A simple software fix could limit location data sharing

Re:A simple software fix could limit location data sharing by prschmitt on Saturday August 14, 2021 @07:06PM (#28184704)

The regular attach procedure is unchanged. In the simplest version we give every SIM the identical IMSI and key.

However, their use is to only gain IP connectivity - the equivalent of an allow list on the backend db (AUSF) which gives you IP connectivity. At that point you do billing and auth at the PGPP-GW using oblivious auth tokens.

[ Parent | on HN ]

Re:A simple software fix could limit location data sharing by red0point on Sunday August 15, 2021 @02:41AM (#28186692)

Thanks! You mention that this is the simplest version, is there one where you use distinct keys?

Also, regarding the IMEI - let‘s assume the UE nullified it, how would you distinguish between a legitimately nullified UE and a stolen UE that had its IMEI nullified?

[ Parent | on HN ]