5 Use of the algorithm specification

3GPP41.061General Packet Radio Service (GPRS)GPRS ciphering algorithm requirementsRelease 4TS

This clause addresses ownership of the algorithm specification, to define which types of organization are entitled to obtain a copy of the algorithm specification, and to outline how and under what conditions such organizations may obtain the specification.

5.1 Ownership

The algorithm and all copyright to the algorithm and test data specifications shall be owned exclusively by ETSI.

The design authority for the algorithm shall be ETSI SAGE.

The algorithm specification shall not be published as an ETSI standard or otherwise made publicly available, but shall be provided to organizations that need and are entitled to receive it subject to a licence and confidentiality agreement.

The licence and confidentiality agreement shall require recipient of the specification not to attempt to patent the algorithm or otherwise register an Intellectual Property Right (IPR) relating to the algorithm or its use.

5.2 Users of the specification

The algorithm specification may be made available to the following types of organizations:

– the service providers, including network operators, entitled to use the algorithm in the network side;

– those who need the algorithm specification in order to build equipment or components which embody the algorithm.

5.3 Licensing

Users of the algorithm, and users and recipients of the algorithm specification, shall be required to sign a licence and confidentiality agreement.

Appropriate licence and confidentiality agreements shall be drawn up by ETSI.

Licences shall be royalty free. However, the algorithm custodian may impose a small charge to cover administrative costs involved in issuing the licences.

It is envisaged that there shall be two types of licence and confidentiality agreement: one for service provider of GPRS services entitled to use the algorithm, and one for organizations who need the algorithm specification in order to build equipment or components which embody the algorithm, as defined in subclause 5.2.

The licence and confidentiality agreement signed by a service provider of GPRS services shall require that organization to comply with the restrictions on the use of the algorithm.

The licence and confidentiality agreement signed by an organization that needs the algorithm specification in order to build equipment or components which embody the algorithm, shall require that organization to adopt measures to ensure that its implementations of the algorithm are commensurate with the need to maintain confidentiality of the algorithm.

5.4 Management of the specification

The distribution procedure for the algorithm specification shall be specified by ETSI. SAGE is expected to design the appropriate procedure for the distribution of the algorithm after consulting ETSI SMG 10 and the GSM MoU Security group. The outline procedure is as follows:

– ETSI shall appoint a custodian for administration of the algorithm specification;

– a service provider of GPRS services may request copies of the algorithm specification (and test data) and a licence to use the algorithm from the custodian;

– if the service provider of GPRS services is entitled to use the algorithm, the custodian shall issue the requested algorithm specifications subject to the GPRS service provider signing a licence and confidentiality agreement;

– a service provider of GPRS services who is licensed to use the algorithm may request ETSI to provide copies of the algorithm specification to an organization which intends to build equipment or components that embody the algorithm. Such an organization shall then be required by ETSI to sign a licence and confidentiality agreement before receiving the algorithm specifications from the custodian.