15 Security requirements

3GPP51.014Release 4Specification of the SIM Application Toolkit for the Subscriber Identity Module - Mobile Equipment (SIM - ME) interfaceTS

TS 03.48 [24] specifies standardised methods of securing the content of application messages to and from the SIM Application Toolkit. If it is necessary to secure application messaging to Toolkit applications, then TS 03.48 [24] may be used.

Annex A (normative):
Support of SIM Application Toolkit by Mobile Equipment

Support of SIM Application Toolkit is optional for Mobile Equipment. However, if an ME states conformancy with a specific GSM release, it is mandatory for the ME to support all functions of that release.

The support of letter classes, which specify mainly ME hardware dependent features, is optional for the ME and may supplement the SIM Application Toolkit functionality described in this document. If an ME states conformancy to a letter class, it is mandatory to support all functions within the respective letter class.

The table below indicates the commands of the optional letter classes:

Letter classes

Command/function description

a

Proactive command: GET READER STATUS

Proactive command: PERFORM CARD APDU

Proactive command: POWER ON CARD

Proactive command: POWER OFF CARD
Event download: Card reader status

b

Proactive command: RUN AT COMMAND

c

Proactive command: LAUNCH BROWSER

Event download: Browser termination

d

Soft key support

e

Proactive command: OPEN CHANNEL

Proactive command: CLOSE CHANNEL

Proactive command: RECEIVE DATA

Proactive command: SEND DATA

Proactive command: GET CHANNEL STATUS

Event download: Data available

Event download: Channel status

f

Proactive command: SERVICE SEARCH

Proactive command: GET SERVICE INFORMATION

Proactive command: DECLARE SERVICE

Event download: Local connection event

Annex B (informative):
Example command sequences for proactive SIM

This subclause shows example APDU sequences for proactive SIM commands, and is for information only.

Case 1: Proactive SIM request following a normal command from the ME

ME

SIM

Normal command

Normal Data, if any

’91’

lgth

[Possible "normal GSM operation" command/response pairs]

FETCH

Proactive SIM command

’90’

’00’

[Possible "normal GSM operation" command/response pairs]

[ME performs command]

TERMINAL RESPONSE (OK)

’90’

’00’

Case 2: Proactive SIM request following a (polling) STATUS command from the ME

ME

SIM

STATUS command

Normal Data on DF

’91’

lgth

[Possible "normal GSM operation" command/response pairs]

FETCH

Proactive SIM command

’90’

’00’

[Possible "normal GSM operation" command/response pairs]

[ME performs command]

TERMINAL RESPONSE (OK)

’90’

’00’

Case 3: STATUS command from ME, not followed by any proactive SIM request

ME

SIM

STATUS command

Normal Data on DF

’90’

’00’

Case 4: Unsuccessful proactive SIM request, followed by SIM asking the ME to retry

ME

SIM

Normal command

Normal Data, if any

’91’

lgth

[Possible "normal GSM operation" command/response pairs]

FETCH

Proactive SIM command

’90’

’00’

[Possible "normal GSM operation" command/response pairs]

[ME performs command]

TERMINAL RESPONSE (temporary problem)

’91’

lgth

[Possible "normal GSM operation" command/response pairs]

FETCH

Repeat of proactive SIM command

’90’

’00’

[Possible "normal GSM operation" command/response pairs]

[ME performs command]

TERMINAL RESPONSE (OK)

’90’

’00’

Case 5: Unsuccessful proactive SIM request, and the SIM does not ask for the ME to retry

ME

SIM

Normal command

Normal Data, if any

’91’

lgth

[Possible "normal GSM operation" command/response pairs]

FETCH

Proactive SIM command

’90’

’00’

[Possible "normal GSM operation" command/response pairs]

[ME performs command]

TERMINAL RESPONSE (temporary problem)

’90’

’00’

Annex C (informative):
Example of DISPLAY TEXT Proactive SIM Command

See TS 102 223 [37].

Annex D (normative):
Structure of SIM Application Toolkit communications

See TS 102 223 [37].

Annex E (informative):
ME display in proactive SIM session

See TS 102 223 [37].

Annex F (informative):
Help information feature processing

See TS 102 223 [37].

Annex G (informative):
Monitoring of events

See TS 102 223 [37].

Annex H (normative):
Support of Multiple Card Operation

See TS 102 223 [37].

Annex I (informative):
Multiple Card proactive command examples

See TS 102 223 [37].

Annex J (informative):
Bearer independent protocol proactive command examples

See TS 102 223 [37].

Annex K (informative):
WAP References

See TS 102 223 [37].

Annex L (informative):
Change history

This annex lists all change requests approved for the present document since the first phase2+ version was approved by ETSI SMG and 3GPP TSG T.

Meet
ing#

Plenary

tdoc

WG

tdoc

VERS

CR

RV

PH

CAT

SUBJECT

Resulting

Version

s18

263/96

2.0.0

r96

Final draft version GSM 11.14 approved

TS 11.14
5.0.0

s19

515/96

134/96

5.0.0

A001

2

r96

B

Enhancement of call control (refresh command)

5.1.0

s20

580/96

206/96

5.1.0

A002

r96

B

Barred Dialling Numbers

5.2.0

703/96

208/96

A003

r96

B

Enhancement of REFRESH command

703/96

208/96

A004

r96

C

Enhancement to the command DISPLAY TEXT

703/96

208/96

A006

r96

B

Enhancement to the SIM Application Toolkit

s21

102/97

087/97

5.2.0

A007

1

r96

B

Ending of proactive session.

5.3.0

102/97

063/97

A008

r96

D

Example of Proactive SIM Command

102/97

049/97

A009

r96

D

Editorial clarifications to Text

s22

357/97

151/97

5.3.0

A010

r96

F

General Result values : interpretation

5.4.0

357/97

171/97

A011

1

r96

D

Clarifications to the DISPLAY TEXT command

357/97

176/97

A012

1

r96

D

Length indicator clarification of some simple TLV data obj.

357/97

172/97

A014

1

r96

D

Clarification of ME & SIM toolkit actions during REFRESH

357/97

178/97

A015

1

r96

F

Set Up Menu command without Item Data Object

357/97

169/97

A016

r96

F

Call control, corrections and editorial clarifications

357/97

170/97

A017

r96

C

Call Control : call set-up,SS and USSD operation

357/97

190/97

A018

r96

F

Call control,USSD operations

s23

789/97

284/97

5.4.0

A020

1

r97

B

Help information facility

5.5.0

789/97

257/97

A021

r96

F

Corrections to Annex D

789/97

263/97

A022

r96

F

Response data following an ENVELOPE command

789/97

280/97

A023

1

r96

F

Length of resp. data after SMS-PP ENVELOPE command

789/97

265/97

A024

r96

F

Clarification of the TP-Message Ref incrementation

789/97

266/97

A025

r96

F

Correction of the use of the Comprehension Required flag

789/97

267/97

A026

r96

F

DCS byte coding for send short message command

789/97

292/97

A027

r96

F

Concerning Annex C

789/97

274/97

A028

r96

F

Clarification of POLLING OFF command

789/97

275/97

A029

r96

F

Interaction between SIM toolkit and emergency calls

789/97

269/97

A030

r96

F

removal of setup menu

789/97

278/97

A031

r96

F

Clarification of result retry

789/97

251/97

A032

r96

F

Coding of simple TLV data objects

789/97

237/97

A033

r96

F

Interaction between proactive commands and FDN

789/97

254/97

A034

r96

F

Toolkit and ME display interaction

789/97

279/97

A035

r96

F

Poll interval

789/97

240/97

A036

r96

F

Clarifications to to REFRESH command.

789/97

282/97

A037

1

r96

F

Clarification of length and removal of padding

789/97

289/97

A038

1

r96

F

Correction to display text

789/97

290/97

A040

1

r96

F

Terminal response without command details

789/97

288/97

A041

r96

F

Number of possible ongoing proactive commands

789/97

291/97

A042

r96

F

Provide Local Information

789/97

276/97

A043

r96

F

Interaction with Last Number Dialled

s24

97-1124

97/362

5.5.0

A044

r96

F

high priority of DISPLAY TEXT

5.6.0

97-0886

97/363

A045

r97

B

new type of DISPLAY TEXT and SET UP CALL

97-0886

97/373

A047

1

r97

D

Extension of the Annex on help information feature.

97-0886

97/367

A048

r97

C

Enhancement to PROVIDE LOCAL INFORMATION

97-0886

97/370

A049

r96

F

GET INPUT – Hidden text

97-0886

97/375

A050

r97

B

Default choice possibility for Get Input

97-0886

97/382

A051

2

r97

B

Improvement of the dialogue with the user

97-0886

97/352

A052

r97

C

cell identity available in call control by SIM

97-0886

97/377

A053

r96

F

Profile download

97-0886

97/380

A054

r97

B

send USSD

97-0886

97/381

A055

r97

B

MO SMS control by SIM

(continued)

History table (continued)

Meet
ing#

Plenary

tdoc

WG

tdoc

VERS

CR

RV

PH

CAT

SUBJECT

Resulting

Version

NOTE: At SMG #25, it was decided to create a version 6.0.0 of every specification that contained at least one release ‘97 workitem. Thus release 97 CRs approved at or after SMG #25 will only be found in the version 6.x.y of this specification.

s25

98-0158

98p092

5.6.0

A046

1

r96

F

Proactive Commands versus possible Terminal Response

6.0.0

98-0158

98p068

A056

r97

C

Indications to be given to the user

98-0158

98p071

A057

r96

F

Length of text string TLVs

98-0158

98p058

A058

r96

F

Corrections to Command results

98-0158

98p076

A059

r97

F

MO SM control by SIM

98-0158

98p081

A060

1

r97

B

Previously selected item indication

98-0158

98p096

A061

1

r97

B

Event driven information

98-0158

98p106

A062

1

r97

B

Addition of UCS2 alphabet in the proactive commands

98-0158

98p098

A063

1

r96

F

PLAY TONE – addition of user abort while tone is playing

98-0158

98p097

A064

r97

C

Addition of warning of incompleteness of class 3

s26

98-0399

98p229

6.0.0

A065

2

R98

B

Icons for proactive commands

7.0.0

98-0399

98p211

A067

R97

F

Network not supporting / allowing call hold during the SET UP CALL

98-0399

98p213

A069

R97

F

Correction to unknown tag value

98-0399

98p214

A070

R97

F

Item Identifier in TERMINAL RESPONSE to SELECT ITEM

98-0399

98p216

A072

R97

F

Correction to PLAY TONE

98-0399

98p217

A073

R97

F

Network measurment results

98-0399

98p219

A075

R97

F

Missing response code

98-0399

98p242

A076

1

R97

F

SIM Toolkit Class Handling

98-0399

98p222

A077

R97

F

Addition of reference to TS 03.48

98-0399

98p230

A078

R98

B

SELECT ITEM Menu / Data Selection enhancement

98-0399

98p231

A079

R98

B

Operation of ME with multiple card readers

98-0400

98p238

A081

R98

D

Deletion of all release 97 markers from the R98 version

98-0399

98p249

A082

R97

F

RP-ACK RP-ERROR for SIM data download error

98-0399

98p243

A083

R98

B

Timer management

98-0399

98p252

A086

R98

C

Improvement of DISPLAY TEXT

98-0399

98p256

A089

1

R97

F

clarification to FETCH command

98-0399

98p169

A090

R98

B

Extension of PROVIDE LOCAL INFO for date, time and timezone.

s27

98-0670

98p345

7.0.0

A094

R98

F

Additional info field mandatory in case of USSD Return Error result.

7.1.0

98-0670

98p357

A098

R98

A

Clarification regarding the ME changing the contents of SIM commands e.g. SEND SMS

98-0670

98p374

A100

R98

F

Clarification about USSD return result

98-0670

98p377

A103

R98

F

Clarification of the ’93 00′ status response handling

98-0670

98p378

A104

R98

B

New command – SETUP IDLE MODE TEXT

98-0670

98p369

A108

R98

C

Handling of DTMF in SETUP CALL command

98-0670

98p389

A110

R98

F

Interaction between call control by SIM / MO short message control and proactive commands

98-0605

A111

4

R98

B

Enhancement to Proactive SIM that enables the SIM to issue AT commands

s28

P-99-185

98p448

7.1.0

A085

3

R98

B

Addition of a second alpha identifier to SET UP CALL

7.2.0

P-99-185

98p432

A114

R98

A

Clarification about USSD Return Result parameters in Terminal Response

P-99-185

98p451

A115

R98

F

Call Control: Modified user request beyond ME’s capabilities

P-99-185

9-99-045

A116

R98

C

Display of the items on the ME screen

P-99-185

9-99-054

A117

R98

C

USSD string coding

P-99-185

9-99-060

A120

R98

A

Configuration parameters

P-99-185

9-99-071

A121

R98

D

USSD and call control Call

P-99-185

9-99-073

A122

R98

F

Call control: Two bearer capability with BC repeat indicator

P-99-185

9-99-078

A123

R98

F

Clarification to PROVIDE LOCAL INFO regarding NMR

P-99-185

9-99-070

A124

R98

B

Sustained DISPLAY TEXT command

P-99-185

9-99-085

A126

R98

D

Clarification to PROVIDE LOCAL INFO (NMR in idle mode)

P-99-185

9-99-090

A127

R98

F

Correction of reply to SEND USSD

P-99-185

9-99-089

A129

R98

B

New proactive command "SEND_DTMF"

P-99-188

A132

R98

D

Deletion of $(……)$ release markers

P-99-188

A134

R98

D

Deletion of references to class 1 and class 2

P-99-188

A135

R98

D

Incorporation of timer feature into class 3

(continued)

History table (continued)

Meet
ing#

Plenary

tdoc

WG

Tdoc

VERS

CR

RV

PH

CAT

SUBJECT

Resulting

Version

s29

P-99-413

9-99-162

7.2.0

A128

5

R98

C

EF IMSI changes via data download or SIM toolkit application

8.0.0

P-99-413

9-99-197

A140

R98

F

Clarification of TERMINAL RESPONSE in the case of an empty GET INPUT command

P-99-541

A141

1

R98

F

Correction of BCCH channel list in Network Measurement Results

P-99-413

9-99-209

A142

R98

F

GET INKEY "Yes/No" shall not define keyboard mapping

P-99-413

9-99-164

A136

R99

C

Language indication for PROVIDE LOCAL INFORMATION and event driven information

P-99-413

9-99-210

A137

1

R99

C

Timing Advance in PROVIDE LOCAL INFO

P-99-413

9-99-179

A138

R99

C

New response "limited service" in PROVIDE LOCAL INFO

8.0.0

Version 8.0.1 was produced as a result of a mistake made in the coding of the TERMINAL PROFILE during the production of v8.0.0

8.0.1

s30

P-99-671

9-99-306

8.0.1

A143

2

R99

B

New command: Language notification for SIM to notify ME about selected SIM Application Toolkit language

8.1.0

P-99-671

9-99-295

A144

R99

D

Removal of numerical toolkit classes

P-99-671

9-99-289

A145

R99

F

Clarification of the ‘6F XX’ response

P-99-671

9-99-301

A146

R99

D

Execution time of SIM toollkit procedures

s31

P-00-138

9-00-0101

8.1.0

A149

R99

F

Correction on Transaction identifier tag

8.2.0

P-00-138

9-00-0141

A150

R99

B

Addition of EIA/TIA-136 Teleservice Delivery

P-00-138

9-00-0109

A151

R99

F

Clarification to service modification by Call Control

P-00-138

9-00-0110

A152

R99

F

Correction to result value "USSD transaction terminated by user"

P-00-138

9-00-0111

A153

R99

F

Call Control and automatic redial mode

P-00-138

9-00-0138

A155

R99

C

Addition of soft keys support for SELECT ITEM.

P-00-138

9-00-0140

A157

R99

C

Addition of soft keys support for SET UP MENU

P-00-138

9-00-0142

A158

R99

B

Addition of SAT commands for bearer independent protocol

P-00-138

9-00-0143

A159

R99

B

Addition of GPRS data bearer for bearer independent protocol

P-00-138

9-00-0144

A160

R99

B

New proactive Command : LAUNCH BROWSER

P-00-138

9-00-0145

A161

R99

F

Correction on Allowed Type of command and Device identity combinations

P-00-138

9-00-0150

A162

R99

F

MORE TIME usage clarification

P-00-138

9-00-0156

A163

R99

B

Display parameters in Profile download

P-00-138

9-00-0157

A164

R99

C

Get Reader Status : card reader identifier

8.2.0

The additions of CR A160 to subclause 6.6.26 were not correctly implemented in version 8.2.0. This is rectified in version 8.2.1.

8.2.1

s32

P-00-297

9-00-0220

8.2.1

A168

R99

A

Correction of references in SET UP IDLE MODE TEXT

8.3.0

P-00-297

9-00-0243

A169

R99

A

Icon identifiers handling

P-00-297

9-00-0245

A170

R99

D

Addition of tag values

P-00-297

9-00-0267

A172

1

R99

A

Correction of SELECT ITEM

P-00-297

9-00-0265

A173

R99

F

Addition of health warning ME storage on input

P-00-297

9-00-0270

A174

R99

F

Correction to display parameters in profile download

P-00-297

9-00-0197

A175

R99

A

Correction of reference in REFRESH description

P-00-297

9-00-0272

A176

R99

F

Get Reader Status : correction to card reader identifier tag

P-00-297

9-00-0281

A177

R99

F

Correction of SAT commands for using GPRS in bearer independent protocol feature

P-00-297

9-00-0280

A178

R99

F

Clarification of ME/SIM interface for bearer independent protocol


Following the closure of ETSI SMG and the agreement of the 3GPP in July 2000 to undertake responsibility for remaining GSM specifications, the change requests listed below were approved by 3GPP TSG-T. This change in responsibility also changed the specification number from "GSM 11.14" to "3GPP TS 11.14".

TP-09

TP-000149

T3-000473

8.3.0

A184

R99

F

Clarification for Alpha Identifier in PLAY TONE

8.4.0

TP-000149

T3-000485

A186

R99

F

EVENT DOWNLOAD-MT call : correction of the sub-address description

TP-000149

T3-000468

A188

R99

F

correction to GET INPUT regarding number of response string variables

TP-10

TP-000202

T3-000641

8.4.0

A189

2

R99

F

Clarification of bearer independent related to GPRS

8.5.0

TP-000202

T3-000644

A190

1

R99

F

Correction to device identity coding

TP-000202

T3-000647

A191

R99

F

Clarification of command qualifier related to LAUNCH BROWSER

TP-000202

T3-000618

A192

R99

F

Modification of general result for proactive command with user confirmation

TP-000202

T3-000634

A193

R99

F

General Clarification and Corrections

TP-11

TP-010039

T3-010209

8.5.0

A194

R99

F

Correction of Annex A: Support of USAT by Mobile Equipment

8.6.0

(continued)

History table (concluded)

Meet
ing#

Plenary

tdoc

WG

tdoc

VERS

CR

RV

PH

CAT

SUBJECT

Resulting

Version

TP-12

TP-010151

T3-010416

8.6.0

A196

R99

A

Clarification of min and max length for GET INPUT

8.7.0

TP-010151

T3-010420

A198

R99

A

Limitation of data field in the C-APDU and R-APDU data object

TP-010151

T3-010424

A200

R99

A

REFRESH-SIM Initialization : correction of a reference

TP-010151

T3-010449

A201

R99

F

Correction of Annex J (Bearer independant protocol examples)

TP-13

TP-010202

T3-010601

8.7.0

A202

R99

F

Addition of TIA/EIA 136 byte to terminal profile

8.8.0

TP-010202

T3-010600

A203

R99

F

Alignment of 11.14 with 31.111 regarding interaction between FDN, SEND SMS and SEND SS

TP-010202

T3-010605

A204

R99

F

Alignment with 31.111

TP-010202

T3-010606

A205

R99

F

Corrections to OPEN CHANNEL commands

TP-010202

T3-010609

A206

R99

F

TLV object for the APN in the OPEN CHANNEL command

TP-010202

T3-010615

A207

R99

F

Corrections to SEND DATA commands and Channel Status Event

TP-14

TP-010243

T3-010758

8.8.0

A208

R99

F

Miscellanous corrections

8.9.0

TP-15

TP-020064

T3-020110

8.9.0

A209

R99

F

Correction of Channel Status Simple TLV Tag Value

8.10.0

TP-16

TP-020111

T3-020353

8.10.0

A210

R99

F

Correction of Terminal Response references

8.11.0

T3-020367

A211

R99

F

Correction to OPEN CHANNEL for GPRS

TP-18

TP-020282

T3-020876

TS 11.14
8.11.0

A212

R99

F

Allow ME to reject Set Up Call with Called Party Subaddress when feature is not supported in ME and correction of a reference in the SET UP IDLE MODE TEXT TLV

TS 51.014
4.0.0

T3-020877

A213

R99

F

Clarification of the usage of busy status response for Cell Broadcast, Event download and Menu Selection Envelope.

T3-020908

A214

R99

F

Clarification on Default Bearer Description

T3-020943

A215

1

Rel-4

F

Upgrade of TS 11.14 R99 to TS 51.014 Rel-4

TP-19

TP-030020

T3-030154

4.0.0

001

Rel-4

F

Local Links correction

4.1.0

T3-030153

002

Rel-4

F

Replacement of improper terms “UICC” and “11.11”

TP-21

TP-030181

T3-030734

4.1.0

003

Rel-4

F

Correction of the Bearer Description for the Open Channel command

4.2.0

TP-22

TP-030250

T3-030940

4.2.0

004

Rel-4

F

Multiple inconsistency corrections

4.3.0

TP-25

TP-040189

T3-040549

4.3.0

005

Rel-4

A

Correction of possible terminal response versus proactive commands in relation to the display of icons

4.4.0

TP-040189

T3-040554

4.3.0

006

Rel-4

A

Essential corrections in content and coding of BC Repeat indicator

4.4.0

TP-26

TP-040270

T3-040841

4.4.0

007

Rel-4

F

Correction for non 3GPP references

4.5.0

TP-040270

T3-040852

4.4.0

008

Rel-4

F

Addition of Provide Local Information (Access technology)

4.5.0