summaryrefslogtreecommitdiffstats
path: root/Tex
diff options
context:
space:
mode:
authorTom2012-02-20 17:00:32 +0100
committerTom2012-02-20 17:00:32 +0100
commit8a022077ad1b54382530ce0a06b82c42699e28f4 (patch)
tree79d04a79b12783dd0e412e7171510742659a8a64 /Tex
parentfinished diagrams and graphs for theory section (diff)
downloadimsi-catcher-detection-8a022077ad1b54382530ce0a06b82c42699e28f4.tar.gz
imsi-catcher-detection-8a022077ad1b54382530ce0a06b82c42699e28f4.tar.xz
imsi-catcher-detection-8a022077ad1b54382530ce0a06b82c42699e28f4.zip
theory part finished for correction reading
Diffstat (limited to 'Tex')
-rw-r--r--Tex/Content/Bibliography.bib74
-rw-r--r--Tex/Content/GSM.tex150
-rw-r--r--Tex/Images/catcher_attack.pngbin0 -> 647066 bytes
-rw-r--r--Tex/Images/catcher_attack.vsdbin0 -> 237056 bytes
-rw-r--r--Tex/Master/Glossary.tex6
-rw-r--r--Tex/Master/Master.acn197
-rw-r--r--Tex/Master/Master.aux185
-rw-r--r--Tex/Master/Master.bbl65
-rw-r--r--Tex/Master/Master.blg54
-rw-r--r--Tex/Master/Master.dvibin157072 -> 185320 bytes
-rw-r--r--Tex/Master/Master.ist2
-rw-r--r--Tex/Master/Master.lof15
-rw-r--r--Tex/Master/Master.log231
-rw-r--r--Tex/Master/Master.lot4
-rw-r--r--Tex/Master/Master.pdfbin4005419 -> 4387857 bytes
-rw-r--r--Tex/Master/Master.synctex.gzbin275789 -> 309573 bytes
-rw-r--r--Tex/Master/Master.tex1
-rw-r--r--Tex/Master/Master.toc60
18 files changed, 652 insertions, 392 deletions
diff --git a/Tex/Content/Bibliography.bib b/Tex/Content/Bibliography.bib
index ffa7fef..8d5c2bb 100644
--- a/Tex/Content/Bibliography.bib
+++ b/Tex/Content/Bibliography.bib
@@ -99,6 +99,46 @@ year = {2000},
howpublished = {GSM 02.07, \url{http://www.3gpp.org/ftp/Specs/archive/02_series/02.07/0207-710.zip}}
}
+@Misc{GSM0502,
+title = {Multiplexing and Multiple Access on the Radio Path},
+series = {Technical Specification},
+number = {05.02},
+year = {2003},
+howpublished = {GSM 05.02, \url{http://www.3gpp.org/ftp/Specs/archive/05_series/05.02/0502-8b0.zip}}
+}
+
+@Misc{GSM0405,
+title = {Data link (DL) Layer; General aspects},
+series = {Technical Specification},
+number = {04.05},
+year = {1999},
+howpublished = {GSM 04.05, \url{http://www.3gpp.org/ftp/Specs/archive/04_series/04.05/0405-802.zip}}
+}
+
+@Misc{GSM0406,
+title = {Mobile Station - Base Station System (MS - BSS) interface; Data Link (DL) layer specification},
+series = {Technical Specification},
+number = {04.06},
+year = {1999},
+howpublished = {GSM 04.06, \url{http://www.3gpp.org/ftp/Specs/archive/04_series/04.06/0406-840.zip}}
+}
+
+@article{fox,
+ title={Der IMSI-catcher},
+ author={Fox, D.},
+ journal={Datenschutz und Datensicherheit},
+ volume={26},
+ number={4},
+ pages={212--215},
+ year={2002}
+}
+
+@article{dennis,
+ title={Open Source IMSI Catcher},
+ author={Wehrle, Dennis},
+ year={2009}
+}
+
@Misc{GSM0505,
title = {Radio Access Network: Radio transmission and reception},
series = {Technical Specification},
@@ -115,6 +155,24 @@ year = {2011},
howpublished = {GSM 23.003, \url{http://www.3gpp.org/ftp/Specs/archive/23_series/23.003/23003-a30.zip}}
}
+@article{criminal_justice,
+ title={Terror and Law},
+ author={Safferling, C.J.M.},
+ journal={Journal of International Criminal Justice},
+ volume={4},
+ number={5},
+ pages={1152--1165},
+ year={2006},
+ publisher={Oxford Univ Press}
+}
+
+@article{mueller,
+ title={Protection in mobile communications},
+ author={Federrath, H.},
+ year={1999},
+ publisher={Addison-Wesley}
+}
+
@Misc{ISO7810,
title = {Identification cards -- Physical characteristics},
series = {ISO},
@@ -125,11 +183,25 @@ howpublished = {ISO/IEC 7810:2003, \url{http://www.iso.org/iso/iso_catalogue/cat
@Misc{blacklisting,
title = {Equipment Identity Register},
-series = {Wikipedia},
+author = {Wikipedia},
year = {2012},
howpublished = {\url{http://en.wikipedia.org/wiki/Central_Equipment_Identity_Register}}
}
+@Misc{imsi_wiki,
+title = {Equipment Identity Register},
+author = {Wikipedia},
+year = {2012},
+howpublished = {\url{http://de.wikipedia.org/wiki/IMSI-Catcher}}
+}
+
+@Misc{def_catcher,
+title = {IMSI-Catcher für 1500 Euro im Eigenbau},
+author = {Heise Security},
+year = {2010},
+howpublished = {\url{http://www.heise.de/security/meldung/IMSI-Catcher-fuer-1500-Euro-im-Eigenbau-1048919.html}}
+}
+
@Misc{ITU212,
title={List of Mobile Country or Geographical Area Codes},
author={{Telecomunication standardization sector of ITU}},
diff --git a/Tex/Content/GSM.tex b/Tex/Content/GSM.tex
index dd1cd53..dab7ae6 100644
--- a/Tex/Content/GSM.tex
+++ b/Tex/Content/GSM.tex
@@ -344,6 +344,7 @@ Different companies like Airwide Solutions (now aquired by Manivir)\footnote{\ur
\label{fig:authentication}
\end{figure}
\subsubsection{Authentication Center}
+\label{sec:authentication}
The \gls{ac} is the network component responsible for authenticating mobile subscribers.
It is a part of the \gls{hlr} and the only place, apart form the customer's \gls{sim} card where the secret key \gls{ki} is stored.
The authentication is not only done once when the subscriber connects to the network, but rather on many occasions \eg the start of a call or other significant events to avoid misuse by a third party.
@@ -424,6 +425,27 @@ In the 900MHz band each of these has a width of 25MHz.
For other bands the numbers differ and can be seen in Table \ref{tab:frequencies} but the functionality is the same.
These bands themselves are furthermore divided into channels, each spanning 200kHz, which accounts for 125 channels on 25MHz.
+\begin{table}
+\centering
+\begin{tabular}{lllll}
+\toprule
+Band &ARFCN &Uplink (MHz) &Downlink (MHz) &Offset (MHz)\\
+\midrule
+GSM 900 &0-124 &890-915 &935-960 &45\\
+(Primary) & & & &\\
+GSM 900 &0-124 &880-915 &925-960 &45\\
+(Extended) &975-1023 & & &\\
+GSM 1800 &512-885 &1710-1785 &1805-1880 &95\\
+GSM 1900 &512-810 &1850-1910 &1930-1990 &80\\
+(North America) & & & &\\
+GSM 850 &128-251 &824-849 &869-894 &45\\
+(North America) & & & &\\
+\bottomrule
+\end{tabular}
+\caption{Frequencies in the different bands \cite{kommsys2006}.}
+\label{tab:frequencies}
+\end{table}
+
Each of which is identified by its \gls{arfcn}.
This is a simple numbering scheme, given to those 200kHz channels.
The frequencies and \glspl{arfcn} are connected as follows:
@@ -465,11 +487,6 @@ Due to the nature of the mobility of subscribers, this increases the amount of H
Also an update of the location of a subscribers needs to be done more often, to ensure reachability for incoming calls.
These inflict increased signalling load on the network itself.
-\begin{table}
-\caption{Frequencies in the different bands \cite{kommsys2006}.}
-\label{tab:frequencies}
-\end{table}
-
\begin{figure}
\centering
\includegraphics{../Images/Cells}
@@ -810,7 +827,7 @@ The Layer 2 format changes through the course of the network, while the data pac
When a transmission from a \gls{ms} to the \gls{bts} is done,\gls{lapdm} is used which is essentially the same as the Layer 2 \gls{isdn} protocol with a few simplifications.
From the \gls{bts} to the \gls{bsc} \gls{lapdm} converts to \gls{lapd} and afterwards is exchanged to \gls{mtp2}.
For the air interface \gls{lapdm} along with channel coding and Burst formatting form Layer 2.
-More information about these Layer 2 protocols can be found in the respective Technical Specifications of the \gls{3gpp} \cite{3gpp_ts_0405,3gpp_ts_0406}.
+More information about these Layer 2 protocols can be found in the respective Technical Specifications of the \gls{3gpp} \cite{GSM0405,GSM0406}.
\paragraph{Network (Layer 3):} Layer 3 headers have to provide all the information necessary for the packet to be routed towards its recipient.
As with Layer 2 information, it may be the case that this header needs to be partially rewritten during the transmission of a package.
@@ -821,10 +838,11 @@ Therefore in a strict sense \gls{mm} and \gls{cc} information does not belong to
\section{IMSI-Catcher}
\label{sec:catcher}
An \gls{imsi}-Catcher is a technical device that is used to capture \gls{imsi} and \gls{imei} numbers of mobile subscribers.
-The knowledge of the \gls{imsi} and \gls{imei} numbers can be exploited to either tap into calls the particular participant is doing or pinpoint the location of the subscriber \cite{fox}.
+The knowledge of the \gls{imsi} and \gls{imei} numbers can be exploited to either tap into the participant's calls or pinpoint the location of the subscriber \cite{fox}.
+Another less known feature is that if catcher do not relay calls they can be used to suppress mobile communication in a certain area \eg during a police operation \cite{imsi_wiki}.
This topic came up in conjunction with crime fighting and prevention with the advent of mobile telephones.
-A mobile phone cannot be tapped in the same way as a landline phone since the subscriber can change places and also phones.
+A mobile phone cannot be tapped in the same way as a landline phone since the subscriber can change places and also phones, thus there is no designated line associated with him/her.
This has proven to be a challenge to the authorities.
In 1996 Rohde \& Schwarz a company based in Munich, Germany has developed a device called ''GA 090'' which was the first \gls{imsi}-Catcher.
@@ -833,14 +851,14 @@ Short thereafter the ''GA 900'' was presented which had the additional capabilit
These commercial versions of catchers produced by Rohde \& Schwarz are priced between 200 000 \euro{} and 300 000 \euro{} \cite{fox}.
Although these catchers are meant to be bought by authorities, it is also possible to buy them as a private customer or to order them from abroad.
Regulations prohibit the use of \gls{imsi}-Catchers for individuals since the frequency bands the \gls{gsm} network uses are reserved for providers.
-However, it cannot be guaranteed that such a catcher is not used illegally.
+Therefore it cannot be guaranteed that such a catcher is not used illegally.
In addition to these commercial products different projects \cite{dennis, def_catcher} have shown that such a device can be built at a very low budget.
This only intensifies risk that is imposed by the abusive usage of such an instrument.
-Figure \ref{fig:catchers} shows a commercial model side by side with a self built catcher \footnote{\url{http://www.iwi.uni-hannover.de/lv/ucc\_ws04\_05/riemer/literatur/imsi-catcher.htm}\\\url{http://www.heise.de/security/meldung/IMSI-Catcher-fuer-1500-Euro-im-Eigenbau-1048919.html?view=zoom\%3Bzoom=1}}.
+Figure \ref{fig:catchers} shows a commercial model side by side with a self built catcher.
\begin{figure}
\centering
\includegraphics[width=0.45\textwidth]{../Images/imsi_catcher}\hspace{1cm}\includegraphics[width=.45\textwidth]{../Images/usrp}
-\caption{A commercial catcher by Rhode \& Schwarz and a self built catcher introduced at Defcon 2010.}
+\caption{A commercial catcher by Rhode \& Schwarz \cite{fox} and a self built catcher introduced at Defcon 2010 \cite{def_catcher}.}
\label{fig:catchers}
\end{figure}
@@ -850,38 +868,94 @@ The next section will explain when a catcher can be used in Germany from a legal
\subsection{Mode of Operation}
\label{sec:catcher_operation}
+Basically an \gls{imsi}-Catcher masks itself as a base station and lures subscribers in the perimeter to connect to it without their knowledge.
+Ways of luring a subscriber into a catcher are explained in Section \ref{sec:attacks}.
+The one shown in Figure \ref{fig:catcher_catch} is broadcasting a new \gls{lai} to the \gls{ms} at very high power, suggesting that the \gls{ms} entered a new area and has to re-authenticate \cite{mueller}.
+\begin{figure}
+ \centering
+ \includegraphics{../Images/catcher_attack}
+ \caption{IMSI catching procedure. Adopted and simplified from \cite{mueller}.}
+ \label{fig:catcher_catch}
+\end{figure}
+
+Once a subscriber connects to the device, a command is sent to the \gls{ms} which asks for the \gls{sim}'s \gls{imsi}.
+This command is normally only used in case of an error \cite{fox} but can be abused this way.
+
+This is only possible since authentication in a \gls{gsm} network is one-sided as discussed earlier in Section \ref{sec:authentication}.
+The subscriber has no way of checking the authenticity of a base station but rather has to trust the broadcasted identifier which can be easily forged by a catcher.
+At this stage, the subscriber can already be localized as being in a certain perimeter of the catcher.
+
+Having the \gls{imsi} the authorities can now also query the provider for personal information about the subscriber, however criminals often use fake credentials when obtaining a \gls{sim} card.
+Since it is only possible to catch all the \glspl{imsi} in an area, the person to be observed has to be followed and the catcher has to be used multiple times.
+Each time it yields a set of numbers in the area.
+The \gls{imsi} that is part of all the sets is the \gls{imsi} of the person under observation.
+More catchers can now be used to triangulate the position.
+The next step is also possible because of a design decision made in the \gls{gsm} protocol.
+Encryption itself or certain kinds of strong encryption are not allowed in all countries.
+Therefore it is possible for the base station to request the encryption algorithm A5/0 which means that no encryption will be used for the calls at all.
+Only a few mobile phones display that encryption has been disabled by the \gls{bts}.
+
+At this point the setup for a man-in-the-middle attack \cite{mueller} on calls is completed.
+The catcher itself is connected to the mobile network with its own \gls{sim}.
+If the subscriber now initiates a call, the call can be routed by the catcher into the network and since encryption is turned of it can also be tapped it.
+The subscriber itself doesn't notice this privacy breach, except in the rare cases where the phone displays that encryption has been turned off.
+The \gls{imei} is also harvested in a similar fashion if the observed person tries to switch \gls{sim} cards on a regular basis \cite{fox}.
+
+\subsubsection{Attacks}
+\label{sec:attacks}
+When operating a catcher the first step is to actually trick the \gls{ms} into connecting to the catcher.
+Most phones save the frequency the were tuned to last and upon connecting to the mobile network this is the first frequency they try.
+Therefore a \gls{ms} has to be set to 'normal cell selection' mode, meaning it starts scanning for the best base station available.
+Four possible ways of luring a \gls{ms} to the \gls{imsi}-Catcher will now be explained.
+Three were presented by Wehrle for the Open Source IMSI-Catcher project \cite{dennis} and one by Federrath \cite{mueller}.
+The attacks differ on whether the \gls{ms} already is in normal cell selection mode or not, meaning it is connected to another \gls{bts}.
+
+\paragraph{\gls{ms} is in normal cell selection mode:}
+The \gls{imsi}-Catcher has to emulate a cell configuration of the provider the target \gls{ms} is looking for broadcasting at any frequency.
+If the \gls{ms} stumbles upon the the frequency, it will connect.
+This is no method with 100\% accuracy, however chances can be raised by broadcasting with higher power.
+Some \gls{imsi}-Catchers even broadcast at a higher power than it would be allowed for normal \gls{bts} \cite{imsi_wiki}.
+
+\paragraph{\gls{ms} is already connected to a network:}
+If this is the case then the connection to the current cell needs to be broken.
+This can be achieved either by jamming the frequency of the cell the \gls{ms} is connected to thus forcing the \gls{ms} into cell selection or by getting the \gls{ms} to switch the cell to the catcher's.
+This can be done the following way.
+In this method the fact is abused, that the \gls{ms} knows it's neighbourhood (since it has been broadcasted by the \gls{bts}) and does regular quality measurements.
+The main idea is that the operator of the catcher chooses the frequency of a \gls{bts} that is in the neighbourhood of the \gls{bts} that the target \gls{ms} is connected to.
+This way the operator can make sure the \gls{ms} know this frequency and hast quality measurements associated with it.
+Furthermore should the chosen \gls{bts}, the one that will be replaced by the catcher, have a bad signal to noise ratio (which is why the \gls{ms} is currently not connected to it).
+As soon as the catcher starts broadcasting on that frequency, quality measurements will radically improve and the \gls{ms} will initiate a change of cells to the catcher cell if the quality is above its current cell.
+Another way is to broadcast a new \gls{lai} to the \gls{ms} suggesting it just arrived at a new location, and therefore initiating a cell selection \cite{mueller}.
+This works as long as the \gls{ms} has no active connections to the network, if it has, the jamming method can help to disconnect the \gls{ms} from the network.
+
+\subsubsection{Risks and Irregularities}
+An \gls{imsi}-Catcher cannot target a individual subscriber, it always targets an area, thus breaching the privacy of uninvolved subjects.
+Apart from that, a catcher that does not relay calls takes away the possibility for all people in the area to submit calls.
+Even if the the catcher routes calls into the network, since it only has one \gls{sim} card, it can only route a single call.
+This can be very dangerous since no emergency calls can be submitted in that area during the time of operation.
+
+Another irregularity apart from using no encryption is that people caught in this area cannot be reached on their mobile phones, since they are not registered on the main network, only through the catcher proxy.
+As a consequence of the proxy functionality of the \gls{imsi}-Catcher, when a call is routed into the network, the recipient can only see the number the catcher is registered with or 'Number Withheld', however not the original number.
\subsection{Law Situation in Germany}
\label{sec:catcher_law}
-%germany not plagued by terrorism
-%response to 9/11: overreaction (Luftschutzgesetz)
-%no definition for terror in german law
-%preventive meassures taken
-%government can influence prosecution
-
-%---- procedural law ------
-%terrorists/criminals switch mobile phone/sim cards often
-%imsi-catcher: identification to apply telephone surveillance, whereabouts for arrest warrant, no other purpose allowed
-%prior authorization by a judge (legislative power) or prosecutor (executive power) in case of emergency ----> revoked
-%2004: no electronic surveillance in private premises HOWEVER for data needed for criminal cundoct allowed
-%sacrifice of personal rights for crime surveillance
-%threshold for elecronic surveillance is VERY low when the word terrorism or serious crimes bumps up
-%police needs to show certain evidence underpinning a suspicion that such a criminal act was committed, attempted or prepared
-%evidence from agents that is not transparent
-
-%"Electronic surveillance, it seems, is no
-%longer governed by questions of legitimacy, but solely by the question of practi-
-%cality. Every method that is practical, will be used by police and agencies.37
-%Often enough the courts have given up any serious control of investigation
-%methods"
-%See U. Eisenberg and T. Singelnstein, ‘Zur Unzulassigkeit der heimlichen Ortung per ‘‘stiller
-%SMS’’’, 25 Neue Zeitschrift fur Strafrecht (2005) 62, at 67.
-
-%easier share of sensitive information between police/intelligence/prosecution
-%similar examples for other areas like surrender of citizens
-
+First reports of an \gls{imsi}-Catcher used by authorities in Germany dates back to 1997.
+Until November 2001 35 cases of use were officially confirmed by the \gls{bmi} \cite{fox}.
+It was used to fight of organised and serious crime like hostage-takings or drug traffic by the \gls{bka} and \gls{bgs}.
+Attempts have been made by the government to move the catcher out of the legal grey zone and use the 'GA 900' with its capabilities of tapping in to calls for crime prosecution.
+At that time however the attempt was dismissed.
+On 14$^\text{th}$ of August 2002 with Section §100i of the Strafprozessordnung (Code of Criminal Procedure) a law basis was given to the device.
+Afterwards on 22$^\text{nd}$ of August 2006 this section was affirmed and its accordance with the Grundgesetz (Basic Rights).
+The use of an \gls{imsi}-Catcher with prior authorisation by a judge does not affect peoples right to privacy nor does it contradict Datenschutzbestimmungen (Secrecy of Confidential Data) or the Fernmeldegeheimnis (Secrecy of Confidential Communication).
+In Austria the need for a prior authorisation by a judge was removed in January 2008.
+During the first for months of 2008, 3800 cases of catcher use were reported \cite{imsi_wiki} in Austria.
+Gradually, starting with §100i it has become easier for the police and agencies to use electronic surveillance.
+Although on 2004 it was decided by the Federal Court of Saxony, that electronic surveillance is not to be used in the substantially intimate sphere of private premises, this regulation can be overthrown if linked to the field of serious crimes and terrorism.
+Section §100a(1) describes that the police merely need to show certain evidence underpinning a suspicion that a criminal act was committed \cite{criminal_justice}.
+This threshold can often be overcome easily, since it is hard for courts to check evidence for sufficiency thoroughly given the short time frame.
+These loose regulations together with the face that third parties can buy or build catchers poses a grave threat to privacy of each individual person. \ No newline at end of file
diff --git a/Tex/Images/catcher_attack.png b/Tex/Images/catcher_attack.png
new file mode 100644
index 0000000..ebce50d
--- /dev/null
+++ b/Tex/Images/catcher_attack.png
Binary files differ
diff --git a/Tex/Images/catcher_attack.vsd b/Tex/Images/catcher_attack.vsd
new file mode 100644
index 0000000..0632414
--- /dev/null
+++ b/Tex/Images/catcher_attack.vsd
Binary files differ
diff --git a/Tex/Master/Glossary.tex b/Tex/Master/Glossary.tex
index 5afcea6..1e46891 100644
--- a/Tex/Master/Glossary.tex
+++ b/Tex/Master/Glossary.tex
@@ -84,4 +84,8 @@
\newacronym{lapdm}{LAPD$_m$}{LAPD Mobile}
\newacronym{mtp2}{MTP 2/SS7}{Message Transfer Part 2/SS7}
\newacronym{rr}{RR}{Radio Resource}
-\newacronym{mm}{MM}{Mobility Management} \ No newline at end of file
+\newacronym{mm}{MM}{Mobility Management}
+\newacronym{lai}{LAI}{Location Area Identifier}
+\newacronym{bka}{BKA}{Bundeskriminalamt}
+\newacronym{bgs}{BGS}{Bundesgrenzschutz}
+\newacronym{bmi}{BMI}{Bundesminiterium des Inneren} \ No newline at end of file
diff --git a/Tex/Master/Master.acn b/Tex/Master/Master.acn
index a51e79c..a801860 100644
--- a/Tex/Master/Master.acn
+++ b/Tex/Master/Master.acn
@@ -199,36 +199,36 @@
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
\glossaryentry{ARFCN?\glossaryentryfield{arfcn}{\glsnamefont{ARFCN}}{Absolute Radio Frequency Number}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{16}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{17}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{17}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{17}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{17}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{17}
-\glossaryentry{CI?\glossaryentryfield{ci}{\glsnamefont{CI}}{Cell Identity}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{19}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{CI?\glossaryentryfield{ci}{\glsnamefont{CI}}{Cell Identity}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BSS?\glossaryentryfield{bss}{\glsnamefont{BSS}}{Basestation Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{18}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
\glossaryentry{AGCH?\glossaryentryfield{agch}{\glsnamefont{AGCH}}{Access Grand Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
@@ -260,10 +260,10 @@
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
-\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{20}
+\glossaryentry{NSS?\glossaryentryfield{nss}{\glsnamefont{NSS}}{Network Subsystem}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
\glossaryentry{TRAU?\glossaryentryfield{trau}{\glsnamefont{TRAU}}{Transcoding Rate and Adaption Unit}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
\glossaryentry{TRAU?\glossaryentryfield{trau}{\glsnamefont{TRAU}}{Transcoding Rate and Adaption Unit}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
@@ -273,10 +273,10 @@
\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
\glossaryentry{Ki?\glossaryentryfield{ki}{\glsnamefont{Ki}}{Secret Key}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
\glossaryentry{Kc?\glossaryentryfield{kc}{\glsnamefont{Kc}}{Cyphering Key}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
-\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
-\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{21}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
+\glossaryentry{ME?\glossaryentryfield{me}{\glsnamefont{ME}}{Mobile Equipment}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
+\glossaryentry{MSC?\glossaryentryfield{msc}{\glsnamefont{MSC}}{Mobile Switching Center}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
@@ -290,7 +290,7 @@
\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
\glossaryentry{FDMA?\glossaryentryfield{fdma}{\glsnamefont{FDMA}}{Frequency Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
-\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{22}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
@@ -299,19 +299,19 @@
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{23}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{SF?\glossaryentryfield{sf}{\glsnamefont{SF}}{Stealing Flag}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{25}
+\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{SF?\glossaryentryfield{sf}{\glsnamefont{SF}}{Stealing Flag}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
@@ -322,7 +322,7 @@
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{RACH?\glossaryentryfield{rach}{\glsnamefont{RACH}}{Random Access Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
-\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
+\glossaryentry{TDMA?\glossaryentryfield{tdma}{\glsnamefont{TDMA}}{Time Division Multiple Access}{\relax }|setentrycounter[]{page}\glsnumberformat}{26}
\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
\glossaryentry{FACCH?\glossaryentryfield{facch}{\glsnamefont{FACCH}}{Fast Access Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
@@ -331,11 +331,11 @@
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
\glossaryentry{TCH?\glossaryentryfield{tch}{\glsnamefont{TCH}}{Traffic Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
-\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
-\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
-\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{27}
+\glossaryentry{SCH?\glossaryentryfield{sch}{\glsnamefont{SCH}}{Signalling Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
+\glossaryentry{FCCH?\glossaryentryfield{fcch}{\glsnamefont{FCCH}}{Frequency Correction Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
\glossaryentry{PCH?\glossaryentryfield{pch}{\glsnamefont{PCH}}{Paging Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
\glossaryentry{TMSI?\glossaryentryfield{tmsi}{\glsnamefont{TMSI}}{Temporary IMSI}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
@@ -352,23 +352,23 @@
\glossaryentry{SDCCH?\glossaryentryfield{sdcch}{\glsnamefont{SDCCH}}{Standalone Digital Control Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
-\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
-\glossaryentry{ITU?\glossaryentryfield{itu}{\glsnamefont{ITU}}{International Telecomunication Union}{\relax }|setentrycounter[]{page}\glsnumberformat}{28}
-\glossaryentry{GMSK?\glossaryentryfield{gmsk}{\glsnamefont{GMSK}}{Gaussian Minimum Shift Keying}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{SS-7?\glossaryentryfield{ss7}{\glsnamefont{SS-7}}{Signaling System 7}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{ISDN?\glossaryentryfield{isdn}{\glsnamefont{ISDN}}{Integrated Services Digital Network}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{MTP 2/SS7?\glossaryentryfield{mtp2}{\glsnamefont{MTP 2/SS7}}{Message Transfer Part 2/SS7}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
-\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{30}
+\glossaryentry{BCCH?\glossaryentryfield{bcch}{\glsnamefont{BCCH}}{Broadcast Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{29}
+\glossaryentry{ITU?\glossaryentryfield{itu}{\glsnamefont{ITU}}{International Telecomunication Union}{\relax }|setentrycounter[]{page}\glsnumberformat}{29}
+\glossaryentry{GMSK?\glossaryentryfield{gmsk}{\glsnamefont{GMSK}}{Gaussian Minimum Shift Keying}{\relax }|setentrycounter[]{page}\glsnumberformat}{29}
+\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{SS-7?\glossaryentryfield{ss7}{\glsnamefont{SS-7}}{Signaling System 7}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{HDLC?\glossaryentryfield{hdlc}{\glsnamefont{HDLC}}{High Level Data Link Control}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{ISDN?\glossaryentryfield{isdn}{\glsnamefont{ISDN}}{Integrated Services Digital Network}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{BSC?\glossaryentryfield{bsc}{\glsnamefont{BSC}}{Base Station Controller}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{LAPD?\glossaryentryfield{lapd}{\glsnamefont{LAPD}}{Link Access Procedure, D Channel}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{MTP 2/SS7?\glossaryentryfield{mtp2}{\glsnamefont{MTP 2/SS7}}{Message Transfer Part 2/SS7}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
+\glossaryentry{LAPD$_m$?\glossaryentryfield{lapdm}{\glsnamefont{LAPD$_m$}}{LAPD Mobile}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{3GPP?\glossaryentryfield{3gpp}{\glsnamefont{3GPP}}{Third Generation Partnership Project}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
@@ -390,6 +390,61 @@
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
-\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
-\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{31}
\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{32}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{GSM?\glossaryentryfield{gsm}{\glsnamefont{GSM}}{Global System for Mobile Communications}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMEI?\glossaryentryfield{imei}{\glsnamefont{IMEI}}{International Mobile Equipment Identifier}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{34}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BTS?\glossaryentryfield{bts}{\glsnamefont{BTS}}{Base Station Transceiver}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{LAI?\glossaryentryfield{lai}{\glsnamefont{LAI}}{Location Area Identifier}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{MS?\glossaryentryfield{ms}{\glsnamefont{MS}}{Mobile Station}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{SIM?\glossaryentryfield{sim}{\glsnamefont{SIM}}{Subscriber Identity Module}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BMI?\glossaryentryfield{bmi}{\glsnamefont{BMI}}{Bundesminiterium des Inneren}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BKA?\glossaryentryfield{bka}{\glsnamefont{BKA}}{Bundeskriminalamt}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{BGS?\glossaryentryfield{bgs}{\glsnamefont{BGS}}{Bundesgrenzschutz}{\relax }|setentrycounter[]{page}\glsnumberformat}{35}
+\glossaryentry{IMSI?\glossaryentryfield{imsi}{\glsnamefont{IMSI}}{International Mobile Subscriber Identification}{\relax }|setentrycounter[]{page}\glsnumberformat}{36}
diff --git a/Tex/Master/Master.aux b/Tex/Master/Master.aux
index e02fe9e..e06be07 100644
--- a/Tex/Master/Master.aux
+++ b/Tex/Master/Master.aux
@@ -87,6 +87,7 @@
\@writefile{toc}{\contentsline {subsubsection}{Equipment Identification Register}{12}}
\FN@pp@footnote@aux{5}{12}
\@writefile{toc}{\contentsline {subsubsection}{Authentication Center}{12}}
+\newlabel{sec:authentication}{{2.2.2}{12}}
\@writefile{lof}{\contentsline {figure}{\numberline {2.3}{\ignorespaces Authentication procedure.}}{13}}
\newlabel{fig:authentication}{{2.3}{13}}
\citation{kommsys2006}
@@ -97,43 +98,43 @@
\newlabel{fig:frequency}{{2.4}{15}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.2.4}Base Station Subsystem}{15}}
\newlabel{sec:bss}{{2.2.4}{15}}
+\citation{kommsys2006}
+\citation{kommsys2006}
\citation{GSM2009}
+\@writefile{lot}{\contentsline {table}{\numberline {2.4}{\ignorespaces Frequencies in the different bands \cite {kommsys2006}.}}{16}}
+\newlabel{tab:frequencies}{{2.4}{16}}
\@writefile{toc}{\contentsline {subsubsection}{Frequencies and the Cellular Principle}{16}}
\citation{protocols1999}
-\citation{kommsys2006}
-\citation{kommsys2006}
\citation{GSM2009}
\citation{GSM2009}
\citation{kommsys2006}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.5}{\ignorespaces Theoretical arrangement of radio cells compared to a realistic alignment. Cells with the same number share the same frequency \cite {GSM2009}.}}{17}}
+\newlabel{fig:cells}{{2.5}{17}}
\citation{protocols1999}
\citation{protocols1999}
\citation{protocols1999}
-\@writefile{lot}{\contentsline {table}{\numberline {2.4}{\ignorespaces Frequencies in the different bands \cite {kommsys2006}.}}{17}}
-\newlabel{tab:frequencies}{{2.4}{17}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.5}{\ignorespaces Theoretical arrangement of radio cells compared to a realistic alignment. Cells with the same number share the same frequency \cite {GSM2009}.}}{17}}
-\newlabel{fig:cells}{{2.5}{17}}
-\@writefile{toc}{\contentsline {subsubsection}{Base Transceiver Station}{17}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.6}{\ignorespaces Common base station configurations. Compiled from \cite {protocols1999}.}}{18}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Stantard configuration.}}}{18}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Umbrella cell configuration.}}}{18}}
-\@writefile{lof}{\contentsline {subfigure}{\numberline{(c)}{\ignorespaces {Sectorised configuration.}}}{18}}
-\newlabel{fig:configurations}{{2.6}{18}}
\citation{kommsys2006}
-\@writefile{toc}{\contentsline {subsubsection}{Baste Station Controller}{19}}
+\@writefile{toc}{\contentsline {subsubsection}{Base Transceiver Station}{18}}
+\@writefile{toc}{\contentsline {subsubsection}{Baste Station Controller}{18}}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.6}{\ignorespaces Common base station configurations. Compiled from \cite {protocols1999}.}}{19}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(a)}{\ignorespaces {Stantard configuration.}}}{19}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(b)}{\ignorespaces {Umbrella cell configuration.}}}{19}}
+\@writefile{lof}{\contentsline {subfigure}{\numberline{(c)}{\ignorespaces {Sectorised configuration.}}}{19}}
+\newlabel{fig:configurations}{{2.6}{19}}
\citation{kommsys2006}
-\@writefile{toc}{\contentsline {subsubsection}{Transcoding rate and Adaption Unit}{20}}
\citation{kommsys2006}
\citation{kommsys2006}
-\citation{protocols1999}
\@writefile{lof}{\contentsline {figure}{\numberline {2.7}{\ignorespaces Cyphering procedure for one frame of voice data. Adopted from \cite {kommsys2006}.}}{21}}
\newlabel{fig:cypher}{{2.7}{21}}
+\@writefile{toc}{\contentsline {subsubsection}{Transcoding rate and Adaption Unit}{21}}
+\citation{protocols1999}
\@writefile{toc}{\contentsline {section}{\numberline {2.3}The $U_m$ Interface}{22}}
\newlabel{sec:Um}{{2.3}{22}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.1}Radio Transmission}{22}}
\newlabel{sec:radio}{{2.3.1}{22}}
-\@writefile{toc}{\contentsline {subsubsection}{Frame Numbering}{22}}
\@writefile{lof}{\contentsline {figure}{\numberline {2.8}{\ignorespaces The combination of FDMA and TDMA.}}{23}}
\newlabel{fig:fdma_tdma}{{2.8}{23}}
+\@writefile{toc}{\contentsline {subsubsection}{Frame Numbering}{23}}
\@writefile{lof}{\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{24}}
\newlabel{fig:frame_hierarchy}{{2.9}{24}}
\citation{GSM2009}
@@ -142,11 +143,11 @@
\@writefile{lof}{\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types. After \cite {GSM2009}.}}{25}}
\newlabel{fig:burst_types}{{2.10}{25}}
\@writefile{toc}{\contentsline {subsubsection}{Burst Types}{25}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.11}{\ignorespaces Mapping of virtual channels on time slots.}}{26}}
-\newlabel{fig:channels}{{2.11}{26}}
+\citation{kommsys2006}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{26}}
\newlabel{sec:channels}{{2.3.2}{26}}
-\citation{kommsys2006}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.11}{\ignorespaces Mapping of virtual channels on time slots.}}{27}}
+\newlabel{fig:channels}{{2.11}{27}}
\@writefile{toc}{\contentsline {subsubsection}{Dedicated Channels}{27}}
\@writefile{toc}{\contentsline {subsubsection}{Common Channels}{27}}
\citation{gsm0502}
@@ -156,94 +157,129 @@
\citation{protocols1999}
\citation{kommsys2006}
\citation{kommsys2006}
-\citation{protocols1999}
\@writefile{toc}{\contentsline {subsubsection}{Combinations}{28}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.3}Layers}{28}}
-\newlabel{sec:layers}{{2.3.3}{28}}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.12}{\ignorespaces Snippet of a Multiframe-configurations for a base station from \cite {kommsys2006}.}}{29}}
-\newlabel{fig:channel_example}{{2.12}{29}}
-\citation{3gpp_ts_0405}
-\citation{3gpp_ts_0406}
-\@writefile{lot}{\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{30}}
-\@writefile{toc}{\contentsline {paragraph}{Physical Layer (Layer 1):}{30}}
-\@writefile{toc}{\contentsline {paragraph}{Data Link (Layer 2):}{30}}
+\citation{protocols1999}
+\citation{GSM0405}
+\citation{GSM0406}
+\@writefile{lot}{\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{29}}
+\newlabel{tab:channel_configurations}{{2.5}{29}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.3.3}Layers}{29}}
+\newlabel{sec:layers}{{2.3.3}{29}}
+\@writefile{toc}{\contentsline {paragraph}{Physical Layer (Layer 1):}{29}}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.12}{\ignorespaces Snippet of a Multiframe-configurations for a base station from \cite {kommsys2006}.}}{30}}
+\newlabel{fig:channel_example}{{2.12}{30}}
\citation{protocols1999}
\citation{fox}
+\citation{imsi_wiki}
\citation{fox}
\citation{dennis}
\citation{def_catcher}
+\citation{fox}
+\citation{def_catcher}
+\citation{fox}
+\citation{def_catcher}
+\@writefile{toc}{\contentsline {paragraph}{Data Link (Layer 2):}{31}}
\@writefile{toc}{\contentsline {paragraph}{Network (Layer 3):}{31}}
\@writefile{toc}{\contentsline {section}{\numberline {2.4}IMSI-Catcher}{31}}
\newlabel{sec:catcher}{{2.4}{31}}
-\FN@pp@footnote@aux{6}{31}
-\@writefile{lof}{\contentsline {figure}{\numberline {2.13}{\ignorespaces A commercial catcher by Rhode \& Schwarz and a self built catcher introduced at Defcon 2010.}}{32}}
+\citation{mueller}
+\citation{mueller}
+\citation{mueller}
+\citation{fox}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.13}{\ignorespaces A commercial catcher by Rhode \& Schwarz \cite {fox} and a self built catcher introduced at Defcon 2010 \cite {def_catcher}.}}{32}}
\newlabel{fig:catchers}{{2.13}{32}}
\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{32}}
\newlabel{sec:catcher_operation}{{2.4.1}{32}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.2}Law Situation in Germany}{32}}
-\newlabel{sec:catcher_law}{{2.4.2}{32}}
+\@writefile{lof}{\contentsline {figure}{\numberline {2.14}{\ignorespaces IMSI catching procedure. Adopted and simplified from \cite {mueller}.}}{33}}
+\newlabel{fig:catcher_catch}{{2.14}{33}}
+\citation{mueller}
+\citation{fox}
+\citation{dennis}
+\citation{mueller}
+\citation{imsi_wiki}
+\citation{mueller}
+\@writefile{toc}{\contentsline {subsubsection}{Attacks}{34}}
+\newlabel{sec:attacks}{{2.4.1}{34}}
+\@writefile{toc}{\contentsline {paragraph}{\gls {ms} is in normal cell selection mode:}{34}}
+\citation{fox}
+\@writefile{toc}{\contentsline {paragraph}{\gls {ms} is already connected to a network:}{35}}
+\@writefile{toc}{\contentsline {subsubsection}{Risks and Irregularities}{35}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {2.4.2}Law Situation in Germany}{35}}
+\newlabel{sec:catcher_law}{{2.4.2}{35}}
+\citation{imsi_wiki}
+\citation{criminal_justice}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {3}IMSI Catcher Detection}{33}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {3}IMSI Catcher Detection}{37}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {3.1}Procedure}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.1}Information Gathering}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.2}Information Evaluation}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.3}Problems}{33}}
-\@writefile{toc}{\contentsline {subsubsection}{Solutions}{33}}
-\@writefile{toc}{\contentsline {section}{\numberline {3.2}Frameworks and Hardware}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.1}OsmoconBB}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.2}Motorola C123}{33}}
-\@writefile{toc}{\contentsline {section}{\numberline {3.3}Implementation}{33}}
-\@writefile{toc}{\contentsline {section}{\numberline {3.4}IMSI Catcher Detection System}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.4.1}Configuration}{33}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {3.4.2}Operation}{33}}
-\FN@pp@footnotehinttrue
-\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {4}Evaluation}{35}}
+\@writefile{toc}{\contentsline {section}{\numberline {3.1}Frameworks and Hardware}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.1}OsmoconBB}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.1.3}GNS 5870 MFI}{37}}
+\@writefile{toc}{\contentsline {section}{\numberline {3.2}Procedure}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.1}Information Gathering}{37}}
+\newlabel{sec:info_gathering}{{3.2.1}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.2.3}Further Improvements}{37}}
+\@writefile{toc}{\contentsline {section}{\numberline {3.3}Implementation}{37}}
+\@writefile{toc}{\contentsline {section}{\numberline {3.4}IMSI Catcher Detection System}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.4.1}Configuration}{37}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {3.4.2}Operation}{37}}
+\FN@pp@footnotehinttrue
+\FN@pp@footnotehinttrue
+\@writefile{toc}{\contentsline {chapter}{\numberline {4}Evaluation}{39}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {4.1}Open Field Statistics}{35}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.1}Bayesian Filter}{35}}
-\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.2}Detection System}{35}}
-\@writefile{toc}{\contentsline {section}{\numberline {4.2}Example Scenarios}{35}}
+\@writefile{toc}{\contentsline {section}{\numberline {4.1}Open Field Statistics}{39}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.1}Bayesian Filter}{39}}
+\@writefile{toc}{\contentsline {subsection}{\numberline {4.1.2}Detection System}{39}}
+\@writefile{toc}{\contentsline {section}{\numberline {4.2}Example Scenarios}{39}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
-\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{37}}
+\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion}{41}}
\@writefile{lof}{\addvspace {10\p@ }}
\@writefile{lot}{\addvspace {10\p@ }}
\@writefile{lol}{\addvspace {10\p@ }}
-\@writefile{toc}{\contentsline {section}{\numberline {5.1}Future Work}{37}}
+\@writefile{toc}{\contentsline {section}{\numberline {5.1}Future Work}{41}}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\bibstyle{acm}
\citation{*}
\bibdata{../Content/Bibliography}
-\bibcite{GSM0505}{1}
-\bibcite{GSM0207}{2}
-\bibcite{ISO7810}{3}
-\bibcite{GSM23078}{4}
-\bibcite{GSM23003}{5}
-\bibcite{blacklisting}{6}
-\bibcite{3gpp_Proposal2000}{7}
-\bibcite{GSM2009}{8}
-\bibcite{GSM_stats2011}{9}
-\bibcite{GSM_history2011}{10}
-\bibcite{overview1994}{11}
-\bibcite{protocols1999}{12}
+\bibcite{GSM0405}{1}
+\bibcite{GSM0406}{2}
+\bibcite{GSM0505}{3}
+\bibcite{GSM0207}{4}
+\bibcite{ISO7810}{5}
+\bibcite{gsm0502}{6}
+\bibcite{GSM23078}{7}
+\bibcite{GSM23003}{8}
+\bibcite{3gpp_Proposal2000}{9}
+\bibcite{GSM2009}{10}
+\bibcite{mueller}{11}
+\bibcite{fox}{12}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\@writefile{toc}{\contentsline {chapter}{Bibliography}{I}}
-\bibcite{hsdpa}{13}
-\bibcite{hsupa}{14}
-\bibcite{kommsys2006}{15}
-\bibcite{overview1996}{16}
-\bibcite{ITU1200}{17}
-\bibcite{ITU212}{18}
+\bibcite{GSM_stats2011}{13}
+\bibcite{GSM_history2011}{14}
+\bibcite{overview1994}{15}
+\bibcite{protocols1999}{16}
+\bibcite{hsdpa}{17}
+\bibcite{hsupa}{18}
+\bibcite{criminal_justice}{19}
+\bibcite{kommsys2006}{20}
+\bibcite{overview1996}{21}
+\bibcite{def_catcher}{22}
+\bibcite{ITU1200}{23}
+\bibcite{ITU212}{24}
+\bibcite{dennis}{25}
+\bibcite{blacklisting}{26}
+\bibcite{imsi_wiki}{27}
\FN@pp@footnotehinttrue
\citation{GSM2009}
\citation{GSM_history2011}
@@ -253,6 +289,9 @@
\citation{kommsys2006}
\citation{GSM2009}
\citation{kommsys2006}
+\citation{raven}
+\citation{def_catcher}
+\citation{mueller}
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
\FN@pp@footnotehinttrue
diff --git a/Tex/Master/Master.bbl b/Tex/Master/Master.bbl
index 8c2eb4f..bdaa5a1 100644
--- a/Tex/Master/Master.bbl
+++ b/Tex/Master/Master.bbl
@@ -1,5 +1,18 @@
\begin{thebibliography}{10}
+\bibitem{GSM0405}
+Data link (dl) layer; general aspects.
+\newblock GSM 04.05,
+ \url{http://www.3gpp.org/ftp/Specs/archive/04_series/04.05/0405-802.zip},
+ 1999.
+
+\bibitem{GSM0406}
+Mobile station - base station system (ms - bss) interface; data link (dl) layer
+ specification.
+\newblock GSM 04.06,
+ \url{http://www.3gpp.org/ftp/Specs/archive/04_series/04.06/0406-840.zip},
+ 1999.
+
\bibitem{GSM0505}
Radio access network: Radio transmission and reception.
\newblock GSM 05.05,
@@ -16,8 +29,14 @@ Digital cellular telecommunications system (phase 2+): Mobile stations (ms)
\bibitem{ISO7810}
Identification cards -- physical characteristics.
\newblock ISO/IEC 7810:2003,
- \url{http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_detail.htm?%
-csnumber=31432}, 2003.
+ \url{http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_detail.htm?csnumber=31432},
+ 2003.
+
+\bibitem{gsm0502}
+Multiplexing and multiple access on the radio path.
+\newblock GSM 05.02,
+ \url{http://www.3gpp.org/ftp/Specs/archive/05_series/05.02/0502-8b0.zip},
+ 2003.
\bibitem{GSM23078}
Customised applications for mobile network enhanced logic.
@@ -31,11 +50,6 @@ Numbering, addressing and identification.
\url{http://www.3gpp.org/ftp/Specs/archive/23_series/23.003/23003-a30.zip},
2011.
-\bibitem{blacklisting}
-Equipment identity register.
-\newblock
- \url{http://en.wikipedia.org/wiki/Central_Equipment_Identity_Register}, 2012.
-
\bibitem{3gpp_Proposal2000}
{\sc Chaudhury, P., Mohr, W., and Onoe, S.}
\newblock The 3gpp proposal for imt-2000.
@@ -46,6 +60,15 @@ Equipment identity register.
\newblock {\em GSM -- Architecture, Protocols and Services}.
\newblock Wiley, 2009.
+\bibitem{mueller}
+{\sc Federrath, H.}
+\newblock Protection in mobile communications.
+
+\bibitem{fox}
+{\sc Fox, D.}
+\newblock Der imsi-catcher.
+\newblock {\em Datenschutz und Datensicherheit 26}, 4 (2002), 212--215.
+
\bibitem{GSM_stats2011}
Gsm/3g stats.
\newblock \url{http://www.gsacom.com/news/statistics.php4}, 2011.
@@ -77,6 +100,12 @@ Medium access control (mac) protocol specification.
\newblock 3GPP TS 25.321,
\url{http://www.3gpp.org/ftp/Specs/html-info/25321.htm}, 2011.
+\bibitem{criminal_justice}
+{\sc Safferling, C.}
+\newblock Terror and law.
+\newblock {\em Journal of International Criminal Justice 4}, 5 (2006),
+ 1152--1165.
+
\bibitem{kommsys2006}
{\sc Sauter, M.}
\newblock {\em Grundkurs mobile Kommunikationssysteme : von UMTS, GSM und GRPS
@@ -88,6 +117,13 @@ Medium access control (mac) protocol specification.
\newblock Overview of gsm: The global system for mobile communications.
\newblock {\em University of Waterloo\/} (1996).
+\bibitem{def_catcher}
+{\sc Security, H.}
+\newblock Imsi-catcher für 1500 euro im eigenbau.
+\newblock
+ \url{http://www.heise.de/security/meldung/IMSI-Catcher-fuer-1500-Euro-im-Eigenbau-1048919.html},
+ 2010.
+
\bibitem{ITU1200}
{\sc {Telecomunication standardization sector of ITU}}.
\newblock Intelligent network.
@@ -97,4 +133,19 @@ Medium access control (mac) protocol specification.
{\sc {Telecomunication standardization sector of ITU}}.
\newblock List of mobile country or geographical area codes, 2010.
+\bibitem{dennis}
+{\sc Wehrle, D.}
+\newblock Open source imsi catcher.
+
+\bibitem{blacklisting}
+{\sc Wikipedia}.
+\newblock Equipment identity register.
+\newblock
+ \url{http://en.wikipedia.org/wiki/Central_Equipment_Identity_Register}, 2012.
+
+\bibitem{imsi_wiki}
+{\sc Wikipedia}.
+\newblock Equipment identity register.
+\newblock \url{http://de.wikipedia.org/wiki/IMSI-Catcher}, 2012.
+
\end{thebibliography}
diff --git a/Tex/Master/Master.blg b/Tex/Master/Master.blg
index d9ab0be..5a7e596 100644
--- a/Tex/Master/Master.blg
+++ b/Tex/Master/Master.blg
@@ -1,53 +1,17 @@
-This is BibTeX, Version 0.99c (TeX Live 2009/Debian)
-The top-level auxiliary file: Master.aux
+This is BibTeX, Version 0.99dThe top-level auxiliary file: Master.aux
The style file: acm.bst
Database file #1: ../Content/Bibliography.bib
+Warning--I didn't find a database entry for "raven"
+Warning--I didn't find a database entry for "defcon"
Warning--to sort, need author or key in GSM0207
Warning--to sort, need author or key in GSM0505
Warning--to sort, need author or key in ISO7810
Warning--to sort, need author or key in GSM23003
-Warning--to sort, need author or key in blacklisting
Warning--to sort, need author or key in GSM23078
+Warning--to sort, need author or key in gsm0502
+Warning--to sort, need author or key in GSM0405
+Warning--to sort, need author or key in GSM0406
Warning--can't use both author and editor fields in GSM2009
-You've used 18 entries,
- 2253 wiz_defined-function locations,
- 633 strings with 6392 characters,
-and the built_in function-call counts, 3646 in all, are:
-= -- 345
-> -- 91
-< -- 0
-+ -- 45
-- -- 26
-* -- 192
-:= -- 530
-add.period$ -- 45
-call.type$ -- 18
-change.case$ -- 68
-chr.to.int$ -- 0
-cite$ -- 25
-duplicate$ -- 153
-empty$ -- 410
-format.name$ -- 26
-if$ -- 821
-int.to.chr$ -- 0
-int.to.str$ -- 18
-missing$ -- 10
-newline$ -- 84
-num.names$ -- 16
-pop$ -- 123
-preamble$ -- 1
-purify$ -- 53
-quote$ -- 0
-skip$ -- 118
-stack$ -- 0
-substring$ -- 126
-swap$ -- 27
-text.length$ -- 0
-text.prefix$ -- 0
-top$ -- 0
-type$ -- 66
-warning$ -- 7
-while$ -- 20
-width$ -- 20
-write$ -- 162
-(There were 7 warnings)
+Warning--empty journal in mueller
+Warning--empty journal in dennis
+(There were 13 warnings)
diff --git a/Tex/Master/Master.dvi b/Tex/Master/Master.dvi
index 5c351a3..193c5e3 100644
--- a/Tex/Master/Master.dvi
+++ b/Tex/Master/Master.dvi
Binary files differ
diff --git a/Tex/Master/Master.ist b/Tex/Master/Master.ist
index 380858a..8f94b00 100644
--- a/Tex/Master/Master.ist
+++ b/Tex/Master/Master.ist
@@ -1,5 +1,5 @@
% makeindex style file created by the glossaries package
-% for document 'Master' on 2012-2-16
+% for document 'Master' on 2012-2-20
actual '?'
encap '|'
level '!'
diff --git a/Tex/Master/Master.lof b/Tex/Master/Master.lof
index cdb0c1e..376075e 100644
--- a/Tex/Master/Master.lof
+++ b/Tex/Master/Master.lof
@@ -6,17 +6,18 @@
\contentsline {figure}{\numberline {2.3}{\ignorespaces Authentication procedure.}}{13}
\contentsline {figure}{\numberline {2.4}{\ignorespaces Mapping of functional entities on the 900Mhz band.}}{15}
\contentsline {figure}{\numberline {2.5}{\ignorespaces Theoretical arrangement of radio cells compared to a realistic alignment. Cells with the same number share the same frequency \cite {GSM2009}.}}{17}
-\contentsline {figure}{\numberline {2.6}{\ignorespaces Common base station configurations. Compiled from \cite {protocols1999}.}}{18}
-\contentsline {subfigure}{\numberline {(a)}{\ignorespaces {Stantard configuration.}}}{18}
-\contentsline {subfigure}{\numberline {(b)}{\ignorespaces {Umbrella cell configuration.}}}{18}
-\contentsline {subfigure}{\numberline {(c)}{\ignorespaces {Sectorised configuration.}}}{18}
+\contentsline {figure}{\numberline {2.6}{\ignorespaces Common base station configurations. Compiled from \cite {protocols1999}.}}{19}
+\contentsline {subfigure}{\numberline {(a)}{\ignorespaces {Stantard configuration.}}}{19}
+\contentsline {subfigure}{\numberline {(b)}{\ignorespaces {Umbrella cell configuration.}}}{19}
+\contentsline {subfigure}{\numberline {(c)}{\ignorespaces {Sectorised configuration.}}}{19}
\contentsline {figure}{\numberline {2.7}{\ignorespaces Cyphering procedure for one frame of voice data. Adopted from \cite {kommsys2006}.}}{21}
\contentsline {figure}{\numberline {2.8}{\ignorespaces The combination of FDMA and TDMA.}}{23}
\contentsline {figure}{\numberline {2.9}{\ignorespaces Hierarchical Composition of the different frames.}}{24}
\contentsline {figure}{\numberline {2.10}{\ignorespaces Structural Comparison of different Burst types. After \cite {GSM2009}.}}{25}
-\contentsline {figure}{\numberline {2.11}{\ignorespaces Mapping of virtual channels on time slots.}}{26}
-\contentsline {figure}{\numberline {2.12}{\ignorespaces Snippet of a Multiframe-configurations for a base station from \cite {kommsys2006}.}}{29}
-\contentsline {figure}{\numberline {2.13}{\ignorespaces A commercial catcher by Rhode \& Schwarz and a self built catcher introduced at Defcon 2010.}}{32}
+\contentsline {figure}{\numberline {2.11}{\ignorespaces Mapping of virtual channels on time slots.}}{27}
+\contentsline {figure}{\numberline {2.12}{\ignorespaces Snippet of a Multiframe-configurations for a base station from \cite {kommsys2006}.}}{30}
+\contentsline {figure}{\numberline {2.13}{\ignorespaces A commercial catcher by Rhode \& Schwarz \cite {fox} and a self built catcher introduced at Defcon 2010 \cite {def_catcher}.}}{32}
+\contentsline {figure}{\numberline {2.14}{\ignorespaces IMSI catching procedure. Adopted and simplified from \cite {mueller}.}}{33}
\addvspace {10\p@ }
\addvspace {10\p@ }
\addvspace {10\p@ }
diff --git a/Tex/Master/Master.log b/Tex/Master/Master.log
index 4e8c8e0..a4d1926 100644
--- a/Tex/Master/Master.log
+++ b/Tex/Master/Master.log
@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.1415926-2.3-1.40.12 (MiKTeX 2.9 64-bit) (preloaded format=pdflatex 2012.1.30) 16 FEB 2012 14:13
+This is pdfTeX, Version 3.1415926-2.3-1.40.12 (MiKTeX 2.9 64-bit) (preloaded format=pdflatex 2012.1.30) 20 FEB 2012 16:54
entering extended mode
**Master.tex
(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.tex
@@ -1016,25 +1016,25 @@ File: lstlang1.sty 2004/09/05 1.3 listings language file
)
\c@example=\count190
\glo@main@file=\write5
-Package glossaries Info: Writing glossary file Master.glo on input line 94.
+Package glossaries Info: Writing glossary file Master.glo on input line 93.
\glo@acronym@file=\write6
-Package glossaries Info: Writing glossary file Master.acn on input line 94.
+Package glossaries Info: Writing glossary file Master.acn on input line 93.
(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Glossary.tex)
(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.aux)
-LaTeX Font Info: Checking defaults for OML/cmm/m/it on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Checking defaults for T1/cmr/m/n on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Checking defaults for OT1/cmr/m/n on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Checking defaults for OMS/cmsy/m/n on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Checking defaults for OMX/cmex/m/n on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Checking defaults for U/cmr/m/n on input line 111.
-LaTeX Font Info: ... okay on input line 111.
-LaTeX Font Info: Try loading font information for T1+ptm on input line 111.
+LaTeX Font Info: Checking defaults for OML/cmm/m/it on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for T1/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OT1/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OMS/cmsy/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for OMX/cmex/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Checking defaults for U/cmr/m/n on input line 110.
+LaTeX Font Info: ... okay on input line 110.
+LaTeX Font Info: Try loading font information for T1+ptm on input line 110.
("C:\Program Files\MiKTeX 2.9\tex\latex\psnfss\t1ptm.fd"
File: t1ptm.fd 2001/06/04 font definitions for T1/ptm.
@@ -1063,7 +1063,7 @@ nglish.dict"
Dictionary: glossaries-dictionary, Language: English
) ABD: EveryShipout initializing macros
LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <10.95> not available
-(Font) Font shape `T1/ptm/b/n' tried instead on input line 121.
+(Font) Font shape `T1/ptm/b/n' tried instead on input line 120.
(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Content\Abstract.tex) [1
Non-PDF special ignored!
@@ -1074,17 +1074,17 @@ Non-PDF special ignored!
Non-PDF special ignored!
Non-PDF special ignored!{C:/ProgramData/MiKTeX/2.9/pdftex/config/pdftex.map}]
-LaTeX Font Info: Try loading font information for U+msa on input line 131.
+LaTeX Font Info: Try loading font information for U+msa on input line 130.
("C:\Program Files\MiKTeX 2.9\tex\latex\amsfonts\umsa.fd"
File: umsa.fd 2009/06/22 v3.00 AMS symbols A
)
-LaTeX Font Info: Try loading font information for U+msb on input line 131.
+LaTeX Font Info: Try loading font information for U+msb on input line 130.
("C:\Program Files\MiKTeX 2.9\tex\latex\amsfonts\umsb.fd"
File: umsb.fd 2009/06/22 v3.00 AMS symbols B
)
-LaTeX Font Info: Try loading font information for U+esvect on input line 131
+LaTeX Font Info: Try loading font information for U+esvect on input line 130
.
("C:\Program Files\MiKTeX 2.9\tex\latex\esvect\uesvect.fd"
@@ -1094,15 +1094,15 @@ File: uesvect.fd
]
-LaTeX Font Info: Try loading font information for T1+phv on input line 135.
+LaTeX Font Info: Try loading font information for T1+phv on input line 134.
("C:\Program Files\MiKTeX 2.9\tex\latex\psnfss\t1phv.fd"
File: t1phv.fd 2001/06/04 scalable font definitions for T1/phv.
)
LaTeX Font Info: Font shape `T1/phv/bx/n' in size <10.95> not available
-(Font) Font shape `T1/phv/b/n' tried instead on input line 135.
+(Font) Font shape `T1/phv/b/n' tried instead on input line 134.
LaTeX Font Info: Font shape `T1/ptm/bx/n' in size <20.74> not available
-(Font) Font shape `T1/ptm/b/n' tried instead on input line 135.
+(Font) Font shape `T1/ptm/b/n' tried instead on input line 134.
(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.toc [1
@@ -1171,7 +1171,7 @@ n.png>] [14]
File: ../Images/Mapping.png Graphic file (type png)
<use ../Images/Mapping.png>
-Package pdftex.def Info: ../Images/Mapping.png used on input line 416.
+Package pdftex.def Info: ../Images/Mapping.png used on input line 417.
(pdftex.def) Requested size: 337.28326pt x 115.19809pt.
Underfull \vbox (badness 10000) has occurred while \output is active []
@@ -1181,63 +1181,59 @@ Underfull \vbox (badness 10000) has occurred while \output is active []
<../Images/Cells.png, id=81, 98.72083pt x 88.8921pt>
File: ../Images/Cells.png Graphic file (type png)
<use ../Images/Cells.png>
-Package pdftex.def Info: ../Images/Cells.png used on input line 475.
+Package pdftex.def Info: ../Images/Cells.png used on input line 492.
(pdftex.def) Requested size: 98.72057pt x 88.89188pt.
<../Images/real_Cells.png, id=82, 743.02594pt x 496.10344pt>
File: ../Images/real_Cells.png Graphic file (type png)
<use ../Images/real_Cells.png>
-Package pdftex.def Info: ../Images/real_Cells.png used on input line 477.
+Package pdftex.def Info: ../Images/real_Cells.png used on input line 494.
(pdftex.def) Requested size: 156.04005pt x 104.18478pt.
-
-<../Images/standart_config.png, id=84, 199.4652pt x 133.26588pt>
+ [17 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Cells.png> <C:/Use
+rs/Tom/Desktop/imsi-catcher-detection/Tex/Images/real_Cells.png>]
+<../Images/standart_config.png, id=88, 199.4652pt x 133.26588pt>
File: ../Images/standart_config.png Graphic file (type png)
<use ../Images/standart_config.png>
-Package pdftex.def Info: ../Images/standart_config.png used on input line 492.
+Package pdftex.def Info: ../Images/standart_config.png used on input line 509.
(pdftex.def) Requested size: 199.4647pt x 133.26553pt.
-<../Images/Umbrella.png, id=85, 209.3662pt x 181.46997pt>
+<../Images/Umbrella.png, id=89, 209.3662pt x 181.46997pt>
File: ../Images/Umbrella.png Graphic file (type png)
<use ../Images/Umbrella.png>
-Package pdftex.def Info: ../Images/Umbrella.png used on input line 493.
+Package pdftex.def Info: ../Images/Umbrella.png used on input line 510.
(pdftex.def) Requested size: 209.36568pt x 181.46951pt.
-<../Images/Sectorised.png, id=86, 147.64761pt x 147.64761pt>
+<../Images/Sectorised.png, id=90, 147.64761pt x 147.64761pt>
File: ../Images/Sectorised.png Graphic file (type png)
<use ../Images/Sectorised.png>
-Package pdftex.def Info: ../Images/Sectorised.png used on input line 494.
+Package pdftex.def Info: ../Images/Sectorised.png used on input line 511.
(pdftex.def) Requested size: 147.64725pt x 147.64725pt.
- [17 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Cells.png> <C:/Use
-rs/Tom/Desktop/imsi-catcher-detection/Tex/Images/real_Cells.png>] [18 <C:/Users
-/Tom/Desktop/imsi-catcher-detection/Tex/Images/standart_config.png> <C:/Users/T
-om/Desktop/imsi-catcher-detection/Tex/Images/Umbrella.png> <C:/Users/Tom/Deskto
-p/imsi-catcher-detection/Tex/Images/Sectorised.png>] [19] [20] <../Images/Ciphe
-r.png, id=101, 387.72855pt x 131.02551pt>
+ [18] [19 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/standart_conf
+ig.png> <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Umbrella.png> <
+C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Sectorised.png>] [20]
+<../Images/Cipher.png, id=101, 387.72855pt x 131.02551pt>
File: ../Images/Cipher.png Graphic file (type png)
<use ../Images/Cipher.png>
-Package pdftex.def Info: ../Images/Cipher.png used on input line 579.
+Package pdftex.def Info: ../Images/Cipher.png used on input line 596.
(pdftex.def) Requested size: 387.72758pt x 131.02518pt.
-
-Underfull \vbox (badness 10000) has occurred while \output is active []
-
- [21 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Cipher.png>]
-<../Images/TDMAFDMA.png, id=106, 254.53494pt x 133.33815pt>
+ [21 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Cipher.png>] [22]
+<../Images/TDMAFDMA.png, id=110, 254.53494pt x 133.33815pt>
File: ../Images/TDMAFDMA.png Graphic file (type png)
<use ../Images/TDMAFDMA.png>
-Package pdftex.def Info: ../Images/TDMAFDMA.png used on input line 621.
+Package pdftex.def Info: ../Images/TDMAFDMA.png used on input line 638.
(pdftex.def) Requested size: 254.5343pt x 133.33781pt.
- [22]
+
<../Images/Frames.png, id=111, 367.42068pt x 252.29457pt>
File: ../Images/Frames.png Graphic file (type png)
<use ../Images/Frames.png>
-Package pdftex.def Info: ../Images/Frames.png used on input line 643.
+Package pdftex.def Info: ../Images/Frames.png used on input line 660.
(pdftex.def) Requested size: 367.41977pt x 252.29395pt.
[23 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/TDMAFDMA.png>] [24
<C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Frames.png>] <../Image
@@ -1245,146 +1241,147 @@ s/Bursts.png, id=118, 371.9737pt x 91.92744pt>
File: ../Images/Bursts.png Graphic file (type png)
<use ../Images/Bursts.png>
-Package pdftex.def Info: ../Images/Bursts.png used on input line 668.
+Package pdftex.def Info: ../Images/Bursts.png used on input line 685.
(pdftex.def) Requested size: 371.97278pt x 91.9272pt.
[25 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Bursts.png>]
<../Images/Channels.png, id=122, 272.60245pt x 169.47314pt>
File: ../Images/Channels.png Graphic file (type png)
<use ../Images/Channels.png>
-Package pdftex.def Info: ../Images/Channels.png used on input line 704.
+Package pdftex.def Info: ../Images/Channels.png used on input line 721.
(pdftex.def) Requested size: 272.60178pt x 169.47273pt.
- [26 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Channels.png>]
-
-LaTeX Warning: Reference `sec:parameters' on page 27 undefined on input line 73
-8.
-
-[27]
-
-LaTeX Warning: Citation `gsm0502' on page 28 undefined on input line 751.
-
-
-LaTeX Warning: Reference `tab:channel_configurations' on page 28 undefined on i
-nput line 752.
-
+ [26] [27 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/Channels.png>
+]
<../Images/channel_example.png, id=130, 926.71219pt x 1127.71312pt>
File: ../Images/channel_example.png Graphic file (type png)
<use ../Images/channel_example.png>
-Package pdftex.def Info: ../Images/channel_example.png used on input line 787.
+Package pdftex.def Info: ../Images/channel_example.png used on input line 805.
(pdftex.def) Requested size: 349.53978pt x 425.35205pt.
- [28] [29 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/channel_examp
-le.png>]
-
-LaTeX Warning: Citation `3gpp_ts_0405' on page 30 undefined on input line 812.
-
-
-LaTeX Warning: Citation `3gpp_ts_0406' on page 30 undefined on input line 812.
-
-[30]
-
-LaTeX Warning: Citation `fox' on page 31 undefined on input line 823.
-
-
-LaTeX Warning: Citation `fox' on page 31 undefined on input line 832.
-
-
-LaTeX Warning: Citation `dennis' on page 31 undefined on input line 836.
-
-
-LaTeX Warning: Citation `def_catcher' on page 31 undefined on input line 836.
-
+ [28] [29] [30 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/channel_
+example.png>]
<../Images/imsi_catcher.jpg, id=141, 280.15778pt x 225.73222pt>
File: ../Images/imsi_catcher.jpg Graphic file (type jpg)
<use ../Images/imsi_catcher.jpg>
-Package pdftex.def Info: ../Images/imsi_catcher.jpg used on input line 841.
+Package pdftex.def Info: ../Images/imsi_catcher.jpg used on input line 860.
(pdftex.def) Requested size: 174.76988pt x 140.81706pt.
<../Images/usrp.jpg, id=142, 1204.5pt x 844.65562pt>
File: ../Images/usrp.jpg Graphic file (type jpg)
<use ../Images/usrp.jpg>
-Package pdftex.def Info: ../Images/usrp.jpg used on input line 841.
+Package pdftex.def Info: ../Images/usrp.jpg used on input line 860.
(pdftex.def) Requested size: 174.76988pt x 122.5557pt.
-[31]) (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Content\Detection.tex
-[32 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/imsi_catcher.jpg> <
-C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/usrp.jpg>]
+[31] <../Images/catcher_attack.png, id=146, 321.52924pt x 277.08318pt>
+File: ../Images/catcher_attack.png Graphic file (type png)
+
+<use ../Images/catcher_attack.png>
+Package pdftex.def Info: ../Images/catcher_attack.png used on input line 877.
+(pdftex.def) Requested size: 321.52844pt x 277.08249pt.
+ [32 <C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/imsi_catcher.jpg>
+<C:/Users/Tom/Desktop/imsi-catcher-detection/Tex/Images/usrp.jpg>] [33 <C:/User
+s/Tom/Desktop/imsi-catcher-detection/Tex/Images/catcher_attack.png>] [34] [35]
+("C:\Program Files\MiKTeX 2.9\tex\latex\unicode\data\uni-0.def"
+File: uni-0.def 2004/10/17 UCS: Unicode data U+0000..U+00FF
+))
+(C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Content\Detection.tex [36]
Chapter 3.
) (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Content\Evaluation.tex
-[33
+[37
-] [34
+] [38
]
Chapter 4.
) (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Content\Conclusion.tex
-[35] [36
+[39] [40
]
Chapter 5.
-) [37] [38
+) [41] [42
] (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.bbl
-Underfull \hbox (badness 2818) in paragraph at lines 4--8
+Underfull \hbox (badness 2818) in paragraph at lines 17--21
[]\T1/ptm/m/n/10.95 Radio ac-cess net-work: Ra-dio trans-mis-sion and re-cep-ti
on. GSM 05.05,
[]
-Underfull \hbox (badness 10000) in paragraph at lines 4--8
+Underfull \hbox (badness 10000) in paragraph at lines 17--21
$\T1/pcr/m/n/10.95 http : / / www . 3gpp . org / ftp / Specs / archive / 05 _ s
eries / 05 .$
[]
-Underfull \hbox (badness 10000) in paragraph at lines 17--21
+Underfull \hbox (badness 10000) in paragraph at lines 30--34
[]\T1/ptm/m/n/10.95 Identification cards -- phys-i-cal char-ac-ter-is-tics. IS
O/IEC 7810:2003,
[]
-Underfull \hbox (badness 10000) in paragraph at lines 17--21
+Underfull \hbox (badness 10000) in paragraph at lines 30--34
$\T1/pcr/m/n/10.95 http : / / www . iso . org / iso / iso _ catalogue / catalog
ue _ tc /$
[]
-Underfull \hbox (badness 10000) in paragraph at lines 23--27
+Underfull \hbox (badness 10000) in paragraph at lines 36--40
+$\T1/pcr/m/n/10.95 3gpp . org / ftp / Specs / archive / 05 _ series / 05 . 02 /
+ 0502-[]8b0 . zip$\T1/ptm/m/n/10.95 ,
+ []
+
+
+Underfull \hbox (badness 10000) in paragraph at lines 42--46
$\T1/pcr/m/n/10.95 http : / / www . 3gpp . org / ftp / Specs / archive / 23 _ s
eries / 23 . 078 /$
[]
-Underfull \hbox (badness 10000) in paragraph at lines 29--33
+Underfull \hbox (badness 10000) in paragraph at lines 48--52
$\T1/pcr/m/n/10.95 org / ftp / Specs / archive / 23 _ series / 23 . 003 / 23003
-[]a30 . zip$\T1/ptm/m/n/10.95 ,
[]
-
-Underfull \hbox (badness 10000) in paragraph at lines 35--38
-[]\T1/ptm/m/n/10.95 Equipment iden-tity reg-is-ter. $\T1/pcr/m/n/10.95 http :
-/ / en . wikipedia . org / wiki /$
- []
+[1
-Underfull \hbox (badness 3428) in paragraph at lines 50--53
+]
+Underfull \hbox (badness 3428) in paragraph at lines 73--76
[]\T1/ptm/m/n/10.95 Gsm/3g stats. $\T1/pcr/m/n/10.95 http : / / www . gsacom .
com / news / statistics . php4$\T1/ptm/m/n/10.95 ,
[]
-[1
+Underfull \hbox (badness 10000) in paragraph at lines 121--126
+[]\T1/ptm/m/sc/10.95 Security, H. \T1/ptm/m/n/10.95 Imsi-catcher für 1500 euro
+ im eigen-
+ []
+
+
+Underfull \hbox (badness 10000) in paragraph at lines 121--126
+\T1/ptm/m/n/10.95 bau. $\T1/pcr/m/n/10.95 http : / / www . heise . de / securi
+ty / meldung /$
+ []
-]) [2] (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.lof)
-\tf@lof=\write8
-[3
+Underfull \hbox (badness 10000) in paragraph at lines 121--126
+$\T1/pcr/m/n/10.95 IMSI-[]Catcher-[]fuer-[]1500-[]Euro-[]im-[]Eigenbau-[]104891
+9 . html$\T1/ptm/m/n/10.95 ,
+ []
+
+) [2] (C:\Users\Tom\Desktop\imsi-catcher-detection\Tex\Master\Master.lof
+
+LaTeX Warning: Citation `raven' on page III undefined on input line 19.
+
+)
+\tf@lof=\write8
+ [3
] [4
@@ -1416,10 +1413,10 @@ LaTeX Warning: There were undefined references.
)
Here is how much of TeX's memory you used:
- 28516 strings out of 494045
- 573521 string characters out of 3148393
- 815001 words of memory out of 3000000
- 31139 multiletter control sequences out of 15000+200000
+ 29136 strings out of 494045
+ 580496 string characters out of 3148393
+ 816736 words of memory out of 3000000
+ 31755 multiletter control sequences out of 15000+200000
52205 words of font info for 90 fonts, out of 3000000 for 9000
715 hyphenation exceptions out of 8191
74i,13n,83p,1323b,1590s stack positions out of 5000i,500n,10000p,200000b,50000s
@@ -1435,9 +1432,9 @@ am Files/MiKTeX 2.9/fonts/type1/urw/courier/ucrr8a.pfb><C:/Program Files/MiKTeX
2.9/fonts/type1/urw/times/utmb8a.pfb><C:/Program Files/MiKTeX 2.9/fonts/type1/
urw/times/utmr8a.pfb><C:/Program Files/MiKTeX 2.9/fonts/type1/urw/times/utmr8a.
pfb><C:/Program Files/MiKTeX 2.9/fonts/type1/urw/times/utmri8a.pfb>
-Output written on Master.pdf (51 pages, 4005419 bytes).
+Output written on Master.pdf (55 pages, 4387857 bytes).
PDF statistics:
- 242 PDF objects out of 1000 (max. 8388607)
+ 256 PDF objects out of 1000 (max. 8388607)
0 named destinations out of 1000 (max. 500000)
- 93 words of extra memory for PDF output out of 10000 (max. 10000000)
+ 98 words of extra memory for PDF output out of 10000 (max. 10000000)
diff --git a/Tex/Master/Master.lot b/Tex/Master/Master.lot
index 9bb0121..50dd517 100644
--- a/Tex/Master/Master.lot
+++ b/Tex/Master/Master.lot
@@ -4,8 +4,8 @@
\contentsline {table}{\numberline {2.1}{\ignorespaces Subset of data stored on a SIM card. Adopted from \cite {protocols1999}}}{8}
\contentsline {table}{\numberline {2.2}{\ignorespaces Mobile Country and Network Codes. (R) denotes that the MCC is reserved but not operational as of yet, whereas (T) denotes a operational test network.}}{9}
\contentsline {table}{\numberline {2.3}{\ignorespaces Interfaces inside the core network (upper part) and the radio network (lower part)}}{11}
-\contentsline {table}{\numberline {2.4}{\ignorespaces Frequencies in the different bands \cite {kommsys2006}.}}{17}
-\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{30}
+\contentsline {table}{\numberline {2.4}{\ignorespaces Frequencies in the different bands \cite {kommsys2006}.}}{16}
+\contentsline {table}{\numberline {2.5}{\ignorespaces Possible combinations of logical channels for the base station. From \cite {GSM2009}.}}{29}
\addvspace {10\p@ }
\addvspace {10\p@ }
\addvspace {10\p@ }
diff --git a/Tex/Master/Master.pdf b/Tex/Master/Master.pdf
index 1e44788..6f9f649 100644
--- a/Tex/Master/Master.pdf
+++ b/Tex/Master/Master.pdf
Binary files differ
diff --git a/Tex/Master/Master.synctex.gz b/Tex/Master/Master.synctex.gz
index d3062cd..4cb771c 100644
--- a/Tex/Master/Master.synctex.gz
+++ b/Tex/Master/Master.synctex.gz
Binary files differ
diff --git a/Tex/Master/Master.tex b/Tex/Master/Master.tex
index 42e404f..fb7525d 100644
--- a/Tex/Master/Master.tex
+++ b/Tex/Master/Master.tex
@@ -75,7 +75,6 @@
\newcommand{\ie}{i.e.\ }
\newcommand{\cf}{cf.\ }
\newcommand{\etc}{etc.\ }
-
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
% Glossary and Listings Style %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
diff --git a/Tex/Master/Master.toc b/Tex/Master/Master.toc
index f4d7276..ae4bafc 100644
--- a/Tex/Master/Master.toc
+++ b/Tex/Master/Master.toc
@@ -14,43 +14,47 @@
\contentsline {subsection}{\numberline {2.2.3}Intelligent Network}{14}
\contentsline {subsection}{\numberline {2.2.4}Base Station Subsystem}{15}
\contentsline {subsubsection}{Frequencies and the Cellular Principle}{16}
-\contentsline {subsubsection}{Base Transceiver Station}{17}
-\contentsline {subsubsection}{Baste Station Controller}{19}
-\contentsline {subsubsection}{Transcoding rate and Adaption Unit}{20}
+\contentsline {subsubsection}{Base Transceiver Station}{18}
+\contentsline {subsubsection}{Baste Station Controller}{18}
+\contentsline {subsubsection}{Transcoding rate and Adaption Unit}{21}
\contentsline {section}{\numberline {2.3}The $U_m$ Interface}{22}
\contentsline {subsection}{\numberline {2.3.1}Radio Transmission}{22}
-\contentsline {subsubsection}{Frame Numbering}{22}
+\contentsline {subsubsection}{Frame Numbering}{23}
\contentsline {subsubsection}{Burst Types}{25}
\contentsline {subsection}{\numberline {2.3.2}Logical Channels}{26}
\contentsline {subsubsection}{Dedicated Channels}{27}
\contentsline {subsubsection}{Common Channels}{27}
\contentsline {subsubsection}{Combinations}{28}
-\contentsline {subsection}{\numberline {2.3.3}Layers}{28}
-\contentsline {paragraph}{Physical Layer (Layer 1):}{30}
-\contentsline {paragraph}{Data Link (Layer 2):}{30}
+\contentsline {subsection}{\numberline {2.3.3}Layers}{29}
+\contentsline {paragraph}{Physical Layer (Layer 1):}{29}
+\contentsline {paragraph}{Data Link (Layer 2):}{31}
\contentsline {paragraph}{Network (Layer 3):}{31}
\contentsline {section}{\numberline {2.4}IMSI-Catcher}{31}
\contentsline {subsection}{\numberline {2.4.1}Mode of Operation}{32}
-\contentsline {subsection}{\numberline {2.4.2}Law Situation in Germany}{32}
-\contentsline {chapter}{\numberline {3}IMSI Catcher Detection}{33}
-\contentsline {section}{\numberline {3.1}Procedure}{33}
-\contentsline {subsection}{\numberline {3.1.1}Information Gathering}{33}
-\contentsline {subsection}{\numberline {3.1.2}Information Evaluation}{33}
-\contentsline {subsection}{\numberline {3.1.3}Problems}{33}
-\contentsline {subsubsection}{Solutions}{33}
-\contentsline {section}{\numberline {3.2}Frameworks and Hardware}{33}
-\contentsline {subsection}{\numberline {3.2.1}OsmoconBB}{33}
-\contentsline {subsection}{\numberline {3.2.2}Motorola C123}{33}
-\contentsline {section}{\numberline {3.3}Implementation}{33}
-\contentsline {section}{\numberline {3.4}IMSI Catcher Detection System}{33}
-\contentsline {subsection}{\numberline {3.4.1}Configuration}{33}
-\contentsline {subsection}{\numberline {3.4.2}Operation}{33}
-\contentsline {chapter}{\numberline {4}Evaluation}{35}
-\contentsline {section}{\numberline {4.1}Open Field Statistics}{35}
-\contentsline {subsection}{\numberline {4.1.1}Bayesian Filter}{35}
-\contentsline {subsection}{\numberline {4.1.2}Detection System}{35}
-\contentsline {section}{\numberline {4.2}Example Scenarios}{35}
-\contentsline {chapter}{\numberline {5}Conclusion}{37}
-\contentsline {section}{\numberline {5.1}Future Work}{37}
+\contentsline {subsubsection}{Attacks}{34}
+\contentsline {paragraph}{\gls {ms} is in normal cell selection mode:}{34}
+\contentsline {paragraph}{\gls {ms} is already connected to a network:}{35}
+\contentsline {subsubsection}{Risks and Irregularities}{35}
+\contentsline {subsection}{\numberline {2.4.2}Law Situation in Germany}{35}
+\contentsline {chapter}{\numberline {3}IMSI Catcher Detection}{37}
+\contentsline {section}{\numberline {3.1}Frameworks and Hardware}{37}
+\contentsline {subsection}{\numberline {3.1.1}OsmoconBB}{37}
+\contentsline {subsection}{\numberline {3.1.2}Motorola C123}{37}
+\contentsline {subsection}{\numberline {3.1.3}GNS 5870 MFI}{37}
+\contentsline {section}{\numberline {3.2}Procedure}{37}
+\contentsline {subsection}{\numberline {3.2.1}Information Gathering}{37}
+\contentsline {subsection}{\numberline {3.2.2}Information Evaluation}{37}
+\contentsline {subsection}{\numberline {3.2.3}Further Improvements}{37}
+\contentsline {section}{\numberline {3.3}Implementation}{37}
+\contentsline {section}{\numberline {3.4}IMSI Catcher Detection System}{37}
+\contentsline {subsection}{\numberline {3.4.1}Configuration}{37}
+\contentsline {subsection}{\numberline {3.4.2}Operation}{37}
+\contentsline {chapter}{\numberline {4}Evaluation}{39}
+\contentsline {section}{\numberline {4.1}Open Field Statistics}{39}
+\contentsline {subsection}{\numberline {4.1.1}Bayesian Filter}{39}
+\contentsline {subsection}{\numberline {4.1.2}Detection System}{39}
+\contentsline {section}{\numberline {4.2}Example Scenarios}{39}
+\contentsline {chapter}{\numberline {5}Conclusion}{41}
+\contentsline {section}{\numberline {5.1}Future Work}{41}
\contentsline {chapter}{Bibliography}{I}
\contentsline {chapter}{Acronyms}{VII}