Test objective "Verify that the IUT sends an AUTHENTICATION REQUEST message correctly upon receipt of a NAS Registration without an active security context."
Reference
"ETSI TS 124 501 [1], Clause 5.4.1"
"ETSI TS 124 501 [1], Clauses 5.4.1.3.2 and 8.2.1"
Config Id CF_AMF_N2
Config Id CF_AMF_N2N1
PICS Selection NONE
@@ -43,36 +43,159 @@ Package TP_AMF {
Expected behaviour
ensure that {
when {
the IUT entity indicate an authentication procedure
the IUT entity receives an INITIAL_UE_MESSAGE containing
NAS_PDU containing
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to NOT_SECURITY_PROTECTED,
registration_request_message_identity set to REGISTRATION_REQUEST
;
}
then {
the IUT entity sends an DOWNLINK_NAS_TRANSFER containing
AMF_UE_NGAP_ID,
RAN_UE_NGAP_ID,
NAS_PDU containing
extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type indicating value 0000, //not security protected
spare_half_octet indicating value 0000,
authentication_request_message_identity indicating value Authentication_request, //01010110
ngKSI, //TODO: see [1] Table 9.11.3.32.1
spare_half_octet indicating value 0000,
ABBA containing
ABBA_IEI indicating value 0001, //TODO
Length_of_ABBA_contents indicating value 2,
ABBA_contents indicating value 0000000000000000
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to NOT_SECURITY_PROTECTED,
authentication_request_message_identity set to AUTHENTICATION_REQUEST,
Authentication_parameter_RAND,
Authentication_parameter_AUTN
;
;
to the UE entity
}
}
} // end TP_5GNAS_AMF_AUT_REQ_01
Test Purpose {
TP Id TP_5GNAS_AMF_AUT_REQ_02
Test objective "Verify that the IUT sends an AUTHENTICATION REJECT message correctly upon receipt of an AUTHENTICATION RESPONSE message indicating a wrong ARP IEI."
Reference
"ETSI TS 124 501 [1], Clause 5.4.1.3.5 and 8.2.5"
Config Id CF_AMF_N2N1
PICS Selection NONE
Initial conditions with {
the UE entity isNotRegisteredTo the AMF and
event AUTHENTICATION_REQUEST occurs
}
Expected behaviour
ensure that {
when {
the IUT entity receives an UPLINK_NAS_TRANSFER containing
NAS_PDU containing
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to NOT_SECURITY_PROTECTED,
authentication_response_message_identity set to AUTHENTICATION_RESPONSE,
authentication_response_parameter containing
Authentication_response_parameter_IEI indicating value PX_WRONG_ARP_IEI
;
;
;
from the UE entity
}
then {
the IUT entity sends an DOWNLINK_NAS_TRANSFER containing
NAS_PDU containing
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to NOT_SECURITY_PROTECTED,
authentication_reject_message_identity set to AUTHENTICATION_REJECT
;
;
to the UE entity
}
}
} // end TP_NGNAS_AMF_AUT_REQ_01
} // end TP_5GNAS_AMF_AUT_REQ_02
Test Purpose {
TP Id TP_5GNAS_AMF_AUT_REQ_03
Test objective "Verify that the IUT stops re-sending an AUTHENTICATION REQUEST message if no AUTHENTICATION RESPONSE message is received on the fifth expiry of timer T3560."
Reference
"ETSI TS 124 501 [1], Clause 5.4.1.3.7 b) and Table 10.3.1"
Config Id CF_AMF_N2N1
PICS Selection NONE
Initial conditions with {
the UE entity isNotRegisteredTo the AMF and
(.) at time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
(!) 6s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
(!) 12s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
(!) 18s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
}
Expected behaviour
ensure that {
when {
(.) at time point start_trigger_T3560 : event AUTHENTICATION_REQUEST occurs
}
then {
(!) 6s after time point start_trigger_T3560 : the IUT entity aborts AUTHENTICATION_REQUEST procedure
(Note 1: "It is not expected to receive another AUTHENTICATION message on the N2N1 interface.")
}
}
} // end TP_5GNAS_AMF_AUT_REQ_03
} // end Group Primary authentication and key agreement procedure
Group "5.4.2 Security mode control procedure"
{
import all from Ngnas_Common;
Test Purpose {
TP Id TP_NGNAS_AMF_AUT_SEQ_01
Test objective "Verify that the IUT sends a SECURITY MODE CONTROL message with all mandatory IEs to indicate NAS security mode procedure upon receipt of a NAS AUTHENTICATION_RESPONSE"
Reference
"ETSI TS 124 501 [1], Clause 5.4.1.2"
Config Id CF_AMF_N2N1
PICS Selection NONE
Initial conditions with {
the UE entity isNotRegisteredTo the AMF and
event AUTHENTICATION_REQUEST occurs with {
argument replaced by the security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT
}
}
Expected behaviour
ensure that {
when {
the IUT entity receives a UPLINK_NAS_TRANSFER containing // AUTHENTICATION_RESPONSE
NAS_PDU containing
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT,
authentication_response_message_identity set to AUTHENTICATION_RESPONSE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
;
from the UE entity
}
then {
the IUT entity sends an DOWNLINK_NAS_TRANSFER containing // Security mode command
NAS_PDU containing
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT,
security_mode_command_message_identity set to SECURITY_MODE_COMMAND,
Test objective "Verify that the IUT rejects initial registration request due to general NAS level mobility management congestion control with 5GMM cause value #22 - congestion."
Test objective "Verify that the IUT rejects initial registration request due to general NAS level mobility management congestion control with 5GMM cause value #22 - congestion and assign a value for back-off timer T3346."
Reference
"ETSI TS 124 501 [1], Clause 5.5.1.2.5"
"ETSI TS 124 501 [1], Clauses 5.5.1.2.5 and 8.2.9"
Config Id CF_AMF_N2
Config Id CF_AMF_N2N1
PICS Selection NONE
Initial conditions with {
the UE entity isNotRegisteredTo the AMF
the UE entity isNotRegisteredTo the AMF and
the AMF entity isInOverloadedState
}
Expected behaviour
@@ -104,29 +228,31 @@ Package TP_AMF {
when {
the IUT entity receives an INITIAL_UE_MESSAGE containing
NAS_PDU containing
extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type indicating value 0000,
spare_half_octet indicating value 0000,
Registration_request_message_identity indicating value REGISTRATION_REQUEST,
extended_protocol_discriminator indicating value 5G_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type indicating value NOT_SECURITY_PROTECTED,
Registration_request_message_identity set to REGISTRATION_REQUEST,
5GS_registration_type containing
5GS_registration_type_value indicating value Initial_registration,
5GS_registration_type_value set to INITIAL_REGISTRATION,
FOR indicating value 1;, //Follow-on request pending
5GS_mobile_identity containing
SUPI_format indicating value IMSI,
Type_of_idenity indicating value SUCI,
MCC indicating value PX_MCC,
MNC indicating value PX_MNC,
Routing_indicator indicating value PX_ROUTING_INDICATOR,
Protection_scheme_id indicating value PX_PROTECTION_SCHEME_ID,
Home_network_public_key_identifier indicating value PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,
MSIN indicating value PX_MSIN;;;
from the GNB entity
}
then {
the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing
NAS_PDU containing
extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type indicating value var,
spare_half_octet indicating value 0000,
Registration_reject_message_identity indicating value REGISTRATION_REJECT,
5GMM_cause indicating value "Congestion (22)";;
extended_protocol_discriminator indicating value 5G_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type indicating value INTEGRITY_PROTECTED_AND_CIPHERED,
Registration_reject_message_identity set to REGISTRATION_REJECT,
5GMM_cause set to "Congestion (22)",
T3346_value indicating value nonZeroValue;;
to the GNB entity
}
}
@@ -139,9 +265,9 @@ Package TP_AMF {
Test objective "Verify that the IUT rejects initial registration request because all the S-NSSAI(s) included in the requested NSSAI are either rejected for current PLMN, rejected for the current registration area or rejected due to failed or revoked NSSAIs."
Reference
"ETSI TS 124 501 [1], Clause 5.5.1.2.5"
"ETSI TS 124 501 [1], Clauses 5.5.1.2.5 and 8.2.9"
Config Id CF_AMF_N2
Config Id CF_AMF_N2N1
PICS Selection NONE
@@ -152,11 +278,11 @@ Package TP_AMF {
Expected behaviour
ensure that {
when {
the IUT entity receives an INITIAL_UE_MESSAGE /*or a UPLINK_NAS_TRANSPORT!!!*/ containing
the IUT entity receives an INITIAL_UE_MESSAGE containing
NAS_PDU containing
Registration_request_message_identity indicating value REGISTRATION_REQUEST,
Registration_request_message_identity set to REGISTRATION_REQUEST,
5GS_registration_type containing
5GS_registration_type_value indicating value Initial_registration,
5GS_registration_type_value set to INITIAL_REGISTRATION,
FOR indicating value 1;, //Follow-on request pending
Requested_NSSAI indicating value PX_NSSAI_REVOKED
;
@@ -166,8 +292,8 @@ Package TP_AMF {
then {
the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing
NAS_PDU containing
Registration_reject_message_identity indicating value REGISTRATION_REJECT,
5GMM_cause indicating value "No network slice available (62)";;
Registration_reject_message_identity set to REGISTRATION_REJECT,
5GMM_cause set to "No network slice available (62)";;