Wednesday, March 13, 2013

Access Control Class & Class-15 SIM Cards - Part 1

View S.Sunil Kumar's profile on LinkedIn

ACC & Class-15 SIM cards Continued here : Part-2 



LTE L3 SIB 2 Message from Live Network, Access Barring is not enabled in the eNodeB. More specifically in MME.

References : 3GPP TS 36.331


*** Layer 3 Message type: System Information (DL-BCCH-SCH)

Device: MS1
Time : 12:28:34.538
Vendor Header
  Length : 66
  Log Code (Hex) : 0xB0C0
  HW Timestamp : (9752550.00 ms) 02:42:32.550
    1.25 ms fraction : 0.00
    CFN : 8
    1.25 ms counter : 840230522040
  RRC Signaling Header
    Log Packet Version : 2
    RRC Release Number : 9.5.0
    Radio Bearer Id : 0
    Physical Cell Id : 64
    E-ARFCN : XXXXX
    System Frame Number
      System frame number : N/A
      Sub frame number : N/A
    Message Type : BcchSchDownlink
    Message Length : 41
criticalExtensions : systemInformation-r8
systemInformation-r8
  sib-TypeAndInfo :
    [0 ] :
      noName : choiceInSequence
      choiceInSequence : sib2
      sib2
        radioResourceConfigCommon
          rach-ConfigCommon
            numberOfRA-Preambles : n52
            sizeOfRA-PreamblesGroupA : n28
            messageSizeGroupA : b56
            messagePowerOffsetGroupB : dB10
            powerRampingStep : dB2
            preambleInitialReceivedTargetPower : dBm-104
            preambleTransMax : n10
            ra-ResponseWindowSize : sf10
            mac-ContentionResolutionTimer : sf64
            maxHARQ-Msg3Tx : 5
          bcch-Config
            modificationPeriodCoeff : n2
          pcch-Config
            defaultPagingCycle : rf128
            nB : oneT
          prach-Config
            rootSequenceIndex : 265
            prach-ConfigInfo
              prach-ConfigIndex : 6
              highSpeedFlag : False
              zeroCorrelationZoneConfig : 9
              prach-FreqOffset : 9
          pdsch-ConfigCommon
            referenceSignalPower : 15
            p-b : 1
          pusch-ConfigCommon
            n-SB : 4
            hoppingMode : interSubFrame
            pusch-HoppingOffset : 26
            enable64QAM : True
            ul-ReferenceSignalsPUSCH
              groupHoppingEnabled : False
              groupAssignmentPUSCH : 0
              sequenceHoppingEnabled : False
              cyclicShift : 0
          pucch-ConfigCommon
            deltaPUCCH-Shift : ds2
            nRB-CQI : 1
            nCS-AN : 0
            n1PUCCH-AN : 10
          soundingRS-UL-ConfigCommon
            SoundingRS-UL-ConfigCommon : setup
            srs-BandwidthConfig : bw2
            srs-SubframeConfig : sc9
            ackNackSRS-SimultaneousTransmission : True
            srs-MaxUpPts: true
          uplinkPowerControlCommon
            p0-NominalPUSCH : -67
            alpha : al07
            p0-NominalPUCCH : -105
            deltaFList-PUCCH
              deltaF-PUCCH-Format1 : deltaF0
              deltaF-PUCCH-Format1b : deltaF3
              deltaF-PUCCH-Format2 : deltaF1
              deltaF-PUCCH-Format2a : deltaF2
              deltaF-PUCCH-Format2b : deltaF2
            deltaPreambleMsg3 : 0
          ul-CyclicPrefixLength : len1
        ue-TimersAndConstants
          t300 : ms200
          t301 : ms200
          t310 : ms1000
          n310 : n10
          t311 : ms10000
          n311 : n1
        additionalSpectrumEmission : 1
        timeAlignmentTimerCommon : sf1920
    [1 ] :
      noName : choiceInSequence
      choiceInSequence : sib3
      sib3
        q-Hyst : dB2
        mobilityStateParameters
          t-Evaluation : s60
          t-HystNormal : s30
          n-CellChangeMedium : 4
          n-CellChangeHigh : 8
        sf-Medium : dB0
        sf-High : dB0
        s-NonIntraSearch : 9
        threshServingLow : 6
        cellReselectionPriority : 7
        q-RxLevMin : -64
        s-IntraSearch : 29
        presenceAntennaPort1 : False
        neighCellConfig
          Binary string (Bin) : 01
            [0 ] : 0
            [1 ] : 1
        t-ReselectionEUTRA : 1
        t-ReselectionEUTRA-SF
          sf-Medium : lDot0
          sf-High : oDot75
 



*** Layer 3 Message type: System Information Block 2

Device: MS1
Time : 11:48:41.907
radioResourceConfigCommon
  rach-ConfigCommon
    numberOfRA-Preambles : n52
    sizeOfRA-PreamblesGroupA : n28
    messageSizeGroupA : b56
    messagePowerOffsetGroupB : dB10
    powerRampingStep : dB2
    preambleInitialReceivedTargetPower : dBm-104
    preambleTransMax : n10
    ra-ResponseWindowSize : sf10
    mac-ContentionResolutionTimer : sf64
    maxHARQ-Msg3Tx : 5
  bcch-Config
    modificationPeriodCoeff : n2
  pcch-Config
    defaultPagingCycle : rf128
    nB : oneT
  prach-Config
    rootSequenceIndex : 175
    prach-ConfigInfo
      prach-ConfigIndex : 6
      highSpeedFlag : False
      zeroCorrelationZoneConfig : 9
      prach-FreqOffset : 9
  pdsch-ConfigCommon
    referenceSignalPower : 15
    p-b : 1
  pusch-ConfigCommon
    n-SB : 4
    hoppingMode : interSubFrame
    pusch-HoppingOffset : 26
    enable64QAM : True
    ul-ReferenceSignalsPUSCH
      groupHoppingEnabled : False
      groupAssignmentPUSCH : 0
      sequenceHoppingEnabled : False
      cyclicShift : 0
  pucch-ConfigCommon
    deltaPUCCH-Shift : ds2
    nRB-CQI : 1
    nCS-AN : 0
    n1PUCCH-AN : 10
  soundingRS-UL-ConfigCommon
    SoundingRS-UL-ConfigCommon : setup
    srs-BandwidthConfig : bw2
    srs-SubframeConfig : sc0
    ackNackSRS-SimultaneousTransmission : True
    srs-MaxUpPts: true
  uplinkPowerControlCommon
    p0-NominalPUSCH : -67
    alpha : al07
    p0-NominalPUCCH : -105
    deltaFList-PUCCH
      deltaF-PUCCH-Format1 : deltaF0
      deltaF-PUCCH-Format1b : deltaF3
      deltaF-PUCCH-Format2 : deltaF1
      deltaF-PUCCH-Format2a : deltaF2
      deltaF-PUCCH-Format2b : deltaF2
    deltaPreambleMsg3 : 0
  ul-CyclicPrefixLength : len1
ue-TimersAndConstants
  t300 : ms200
  t301 : ms200
  t310 : ms1000
  n310 : n10
  t311 : ms10000
  n311 : n1
additionalSpectrumEmission : 1
timeAlignmentTimerCommon : sf1920




Through this analysis the major principles that I have understood are given below.

1.     ACC-Access Control Class Feature introduced to control various Mobile users access in to GSM Network. The same is extended to 3G/4G.
2.    Normal Customers are programmed with Access Class 0-9 and allowed in HPLMN/VPLMN
3.    PLMN Team/Staffs are programmed with Access Class 11/15 allowed Only in HPLMN.
4.    Access Class 12/13/14 allowed to roam in HPLMN & VPLMN. (No MCCMNC Check)
5.    Some MS/UE Vendors manufacture their equipment to support only ACC-0 to 9.
6.    EFACC – A 2 byte information stored in each SIM’s ROM which will be transferred to MS/UE when it is powered on. Ref : 3GPP TS 22.011
7.    System Info Type 3 (GSM/WCDMA) broadcasted from the network will carry the barred class info.In case of LTE/LTE-A it will be System Info Type 2



[External Blogs were failing to keep the Blog Material. So I have used the Mpirical.com’s forum.]
Anyway I have re-posted it here... for everybody's reference...
References : 
http://www.emsec.rub.de/media/crypto/attachments/files/2011/04/sim_card_security.pdf



I will be posting the details of how this can be used for commercial purpose/social responsibilities/ network maintenance activities....in upcoming posts....



View S.Sunil Kumar's profile on LinkedIn

2 comments:

  1. This comment has been removed by a blog administrator.

    ReplyDelete
  2. Thank you so much for sharing all this wonderful info with the how-to's!!!! It is so appreciated!!!You can read more on read more

    ReplyDelete