Changes for test_purposes/TP_AMF_NGNAS.tdltx: 55 added lines, 31 removed lines.
Original line number
Diff line number
Diff line
@@ -48,14 +48,16 @@ Package TP_AMF_NGNAS {
message_type set to REGISTRATION_REQUEST,
5GS_registration_type containing {
5GS_registration_type_value set to INITIAL_REGISTRATION},
ngKSI containing {
nas_key_set_identifier set to "111"}, //!no key is available: no 5G NAS security context in the UE
5GS_mobile_identity containing {
SUPI_format set to IMSI,
Type_of_identity set to SUCI,
MCC set to PX_MCC,
MNC set to PX_MNC,
Routing_indicator set to PX_ROUTING_INDICATOR,
Protection_scheme_id set to '0000',
Home_network_public_key_identifier set to '00000000',
Protection_scheme_id set to PX_PROTECTION_SCHEME_ID,
Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,
MSIN set to PX_MSIN}}}
}
then {
@@ -65,9 +67,10 @@ Package TP_AMF_NGNAS {
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_REQUEST,
ngKSI containing {
nas_key_set_identifier set to "111"},
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI}, //!new ngKSI allocated by the AMF, any value other than "111" (reserved from network to UE, TS 124 501 clause 9.11.3.32)
ABBA containing {
ABBA_contents set to " '0000'H "},
ABBA_contents set to " '0000'O "}, //!2 octets (ETSI TS 133 501 Annex A.7.1)
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND,
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}}
to the GNB entity
@@ -131,14 +134,15 @@ Package TP_AMF_NGNAS {
Configuration: CF_AMF_N2N1
PICS: PICS_NAS_A4_1_2
Initial conditions
with {
the UE entity isNotRegisteredToAMF
and (.) at time point start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) 6s after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) 12s after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) 18s after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) PX_T3560 after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) 2 * PX_T3560 after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
and (!) 3 * PX_T3560 after @start_initial_T3560 : event AUTHENTICATION_REQUEST occurs
}
Expected behaviour
ensure that {
@@ -146,8 +150,9 @@ Package TP_AMF_NGNAS {
(.) at time point start_trigger_T3560 : event AUTHENTICATION_REQUEST occurs
}
then {
(!) 6s after @start_trigger_T3560 : the IUT entity aborts an AUTHENTICATION_REQUEST procedure
//(Note 1: "It is not expected to receive another AUTHENTICATION message on the N2N1 interface.")
(!) PX_T3560 after @start_trigger_T3560 : the IUT entity aborts an AUTHENTICATION_REQUEST procedure
//(Note 1: "No further AUTHENTICATION_REQUEST message is expected on the N2N1 interface. The IUT may end the procedure with an AUTHENTICATION_REJECT and/or release the UE context.")
//(Note 2: PX_T3560 is the value of T3560, 6s by default, ETSI TS 124 501 Table 10.2.2.)
}
}
} // end TP_5GNAS_AMF_AUT_REQ_03
@@ -160,6 +165,7 @@ Package TP_AMF_NGNAS {
Configuration: CF_AMF_N2N1
PICS: PICS_NAS_A4_1_2_2_1
Initial conditions
with {
@@ -172,8 +178,8 @@ Package TP_AMF_NGNAS {
when {
the IUT entity receives an UPLINK_NAS_TRANSPORT containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED,
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet
message_type set to AUTHENTICATION_FAILURE,
5GMM_cause set to MAC_failure}}
from the GNB entity
@@ -181,10 +187,10 @@ Package TP_AMF_NGNAS {
then {
the IUT entity sends an DOWNLINK_NAS_TRANSPORT containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED,
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet
message_type set to IDENTITY_REQUEST,
identity_type set to SUCI}}
identity_type set to SUCI}} //!TS 124 501 clause 9.11.3.3: identity type '001'
to the GNB entity
}
}
@@ -198,6 +204,7 @@ Package TP_AMF_NGNAS {
Configuration: CF_AMF_N2N1
PICS: PICS_NAS_A4_1_2_4
Initial conditions
with {
@@ -208,9 +215,10 @@ Package TP_AMF_NGNAS {
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_REQUEST,
ngKSI containing {
nas_key_set_identifier set to "111"}, //!value for nas_key_set_identifier was already used before
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI}, //!any value other than "111" (reserved from network to UE); the UE claims it is already associated with a 5G security context it stores
ABBA containing {
ABBA_contents set to " '0000'H "},
ABBA_contents set to " '0000'O "},
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND,
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}}
to the GNB entity
@@ -222,7 +230,7 @@ Package TP_AMF_NGNAS {
the IUT entity receives an UPLINK_NAS_TRANSPORT containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED,
security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet
message_type set to AUTHENTICATION_FAILURE,
5GMM_cause set to ngKSI_already_in_use}}
from the GNB entity
@@ -234,11 +242,12 @@ Package TP_AMF_NGNAS {
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_REQUEST,
ngKSI containing {
nas_key_set_identifier set to PX_NON_DEFAULT_NGKSI},
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI_NEW}, //!new ngKSI: different from RV_NGKSI and from "111"
ABBA containing {
ABBA_contents set to " '0000'H "},
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND,
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}}
ABBA_contents set to " '0000'O "},
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND, //!same 5G authentication challenge as the initial AUTHENTICATION_REQUEST (ETSI TS 124 501 clause 5.4.1.3.7 e))
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}} //!same as the initial AUTHENTICATION_REQUEST
to the GNB entity
}
}
@@ -265,11 +274,12 @@ Package TP_AMF_NGNAS {
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_REQUEST,
ngKSI containing {
nas_key_set_identifier set to "111"},
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI}, //!any value other than "111" (reserved from network to UE)
ABBA containing {
ABBA_contents set to " '0000'H "},
ABBA_contents set to " '0000'O "},
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND,
Authentication_parameter_AUTN set to PX_Authentication_parameter_AUTN_NON_5G_UNACCEPTABLE}} //!the "separation bit" in the AMF field of AUTN is set to 0
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}} //!built by the IUT, which the test system cannot set: the test system (UE) answers with #26 whatever the AUTN, simulating a UE that finds the "separation bit" of the AMF field of AUTN set to 0; only the UE checks this bit
to the GNB entity
}
@@ -279,7 +289,7 @@ Package TP_AMF_NGNAS {
the IUT entity receives an UPLINK_NAS_TRANSPORT containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to INTEGRITY_PROTECTED,
security_header_type set to NOT_SECURITY_PROTECTED, //!no 5G NAS security context yet
message_type set to AUTHENTICATION_FAILURE,
5GMM_cause set to "Non-5G authentication unacceptable (26)"}}
from the GNB entity
@@ -331,7 +341,9 @@ Package TP_AMF_NGNAS {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES, //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_RESPONSE}} //!reference ts_124007v180200p: Table 11.2.3.1.1A.1: EPD values
message_type set to AUTHENTICATION_RESPONSE,
authentication_response_parameter containing {
RES set to RV_RES_STAR}}} //!the valid RES* computed from RV_Authentication_parameter_RAND and RV_Authentication_parameter_AUTN
from the GNB entity
}
then {
@@ -344,8 +356,9 @@ Package TP_AMF_NGNAS {
type_of_ciphering_algorithm set to PX_SELECTED_NAS_CIPHERING_ALGORITHM,
type_of_integrity_algorithm set to PX_SELECTED_NAS_INTEGRITY_ALGORITHM},
ngKSI containing {
nas_key_set_identifier set to "111"},
replayed_UE_security_capabilities set to PX_UE_SECURITY_CAPABILITIES}} //! UE security capability 9.11.3.54
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI}, //!the ngKSI of the AUTHENTICATION_REQUEST
replayed_UE_security_capabilities set to PX_UE_SECURITY_CAPABILITIES}} //!UE security capability 9.11.3.54: the value of the initial REGISTRATION_REQUEST
to the GNB entity
}
}
@@ -363,7 +376,17 @@ Package TP_AMF_NGNAS {
Initial conditions
with {
the UE entity isNotRegisteredToAMF
the UE entity isNotRegisteredToAMF and
event AUTHENTICATION_REQUEST occurs and
the IUT entity receives an UPLINK_NAS_TRANSPORT containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_RESPONSE,
authentication_response_parameter containing {
RES set to RV_RES_STAR}}} //!the valid RES*
from the GNB entity and
event SECURITY_MODE_COMMAND occurs
}
@@ -374,14 +397,15 @@ Package TP_AMF_NGNAS {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED_WITH_NEW_5G_NAS_SECURITY_CONTEXT,
message_type set to SECURITY_MODE_COMPLETE}}
message_type set to SECURITY_MODE_COMPLETE,
NAS_message_container set to the complete REGISTRATION_REQUEST}} //!the initial REGISTRATION_REQUEST carried only cleartext IEs (ETSI TS 124 501 clause 4.4.6)
from the GNB entity
}
then {
the IUT entity sends a INITIAL_CONTEXT_SETUP_REQUEST containing {
NAS_PDU containing {
extended_protocol_discriminator set to 5GS_MOBILITY_MANAGEMENT_MESSAGES,
security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED,
security_header_type set to INTEGRITY_PROTECTED_AND_CIPHERED, //!with the new 5G NAS security context: MAC verified and message deciphered with its keys
message_type set to REGISTRATION_ACCEPT,
5GS_registration_result containing {
5GS_registration_result_value set to 3GPP_ACCESS},
