1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
|
-- QSIG-WTMAU.asn
--
-- Taken from Ecma International
-- Standard ECMA-306, 2nd edition (December 2001)
-- http://www.ecma-international.org/publications/standards/Ecma-306.htm
--
WTM-Authentication-Operations-asn1-97
{iso standard pss1-authentication (15433) authentication-operations-asn1-97 (1)}
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
IMPORTS OPERATION, ERROR FROM Remote-Operations-Information-Objects
{joint-iso-itu-t(2) remote-operations(4) informationObjects(5) version1(0)}
EXTENSION, Extension{} FROM Manufacturer-specific-service-extension-class-asn1-97
{iso standard
pss1-generic-procedures (11582) msi-class-asn1-97 (11)}
invalidServedUserNr FROM General-Error-List
{ccitt recommendation q 950 general-error-list (1)}
PartyNumber FROM Addressing-Data-Elements-asn1-97
{iso(1) standard(0) pss1-generic-procedures(11582)
addressing-data-elements-asn1-97(20)};
WTMAuth-Operations OPERATION ::= {authWtmUser | getWtatParam | wtatParamEnq | getWtanParam |
wtanParamEnq | transferAuthParam}
-- The following three operations shall apply to SS-WTAT --
authWtmUser OPERATION ::= { -- from Home PINX to Visitor PINX--
ARGUMENT AuthWtmArg
RESULT AuthWtmRes
ERRORS { temporarilyUnavailable | invalidServedUserNr |
notAuthorized | paramNotAvailable | unspecified}
CODE local : 72}
getWtatParam OPERATION ::= { -- from Visitor PINX to Home PINX --
ARGUMENT WtatParamArg
RESULT WtatParamRes
ERRORS { invalidServedUserNr | notAuthorized |
paramNotAvailable | temporarilyUnavailable | unspecified}
CODE local : 73}
wtatParamEnq OPERATION ::= { -- from Home PINX to Authentication Server PINX--
ARGUMENT WtatParamArg
RESULT WtatParamRes
ERRORS { invalidServedUserNr | paramNotAvailable | unspecified}
CODE local : 74}
AuthWtmArg ::= SEQUENCE {
wtmUserId WtmUserId,
calcWtatInfo [ 1 ] IMPLICIT CalcWtatInfo OPTIONAL,
dummyExtension DummyExtension OPTIONAL}
AuthWtmRes ::= SEQUENCE {
autWtmResValue ENUMERATED
{auth-res-correct (0),
auth-res-incorrect (1) },
dummyExtension DummyExtension OPTIONAL}
WtatParamArg ::= SEQUENCE {
wtmUserId WtmUserId,
canCompute CanCompute OPTIONAL,
authChallenge AuthChallenge OPTIONAL,
dummyExtension DummyExtension OPTIONAL}
-- The presence of element canCompute indicates that the Visitor PINX is able to --
-- compute a challenge and the expected response from session key information --
WtatParamRes ::= SEQUENCE {wtatParamInfo WtatParamInfo,
dummyExtension DummyExtension OPTIONAL}
-- The following two operations shall apply to SS-WTAN --
getWtanParam OPERATION ::= { -- from Visitor PINX to Home PINX --
ARGUMENT WtanParamArg
RESULT WtanParamRes
ERRORS { invalidServedUserNr | notAuthorized |
paramNotAvailable | temporarilyUnavailable | unspecified}
CODE local : 75}
wtanParamEnq OPERATION ::= { -- from Home PINX to Authentication Server PINX--
ARGUMENT WtanParamArg
RESULT WtanParamRes
ERRORS { invalidServedUserNr | paramNotAvailable | unspecified}
CODE local : 76}
WtanParamArg ::= SEQUENCE { wtmUserId WtmUserId,
authChallenge AuthChallenge,
authAlgorithm AuthAlgorithm,
canCompute CanCompute OPTIONAL,
dummyExtension DummyExtension OPTIONAL}
-- The presence of element canCompute indicates that the Visitor PINX is able to --
-- compute the response from session key information --
WtmUserId ::= CHOICE { pisnNumber PartyNumber,
-- The PISN number of the WTM user,
-- always a Complete Number.
alternativeId AlternativeId }
AlternativeId ::= OCTET STRING(SIZE(1..20))
WtanParamRes ::= SEQUENCE {wtanParamInfo WtanParamInfo,
dummyExtension DummyExtension OPTIONAL}
-- The following unconfirmed operation shall apply when interaction between SS-WTAT and ANF-WTINFO --
transferAuthParam OPERATION ::= { -- from Home PINX to Visitor PINX --
ARGUMENT SEQUENCE {
wtatParamInfo WtatParamInfo,
dummyExtension DummyExtension OPTIONAL}
RETURN RESULT FALSE
ALWAYS RESPONDS FALSE
CODE local : 77}
WtatParamInfo ::= SEQUENCE {authAlgorithm AuthAlgorithm,
wtatParamInfoChoice CHOICE {
authSessionKeyInfo [ 1 ] IMPLICIT AuthSessionKeyInfo,
calcWtatInfo [ 2 ] IMPLICIT CalcWtatInfo,
authKey [ 3 ] IMPLICIT AuthKey,
challLen [ 4 ] IMPLICIT INTEGER(1..8) } }
AuthKey ::= OCTET STRING (SIZE(1..16)) -- Authentication key --
WtanParamInfo ::= CHOICE {authSessionKeyInfo [ 1 ] IMPLICIT AuthSessionKeyInfo,
calcWtanInfo [ 2 ] IMPLICIT CalcWtanInfo}
AuthSessionKeyInfo ::= SEQUENCE {authSessionKey AuthSessionKey,
calculationParam CalculationParam}
CalcWtatInfo ::= SEQUENCE SIZE(1..5) OF CalcWtatInfoUnit
CalcWtatInfoUnit ::= SEQUENCE {authChallenge AuthChallenge,
authResponse AuthResponse,
derivedCipherKey [1] IMPLICIT DerivedCipherKey OPTIONAL,
calculationParam [2] IMPLICIT CalculationParam OPTIONAL}
-- included if required by the authentication algorithm in use --
CalcWtanInfo ::= SEQUENCE {authResponse AuthResponse,
calculationParam CalculationParam OPTIONAL}
-- included if required by the authentication algorithm in use --
DummyExtension ::= CHOICE {extension [5] IMPLICIT Extension{{WTMAuthExtSet}},
sequOfExtn [6] IMPLICIT SEQUENCE OF
Extension{{WTMAuthExtSet}} }
AUTH-ALG ::= CLASS {
&id DefinedIDs UNIQUE,
&Type OPTIONAL
}
DefinedIDs ::= INTEGER { ct2 (0), dect (1), gsm (2), pci (3), pwt (4), us-gsm (5), phs (6), tetra (7) } (0..255)
AuthAlgSet AUTH-ALG ::= {...}
AuthAlgorithm ::= SEQUENCE {
authAlg AUTH-ALG.&id({AuthAlgSet}),
param AUTH-ALG.&Type({AuthAlgSet}{@.authAlg}) OPTIONAL
}
AuthChallenge ::= OCTET STRING (SIZE(1..8)) -- Randomly generated parameter --
AuthResponse ::= OCTET STRING (SIZE(1..4)) -- WTAT: Expected response value --
-- WTAN: Response value from network --
AuthSessionKey ::= OCTET STRING (SIZE(1..16)) -- Authentication session key--
CalculationParam ::= OCTET STRING (SIZE(1..8)) -- Parameter used when calculating --
-- the authentication session key from --
-- the real authentication key. It may be --
-- transferred to the WTM user during --
-- both WTAT and WTAN. --
CanCompute ::= NULL -- indicates capability of computing --
-- challenge and/or response value --
DerivedCipherKey ::= OCTET STRING (SIZE(1..8)) -- derived cipher key may be computed --
-- when computing challenge and --
-- expected response values--
WTMAuthExtSet EXTENSION ::= {...}
notAuthorized ERROR ::= {CODE local : 1007 }
paramNotAvailable ERROR ::= {CODE local : 1017 }
temporarilyUnavailable ERROR ::= {CODE local : 1000 }
unspecified ERROR ::={
PARAMETER Extension{{WTMAuthExtSet}}
CODE local : 1008}
END -- of WTM-Authentication-Operations-asn1-97
|
