Course 578: UMTS Security

Having completed this course the participant will be able to understand how security is implemented, deployed and managed in UMTS network, understand security concepts, understand the benefits of new security techniques applied and how they are implemented.

The goal of this course is to give the participant a strong and intuitive understanding of what security in the wireless systems is and how the security functions are implemented in UMTS radio and core network. The course focuses both on the air interface and the core network.

oVERVIEW OF SECURITY CONCEPTS

• Basic security concepts
• Authentication
• Privacy
• Integrity
• Authorization
• Non-repudiation

Encryption

• Encryption Technologies
• Cryptography Keys
• Symmetric and Asymmetric
• Ciphers
• Cipher Suites
•  Certificates

Overview of Wireless Security Requirements

• Wireless security needs
• Basic GSM, GPRS and UMTS security functions

UMTS Security Architecture

• UMTS security features
• Network access mechanisms
• UMTS authentication and authorization procedures
• key agreement
• Local authentication
• UMTS ciphering procedures
• Security threats to UMTS

Security in UTRAN

• Typical threats in UTRAN
• Mutual authentication
• Cryptography for authentication
• UTRAN encryption
• Integrity protection of RRC signalling

Security in UMTS Core Network

• Typical Threats in Core Network
• Denial of Services
• IPSec
• Authentication Server
• Network Domain
• MAP application layer security

UMTS Authentication and Key Management (AKA)

• Authentication parameters
• AV and K
• RAND
• SQN and AK
• AMF and MAC
• CK and IK
• RES and X-RES
• AUTN and AUTS
• Normal AKA procedure
• AKA procedure in the AuC
• AKA procedure in the USIM
• AKA procedure in the VLR/SGSN

AKA Algorithms

• AKA Functions with their outputs
• Cryptographic functions and algorithms
• Key generating functions
• Authentication parameters
• Integrity function
• Confidentiality function
• f0, f1 and f1*
• f2, f3 and f4
• f5, f5*, f8 and f9