ETS 300 391-1 : 20001

Foreword
Introduction
1 Scope
2 Normative references
3 Symbols and abbreviations
4 Security requirements and security features
  4.1 Security features in general
  4.2 UPT security requirements
  4.3 UPT specific security features
  4.4 UPT security limitations
  4.5 Security features for IN and inter-network links
      in general
5 Security mechanisms
  5.1 Access control mechanisms
  5.2 User authentication mechanisms
  5.3 Security management
  5.4 Service limitations
  5.5 Security profiles
6 Parameter sizes and values
7 Requirements for the UPT access device
  7.1 Storage of data
  7.2 Processing
  7.3 User interface
8 Transmission protocol
  8.1 Transmission coding
  8.2 Weak authentication
  8.3 Strong authentication
9 Requirements for the AE of the SDF
  9.1 Check of PUI and authentication type used
  9.2 Weak authentication
  9.3 Change of PIN
  9.4 Strong authentication
10 Authentication algorithms
  10.1 The specific UPT algorithm
  10.2 The TE 9 algorithm
  10.3 Other algorithms
Annex A (informative): Device holder verification
  A.1 Introduction
  A.2 DHV in the UPT access device
Annex B (informative): Interface between General Part
        and SM in the DTMF device
  B.1 Introduction
  B.2 Verification of the device holder by an LPIN
  B.3 Time-out
  B.4 Unblocking of the device
  B.5 Change of LPIN
  B.6 One pass authentication by use of a sequence
      number
  B.7 Key management
Annex C (informative): Bill limitation
  C.1 Absolute bill limitation
  C.2 Bill limitation with respect to time
Annex D (informative): Subscription process and key
        management
  D.1 Subscription process
  D.2 Key management
Annex E (informative): Activity monitoring
  E.1 Monitoring points
  E.2 Monitored activities
  E.3 Monitoring procedures
Annex F (informative): Bibliography
History

Covers necessary security measures for a first introductory stop of a UPT service (phase 1)