(U)ICC/(U)SIM Script Commands and Responses

(U)ICC/(U)SIM Script Commands and Responses

The discussion under (U)ICC/(U)SIM Script Commands and Responses is one of a number that will appear to assist Diploma students with their course work.

http://sim2usim.blogspot.co.uk/2013/10/uiccusim-script-commands-and-responses.html

(U)ICC/(U)SIM Script Commands and Responses

(U)ICC/(U)SIM 3F00 7F10 6F4A

3GPP UICC/USIM script selecting Master File, Dedicated File and Elementary File

GSM ICC/SIM script selecting Master File, Dedicated File and Elementary File

Reason for script test : defining an examination procedure to isolate and test a single elementary file; determine the EF's status, file structure, coding etc; conrroborate the ability of the (U)ICC/(U)SIM to action responses from commands sent to card; provide corroborating evidence of commands sent to the card to demonstrate evidential integrity (transparency of practices and procedures); testing the examination card reader is functioning correctly; QA procedures. 

Script examination tool used : USIM Commander - http://www.quantaq.com/usimcommander.htm

Relevant Core Diplomas:-

Aims : MTEB Diploma for Mobile Evidence QA and Evidence Handling - Mobile Telephone Diploma Core CQAE1

Objectives : Device Maintenance and Calibration; Examination Procedure

Aims :  MTEB Diploma for SIM and USIM Technology Examination - Mobile Telephone
Diploma Core CSUT2

Objectives : Your understanding of roles and responsibilities and the importance of
appropriate practices and procedures for SIM and USIM Technology
Examination for acquiring evidence.

Reference Standards :
GSM11.11/3GPP TS51.011/3GPP TS31.102,
GSM11.12,
GSM11.17/3GPP TS51.017/3GPP TS31.120/3GPP TS31.121/3GPP TS31.122,
GSM11.18/3GPP31.101,

EU MTEB Diploma Student Note : Remember to check with ETSI Standards e.g. TS102.221 etc

US MTEB Diploma Student Note : Diploma Students remember to check e.g. C.S0065-0 v1.0, C.S0074-0 v1.0, C.S0074-A v1.0, N.S0009-0 v1.0, S.R0095-0 v1.0 etc

Generically speaking, apart from GSMA and 3GPP, there is also 3GPP2 which also includes ARIB, CCSA, TIA TTA, TTC that all have conditions that can impact/influence results on (U)ICC/(U)SIM.

The discussion under (U)ICC/(U)SIM Script Commands and Responses is one of a number that will appear here to assist Diploma students with their course work.

The latest MTEB Diploma Modules Guide MTEdipl 2.2 can be downloaded here:
https://dl.dropboxusercontent.com/u/84491783/MTEdipl%202.2.pdf

LTE, Test Trials and Cell Site Analysis

LTE, Test Trials and Cell Site Analysis

There are some strange views floating around that cell site analysis is highly difficult or impossible now we have moved from GSM and 3G on to LTE, with it being so new that there is uncertainty.  I can imagine that LTE may cause speculation because LTE hasn't been sufficiently rolled out in the UK and it may appear there is no mature facts or figures upon which to rely. But, infact, there are facts and figures that have been generated in refining the LTE system for roll out and, of course, that knowledge benefits cell site analysis.

Back in 2009 mobile operator Telefonica O2 started conducting LTE test trials in Slough Berkshire UK. Throughput data quantification, radio test measurements, surveys, etc created a plethora of statistical information which O2 used in planning its LTE network.  

Those tests included a variety of known components required for analysis, which can be seen in the 'Key' legend.

Consideration of LTE requires tests to be conducted not only with a static analysis and assessment approach but also distance and velocity analysis and assessment approach, too. That is apart from the environmental considerations. For CSA that means drive tests alone are not good enough; nor using passive radio test measurement devices could fulfil the requirements of an analysis and assessment approach to comprehend an LTE service at a particular location. TrewMTE blog readers may recall I gave a helpful tip about looking at data and location here: Data Usage in Cell Site Analysis - http://trewmte.blogspot.co.uk/2012/08/data-usage-in-cell-site-analysis.html.

Of course, consideration of the particapting RF transceiver elements present the same requirement for cell site analysis to understand the arrangements at the base station for LTE as it did for GSM/3G.

TrewMTE blog readers may also recall that I set out a series of discussions about Cell Site Identification presented as primers:

Mini Course in Cell Site Identification (Pt1)
http://trewmte.blogspot.com/2011/12/mini-course-in-cell-site-identification.html

Mini Course in Cell Site Identification (Pt2)
http://trewmte.blogspot.com/2011/12/mini-course-in-cell-site-identification_31.html

Mini Course in Cell Site Identification (Pt3.s1)
http://trewmte.blogspot.co.uk/2012/01/mini-course-in-cell-site-identification.html

I have completed the last primers in the series above and was going to publish them, having given readers sufficient time to go away and research/study the earlier parts. However, this matter needed airing first, due to misconceptions that are floating about out there. I shall publish the other primers later on.

Do remember, I have used the term 'cell site' to capture readers' imaginations to immediately link readers' thoughts towards cell site analysis (CSA). However, cell site can be used to mean e.g. a GSM cell site, a 3G NodeB or a LTE eNode. 

To leave the user device out of any analysis would be to precide over an incomplete investigation. Readers will note in Cell Site Identification Part 1 an illustration was given linking devices and components that are required for consideration when investigating/researching during CSA. The MS (handset/SIM) forms part of the investigation. O2 LTE test trials equally identified two devices used for their tests.

The experienced investigator will immediately see that the devices in the image above, used during test trials, do not of themselves fit immediately with the common scenarios of mobile phone usage and cell site analysis. However, as is known it is only fairly recently that LTE enabled smartphones have been launched. An LTE investigative approach to considering a particular device used in a particular case requires identification of handsets, dongles and server devices. Moreover, identification of devices that switch between transmission technologies is also a must.

Orange and Vodka - mixing mobile networks (shaken, not stirred) -
http://trewmte.blogspot.co.uk/2010/05/orange-and-vodka-mixing-mobile-networks.html

Examination Techniques3: Blackberry Bold -
http://trewmte.blogspot.co.uk/2012/03/examination-techniques3-blackberry-bold.html

Diplomas: Mobile Telephone Evidence (MTEdipl) -
http://trewmte.blogspot.co.uk/2010/05/diplomas-mobile-telephone-evidence.html

MTEdipl Diplomas

MTEdipl Diplomas

.

For registered students and those going through the process of registering for the Diplomas for the start of the September 2010 intake:
.
Three Months Notice (June/July/August) Advanced reading to help you prepare for the distance learning and self study. The following book comes highly recommended and will help you with setting your objectives particularly for the research and study modules for each Diploma.
.
LITERATURE:
Skills for Success, The Personal Development Planning Handbook
Author: Stella Cottrell Paperback: 312 pages
Publisher: Palgrave Macmillan (2 May 2003)
Language English ISBN-10: 1403911320
.
Amazon link:
http://www.amazon.co.uk/Skills-Success-Personal-Development-Planning/dp/1403911320

MTEdipl Diplomas

MTEdipl Diplomas

.

For registered students and those going through the process of registering for the Diplomas for the start of the September 2010 intake:
.
Three Months Notice (June/July/August) Advanced reading to help you prepare for the distance learning and self study. The following book comes highly recommended and will help you with setting your objectives particularly for the research and study modules for each Diploma.
.
LITERATURE:
Skills for Success, The Personal Development Planning Handbook
Author: Stella Cottrell Paperback: 312 pages
Publisher: Palgrave Macmillan (2 May 2003)
Language English ISBN-10: 1403911320
.
Amazon link:
http://www.amazon.co.uk/Skills-Success-Personal-Development-Planning/dp/1403911320

Diplomas: MTEdipl Syllabus and Student Handbook

Diplomas: MTEdipl Syllabus and Student Handbook

The distance learning and self-study Diplomas: Mobile Telephone Evidence (MTEdipl) Syllabus and Student Handbook is now available for download:


http://www.4shared.com/document/7XHHJ1Ru/MTEdipl_Cata20.html

Diplomas: MTEdipl Syllabus and Student Handbook

Diplomas: MTEdipl Syllabus and Student Handbook

The distance learning and self-study Diplomas: Mobile Telephone Evidence (MTEdipl) Syllabus and Student Handbook is now available for download:


http://www.4shared.com/document/7XHHJ1Ru/MTEdipl_Cata20.html

Diplomas: Mobile Telephone Evidence (MTEdipl)

Diplomas: Mobile Telephone Evidence (MTEdipl)

.
The Diplomas provide individuals with a path to recognition for demonstrating development of students knowledge, skill and experience for those involved in mobile telephone examination and evidence or for anyone interested in this field of distinction.
.
Empowering students to have confidence in themselves, their knowledge and skills, is one feature in the Diploma modules. Another feature is the Diplomas can have value-added benefits for employers. Each Diploma carries a requirement that the student MUST present as part of their assignment a tested practice and procedure plan and be able to offer a possible solution to potential employers for practices and procedures for dealing with mobile phone evidence along with other enhancement value-added benefits, such as market potentials for future planning options that may benefit an employer.
.
The Diplomas are recognised by the Mobile Telephone Examination Board, fully backed with my experience over two decades in forensics and evidence and additional guidance and support from other experienced examiners in the field and identified materials from academics and experts in mobile telephony. The Diplomas enable students to organise their own time and work, without pressure, to study, complete and produce assignments for each Diploma module undertaken.
.

• Diploma for Foundation and Research Skills - Mobile Telephone Diploma Core CFRS

• Diploma for Mobile Evidence QA and Evidence Handling - Mobile Telephone Diploma Core CQAE1

• Diploma for SIM and USIM Technology Examination - Mobile Telephone Diploma Core CSUT2

• Diploma for MS and UE Technology Examination - Mobile Telephone Diploma Core CMSU3

• Diploma for Call Records and Network Records Analysis - Mobile Telephone Diploma Core CCRN4

• Diploma for Cell Site Analysis - Mobile Telephone Diploma Core CCSA5

A Diploma Mobile Telephone Evidence (MTEdipl) is awarded for each module that has been completed and passed. An Advanced Diploma is issued only when a student has completed and passed all the Diploma modules and must produce based upon an expert assignment a report containing all of the subjects in the Diploma modules that is presented to a Peer Review Board.
.
Diploma Module Completion Period:

CFRS - completion: 3 months
[1 months study / 1 month to submit assignment / 1 month assessment]
.

CQAE1 - completion: 4 months
[2 months study / 1 month to submit assignment / 1 month assessment]
.

CSUT2 - completion: 5 months
[3 months study / 1 month to submit assignment / 1 month assessment]
.

CMSU3 - completion: 5 months
[3 months study / 1 month to submit assignment / 1 month assessment]
.

CCRN4 - completion: 5 months
[3 months study / 1 month to submit assignment / 1 month assessment]
.

CCSA5 - completion: 6 months
[4 months study / 1 month to submit assignment / 1 month assessment]
.
For further details, costs and registration form:

Email: trewmte@gmail.com

Global Mobile Telephone Forensics and Evidence

Global Mobile Telephone Forensics and Evidence

It is interesting to note, and a subject matter I have been keenly watching since this webblog started, the importance of mobile telephone forensics and evidence is receiving around the globe. It is very easy to get submersed into one's own country's (UK) activities in this area and forget how other countries have significantly increased their activities in forensics and evidence too. Below is a sample of the global visitors to trewmte.blogspot in the last 20 days. Some countries will have more visitors than others, but in itself that does not dent the relevance of the global following interested in mobile telephone forensics and evidence.
.

Albania

Algeria
Aruba

Austria
Australia
Belarus
Belgium
Brazil

Bulgaria
Canada

Colombia
Cote D'ivoire
Denmark
Egypt

Estonia
Finland

France
Germany
Greece

Hungary
India

Indonesia
Iran, Islamic Republic Of
Ireland
Israel
Italy

Jamaica
Japan

Kenya
Korea, Republic Of
Kuwait
Macao
Malaysia

Mauritania
Mauritius
Morocco

Netherlands
New Zealand
Nigeria

Norway

Pakistan

Philippines
Poland
Portugal

Qatar
Romania

Russian Federation
Serbia And Montenegro

Sri Lanka

Saudi Arabia
Senegal
Serbia
Seychelles
Slovakia
South Africa
Sudan
Sweden

Thailand

Taiwan
Turkey

United Arab Emirates
United Kingdom
United States

Viet Nam

.

It would be good to get more feedback from law enforcement, universities, forensic examiners and experts from around the global who, rather than lurk in the background, may like to suggest the type of information you would like to see at this webblog. I have been dealing with a variety of mobile telephone examination and evidence issues (SIM/USIM, handset and cell site) for many years and hopefully topics you raise for discussion can be answered here. I should point out, as I have in the past at this webblog (http://trewmte.blogspot.com/2006/11/cell-site-analysis.html), the more I know, the more I need to know, therefore I don't know everything, but I am willing to try and find out.
.
Additionally, as there are no academic qualifications designed precisely for mobile telephone forensics and evidence - no PhD, MSc, BSc, CEng or anything else, this means qualifications in other subjects other than this subject matter tend to get used as a passport, suggesting qualification to deal with mobile telephone forensics and evidence. To overcome that difficulty I have prepared a Diploma in Mobile Telephone Evidence that may help those who seek recognition for the skillsets they have acquired. The Diploma is not a PhD, MSc etc but it is the good old fashioned Diploma where your knowledge and skillsest need to be demonstrated and will be tested.
.

If you would like to know more about the Diploma please send an email to me, Greg Smith. My email is shown at the top righthand side of this webblog page.

Mobile Telephone Evidence Diploma

Mobile Telephone Evidence Diploma

As this is my 20th year in mobile telephone evidence and forensics (1987-2007) I have created a Diploma Course for Mobile Telephone Evidence (MTEdip). The Diploma is a development from the numerous SIM Card, Mobile Telephone and Cell Site Analsysis courses prepared and delivered to law enforcement and industry security specialists in the UK and internationally.

I am looking for Industry Sponsors for the Diploma. If you are a company and/or in education and you are significantly involved in digital forensic evidence and would be interested in becoming a sponsor of the Diploma, please email your interest to:

Greg Smith
Email: trewmte@gmail.com
Web: http://trewmte.blogspot.com