Air-Link Management Protocol Initialization State Protocol Idle State Protocol Connected State Protocol Route Update Protocol Packet Consolidation Protocol Overhead Messages Protocol Security Layer Protocols Security Layer Encapsulation Default Security Protocol Diffie-Hellman Key Exchange Protocol Access Terminal (AT) Requirements Access Network (AN) Requirements Authentication Key and Encryption Key Generation MAC Layer Protocols Data Encapsulation for the MAC Protocols Control Channel MAC Protocol Procedures and Messages for the InUse Instance Control Channel Capsules Access Channel MAC Protocol Forward Traffic Channel MAC Protocol Reverse Traffic Channel MAC Protocol Physical Layer Protocol Subtype 0 (Default) and Subtype 1 Physical Layer Protocol Frame Check Sequence (FCS) Computation Role of Access Terminal Access Network Requirements 269

6 IX CDMA2000 lx Evolution-Data and Voice (IxEV-DV) UMTS (WCDMA) Versus CDMA2000 Physical Layer Harmonization Reverse CDMA Channel Reverse Pilot Channel (R-PICH) Reverse Secondary Pilot Channel (R-SPICH) Access Channel Enhanced Access Channel (R-EACH) Reverse Common Control Channel (R-CCCH) Reserve Packet Data Control Channel (R-PDCCH) Reverse Request Channel (R-REQCH) Reverse Dedicated Control Channel (R-DCCH) Reverse Acknowledgment Channel (R-ACKCH) Reverse Channel Quality Indicator Channel (R-CQICH) Reverse Fundamental Channel (R-FCH) Reverse Supplemental Channel (R-SCH) Reverse Supplemental Code Channel (R-SCCH) Reverse Packet Data Channel (R-PDCH) Forward CDMA Channel Pilot Channels Sync Channel (F-SYNCH) Paging Channel (F-PCH) Quick Paging Channel (F-QPCH) Broadcast Control Channel (F-BCCH) Common Assignment Channel (F-CACH) Forward Common Control Channel (F-CCCH) Forward Indicator Control Channel (F-ICCH) Forward Grant Channel (F-GCH) Forward Acknowledgment Channel (F-ACKCH) Forward Packet Data Control Channel (F-PDCCH) Forward Dedicated Control Channel (F-DCCH) Forward Fundamental Channel (F-FCH) Forward Supplemental Channel (F-SCH) Forward Supplemental Code Channel (F-SCCH) Forward Packet Data Channel (F-PDCH) CDMA2000 Entities and Service Interfaces CDMA2000 lx EV-DV Service Interface Structure (Mobile Station) 332 Advanced Encryption Standard and Elliptic Curve Cryptosystems Advanced Encryption Standard (AES) Notational Conventions Mathematical Operations AES Algorithm Specification Key Expansion AES Cipher AES Inverse Cipher 354

7 X Contents 9.2 Elliptic Curve Cryptosystem (ECC) Elliptic Curves Elliptic Curves Over Prime Field Z p Elliptic Curve Over Finite Galois Field GF(2 m ) Elliptic Curve Cryptosystem versus Public-Key Cryptosystems Diffie-Hellman Key Exchange Elliptic Curve Diffie-Hellman Key Exchange RSA Signature Algorithm Elliptic Curve RSA Signature Algorithm ElGamal Public-Key Encryption Elliptic Curve ElGamal Encryption Schnorr's Authentication Algorithm EC Schnorr's Authentication Protocol Public-Key Digital Signature Algorithm Elliptic Curve Digital Signature Algorithm Hash Function, Message Authentication Code, and Data Expansion Function MD5 Message-Digest Algorithm Append Padding Bits Append Length Initialize MD Buffer Define Four Auxiliary Functions (F, G, H, I) FF, GG, HH, and II Transformations for Rounds 1, 2, 3, and Computation of Four Rounds (64 Steps) Secure Hash Algorithm (SHA-1) Message Padding Initialize 160-Bit Buffer Functions Used Constants Used Computing the Message Digest Hashed Message Authentication Codes (HMAC) HMAC Structure HMAC Computation Using RFC Method HMAC Computation (Alternative Method) Data Expansion Function 412 Bibliography 417 Index 421