FIRMWARE DESCRIPTION
System Security
18
2.10
•
19.01.2007
3.2.1.3 Subscription
Identities
During the subscription procedure defined in the DECT standard a
UAK
(user authentication
key) is created. This key represents a pair (FT, PT) and must be known by PT and FT since
it is used for the authentication procedure. When the FT requests an authentication from a
PT it tests the correct UAK.
The UAK is not entered nor transmitted over the air interface but independently computed by
FT and PT from public information which is encrypted using a secret
PIN
(personal identity
number) code.
This PIN code is stored at the FT and must be entered at the PT as part of the subscription
procedure.
The format of the PIN is 1 to 8 decimal digits.
Note: leading zeros in PIN codes are significant, e.g. PIN 007 is different from PIN 7.
The default PIN (factory setting) is: 0
The PIN code is entered at the FT by use of the SIPIN configuration command. System
integrators are advised to use different PINs in different installations in order to provide a
good level of security. The PIN must be entered at the first installation of a FT and can be
modified by the system operator later.
The firmware supports on-air subscription according to GAP and a proprietary offline
subscription procedure. In on-air subscription the public information is transmitted by the FT
over the air interface, whereas in offline subscription it is read out from the FT as
SK
(subscription key).
The SK is an encrypted format of the UAK.