OsmocomBB

h2. softSIM

softSIM is a collection of tools to play with the SIM applications (in the SIM card or elsewhere).

It uses "bluetooth":http://bluetooth.org/ "profile":https://www.bluetooth.org/Technical/Specifications/adopted.htm "SIM Access Profile":https://www.bluetooth.org/DocMan/handlers/DownloadDoc.ashx?doc_id=158740 as abstraction layer to access the SIM (but no Bluetooth is required).

Possible use cases:

* virtual SIM, simulated in software

* remote SIM access, using PC/SC interface

* remote SIM access, using a Bluetooth enabled phone as reader

h2. Requirements

All the scripts are written in Ruby:

<pre>

$ sudo apt-get install ruby

</pre>

To use all tools, additional libraries and gems are required (you might want to use "sudo gem install" if you have ruby smartcard package loading problems):

<pre>

$ sudo apt-get install rubygems ruby-dev libdbus-ruby pcscd ruby-serialport libpcsclite1 libpcsclite-dev libruby libxml-ruby

$ gem install --user-install smartcard

</pre>

detailed information is in README.

h2. Source code

<pre>

$ git clone git://git.osmocom.org/softsim.git

</pre>

h2. Tools

h3. General description

At the moment, the following tools are available:

* demo_server.rb - (BT)SAP Server implementation. Can either talk to a PC/SC reader, or use a stored dump. Clients can connect either via UNIX socket, or using TCP/IP.

* demo_client.rb - (BT)SAP Client demo. Can connect to our demo_server.rb either via UNIX socket, or using TCP/IP. Alternatively can connect to a regular phone (that does support this profile) using Bluetooth. Basically executes a sequence of common APDUs.

* apdu_forward.rb - forwards APDUs from a UNIX socket to a (BT)SAP server using TCP/IP.

h3. SIM copy

<pre>

./demo_client.rb -t copy

</pre>

This file can then be used by the SIMOS server to do softSIM.

There are limitations to the copy. Only the body of the files with access condition ALWAYS or CHV1 can be read, otherwise only the header is saved. Ki (the secret key used for authentication and encryption) *can not be extracted* (SIM cards can not be cloned). Only some A38 triplets are saved.

Copying a card takes > 5min. Sometimes the copy hangs (the APDU traffic is blocked).

I don't know the origin of this problem (smartcard gem, pcscd, reader, card, ???).

Just wait ~30s and it will continue.

h2. Using with [[OsmocomBB]]

The [[mobile]] application implements (BT)SAP Client, so it can connect to a (BT)SAP Server and use its SIM card.

h3. Configuration

By default, [[mobile]] is configured to use '/tmp/osmocom_sap' as UNIX socket address. This address can be changed in the VTY configuration:

<pre>

ms 1

  ...

  sap-socket /tmp/osmocom_sap

  ...

</pre>

Also, you can configure [[mobile]] to use (BT)SAP client as a SIM card interface at start-up:

<pre>

ms 1

  ...

  sap-socket /tmp/osmocom_sap

  sim sap

  ...

</pre>

h2. Bugs & more

Please contact the author if any bug is discovered.