ETSI ETS 300 391-3 ed.1 (1995-08)

Universal Personal Telecommunication (UPT); Specification of the security architecture for UPT phase 1; Part 3: Conformance Test Specification (CTS)

DE/NA-071403

Svetovne osebne telekomunikacije (UPT) – Specifikacija varnostne arhitekture za 1. fazo sistema UPT – 3. del: Specifikacija za preskušanje skladnosti (CST)

General Information

• Status: Published
• Publication Date: 07-Aug-1995
• Technical Committee: NA 7 - Universal Personal Telecommunications
• Current Stage: 12 - Completion
• Due Date: 25-Aug-1995
• Completion Date: 08-Aug-1995
• Ref Project: SIST ETS 300 391-3 E1:2003 - Universal Personal Telecommunication (UPT); Specification of the security architecture for UPT phase 1; Part 3: Conformance Test Specification (CTS)

Standards Content (Sample)

SLOVENSKI STANDARD
SIST ETS 300 391-3 E1:2003
01-december-2003
Svetovne osebne telekomunikacije (UPT) – Specifikacija varnostne arhitekture za
1. fazo sistema UPT – 3. del: Specifikacija za preskušanje skladnosti (CST)
Universal Personal Telecommunication (UPT); Specification of the security architecture
for UPT phase 1; Part 3: Conformance Test Specification (CTS)
Ta slovenski standard je istoveten z: ETS 300 391-3 Edition 1
ICS:
33.040.35 Telefonska omrežja Telephone networks
SIST ETS 300 391-3 E1:2003 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST ETS 300 391-3 E1:2003

---------------------- Page: 2 ----------------------

SIST ETS 300 391-3 E1:2003
EUROPEAN ETS 300 391-3
TELECOMMUNICATION August 1995
STANDARD
Source: ETSI TC-NA Reference: DE/NA-071403
ICS: 33.040
Authentication, DTMF, security, UPT
Key words:
Universal Personal Telecommunication (UPT);
Specification of the security architecture for UPT phase 1;
Part 3: Conformance Test Specification (CTS)
ETSI
European Telecommunications Standards Institute
ETSI Secretariat
F-06921 Sophia Antipolis CEDEX - FRANCE
Postal address:
650 Route des Lucioles - Sophia Antipolis - Valbonne - FRANCE
Office address:
c=fr, a=atlas, p=etsi, s=secretariat - [e-mail]
X.400: Internet:
Tel.: [phone] - Fax: [phone]
Copyright Notification: No part may be reproduced except as authorized by written permission. The copyright and the
foregoing restriction extend to reproduction in all media.
© European Telecommunications Standards Institute 1995. All rights reserved.
New presentation - see History box

---------------------- Page: 3 ----------------------

SIST ETS 300 391-3 E1:2003
Page 2
ETS 300 391-3: August 1995
Whilst every care has been taken in the preparation and publication of this document, errors in content,
typographical or otherwise, may occur. If you have comments concerning its accuracy, please write to
"ETSI Editing and Committee Support Dept." at the address shown on the title page.

---------------------- Page: 4 ----------------------

SIST ETS 300 391-3 E1:2003
Page 3
ETS 300 391-3: August 1995
Contents
Foreword .5
Introduction.5
1 Scope .7
2 Normative references.7
3 Abbreviations.8
4 Test suite structure.8
5 Test purposes .9
5.1 Advanced DTMF device test group .9
5.1.1 DHV test purposes .9
5.1.2 Strong authentication test purposes.10
5.1.3 Physical protection test purposes.10
5.2 AE test group .10
5.2.1 PUI check test purposes .11
5.2.2 Weak authentication test purposes.11
5.2.3 Strong authentication test purposes.12
6 Test methods and configurations.12
6.1 Advanced DTMF device.13
6.2 AE .13
6.2.1 Strong authentication .14
6.2.2 Weak authentication.15
7 Test cases.15
7.1 Advanced DTMF device.15
7.1.1 DHV.15
7.1.2 Strong authentication .16
7.1.3 Physical protection .16
7.2 AE .16
7.2.1 PUI check.16
7.2.2 Weak authentication.17
7.2.3 Strong authentication. .18
Annex A (informative): Bibliography.19
History.20

---------------------- Page: 5 ----------------------

SIST ETS 300 391-3 E1:2003
Page 4
ETS 300 391-3: August 1995
Blank page

---------------------- Page: 6 ----------------------

SIST ETS 300 391-3 E1:2003
Page 5
ETS 300 391-3: August 1995
Foreword
This European Telecommunication Standard (ETS) has been produced by the Network Aspects (NA)
Technical Committee of the European Telecommunications Standards Institute (ETSI).
This ETS consists of 3 parts as follows:
Part 1: "Specification".
Part 2: "Implementation Conformance Statement (ICS) proformas".
Part 3: "Conformance Test Specification (CTS)".
Transposition dates
Date of adoption of this ETS: 28 July 1995
Date of latest announcement of this ETS (doa): 30 November 1995
Date of latest publication of new National Standard
or endorsement of this ETS (dop/e): 31 May 1996
Date of withdrawal of any conflicting National Standard (dow): 31 May 1996
Introduction
Universal Personal Telecommunication (UPT) is a service that enables improved access to
telecommunication service by allowing personal mobility. It enables each UPT user to participate in a user
defined set of subscribed services, and to initiate and receive calls on the basis of a unique, personal,
network independent UPT number across multiple networks at any terminal, fixed, movable or mobile.
ETSI Sub Technical Committee (STC) NA 7 has defined three service scenarios for UPT (see
ETR 055-2). The specification of the security architecture for UPT phase 1 (ETS 300 391-1 [1]) deals only
with the restricted, short term UPT service scenario for UPT phase 1. This scenario has restrictions on
networks, services, user friendliness and also on the possibilities to implement security features.
ETS 300 391-1 [1] has specified the mechanisms for weak and strong authentication. The detailed
specification of the protocols within the Intelligent Network will be described elsewhere as part of the
specification of the overall UPT protocols.

---------------------- Page: 7 ----------------------

SIST ETS 300 391-3 E1:2003
Page 6
ETS 300 391-3: August 1995
Blank page

---------------------- Page: 8 ----------------------

SIST ETS 300 391-3 E1:2003
Page 7
ETS 300 391-3: August 1995
1 Scope
This European Telecommunication Standard (ETS) provides a Conformance Test Specification (CTS)
specifying the tests which are necessary to verify the conformance of advanced Dual Tone
Multi Frequency (DTMF) devices and Authenticating Entities (AEs) with ETS 300 391-1 [1] and
ETS 300 391-2 [2].
In particular, the following issues are considered:
- test suite and test purposes;
- test methods and configurations;
- test steps and test cases.
The Tree and Tabular Combined Notation (TTCN) description of test cases is outside the scope of this
ETS. However, the TTCN description may be part of the CTSs of the overall Universal Personal
Telecommunication (UPT) protocol specifications.
A partial Protocol Implementation eXtra Information for Testing (PIXIT) proforma is not identified as
applicable for this CTS.
The conformance testing methodology and framework used in this ETS is given in ISO/IEC 9646 [4].
2 Normative references
This ETS incorporates by dated and undated reference, provisions from other publications. These
normative references are cited at the appropriate places in the text and the publications are listed
hereafter. For dated references, subsequent amendments to or revisions of any of these publications
apply to this ETS only when incorporated in it by amendment or revision. For undated references the latest
edition of the publication referred to applies.
[1] ETS 300 391-1: "Universal Personal Telecommunication (UPT); Specification of
the security architecture for UPT phase 1; Part 1: Specification".
[2] ETS 300 391-2: "Universal Personal Telecommunication (UPT); Specification of
the security architecture for UPT phase 1; Part 2: Implementation Conformance
Statement (ICS) proformas".
[3] I-ETS 300 380: "Universal Personal Telecommunications (UPT); Access
devices; Dual Tone Multi Frequency (DTMF) sender for acoustic coupling to the
microphone of a handset telephone".
[4] ISO/IEC 9646, parts 1 - 5: "Conformance Testing Methodology and Framework".

---------------------- Page: 9 ----------------------

SIST ETS 300 391-3 E1:2003
Page 8
ETS 300 391-3: August 1995
3 Abbreviations
For the purposes of this ETS, the following abbreviations apply:
AC Authentication Code, calculated in the UPT access device
AE Authenticating Entity
d tolerance for the difference between the sequence number sent by the UPT
access device and the sequence number stored in the SDF
DHV Device Holder Verification
DTMF Dual Tone Multi Frequency
f algorithm for the calculation of the AC
IUT Implementation Under Test
K Key
LPIN Local Personal Identification Number
n sequence number, used by the UPT access device
n sent part of the sequence number, i.e. the 16 least significant bits of n
s
PCO Point of Control and Observation
PIN Personal Identification Number
PIXIT Protocol Implementation eXtra Information for Testing
PUI Personal User Identity
SDF Service Data Function
SLPIN Special Local Personal Identification Number
SPIN Special Personal Identification Number
TSS Test Suite Structure
TTCN Tree and Tabular Combined Notation
UPT Universal Personal Telecommunication
4 Test suite structure
Figure 1 shows the Test Suite Structure (TSS).
Authentication
Security feature
Implementation
Advanced Authenticating
under test
DTMF device (D) Entity (A)
Major
Device  Physical Strong  Weak Strong
PUI
functions
Holder Protection Authentication Authentication Authentication
check
Verification (PP) (SA) (WA) (SA)
(PC)
(HV)
Invalid Invalid
Nature Capability Valid  Capability Valid
Behaviour Behaviour
of test tests (CA) Behaviour  tests (CA) Behaviour
tests (BI) tests (BI)
tests (BV) tests (BV)
Figure 1: The TSS
The characters within parentheses in figure 1 are used in the mnemonics identifying each test purpose in
the following clauses. Every mnemonic consists of four fields:
a) {implementation under test};
b) {major function};
c) {nature of test};
d) {number within the test group}.
EXAMPLE: Capability test number 1 of the strong authentication of the advanced DTMF
device is coded DSACA1.

---------------------- Page: 10 ----------------------

SIST ETS 300 391-3 E1:2003
Page 9
ETS 300 391-3: August 1995
5 Test purposes
Two entities in the UPT security architecture have been identified to need testing:
- the advanced DTMF device; and
- the AE.
There are two objectives to be met:
- to ensure that both entities have been implemented in accordance with the requirements stated in
ETS 300 391-1 [1];
- to achieve interoperability between products from different manufacturers.
The references made in this clause can be found in ETS 300 391-1 [1].
5.1 Advanced DTMF device test group
The advanced DTMF device is tested with respect to the following aspects:
- Device Holder Verification (DHV) is correctly implemented;
- the data for strong authentication is correctly sent;
- sensitive data is physically protected.
5.1.1 DHV test purposes
DHVCA1: Check that the device can perform DHV (covered by DHVBV1 and DHVBI1).
Initial conditions: The device is not blocked.
Reference: 8 requirements for the security module and 8.2 processing.
Check that the authorised user is accepted by the DHV.
DHVBV1:
The device is not blocked.
Initial conditions:
Reference: 8.2 processing.
DHVBV2: Check that authentication attempts can be performed after a successful DHV.
Initial conditions: The device is not blocked.
Reference: 8.2 processing.
Check that incorrect DHV attempts fail.
DHVBI1:
The device not being blocked.
Initial conditions:
Reference: 8 requirements for the security module, 8.2 processing.
DHVBI2: Check that no authentication attempt can be performed without a previous
successful DHV.
Initial conditions: None.
8.2 processing.
Reference:
Check that an authentication attempt cannot be performed when the time-out
DHVBI3:
has been reached.
Initial conditions: A successful DHV has been performed.
Reference: 8.2 processing.

---------------------- Page: 11 ----------------------

SIST ETS 300 391-3 E1:2003
Page 10
ETS 300 391-3: August 1995
5.1.2 Strong authentication test purposes
Check that the Authentication Code (AC) is correctly calculated and correctly
DSACA3:
converted to DTMF signals by the device.
Initial conditions: A DHV has been successfully performed and the time-out has not been
reached. The expected value of AC and the value of n and K used are known
by the tester.
11 authentication algorithms and 8.2 processing.
Reference:
DSABV3: Check that n is incremented by one at every authentication attempt.
Initial conditions: n is known by the tester and it has not reached its maximum value.
Reference: 8.2.5 Sequence number incrementation.
Check that the conversion of n to n as DTMF signals has been correctly
DSACA4:
s
performed.
A successful DHV has been performed.
Initial conditions:
Reference: 8.2.3 Sequence number conversion.
DSABV1: Check that the data field CT is correctly coded.
Initial conditions: An authentication attempt has been made.
Reference: 9.3.2 The authentication process.
5.1.3 Physical protection test purposes
Check that the Personal User Identity (PUI), n and K cannot be written into the
DPPCA1:
device by a user.
Initial conditions: None.
Reference: 8.1 Storage of data.
DPPCA2: Check that K and the authentication algorithm cannot be read out from the
device.
None.
Initial conditions:
8.1 Storage of data.
Reference:
5.2 AE test group
The AE is tested with respect to the following aspects:
- PUI check is implemented;
- strong authentication is correctly implemented;
- and/or weak authentication is correctly implemented.

---------------------- Page: 12 ----------------------

SIST ETS 300 391-3 E1:2003
Page 11
ETS 300 391-3: August 1995
5.2.1 PUI check test purposes
Check that received PUIs are checked with respect to validity at every
APCCA1:
authentication attempt.
Initial conditions: Authentication data has been received.
Reference: 6.2 User authentication mechanisms and 10 requirements for the AE of the
Service Data Function (SDF).
APCCA2: Check that received PUIs are checked against a blacklist at every
authentication attempt.
Authentication data has been received.
Initial conditions:
6.2 User authentication mechanisms and 10 requirements for the AE of the
Reference:
SDF.
5
...