灌水我最牛之jiuwanli水楼 [复制链接]

[1]    3GPP TS 22.100 v3.x.x: "UMTS phase 1" (Release 99).
[2]    3GPP TS 22.101: "Service principles".
[3]    3GPP TS 31.101: "UICC-Terminal Interface; Physical and Logical Characteristics".
[4]    Void
[5]    ETSI TS 101 220: "ETSI Numbering System for AIDs".
[6]    3GPP TS 31.111: "USIM Application Toolkit (USAT)".

[7]    3GPP TS 33.102: "3G Security: Security Architecture".
[8]    3GPP TS 51.011, Rel-4: "Specification of the Subscriber Identity Module  Mobile Equipment (SIM  ME) interface".
[9]    Void.
[10]    Void.
[11]    ISO/IEC 7816-3: "Information technology - Identification cards - Integrated circuit(s) cards with contacts - Part 3: Electronic signals and transmission protocols".
[12]    ISO/IEC 7816 4: "Identification cards  Integrated circuit cards, Part 4: Organization, security and commands for interchange".
[13]    ETSI TS 102 221 Rel-7: "UICC-Terminal Interface : Physical and Logical Characteristics".

2.2    Void
3    Definitions, symbols and abbreviations
3.1    Definitions

For the purposes of the present document, the following definitions apply:
3.2    Void
3.3    Abbreviations

For the purposes of the present document, the following abbreviations apply:
ADN    Abbreviated Dialling Number
ATR    Answer To Reset
DF    Dedicated File
EF    Elementary File
ICC    Integrated Circuit Card
IK    Integrity Key
IMSI    International Mobile Subscriber Identity
ME    Mobile Equipment
MF    Master File
PIN    Personal Identification Number
PPS    Protocol and Parameter Selection
SIM    Subscriber Identity Module
USIM    Universal Subscriber Identity Module

4    General requirements
The UICC shall be a removable hardware module. The USIM on a UICC shall contain an identity which unambiguously identifies a subscriber.
For access to 3G services, a UICC containing a valid USIM shall be present at all times, other than for emergency calls.
The specifications shall support the security requirements as defined in 3GPP TS 33.102 [7].
The USIM shall provide storage for subscription and subscriber related information.
The UICC/USIM may also contain applications which use the features defined in the USIM Application Toolkit specification 3GPP TS 31.111 [6].

5    Security requirements
The USIM shall be used to provide security features. If the UICC is removed from the 3G terminal, the service shall be terminated immediately. The functions of the USIM include authenticating itself to the network and vice versa, authenticating the user and providing additional security functions as defined in 3GPP TS 33.102 [7].
The USIM shall be unambiguously identified.
Means shall be provided to prevent fraudulent use of stolen UICCs.
It shall not be possible to access data intended for USIM internal use, e.g. authentication keys.   
Further details of the following requirements are given in 3GPP TS 33.102 [7].

5.1    File access conditions
Actions, such as READ, UPDATE on UICC data shall be controlled by access conditions. These shall be satisfied prior to the action being performed.
Since a UICC may contain multiple (3G and non-3G) applications, a flexible method of controlling file access shall be provided.

5.2    User authentication
The USIM shall support means to authenticate the user, to provide, for example, protection against the use of stolen cards. For the USIM, authentication shall be performed by the verification of a numeric PIN of four (4) to eight (8) decimal digits.
A function to disable user authentication may exist which may be inhibited by the application provider, in which case the user shall always use the PIN. Otherwise, the user may decide whether or not to make use of the user authentication function. If disabled, the user authentication function remains disabled until the user specifically re-enables it.

Following correct PIN presentation, the ME may perform functions and actions on USIM data, which are protected by the relevant access condition.
If an incorrect PIN is entered, an indication shall be given to the user. After three (3) consecutive incorrect entries the relevant PIN is blocked, i.e. functions and actions on data protected by the access condition shall no longer be possible, even if between attempts the UICC has been removed, the USIM has been deselected or the ME has been switched off. Once a PIN is blocked, further PIN verifications shall be denied.