Table of Contents
Advertisement
Security
Note: Authentication and encryption require key storage/provisioning to be functional, to make
these features operational.
Note: The terminal, and SwMI encryption and authentication support are classified into 3 classes:
•
•
•
Related Field is:
Paragraph 15.16 "Key Erasure Occurred"
15.16 Key Erasure Occurred
If enabled the terminal will store an indication in the codeplug that key Erasure occurred. This flag
will only be set on successful erasure of the encryption keys.
This flag can only be cleared by re-provisioning a new codeplug into the terminal, using the depot
CPS, or re-enabling the terminal over air (where possible).
This feature is Enabled/Disabled by clicking in the check box.
Related Field is:
Paragraph 15.15 "Key Erasure Mode"
15.17 Maximum Retries Due Time Out T351- 354
The number in the editable field indicates the maximum number of times the terminal is allowed to
send U-LOCATION UPDATE DEMANDs due to time out of the timers T351-354.
Where authentication occurs embedded within a registration procedure, timer T351 (registration
timer) shall be treated as T354 (authentication timer) and as such only one timer needs to be
invoked. The terminal uses the registration timer T351 value for the terminal authentication timer
during explicit authentication.
The terminal starts the T351_354 timer on receiving the D-AUTHENTICATION DEMAND from the
SwMI.
The terminal will terminate T351_354 under the following conditions:
•
Terminal Link Loss
•
On receipt of D-AUTHENTICATION UPDATE ACCEPT containing the type-3 element
"Authentication downlink"
•
On receipt of D-LOCATION REJECT
•
On sending U-AUTHENTICATION RESULT for authentication initiated by the SwMI and
made mutual by terminal
If the authentication timer T351_354 expires, the terminal will again attempt to send the location
update demand before reverting to its previous mobility management state, prior to the
authentication attempt. The range of the timer is 1 - 255 seconds and the default setting is 1 second.
15.18 Activate Always Encryption
If enabled, the terminal will block any unexpected clear outgoing PDUs.
March 2009
Class 1 – no encryption, may use authentication;
Class 2 – SCK encryption, ESI with SCK, may use authentication;
Class 3 – DCK encryption, ESI with CCK, authentication.
Chapter 3 - MTP850 Ex/MTP810 Ex Product Information Manual
3-55
6866588D21-D
Advertisement
Table of Contents
