1. 1 2000/12/11 Basic idea SIM Card ANSI-41 HLR/AC IIF GSM MSC AUTHREQ authreq [RANDU, AUTHU, SSD] MAP_SEND_AUTH_INFO MAP_SEND_AUTH_INFO ack [TRIPLET(RAND, SRES, Kc)] } 32bits SRES AUTHU (18bits) } 128bits RAND RANDU (24bits)SSD-B (64bits) } 64bits Kc Introduction This contribution indicates the basic idea of one-way roaming from ANSI-41 to GSM and three stage 2 proposals for realizing the idea. GAIT has already standardized ANSI-GSM roaming as PN-4857. But the standard doesn’t meet our requirement of IIF without subscription data. Therefore, we proposed “IIF without Service Orders” at G95-Network meeting, which approved this as Phase 1, with future work to consider how and if PN-4587 functionality could be incorporated for Phase 2. And a new PN was assigned for the IIF at the previous TR45.2 meeting. Basic idea The basic idea to realize ANSI-GSM roaming without subscription data in IIF is shown the figure below. RANDU, AUTHU and SSD-B are used as RAND, SRES and Kc. The length of authentication parameters of GSM MAP is longer than that of ANSI-41. Therefore, GSM MAP and air-interface can convey ANSI-41 authentication parameters. Conclusion We propose to approve the basic idea for realizing one way roaming from ANSI-41 to GSM. And review the three stage 2 proposals and the compliance list of them. The compliance list is referred to p.2. The three stage 2 proposals are referred to p.3-5. We propose to select the preferable one if possible. This figure indicates the example of IIF without subscription data.

2. 2 2000/12/11 Compliance List of three proposals Three proposals The three proposals are on the assumption that IIF has no subscription data. Proposal 1 (refer to p.3) The processing of ANSI-41 HLR/AC is based on “AC initiated Unique Challenge”. The HLR/AC must allow MSID/ESN mismatch. Proposal 2 (refer to p.4) The processing of ANSI-41 HLR/AC is a specific procedure for AUTHREQ from IIF. If AUTHREQ comes from IIF, the HLR/AC only sends AUTHU, RANDU and SSD. Proposal 3 (refer to p.5) Authentication Parameters Request Message(AUTHPREQ) is newly defined. The message is used for retrieving some set of authentication parameters. Compliance List *GLR(Gateway Location Register) : Subscription Data is temporary registered.

3. 3 2000/12/11 MS GSM MSC/VLR IIF ANSI-41 HLR/AC ANSI-41 MSC/VLR Proposal 1 Location_Area_Update (IMSI) SEND_AUTHENTICATION_INFO [IMSI] ANSI-41 HLR/AC detects that MSCID parameter in AUTHREQ is IIF ID, it allows MSID/ESN mismatch. SEND_AUTHENTICATION_INFO ack [ AuthenticationSetList (RAND, SRES, Kc)] UPDATE_LOCATION [IMSI] REGNOT [MSID, ESN(default ESN)] REGCANC [MSID, ESN] regcanc regnot [profile] Location_Area_Update ack UPDATE_LOCATION ack INSERT_SUBSCRIBER_DATA INSERT_SUBSCRIBER_DATA ack Authenticate ack (SRES) ANSI-41 MS executes the authentication using CAVE. It extracts RANDU from RAND in Auth_Req and calculates the AUTHU using RANDU and SSD-A. Authenticate (RAND) ESN includes default value. ASREPORT asreport ASRRT authreq [RANDU, AUTHU, SSD] AUTHREQ [MSID, ESN(default ESN), MSCID(IIF)] ESN includes default value.

4. 4 2000/12/11 It continues one to five times. ESN includes default value. MS GSM MSC/VLR IIF ANSI-41 HLR/AC ANSI-41 MSC/VLR Proposal 2 ANSI-41 HLR/AC detects that MSCID parameter in AUTHREQ is IIF ID, it allows MSID/ESN mismatch, and it sends RANDU, AUTHU and SSD in authreq. AUTHREQ [MSID, ESN(default ESN), MSCID(IIF)] SEND_AUTHENTICATION_INFO [IMSI] SEND_AUTHENTICATION_INFO ack [ AuthenticationSetList (RAND, SRES, Kc)] authreq [RANDU, AUTHU, SSD] Location_Area_Update (IMSI) UPDATE_LOCATION [IMSI] Authenticate ack (SRES) ANSI-41 MS executes the authentication using CAVE. It extracts RANDU from RAND in Auth_Req and calculates the AUTHU using RANDU and SSD-A. Authenticate (RAND) ESN includes default value. REGNOT [MSID, ESN(default ESN)] REGCANC [MSID, ESN] regcanc regnot [profile] Location_Area_Update ack UPDATE_LOCATION ack INSERT_SUBSCRIBER_DATA INSERT_SUBSCRIBER_DATA ack

5. 5 2000/12/11 AUTHPREQ [MSID] New message for IIF. MS GSM MSC/VLR IIF ANSI-41 HLR/AC ANSI-41 MSC/VLR Proposal 3 ANSI-41 HLR/AC detects AUTHPREQ, and it sends some set of (RANDU, AUTHU, SSD) and ESN in authpreq. authpreq [SomeSet(RANDU, AUTHU, SSD), ESN] SEND_AUTHENTICATION_INFO ack [ AuthenticationSetList (RAND, SRES, Kc)] SEND_AUTHENTICATION_INFO [IMSI] Location_Area_Update (IMSI) UPDATE_LOCATION [IMSI] Authenticate ack (SRES) ANSI-41 MS executes the authentication using CAVE. It extracts RANDU from RAND in Auth_Req and calculates the AUTHU using RANDU and SSD-A. Authenticate (RAND) REGNOT [MSID, ESN] REGCANC [MSID, ESN] regcanc regnot [profile] Location_Area_Update ack UPDATE_LOCATION ack INSERT_SUBSCRIBER_DATA INSERT_SUBSCRIBER_DATA ack

6. 6 2000/12/11 ROUTREQ [MSID] MS GSM MSC/VLR IIF ANSI-41 HLR/AC ANSI-41 MSC/VLR There is the GLR data Call Delivery (Same as PN-4857) LOCREQ [DGTSDIAL] Incoming Call From PSTN PROVIDE_ROAMING_NUMBER ack [MSRN] Call setup PROVIDE_ROAMING_NUMBER [IMSI] routreq [TLDN] Locreq [TERMLIST, REDIND]