How Do I Perform Authentication Tests?

Prerequisites

1. Register the MS.

   Make sure the mobile station (MS) camps onto the test set and has completed power up registration. Registration provides the test set with the MS's ESN, IMSI, etc., which are required in the global challenge, unique challenge, and SSD update authentication procedures. When the MS registers to the test set, the registration data is displayed on the Mobile Reported Information screen. You may need to set some call parameters (such as Cell Band, Channel, System ID, etc.) that are necessary to allow MS to register to the test set (see How Do I Set Up a Call? ).

2. Initialize the A-Key in the MS and test set to the same value.

   For global challenge or unique challenge authentications to pass, you must make sure the SSD_A stored in the test set is identical to the SSD_A stored in the MS.You can perform either of the following ways:

   • If you can change MS's A-Key, initialize SSD_A in both the test set and MS to zeroes by changing their A-Keys since entering an A-Key will set the SSD_A to zero. It is recommended that you set the A-Keys in the test set and MS to the same values and then Perform SSD Update procedure.
     • On the Authentication Parameters menu, enter a valid number (1 to 20 digits) into A-Key (Dec) field. The SSD_A=0 displays True on the Authentication Parameters window on the Authentication Information screen, indicating that the SSD_A value in the test set initialized to zero. Also, the six Check Digits is generated for the entered A-Key and displayed on the Authentication Information screen. See To Set Authentication Parameters or to Access Authentication Information Screen for detailed procedure.
       
     • On the MS's display, enter the identical sequence of A-Key digits followed by the six Check Digits.
   • If you can not change MS's A-Key, but you know what it is, enter the most significant 20 digits (without check digits) of the MS's A-Key on the test set, then Perform SSD Update to synchronize the SSD_A values between the test set and MS. If you even do not know the MS's A-Key, try the zero value, since A-Key in many mobile stations is initially programmed to zero until re-programmed by the service provider.

Perform SSD Update

The following procedure is to show you how to perform SSD Update on the control channel while in idle state or on the traffic channel while in a call.

1. Make sure you have finished the Prerequisites .
2. Follow the procedure To Set Authentication Parameters or to Access Authentication Information Screen , then press the Authentication Parameters ( F1 ) Key on the Authen Ctrl menu.
   • set the RANDSSD parameter to the desired value. You may skip this step if the default value will be used.
   • Set the Timer Based Registra0tion State to Off.
        

     NOTE

     It is recommended that the Timer Based Registration State is turned off to avoid potential confliction between the registrations and the SSD Update.

     ---

        

     
3. Press the SSD Update ( F4 ) key on the Authen Ctrl 1 of 2 menu. The test set sends the SSD Update Message to the MS and starts the SSD update operation. For details on the message flow, see SSD Update Operation .
4. Observe the SSD Update Information window and verify that the SSD update on paging channel is successful. After a successful SSD Update, the SSD_A=0 will be False indicating the SSD_A is no longer zero. If the test fails, verify that you've set the A-Key on the MS and test set to the same value. and then repeat the procedure. A typical display is shown below.
   
5. Establish a call. For example, set the service option properly (such as SO2) and then press the Originate Call ( F3 ) on the Authen Ctrl 2 of 2 menu. If required, follow the procedure How Do I Set Up a Call? .
6. Repeat steps 3 and 4. Verify that the SSD update on traffic channel is successful. A typical display is shown as below.
   
7. End the call.

Perform Global Challenge

The following procedure is to verify that the MS can successfully perform a registration, origination, paging response with authentication parameters that match the values expected by the test set:

1. Ensure that the MS and the test set have identical SSD_A. See Perform SSD Update .
2. Follow the procedure To Set Authentication Parameters or to Access Authentication Information Screen , then press Authentication Parameters ( F1 ) Key on the Authen Ctrl 1 of 2 menu.
   • set the RAND parameter to the desired value. You may skip this step if the default value will be used.
   • Set the Timer Based Registration State to On .
3. On the Authen Ctrl 1 of 2 menu, set the Global Challenge ( F2 ) to On . The test set will signal the MS to go into authentication mode and use the specified RAND value for authentication when registrations, call originations, pages or data bursts are performed. For details on the message flow, see Global Challenge Operation .
4. Wait for the first timer based registration to complete.
5. When the test set receives the Registration Message , a Registration Global Challenge is implemented.
6. Observe the Global Challenge Information window and verify whether the registration passes or fails the authentication. If the test fails, check the pass/fail result of each parameter to see which parameters do not match expected values. For details on these results description, see Global Challenge Information .
      

   NOTE

   The Expected COUNT is empty (non-available) when the test set powers up or fully preset. The COUNT result indicates Fail in the first registration with authentication because the Expected COUNT value is not available until the next registration.

   ---

      

   
7. Originate a call from the MS. For example, set the service option properly (such as SO3), and then enter a dialed number on the phone and press SEND.
8. When the test set receives the Origination Message , an Origination Global Challenge is implemented.
9. Observe the Global Challenge Information window and verify whether the origination passes or fails the authentication. A typical display is shown below.
   
10. End the call.
11. Paging the MS from the test set. For example, set the service option properly (such as SO2) and then press the Originate Call ( F3 ) on the Authen Ctrl 2 of 2 menu. If required, follow the procedure How Do I Set Up a Call? .
12. When the test set receives the Page Response Message , a Page Response Global Challenge is implemented.
13. Observe the Global Challenge Information window and verify whether the page response passes or fails the authentication. A typical display is shown below.
    
14. End the call.
       

    NOTE

    The authentication result does not impact the normal call processing (registration, call connection). For example, a call can be connected even if the authentication fails. Please note that this behavior is different from the standard, but provides more flexibility to perform other MS tests in the event that the authentication test fails.

    ---

       

Perform Unique Challenge

The following procedure is to show you how to perform a Unique Challenge on the control channel while in idle state or on the traffic channel while in a call.

1. Ensure that the MS and the test set have identical SSD_A. See Perform SSD Update .
2. Follow the procedure To Set Authentication Parameters or to Access Authentication Information Screen , then press Authentication Parameters ( F1 ) Key on the Authen Ctrl 1 of 2 menu.
   • set the RANDU parameter to the desired value. You may skip this step if the default value will be used.
   • Set the Timer Based Registration State to Off .
        

     NOTE

     It is recommended that the Timer Based Registration State is turned off to avoid potential confliction between the registrations and the Unique Challenge.

     ---

        

     
3. Press the Unique Challenge ( F3 ) key on the Authen Ctrl 1 of 2 menu. The test set sends the Authentication Challenge Message with the specified RANDU to the MS and starts the Unique Challenge operation. For details on the message flow, see Unique Challenge Operation .
4. Observe the Unique Challenge Information window and verify whether the Unique Challenge on paging channel is successful. A typical display is shown below.
   
5. Establish a call. For example, set the service option properly (such as SO2) and then press the Originate Call ( F3 ) on the Authen Ctrl 2 of 2 menu. If required, follow the procedure How Do I Set Up a Call? .
6. Repeat steps 3 and 4. Verify that the Unique Challenge on traffic channel is successful. A typical display is shown as below.
   
7. End the call.
      

   NOTE

   The authentication result does not impact the normal call processing (registration, call connection). For example, a call can be connected even if the authentication fails. Please note that this behavior is different from the standard, but provides more flexibility to perform other MS tests in the event that the authentication test fails.

   ---

      

To Set Authentication Parameters or to Access Authentication Information Screen

1. Press the Call Setup key.
2. Press the left More key, go to Call Control 3 of 5 (in the Lab Application) or Call Control 3 of 3 (in the Test Application).
3. Press the Authentication ( F2 ) key, the Authen Ctrl menu is displayed.
   • To set the A-Key, RAND, RANDU, RANDSSD values, press the Authentication Parameters ( F1 ) key.
   • To start the Global Challenge authentication, set the Global Challenge ( F2 ) key to On .
   • To start the Unique Challenge authentication, press the Unique Challenge ( F3 ) key.
   • To start the SSD Update procedure, press the SSD Update ( F4 ) key.
   • To clear the results shown on the Global Challenge Information, Unique Challenge Information, and SSD Update Information windows, press the Clear Anthen Results ( F5 ) key.
   • To force the MS make a registration or page the MS, press the left More key. On the Authen Ctrl 2 of 2 , press the Register Mobile ( F6 ) or Originate Call ( F3 ) key.
   

Perform 3GPP2 C.S0043-0 V1.0 Authentication Tests

To perform the 3GPP2 C.S0043 "7.1 Shared Secret Data (SSD) initialized when A-Key is Changed" test, follow the procedure as described in Perform Global Challenge and Perform Unique Challenge .

To perform the 3GPP2 C.S0043 "7.2 Shared Secret Data Update" test, follow the procedure as described in the Perform SSD Update .

Related Topics

Authentication Overview

Setting Authentication Parameters

Authentication Information Screen

Authentication Troubleshooting

CALL:SECurity