±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 33043
New Yesterday: 8 Visitors: 149

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Roaming SMS

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2 
  

Re: Roaming SMS

Post Posted: Mon Aug 22, 2016 7:58 am

#wotsits - did you figure out? Will assist you after Smile  

RolfGutmann
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Tue Aug 23, 2016 7:32 pm

- jaclaz
- wotsits

If it could be identified from the roaming message which country it was in then enquiries could be directed to that country for further communications data.

What do you mean?
Normally (at least my Italian network) sends me a bunch of SMS *like* (from memory):
1) Welcome to Spain (or France or Sweden, etc.),To call Italian numbers remember to use the +39 prefix.
2) Customer assistance from abroad call +39xxxyyyz. A fee will apply.
3) For informations, tariffs and fees visit www.xxx.it or send a SMS to number +39xxxyyy with text "Spain" (or "France" or "Sweden", etc.)

So at least two out of the three (or more) SMS do provide the info on the country the phone has been switched on.

jaclaz


Yes BUT the metadata stored in communications data accessible to LE does NOT contain the content  

wotsits
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Tue Aug 23, 2016 7:34 pm

- RolfGutmann
#wotsits - did you figure out? Will assist you after Smile


No I haven't...

Please do share Very Happy  

wotsits
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Wed Aug 24, 2016 11:05 pm

www.netmanias.com/en/p...entication

You see the process involves 4 elements: HSS, MME, eNB and UE (skip the details for later study)

The Home Subscriber Server holds the credentials - so this is your entry point. In 3GPP TS 23.002 on page 22 (content page number) you see the HSS holds

Location Information

www.etsi.org/deliver/e...30600p.pdf

Understanding the complete functions of the HSS is crucial Smile  

RolfGutmann
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Thu Aug 25, 2016 5:32 am

- RolfGutmann
http://www.netmanias.com/en/post/techdocs/5902/lte-security/lte-security-i-concept-and-authentication

You see the process involves 4 elements: HSS, MME, eNB and UE (skip the details for later study)

The Home Subscriber Server holds the credentials - so this is your entry point. In 3GPP TS 23.002 on page 22 (content page number) you see the HSS holds

Location Information

www.etsi.org/deliver/e...30600p.pdf

Understanding the complete functions of the HSS is crucial Smile


Excellent Rolf and I agree with your conclusion.

The document clearly defines triplets are needed. That would be for roaming calls (e.g. MO/MT).
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

trewmte
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Mon Aug 29, 2016 1:13 pm

@wotsits - hang in with the HSS and its functions, see the European Telecommunications Standards Institute (ETSI) hosts the Technical Standard (TS) 129 336. From ETSI to 3GPP terminology just drop the '1' and you have the 3GPP classification TS 29.336 (belongs to the '29 series').

As ETSI and 3GPP interchange, 3GPP has the lead. GSM Asssociation (GSMA) plays minor role but in specific areas like eUICC.

Here the HSS in LTE Advanced Pro most accurate version:

www.etsi.org/deliver/e...30400p.pdf

Just make sure to ALWAYS check the latest version of these standards. They highly change in detail.  

RolfGutmann
Senior Member
 
 
  

Re: Roaming SMS

Post Posted: Tue Nov 14, 2017 8:21 am

Just found a 31C3 session of Tobias Engel about SS7 and aspects around (he is also a DNS crack)

www.youtube.com/watch?v=-wu_pO5Z7Pk

Be aware that nowadays Diameter runs beside SS7 in Core Networks and some issues are fixed Smile  

RolfGutmann
Senior Member
 
 

Page 2 of 2
Go to page Previous  1, 2