Commit 8eea4fc6 authored by Bostjan Pintar's avatar Bostjan Pintar
Browse files

Schema variants covered with PIXITS; PICS options covered for Registration... 

Schema variants covered with PIXITS; PICS options covered for Registration Accept conveyed in NAS_PDU ICS or DL
parent fe990f67

test_purposes/TP_AMF_NGNAS.tdltx

+131 −18
Changes for test_purposes/TP_AMF_NGNAS.tdltx: 131 added lines, 18 removed lines.
Original line number Diff line number Diff line
@@ -1046,9 +1046,9 @@ Package TP_AMF_NGNAS { 
                        MCC set to PX_MCC,

                        MNC set to PX_MNC,

                        Routing_indicator set to PX_ROUTING_INDICATOR,

                        Protection_scheme_id set to '0000',

                        Home_network_public_key_identifier set to '00000000',

                        MSIN set to PX_MSIN}}} //!cleartext IEs only; Requested NSSAI is a non-cleartext IE and is therefore not present here (see TS 124 501 [1], clause 4.4.6)

                        Protection_scheme_id set to PX_PROTECTION_SCHEME_ID, //!null scheme, ECIES profile A or ECIES profile B (TS 124 501 [1], clause 9.11.3.4)

                        Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER, //!'00000000' for null scheme (TS 124 501 [1], clause 9.11.3.4)

                        Scheme_output set to PX_SCHEME_OUTPUT}}} //!cleartext IEs only; Requested NSSAI is a non-cleartext IE and is therefore not present here (see TS 124 501 [1], clause 4.4.6)

            from the GNB entity and

            event SECURITY_MODE_COMMAND occurs

        }
@@ -1076,9 +1076,9 @@ Package TP_AMF_NGNAS { 
                                        MCC set to PX_MCC,

                                        MNC set to PX_MNC,

                                        Routing_indicator set to PX_ROUTING_INDICATOR,

                                        Protection_scheme_id set to '0000',

                                        Home_network_public_key_identifier set to '00000000',

                                        MSIN set to PX_MSIN},

                                        Protection_scheme_id set to PX_PROTECTION_SCHEME_ID,

                                        Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,

                                        Scheme_output set to PX_SCHEME_OUTPUT},

                                    Requested_NSSAI containing {

                                        S_NSSAI_1 containing {

                                            SST set to PX_SST_1, //!PX_SST_1/PX_SD_1 identify an S-NSSAI that must be provisioned as allowed in the UE's subscription data at the AMF/UDM (PIXIT precondition)
@@ -1086,7 +1086,7 @@ Package TP_AMF_NGNAS { 
                    from the GNB entity

                }

                then {

                    // PICS_NGAP_A4_2_1_1 ALWAYS_ESTABLISH_INITIAL_CONTEXT

                    // not PICS_NGAP_A4_5_2_1: REGISTRATION_ACCEPT conveyed in the NAS_PDU IE of INITIAL_CONTEXT_SETUP_REQUEST

                    the IUT entity sends a INITIAL_CONTEXT_SETUP_REQUEST containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1106,7 +1106,7 @@ Package TP_AMF_NGNAS { 
                                    SD set to PX_SD_1}}}}

                    to the GNB entity

                    or

                    // PICS_NGAP_A4_5_2_1 SKIP_PIGGYBACK

                    // PICS_NGAP_A4_5_2_1 INITIAL_CONTEXT_SETUP_REQUEST without NAS_PDU IE; REGISTRATION_ACCEPT conveyed in DOWNLINK_NAS_TRANSPORT

                    the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1197,7 +1197,8 @@ Package TP_AMF_NGNAS { 
                    from the GNB entity

                }

                then {

                    // PICS_NGAP_A4_2_1_1 ALWAYS_ESTABLISH_INITIAL_CONTEXT

                    //(Note 1: "The IUT may initiate 5GMM common procedures (identification, authentication, security mode control) before sending the REGISTRATION_ACCEPT message (TS 124 501 [1], clause 5.5.1.2.3).")

                    // not PICS_NGAP_A4_5_2_1: REGISTRATION_ACCEPT conveyed in the NAS_PDU IE of INITIAL_CONTEXT_SETUP_REQUEST

                    the IUT entity sends a INITIAL_CONTEXT_SETUP_REQUEST containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1217,7 +1218,7 @@ Package TP_AMF_NGNAS { 
                                    SD set to PX_SD_1}}}}

                    to the GNB entity

                    or

                    // PICS_NGAP_A4_5_2_1 SKIP_PIGGYBACK

                    // PICS_NGAP_A4_5_2_1 INITIAL_CONTEXT_SETUP_REQUEST without NAS_PDU IE; REGISTRATION_ACCEPT conveyed in DOWNLINK_NAS_TRANSPORT

                    the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1277,9 +1278,9 @@ Package TP_AMF_NGNAS { 
                        MCC set to PX_MCC,

                        MNC set to PX_MNC,

                        Routing_indicator set to PX_ROUTING_INDICATOR,

                        Protection_scheme_id set to '0000',

                        Home_network_public_key_identifier set to '00000000',

                        MSIN set to PX_MSIN}}} //!cleartext IEs only; Requested NSSAI is a non-cleartext IE and is therefore not present here (see TS 124 501 [1], clause 4.4.6)

                        Protection_scheme_id set to PX_PROTECTION_SCHEME_ID, //!null scheme, ECIES profile A or ECIES profile B (TS 124 501 [1], clause 9.11.3.4)

                        Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER, //!'00000000' for null scheme (TS 124 501 [1], clause 9.11.3.4)

                        Scheme_output set to PX_SCHEME_OUTPUT}}} //!cleartext IEs only; Requested NSSAI is a non-cleartext IE and is therefore not present here (see TS 124 501 [1], clause 4.4.6)

            from the GNB entity and

            event SECURITY_MODE_COMMAND occurs

        }
@@ -1307,9 +1308,9 @@ Package TP_AMF_NGNAS { 
                                        MCC set to PX_MCC,

                                        MNC set to PX_MNC,

                                        Routing_indicator set to PX_ROUTING_INDICATOR,

                                        Protection_scheme_id set to '0000',

                                        Home_network_public_key_identifier set to '00000000',

                                        MSIN set to PX_MSIN},

                                        Protection_scheme_id set to PX_PROTECTION_SCHEME_ID,

                                        Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,

                                        Scheme_output set to PX_SCHEME_OUTPUT},

                                    Requested_NSSAI containing {

                                        S_NSSAI_1 containing {

                                            SST set to PX_SST_1, //!PX_SST_1/PX_SD_1 identify an S-NSSAI that must be provisioned as allowed in the UE's subscription data at the AMF/UDM (IXIT precondition, not modelled as an Event)
@@ -1317,7 +1318,7 @@ Package TP_AMF_NGNAS { 
                    from the GNB entity

                }

                then {

                    // PICS_NGAP_A4_2_1_1 ALWAYS_ESTABLISH_INITIAL_CONTEXT

                    // PICS_NGAP_A4_2_1_1 REGISTRATION_ACCEPT conveyed in the NAS_PDU IE of INITIAL_CONTEXT_SETUP_REQUEST

                    the IUT entity sends a INITIAL_CONTEXT_SETUP_REQUEST containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1337,7 +1338,7 @@ Package TP_AMF_NGNAS { 
                                    SD set to PX_SD_1}}}}

                    to the GNB entity

                    or

                    // PICS_NGAP_A4_5_2_1 SKIP_PIGGYBACK

                    // not PICS_NGAP_A4_2_1_1: REGISTRATION_ACCEPT conveyed in DOWNLINK_NAS_TRANSPORT

                    the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
@@ -1367,6 +1368,118 @@ Package TP_AMF_NGNAS { 
            }

        }// end TP_5GNAS_AMF_REG_ACC_06_2

 

        Test Purpose TP_5GNAS_AMF_REG_ACC_06_3 {//!GUTI case; INITIAL_UE_MESSAGE without UE_Context_Request_IE

 

        Objective: "Verify that, during the initial registration procedure, when the REGISTRATION_REQUEST message contains a Requested NSSAI IE with one S-NSSAI that is allowed by the IUT, then the IUT sends a REGISTRATION_ACCEPT message containing an Allowed NSSAI IE with the requested S-NSSAI."

 

        Reference: "ETSI TS 124 501 [1], Clauses 4.4.2.5, 4.4.6, 5.5.1.2.4, 8.2.6 and 8.2.7"

 

        Configuration: CF_AMF_N2N1

 

        PICS: PICS_NAS_A4_8_1

 

        Initial conditions

        with {

            the UE entity isNotRegisteredToAMF and

            the UE entity hasValidNasSecurityContext

        }

 

        Expected behaviour

            ensure that {

                when {

                    the IUT entity receives an INITIAL_UE_MESSAGE containing {

                        not UE_Context_Request_IE,

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                            security_header_type set to INTEGRITY_PROTECTED, //!ref. TS 124 501 [1], clause 4.4.6: "the UE shall set the security header type of the initial NAS message to 'integrity protected'" when a NAS message container IE is included

                            message_type set to REGISTRATION_REQUEST,

                            5GS_registration_type containing {

                                5GS_registration_type_value set to INITIAL_REGISTRATION},

                            ngKSI containing {

                                nas_key_set_identifier set to RV_NGKSI}, 

                            5GS_mobile_identity containing {

                                Type_of_identity set to 5G_GUTI, //!cleartext IE; native 5G-GUTI previously assigned to the UE

                                MCC set to PX_MCC,

                                MNC set to PX_MNC,

                                AMF_Region_ID set to PX_AMF_REGION_ID,

                                AMF_Set_ID set to PX_AMF_SET_ID,

                                AMF_Pointer set to PX_AMF_POINTER,

                                5G_TMSI set to RV_5G_TMSI_OLD}, //!existing/native 5G-TMSI presented by the UE, distinct from the newly assigned value in REGISTRATION_ACCEPT below

                            NAS_message_container containing { //!ciphered non-cleartext IEs, included in the same REGISTRATION_REQUEST message (ref. clause 4.4.6 b)1), no SECURITY_MODE_COMMAND/COMPLETE exchange needed

                                NAS_PDU containing {

                                    extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                                    security_header_type set to NOT_SECURITY_PROTECTED,

                                    message_type set to REGISTRATION_REQUEST,

                                    5GS_registration_type containing {

                                        5GS_registration_type_value set to INITIAL_REGISTRATION},

                                    ngKSI containing {

                                        nas_key_set_identifier set to RV_NGKSI},

                                    5GS_mobile_identity containing {

                                        Type_of_identity set to 5G_GUTI,

                                        MCC set to PX_MCC,

                                        MNC set to PX_MNC,

                                        AMF_Region_ID set to PX_AMF_REGION_ID,

                                        AMF_Set_ID set to PX_AMF_SET_ID,

                                        AMF_Pointer set to PX_AMF_POINTER,

                                        5G_TMSI set to RV_5G_TMSI_OLD},

                                    Requested_NSSAI containing {

                                        S_NSSAI_1 containing {

                                            SST set to PX_SST_1, //!PX_SST_1/PX_SD_1 identify an S-NSSAI that must be provisioned as allowed in the UE's subscription data at the AMF/UDM (PIXIT precondition)

                                            SD set to PX_SD_1}}}}}}

                    from the GNB entity

                }

                then {

                    //(Note 1: "The IUT may initiate 5GMM common procedures (identification, authentication, security mode control) before sending the REGISTRATION_ACCEPT message (TS 124 501 [1], clause 5.5.1.2.3).")

                    // PICS_NGAP_A4_2_1_1 REGISTRATION_ACCEPT conveyed in the NAS_PDU IE of INITIAL_CONTEXT_SETUP_REQUEST

                    the IUT entity sends a INITIAL_CONTEXT_SETUP_REQUEST containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                            security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED,

                            message_type set to REGISTRATION_ACCEPT,

                            5G_GUTI containing {

                                Type_of_identity set to 5G_GUTI,

                                MCC set to PX_MCC,

                                MNC set to PX_MNC,

                                AMF_Region_ID set to PX_AMF_REGION_ID,

                                AMF_Set_ID set to PX_AMF_SET_ID,

                                AMF_Pointer set to PX_AMF_POINTER,

                                5G_TMSI set to RV_5G_TMSI}, //!newly assigned 5G-TMSI, distinct from RV_5G_TMSI_OLD presented by the UE in the initial REGISTRATION_REQUEST above

                            Allowed_NSSAI containing {

                                S_NSSAI_1 containing {

                                    SST set to PX_SST_1,

                                    SD set to PX_SD_1}}}}

                    to the GNB entity

                    or

                    // not PICS_NGAP_A4_2_1_1: REGISTRATION_ACCEPT conveyed in DOWNLINK_NAS_TRANSPORT

                    the IUT entity sends a DOWNLINK_NAS_TRANSPORT containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                            security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED,

                            message_type set to REGISTRATION_ACCEPT,

                            5G_GUTI containing {

                                Type_of_identity set to 5G_GUTI,

                                MCC set to PX_MCC,

                                MNC set to PX_MNC,

                                AMF_Region_ID set to PX_AMF_REGION_ID,

                                AMF_Set_ID set to PX_AMF_SET_ID,

                                AMF_Pointer set to PX_AMF_POINTER,

                                5G_TMSI set to RV_5G_TMSI}, //!newly assigned 5G-TMSI, distinct from RV_5G_TMSI_OLD presented by the UE in the initial REGISTRATION_REQUEST above

                            Allowed_NSSAI containing {

                                S_NSSAI_1 containing {

                                    SST set to PX_SST_1,

                                    SD set to PX_SD_1}}}}

                    to the GNB entity

                    and 

                    the IUT entity accepts an UPLINK_NAS_TRANSPORT containing {

                        NAS_PDU containing {

                            extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,

                            security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED,

                            message_type set to REGISTRATION_COMPLETE}}

                    from the GNB entity 

                }

            }

        }// end TP_5GNAS_AMF_REG_ACC_06_3



        Test Purpose TP_5GNAS_AMF_REG_ACC_07 { //!SUCI case; INITIAL_UE_MESSAGE with UE_Context_Request_IE



        Objective: "Verify that, during the initial registration procedure, when the REGISTRATION_REQUEST message contains a Requested NSSAI IE with multiple S-NSSAIs that are allowed by the IUT, then the IUT sends a REGISTRATION_ACCEPT message containing an Allowed NSSAI IE with all requested S-NSSAIs allowed by the IUT."