Motorola MTM800 Product Information Manual page 93

Security Services
11.3.8 Interaction Network/Terminal - Encrypted/Clear
Radio Radio
(i.e. radio loaded with Clear SW ) (i.e. radio loaded with Clear SW )
vs. vs.
Encrypted O nly Flag: not set Encrypted O nly Flag: not set
Netw ork Netw ork (only applies to M R3.0) (only applies to M R3.0)
Constant Clear Constant Clear M R2.1 & M R3.0 : w hen registering, radio M R2.1 & M R3.0 : w hen registering, radio
M ode M ode w ill detect system is in Clear m ode and w ill detect system is in Clear m ode and
w ill register in Clear m ode. All calls and w ill register in Clear m ode. All calls and
operation possible. operation possible.
Constant Constant M R2.1 and M R3.0 : Radio will not be able M R2.1 and M R3.0 : Radio will not be able
Encrypted Encrypted to register on system as it only has Clear to register on system as it only has Clear
m ode m ode softw are. Radio will display Registration softw are. Radio will display Registration
Failure Failure
Sw itch from Sw itch from M R2.1 and M R3.0 : Radio will not be able M R2.1 and M R3.0 : Radio will not be able
clear to clear to to register (as Encrypted) on system as it to register (as Encrypted) on system as it
Encryted Encryted only has Clear softw are. Radio will display only has Clear softw are. Radio will display
Registration Failure Registration Failure
Sw itch from Sw itch from M R2.1 and M R3.0 : invalid scenario since M R2.1 and M R3.0 : invalid scenario since
Encryted to Encryted to the radios only have Clear softw are - they the radios only have Clear softw are - they
clear clear w ill never be in encrypted m ode. w ill never be in encrypted m ode.
If how ever this scenario did occur, If how ever this scenario did occur,
typically the radios w ould have been in typically the radios w ould have been in
"Registration Failure" so once system has "Registration Failure" so once system has
m oved to Clear, term inals could be reset m oved to Clear, term inals could be reset
and they would succesfully register in and they would succesfully register in
Clear m ode. Clear m ode.
11.4 End-to-End Encryption
The TETRA standard supports encryption over the air. Air Interface Security is defined and specified
for TMO and for DMO, see Paragraph 11.3 "Air Interface Encryption (AIE)". The terminal creates the
PDU (Packet Data Unit) and the PDU is encrypted before transmission. The base station receives
this PDU and needs to decrypt it, to know what to do with it and where to send it. Thus, if a PDU
contains voice information, the voice part of the message has been decrypted and is now
unprotected, until it is transmitted out to the caller.
The End-to-End Encryption feature (E2E encryption) resolves this by encrypting the voice
information before it is packed into the PDU. The voice encryption is carried out by a Universal
Crypto Module (UCM), which takes the voice stream and encrypts this stream using a set of keys.
Likewise, the UCM takes encrypted voice stream and using the same keys decrypts back into clear
voice.
You are capable to make or receive E2E encrypted calls:
September 2008
Clear M ode Clear M ode
(i.e. radio loaded w ith TEA2 SW ) (i.e. radio loaded w ith TEA2 SW )
Encrypted O nly Flag: not set Encrypted O nly Flag: not set
(only applies to M R3.0) (only applies to M R3.0)
M R2.1 : when registering, term inal M R2.1 : when registering, term inal
detects system is in Clear m ode and thus detects system is in Clear m ode and thus
will register in Clear m ode. Radio will will register in Clear m ode. Radio will
operate norm ally within the cell which operate norm ally within the cell which
registration took place but will drop out registration took place but will drop out
of service during handover. Radio w ill of service during handover. Radio w ill
typically display No Group. Recovery is typically display No Group. Recovery is
only achieved by turning radio On/O ff. only achieved by turning radio On/O ff.
M R3.0 : when registering, radio will detect M R3.0 : when registering, radio will detect
system is in Clear m ode and w ill register system is in Clear m ode and w ill register
in Clear m ode. All calls and operation in Clear m ode. All calls and operation
possible. possible.
M R2.1 and M R3.0 : Radio w orks normally M R2.1 and M R3.0 : Radio w orks normally
M R2,1 : radio will succesfully m ove to M R2,1 : radio will succesfully m ove to
Encrypted m ode if it is still in operation in Encrypted m ode if it is still in operation in
Clear m ode. If however the radio has Clear m ode. If however the radio has
failed handover etc, the radio is "locked failed handover etc, the radio is "locked
out" and w ill need to be reset to regain out" and w ill need to be reset to regain
operation on the encrypted netw ork operation on the encrypted netw ork
M R3,0 : will succesfully switch to M R3,0 : will succesfully switch to
encrypted m ode after detection of the encrypted m ode after detection of the
secure netw ork broadcast info. secure netw ork broadcast info.
M R2.1 and M R3.0 : Radio switches to M R2.1 and M R3.0 : Radio switches to
clear after detection of updated system clear after detection of updated system
broadcast. broadcast.
M R2.1 : sam e situation exists as in M R2.1 : sam e situation exists as in
"Constant Clear m ode" in that once "Constant Clear m ode" in that once
registered, terminal w ill fail during registered, terminal w ill fail during
handover to other cells. handover to other cells.
Chapter 2 - MTM800 Product Information Manual
Encrypted m ode Encrypted m ode
(i.e. radio loaded with Clear SW ) (i.e. radio loaded with Clear SW )
Encrypted O nly Flag: set Encrypted O nly Flag: set
(only applies to M R3.0) (only applies to M R3.0)
Invalid Scenario. If the M R3.0 Invalid Scenario. If the M R3.0
Encrypted O nly flag is set then the Encrypted O nly flag is set then the
term inal CANNOT enter Clear m ode term inal CANNOT enter Clear m ode
in any circum stance. Thus, the in any circum stance. Thus, the
radio is always in Encrypted m ode - radio is always in Encrypted m ode -
which is not possible with Clear which is not possible with Clear
software - refer to the com m ents in software - refer to the com m ents in
the next colum n the next colum n
Clear M ode Clear M ode Encrypted m ode Encrypted m ode
(i.e. radio loaded w ith TEA2 SW ) (i.e. radio loaded w ith TEA2 SW )
Encrypted O nly Flag: set Encrypted O nly Flag: set
(only applies to M R3.0) (only applies to M R3.0)
M R3.0 - the radio will detect from M R3.0 - the radio will detect from
the system broadcast that the system broadcast that
Encrypted M ode is not supported Encrypted M ode is not supported
and thus cannot register. and thus cannot register.
Radio Display : tbc Radio Display : tbc
M R3.0 Radio will register as norm al M R3.0 Radio will register as norm al
- full operation - full operation
M R3.0 Radio will register as norm al M R3.0 Radio will register as norm al
when switched to encryption - full when switched to encryption - full
operation operation
M R3.0 - W ill begin in encrypted M R3.0 - W ill begin in encrypted
m ode, operating correctly. W hen m ode, operating correctly. W hen
the radio detects from the system the radio detects from the system
broadcast that Encrypted M ode is broadcast that Encrypted M ode is
not supported, the radio w ill display not supported, the radio w ill display
"Registration Failure" and thus "Registration Failure" and thus
cannot operate. cannot operate.
2-39
6866537D87-F