Commit 68dd35d0 authored by juvancic's avatar juvancic
Browse files

Merge branch 'TTF_T041' of https://forge.etsi.org/rep/int/5g-core/nas into TTF_T041

parents 975b2640 97aa46e8
Loading
Loading
Loading
Loading
+62 −7
Original line number Diff line number Diff line
@@ -146,6 +146,7 @@ Package Ngnas_Common {
            - sends
            - forwards
            - isRequestedToPlaceACall
            - aborts
            // Initial conditions
            - isNotRegisteredTo
            - hasAchievedFirstRegistration
@@ -203,20 +204,39 @@ Package Ngnas_Common {
            - isCMCONNECTED
            - alreadyPreparedHandover
            - completedHandover
            - isInOverloadedState
        ;
        event template:
        /* This template can be used as default AUTHENTICATION REQUEST message within a DOWNLINK NAS TRANSFER message. */
            - AUTHENTICATION_REQUEST {
                the IUT entity sends an DOWNLINK_NAS_TRANSFER containing
						NAS_PDU containing
							extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
							security_header_type set to NOT_SECURITY_PROTECTED,
							spare_half_octet,
							authentication_request_message_identity set to AUTHENTICATION_REQUEST,
							ngKSI,
							spare_half_octet,
							ABBA,
                            Authentication_parameter_RAND,
                            Authentication_parameter_AUTN
						;
				;
				to the UE entity
            }
    } // End of Domain section


//    Const {
//        PX_Stored_Domain_Uri,
//        PX_TO_BE_DEFINED
//        ;
//    } // End of Const section
    Const {
       PX_WRONG_ARP_IEI; //0x20
       ;
    } // End of Const section

    Data {
    	
        type NgapMessage;
        type Cause;
        type Bitstring;
        
        //Table 8.1-1     
        NgapMessage AMF_CONFIGURATION_UPDATE;
@@ -322,9 +342,18 @@ Package Ngnas_Common {
        NgapMessage AUTHENTICATION_REQUEST;
        NgapMessage AUTHENTICATION_RESPONSE;
        
        // Table 9.3.1: Security header type
        Bitstring PLAIN_5GS_NAS_MESSAGE; // 0 0 0 0 , not security protected
        Bitstring INTEGRITY_PROTECTED; // 0 0 0 1
        Bitstring INTEGRITY_PROTECTED_AND_CIPHERED; // 0 0 1 0
        Bitstring INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT; // 0 0 1 1
        Bitstring INTEGRITY_PROTECTED_AND_CIPHERED_WITH_NEW_5G_NAS_SECURITY_CONTEXT; // 0 1 0 0

        //Section 9.3.1.2
        Cause Multiple_Location_Reporting_Reference_ID_instances; 

        
                
    } // End of Data section
          
        Configuration {
@@ -333,13 +362,13 @@ Package Ngnas_Common {
            Component Type NgapComponent with gate g2 of type defaultGT;
            
            
            Test Configuration CF_GNB_N2 
            Test Configuration CF_GNB_N2N1 
                containing 
                    Tester component AMF of type NgapComponent
                    SUT component IUT of type NgapComponent
                    connection between AMF.g and IUT.g;
                    
            Test Configuration CF_AMF_N2
            Test Configuration CF_AMF_N2N1
                containing 
                    Tester component GNB of type NgapComponent
                    SUT component IUT of type NgapComponent
@@ -358,6 +387,32 @@ Package Ngnas_Common {
                    SUT component IUT of type NgapComponent
                    connection between GNB.g and IUT.g;
            
            
            Test Configuration CF_GNB_N2N1 
                containing 
                    Tester component AMF of type NgapComponent
                    SUT component IUT of type NgapComponent
                    connection between AMF.g and IUT.g;
                    
            Test Configuration CF_AMF_N2N1
                containing 
                    Tester component GNB of type NgapComponent
                    SUT component IUT of type NgapComponent
                    connection between GNB.g and IUT.g;
            
            
            Test Configuration CF_GNB_2N2N1 
                containing 
                    Tester component AMF of type NgapComponent
                    SUT component IUT of type NgapComponent
                    connection between AMF.g and IUT.g;
                    
            Test Configuration CF_AMF_2N2N1 
                containing 
                    Tester component GNB of type NgapComponent
                    SUT component IUT of type NgapComponent
                    connection between GNB.g and IUT.g;
                    
        }
    
    
+168 −42
Original line number Diff line number Diff line
@@ -25,14 +25,14 @@ Package TP_AMF {
    	 					
			Test Purpose {
			
			TP Id TP_NGNAS_AMF_AUT_REQ_01 
			TP Id TP_5GNAS_AMF_AUT_REQ_01 
			
			Test objective "Verify that the IUT sends an AUTHENTICATION REQUEST message correctly upon receipt of a NAS Registration without an active security context."
			
			Reference 
				"ETSI TS 124 501 [1], Clause 5.4.1"
				"ETSI TS 124 501 [1], Clauses 5.4.1.3.2 and 8.2.1"
			
			Config Id CF_AMF_N2
			Config Id CF_AMF_N2N1
			
			PICS Selection NONE
			
@@ -43,36 +43,159 @@ Package TP_AMF {
			Expected behaviour
				ensure that {
					when {
					the IUT entity indicate an authentication procedure
						the IUT entity receives an INITIAL_UE_MESSAGE containing
						NAS_PDU containing
							extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
							security_header_type set to NOT_SECURITY_PROTECTED,
							registration_request_message_identity set to REGISTRATION_REQUEST
							;
						
					}
					then {
						the IUT entity sends an DOWNLINK_NAS_TRANSFER containing
						AMF_UE_NGAP_ID,
						RAN_UE_NGAP_ID,
							NAS_PDU containing
							extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
							security_header_type indicating value 0000, //not security protected
							spare_half_octet indicating value 0000,
							authentication_request_message_identity indicating value Authentication_request, //01010110
							ngKSI, //TODO: see [1] Table 9.11.3.32.1
							spare_half_octet indicating value 0000,
							ABBA containing
								ABBA_IEI indicating value 0001, //TODO
								Length_of_ABBA_contents indicating value 2,
								ABBA_contents indicating value 0000000000000000
								extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
								security_header_type set to NOT_SECURITY_PROTECTED,
								authentication_request_message_identity set to AUTHENTICATION_REQUEST,
								Authentication_parameter_RAND,
                            	Authentication_parameter_AUTN
								;
							;
						to the UE entity
					}
				}
			} // end TP_5GNAS_AMF_AUT_REQ_01

			Test Purpose {
			
			TP Id TP_5GNAS_AMF_AUT_REQ_02
			
			Test objective "Verify that the IUT sends an AUTHENTICATION REJECT message correctly upon receipt of an AUTHENTICATION RESPONSE message indicating a wrong ARP IEI."
			
			Reference 
				"ETSI TS 124 501 [1], Clause 5.4.1.3.5 and 8.2.5"
			
			Config Id CF_AMF_N2N1
			
			PICS Selection NONE
			
			Initial conditions with {
				the UE entity isNotRegisteredTo the AMF and
				event AUTHENTICATION_REQUEST occurs
			}
			
			Expected behaviour
				ensure that {
					when {
						the IUT entity receives an UPLINK_NAS_TRANSFER containing
							NAS_PDU containing
								extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
								security_header_type set to NOT_SECURITY_PROTECTED,
								authentication_response_message_identity set to AUTHENTICATION_RESPONSE,
								authentication_response_parameter containing
									Authentication_response_parameter_IEI indicating value PX_WRONG_ARP_IEI
								;
							;
						;
						from the UE entity 
					}
					then {
						the IUT entity sends an DOWNLINK_NAS_TRANSFER containing
							NAS_PDU containing
								extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
								security_header_type set to NOT_SECURITY_PROTECTED,
								authentication_reject_message_identity set to AUTHENTICATION_REJECT
								;
							;
						to the UE entity
					}
				}
			} // end TP_NGNAS_AMF_AUT_REQ_01
			} // end TP_5GNAS_AMF_AUT_REQ_02

			Test Purpose {
			
			TP Id TP_5GNAS_AMF_AUT_REQ_03
			
			Test objective "Verify that the IUT stops re-sending an AUTHENTICATION REQUEST message if no AUTHENTICATION RESPONSE message is received on the fifth expiry of timer T3560."
			
			Reference 
				"ETSI TS 124 501 [1], Clause 5.4.1.3.7 b) and Table 10.3.1"
			
			Config Id CF_AMF_N2N1
			
			PICS Selection NONE
			
			Initial conditions with {
				the UE entity isNotRegisteredTo the AMF and
				(.) at time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
				(!) 6s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
				(!) 12s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
				(!) 18s after time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
			}
			Expected behaviour
				ensure that {
					when {
						(.) at time point start_trigger_T3560 : event AUTHENTICATION_REQUEST occurs 
					}
					then {
						(!) 6s after time point start_trigger_T3560 : the IUT entity aborts AUTHENTICATION_REQUEST procedure
						(Note 1: "It is not expected to receive another AUTHENTICATION message on the N2N1 interface.")
					}
				}
			} // end TP_5GNAS_AMF_AUT_REQ_03

		} // end Group Primary authentication and key agreement procedure	

		Group "5.4.2 Security mode control procedure"
		{

			import all from Ngnas_Common;
    	 
			Test Purpose {
			
			TP Id TP_NGNAS_AMF_AUT_SEQ_01 
			
			Test objective "Verify that the IUT sends a SECURITY MODE CONTROL message with all mandatory IEs to indicate NAS security mode procedure upon receipt of a NAS AUTHENTICATION_RESPONSE"
			
			Reference 
				"ETSI TS 124 501 [1], Clause 5.4.1.2"
			
			Config Id CF_AMF_N2N1
			
			PICS Selection NONE
			
			Initial conditions with {
				the UE entity isNotRegisteredTo the AMF and
				event AUTHENTICATION_REQUEST occurs with {
					argument replaced by the security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT
				}														
			}
			
			Expected behaviour
				ensure that {
					when {
						the IUT entity receives a UPLINK_NAS_TRANSFER containing // AUTHENTICATION_RESPONSE
							NAS_PDU containing
								extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
								security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT,
								authentication_response_message_identity set to AUTHENTICATION_RESPONSE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
								;
					from the UE entity
					}
					then {
					the IUT entity sends an DOWNLINK_NAS_TRANSFER containing // Security mode command
						NAS_PDU containing
							extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGE, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
							security_header_type set to INTEGRITY_PROTECTED_WITH_NEW_5G_NAS_SECURITY_CONTEXT,
							security_mode_command_message_identity set to SECURITY_MODE_COMMAND,
							selected_NAS_security_algorithms,
							ngKSI, //TODO: see [1] Table 9.11.3.32.1
							replayed_UE_security_capabilities, // UE security capability 9.11.3.54	
						;
					to the UE entity
					}
				}
			} // end TP_NGNAS_AMF_AUT_SEQ_01

		} // end Group Security mode control procedure

@@ -86,17 +209,18 @@ Package TP_AMF {
		
        TP Id TP_5GNAS_AMF_REG_REJ_01 
        
        Test objective "Verify that the IUT rejects initial registration request due to general NAS level mobility management congestion control with 5GMM cause value #22 - congestion."
        Test objective "Verify that the IUT rejects initial registration request due to general NAS level mobility management congestion control with 5GMM cause value #22 - congestion and assign a value for back-off timer T3346."
        
        Reference 
            "ETSI TS 124 501 [1], Clause 5.5.1.2.5" 
            "ETSI TS 124 501 [1], Clauses 5.5.1.2.5 and 8.2.9" 
        
        Config Id CF_AMF_N2
        Config Id CF_AMF_N2N1
        
        PICS Selection NONE
        
        Initial conditions with {
            the UE entity isNotRegisteredTo the AMF
            the UE entity isNotRegisteredTo the AMF and 
            the AMF entity isInOverloadedState
        }
        
        Expected behaviour
@@ -104,29 +228,31 @@ Package TP_AMF {
                when {
	               the IUT entity receives an INITIAL_UE_MESSAGE containing
	                   NAS_PDU containing
	                       extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
	                       security_header_type indicating value 0000,
	                       spare_half_octet indicating value 0000,
	                       Registration_request_message_identity indicating value REGISTRATION_REQUEST,
	                       extended_protocol_discriminator indicating value 5G_MOBILITY_MANAGEMENT_MESSAGES, 
	                       security_header_type indicating value NOT_SECURITY_PROTECTED,
	                       Registration_request_message_identity set to REGISTRATION_REQUEST,
	                       5GS_registration_type containing
	                           5GS_registration_type_value indicating value Initial_registration,
	                           5GS_registration_type_value set to INITIAL_REGISTRATION,
	                           FOR indicating value 1;, //Follow-on request pending
	                       5GS_mobile_identity containing
	                           SUPI_format indicating value IMSI,
	                           Type_of_idenity indicating value SUCI,
	                           MCC indicating value PX_MCC,
	                           MNC indicating value PX_MNC,
	                           Routing_indicator indicating value PX_ROUTING_INDICATOR, 
	                           Protection_scheme_id indicating value PX_PROTECTION_SCHEME_ID,
	                           Home_network_public_key_identifier indicating value PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,
	                           MSIN indicating value PX_MSIN;;;
	               from the GNB entity
	            }
	            then {
	               the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing
	                   NAS_PDU containing
	                       extended_protocol_discriminator indicating value 01111110, //reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values 
						   security_header_type indicating value var,
						   spare_half_octet indicating value 0000,
	                       Registration_reject_message_identity indicating value REGISTRATION_REJECT,
	                       5GMM_cause indicating value "Congestion (22)";; 
	                       extended_protocol_discriminator indicating value 5G_MOBILITY_MANAGEMENT_MESSAGES, 
						   security_header_type indicating value INTEGRITY_PROTECTED_AND_CIPHERED,
	                       Registration_reject_message_identity set to REGISTRATION_REJECT,
	                       5GMM_cause set to "Congestion (22)",
	                       T3346_value indicating value nonZeroValue;; 
	               to the GNB entity       
	            }
            }
@@ -139,9 +265,9 @@ Package TP_AMF {
        Test objective "Verify that the IUT rejects initial registration request because all the S-NSSAI(s) included in the requested NSSAI are either rejected for current PLMN, rejected for the current registration area or rejected due to failed or revoked NSSAIs."
        
        Reference 
            "ETSI TS 124 501 [1], Clause 5.5.1.2.5" 
            "ETSI TS 124 501 [1], Clauses 5.5.1.2.5 and 8.2.9" 
        
        Config Id CF_AMF_N2
        Config Id CF_AMF_N2N1
        
        PICS Selection NONE
        
@@ -152,11 +278,11 @@ Package TP_AMF {
        Expected behaviour
            ensure that {
                when {
	               the IUT entity receives an INITIAL_UE_MESSAGE /*or a UPLINK_NAS_TRANSPORT!!!*/ containing
	               the IUT entity receives an INITIAL_UE_MESSAGE containing
	                   NAS_PDU containing
	                       Registration_request_message_identity indicating value REGISTRATION_REQUEST,
	                       Registration_request_message_identity set to REGISTRATION_REQUEST,
	                       5GS_registration_type containing
	                           5GS_registration_type_value indicating value Initial_registration,
	                           5GS_registration_type_value set to INITIAL_REGISTRATION,
	                           FOR indicating value 1;, //Follow-on request pending
	                       Requested_NSSAI indicating value PX_NSSAI_REVOKED
	                       ;
@@ -166,8 +292,8 @@ Package TP_AMF {
	            then {
	               the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing
	                   NAS_PDU containing
	                       Registration_reject_message_identity indicating value REGISTRATION_REJECT,
	                       5GMM_cause indicating value "No network slice available (62)";; 
	                       Registration_reject_message_identity set to REGISTRATION_REJECT,
	                       5GMM_cause set to "No network slice available (62)";; 
	               to the GNB entity       
	            }
            }