[{"name":"R5-240871","title":"TS 36.523-1 Tracker status before RAN5-102","source":"Huawei, Hisilicon","contact":"zhaobing yang","contact-id":80062,"tdoctype":"other","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":952,"ainumber":"6.5.6","ainame":"Discussion Papers \/ Work Plan \/ TC lists","tdoc_agenda_sort_order":8710,"status":"noted","reservation_date":"2024-02-15 16:16:36","uploaded":"2024-02-17 06:43:54","revisionof":"","revisedto":"","release":"","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ran\/WG5_Test_ex-T1\/TSGR5__102_Athens\/Docs\/R5-240871.zip","group":"R5","meeting":"R5-102","year":2024,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"R5-241063","title":"Proposal for new test case related to ATTACH NEEDED STATE","source":"NTTDOCOMO, INC.","contact":"Masahiro Takano","contact-id":96944,"tdoctype":"discussion","for":"Endorsement","abstract":"I have a proposal to check emergency call from substate of EMM-DEREGISTERED.ATTACH-NEEDED.\nProposal: RAN5 make a new test case to check above.\nThis test case is applied to UEs supporting E-UTRA and IMS emergency call.\nIf this proposal is agreed, following new test case has already been submitted.\n11.2.13 Emergency bearer services \/ Normal cell \/ ATTACH-SERVICE \/ ATTACH-NEEDED STATE \/ PDN connect\n# test case:\n  R5-241065\n# Test applicability: \n  R5-241067","secretary_remarks":"","agenda_item_sort_order":952,"ainumber":"6.5.6","ainame":"Discussion Papers \/ Work Plan \/ TC lists","tdoc_agenda_sort_order":10630,"status":"noted","reservation_date":"2024-02-16 09:10:32","uploaded":"2024-02-16 09:38:54","revisionof":"","revisedto":"","release":"Rel-18","crspec":"36.523-1","crspecversion":"","workitem":[{"winame":"TEI11_Test"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ran\/WG5_Test_ex-T1\/TSGR5__102_Athens\/Docs\/R5-241063.zip","group":"R5","meeting":"R5-102","year":2024,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"R5-241178","title":"Proposal for new test case related to network policy indication on LTE call redirection to GERAN and UTRAN","source":"Vodafone","contact":"Petra Rauer","contact-id":16070,"tdoctype":"discussion","for":"Endorsement","abstract":"In the past year false base station attacks are on the rise. Most false base station attacks work by downgrading the victim from 4G to 2G or 3G to exploit weaknesses in these earlier technologies. \nDowngrade attack methods\n1.\tDowngrade via insecure RRC redirection\n2.\tDowngrade via tampering with system information to affect idle mode cell reselection\nThe insecure redirection is allowed by 3GPP for CSFB optimisation, a 4G RAN can redirect UEs to 2G or 3G  prior to security establishment. False base stations exploit this to perform downgrade attacks.\n3GPP CT1 introduced the network policy information element including redir-policy bit sent in the ATTACH ACCEPT and TRACKING AREA UPDATE ACCEPT from Rel-14 onwards [1]. 3GPP RAN2 modified the UE behaviour at reception of RRCConnectionRelease such that UE, conditional on indication by NAS , discards redirection to GERAN, unless AS security is activated [2].\nFor Rel-17 the redir-policy bit was extended to prohibit insecure redirect from 4G to 3G and mandate network support [3], in [4] the UE behaviour was adapted accordingly.\n2.\tDiscussion\nThe discussion is about adding the following test cases to prevent unsecure redirections to GERAN and UTRAN by setting redir-policy bit.\nAccording to current TS 36.523-1 [5], there is no test case which checks whether the UE discards the redirection from E-UTRAN to GERAN unless AS security is activated. The same applies for the redirection from E-UTRAN to UTRAN.\n3.\tProposal\nRAN5 to add test cases to cover the redirection scenarios from E-UTRAN to GERAN [6], [7] and UTRAN [8], [9] under consideration of the redir-policy as described above.","secretary_remarks":"","agenda_item_sort_order":952,"ainumber":"6.5.6","ainame":"Discussion Papers \/ Work Plan \/ TC lists","tdoc_agenda_sort_order":11780,"status":"noted","reservation_date":"2024-02-16 13:03:13","uploaded":"2024-02-16 14:25:29","revisionof":"","revisedto":"","release":"","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ran\/WG5_Test_ex-T1\/TSGR5__102_Athens\/Docs\/R5-241178.zip","group":"R5","meeting":"R5-102","year":2024,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0}]