Project

General

Profile

Actions

Feature #4401

closed

Proof of concept for counting Location Updates in SIM applet

Added by osmith about 4 years ago. Updated about 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
Start date:
02/18/2020
Due date:
% Done:

100%

Spec Reference:

Description

Before we put this part in the draft specification, we should make sure that we can actually count location updates in the SIM applet.

As proof of concept, we could increase a counter after each location update (independent of the IMSI for now), and display a message with the current counter after every location update.

From #4400:

Warning the user if SMS don't arrive

An attacker could possibly block the SMS with NEW PSEUDO IMSI REQ from arriving
at the SIM applet. In that case, the SIM would continue using the old pseudo
IMSI indefinitely.

We could possibly count the location updates done with the same pseudo IMSI in
the SIM applet, and warn the user if the same pseudo IMSI has been used more
than N (e.g. 5) times.

(Could be possible by listening to EVENT_DOWNLOAD_LOCATION_STATUS?)


Related issues

Related to IMSI Pseudonymization - Feature #4400: Approach C: HLR decides and sends the entire next pseudo IMSI to SIMResolvedosmith02/17/2020

Actions
Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 48.8 MB)