开机信令流程

一个典型的开机信令流程中包含接入层RRC的信令和非接入层EMM，ESM的信令。
在第一部分RRC连接建立和UE能力上报（可选流程）后进入NAS层的信令交互。
NAS信令交互顺序如下：

1. 身份认证（identity request<->identity response）
   这一步为可选流程，只有在attach request中提供的UE身份标识无法被网络识别时，网络才会触发这一流程。当然，在其他需要UE身份认证的情景下也会触发这一流程。
2. 鉴权
   这个过程中利用usim中的K值和算法完成与网络测K值和算法的认证计算过程并生成后续加密和完整性保护锁需要的秘钥。
3. NAS层的安全命令流程
   这一步负责协商NAS加密和完整性保护的算法
4. ESM信息请求流程
   这一步根据PDN request中的esm info trans flag是否设置而触发，非必选
5. RRC安全命令流程
   这一步负责协商AS（PDCP）所用的加密算法
6. 注册接收，EPS承载请求
7. EPS承载接收，连接建立完成

总结：

身份认证流程应该在鉴权流程之前，鉴权在安全命令流程之前，因为他们之间有依赖关系

附

重要消息内容举例

LTE NAS EMM Plain OTA Outgoing Message – Attach request Msg（含PDN request）

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 65 (0x41) (Attach request)
lte_emm_msg
emm_attach_request
tsc = 0 (0x0) (cached sec context)
nas_key_set_id = 3 (0x3)
att_type = 2 (0x2) (combined EPS/IMSI attach)
eps_mob_id
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
MME_group_id = 32770 (0x8002)
MME_code = 24 (0x18)
m_tmsi = 3254548600 (0xc1fc7878)
ue_netwk_cap
EEA0 = 1 (0x1)
EEA1_128 = 1 (0x1)
EEA2_128 = 1 (0x1)
EEA3_128 = 1 (0x1)
EEA4 = 0 (0x0)
EEA5 = 0 (0x0)
EEA6 = 0 (0x0)
EEA7 = 0 (0x0)
EIA0 = 0 (0x0)
EIA1_128 = 1 (0x1)
EIA2_128 = 1 (0x1)
EIA3_128 = 1 (0x1)
EIA4 = 0 (0x0)
EIA5 = 0 (0x0)
EIA6 = 0 (0x0)
EIA7 = 0 (0x0)
oct5_incl = 1 (0x1)
UEA0 = 1 (0x1)
UEA1 = 1 (0x1)
UEA2 = 0 (0x0)
UEA3 = 0 (0x0)
UEA4 = 0 (0x0)
UEA5 = 0 (0x0)
UEA6 = 0 (0x0)
UEA7 = 0 (0x0)
oct6_incl = 1 (0x1)
UCS2 = 0 (0x0)
UIA1 = 1 (0x1)
UIA2 = 0 (0x0)
UIA3 = 0 (0x0)
UIA4 = 0 (0x0)
UIA5 = 0 (0x0)
UIA6 = 0 (0x0)
UIA7 = 0 (0x0)
oct7_incl = 1 (0x1)
ProSedd = 0 (0x0)
ProSe = 0 (0x0)
H_245_ASH = 0 (0x0)
ACC_CSFB = 1 (0x1)
LPP = 1 (0x1)
LCS = 0 (0x0)
vcc_1xsr = 0 (0x0)
NF = 1 (0x1)
oct8_incl = 1 (0x1)
ePCO = 0 (0x0)
HC_CPCIoT = 0 (0x0)
ERwoPDN = 0 (0x0)
S1_Udata = 0 (0x0)
UPCIoT = 0 (0x0)
CPCIoT = 0 (0x0)
Prose_Relay = 0 (0x0)
Prose_dc = 0 (0x0)
oct9_incl = 1 (0x1)
bearers = 0 (0x0)
SGC = 0 (0x0)
N1Mode = 0 (0x0)
DCNR = 1 (0x1)
Cp_Backoff = 0 (0x0)
Restric_IEC = 0 (0x0)
V2X_PCS = 0 (0x0)
multiDRB = 0 (0x0)
oct10_incl = 0 (0x0)
oct11_incl = 0 (0x0)
oct12_incl = 0 (0x0)
oct13_incl = 0 (0x0)
oct14_incl = 0 (0x0)
oct15_incl = 0 (0x0)
esm_msg_container
eps_bearer_id_or_skip_id = 0 (0x0)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 13 (0xd)
msg_type = 208 (0xd0) (PDN connectivity request)
lte_esm_msg
pdn_connectivity_req
pdn_type = 3 (0x3) (Ipv4v6)
req_type = 1 (0x1) (initial request)
info_trans_flag_incl = 1 (0x1)
esm_info_trans_flag = 1 (0x1)
access_pt_name_incl = 0 (0x0)
prot_config_incl = 1 (0x1)
prot_config
ext = 1 (0x1)
conf_prot = 0 (0x0)
num_recs = 5 (0x5)
sm_prot[0]
protocol_id = 32801 (0x8021) (IPCP)
prot_len = 16 (0x10)
ipcp_prot
ipcp_prot_id = 1 (0x1) (CONF_REQ)
identifier = 0 (0x0)
rfc1332_conf_req
num_options = 2 (0x2)
conf_options[0]
type = 129 (0x81)
rfc1877_primary_dns_server_add
length = 6 (0x6)
ip_addr = 0 (0x0) (0.0.0.0)
conf_options[1]
type = 131 (0x83)
rfc1877_sec_dns_server_add
length = 6 (0x6)
ip_addr = 0 (0x0) (0.0.0.0)
sm_prot[1]
protocol_id = 13 (0xd) (DNS Server IPv4 Address Requestt)
prot_len = 0 (0x0)
sm_prot[2]
protocol_id = 3 (0x3) (DNS Server IPv6 Addr Req)
prot_len = 0 (0x0)
sm_prot[3]
protocol_id = 10 (0xa) (IP address allocation via NAS signalling)
prot_len = 0 (0x0)
sm_prot[4]
protocol_id = 5 (0x5) (NWK Req Bearer Control indicator)
prot_len = 0 (0x0)
num_recs2 = 2 (0x2)
sm_container[0]
container_id = 16 (0x10) (Ipv4 Link MTU Request)
container_len = 0 (0x0)
sm_container[1]
container_id = 17 (0x11) (MS support of Local address in TFT indicator)
container_len = 0 (0x0)
dev_properties_incl = 0 (0x0)
nbifom_incl = 0 (0x0)
header_compression_config_inclu = 0 (0x0)
ext_prot_config_incl = 0 (0x0)
p_tmsi_sig_incl = 0 (0x0)
add_guti_incl = 0 (0x0)
reg_tai_incl = 1 (0x1)
tracking_area_id
mcc_mnc
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
tracking_area_id = 40000 (0x9c40)
drx_params_incl = 1 (0x1)
drx_params
split_pg_cycle_code = 10 (0xa)
cycle_len_coeff = 0 (0x0)
split_on_ccch = 0 (0x0)
non_drx_timer = 0 (0x0)
ms_netwk_cap_incl = 1 (0x1)
ms_netwk_cap
length = 4 (0x4)
r99 = 1 (0x1)
GEA1 bits
GEA/1 = 1 (0x1)
SM capabilities via dedicated channels = 1 (0x1)
SM capabilities via GPRS channels = 1 (0x1)
UCS2 support = 0 (0x0)
SS Screening Indicator = 1 (0x1)
SoLSA Capability = 0 (0x0)
Revision level indicator = 1 (0x1)
PFC feature mode = 1 (0x1)
Extended GEA bits
GEA/2 = 1 (0x1)
GEA/3 = 1 (0x1)
GEA/4 = 0 (0x0)
GEA/5 = 0 (0x0)
GEA/6 = 0 (0x0)
GEA/7 = 0 (0x0)
LCS VA capability = 0 (0x0)
PS inter-RAT HO from GERAN to UTRAN Iu mode capability = 0 (0x0)
PS inter-RAT HO from GERAN to E-UTRAN S1 mode capability = 0 (0x0)
EMM Combined procedures Capability = 1 (0x1)
ISR support = 1 (0x1)
SRVCC to GERAN/UTRAN capability = 1 (0x1)
EPC capability = 1 (0x1)
NF capability = 1 (0x1)
GERAN network sharing capability = 0 (0x0)
User plane integrity protection support = 0 (0x0)
GIA/4 = 0 (0x0)
GIA/5 = 0 (0x0)
GIA/6 = 0 (0x0)
GIA/7 = 0 (0x0)
ePCO IE indicator = 0 (0x0)
Restriction on use of enhanced coverage capability = 0 (0x0)
Dual connectivity of E-UTRA with NR capability = 1 (0x1)
spare_bits0_count = 0 (0x0)
old_loc_area_id_incl = 1 (0x1)
old_loc_area_id
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
loc_area_code = 20000 (0x4e20)
tmsi_stat_incl = 0 (0x0)
ms_class_mark2_incl = 1 (0x1)
ms_class_mark2
rev_level = 2 (0x2)
es_ind = 1 (0x1)
a5_1_alg_sup = 0 (0x0)
rf_power_cap = 7 (0x7)
pseudo_sync_cap = 1 (0x1)
ss_screen_ind = 1 (0x1)
sm_cap = 1 (0x1)
vbs = 0 (0x0)
vgcs = 0 (0x0)
freq_cap = 0 (0x0)
class_3_avail = 1 (0x1)
lcsva_cap = 1 (0x1)
ucs2 = 0 (0x0)
solsa = 0 (0x0)
cmsp = 1 (0x1)
a5_3_alg_sup = 1 (0x1)
a5_2_alg_sup = 0 (0x0)
ms_class_mark3_incl = 1 (0x1)
ms_class_mark3
spare_bit0 = 0 (0x0)
const_110 = 6 (0x6)
A5 bits struct
A5/7 = 0 (0x0)
A5/6 = 0 (0x0)
A5/5 = 0 (0x0)
A5/4 = 0 (0x0)
Associated Radio Capability 2 = 1 (0x1)
Associated Radio Capability 1 = 4 (0x4)
r_support_present = 0 (0x0)
hscsd_multi_slot_capability_present = 0 (0x0)
UCS2 treatment = 0 (0x0)
Extended Measurement Capability = 0 (0x0)
ms_measurement_capability_present = 0 (0x0)
ms_positioning_method_capability_present = 1 (0x1)
MS Positioning Method Capability
MS Positioning Method = 7 (0x7)
ecsd_multi_slot_capability_present = 0 (0x0)
gsm_8_psk_struct_present = 1 (0x1)
gsm 8-PSK Struct
Modulation Capability = 1 (0x1)
gsm_8_psk_rf_power_capability_1_present = 1 (0x1)
gsm 8-PSK RF Power Capability 1 = 2 (0x2)
gsm_8_psk_rf_power_capability_2_present = 1 (0x1)
gsm 8-PSK RF Power Capability 2 = 2 (0x2)
gsm_400_bands_supported_present = 0 (0x0)
gsm_850_associated_radio_capability_present = 1 (0x1)
GSM 850 Associated Radio Capability = 4 (0x4)
gsm_1900_associated_radio_capability_present = 1 (0x1)
GSM 1900 Associated Radio Capability = 1 (0x1)
UMTS FDD Radio Access Technology Capability = 1 (0x1)
UMTS 3.84 Mcps TDD Radio Access Technology Capability = 0 (0x0)
CDMA 2000 Radio Access Technology Capability = 0 (0x0)
dtm_gprs_multi_slot_class_present = 1 (0x1)
DTM GPRS Multi Slot Class = 3 (0x3)
Single Slot DTM = 0 (0x0)
dtm_egprs_multi_slot_class_present = 1 (0x1)
DTM EGPRS Multi Slot Class = 3 (0x3)
single_band_support_present = 0 (0x0)
gsm_750_associated_radio_capability_present = 0 (0x0)
UMTS 1.28 Mcps TDD Radio Access Technology Capability = 0 (0x0)
GERAN Feature Package 1 = 1 (0x1)
extended_dtm_gprs_multi_slot_class_present = 0 (0x0)
high_multislot_capability_present = 0 (0x0)
geran_iu_mode_capabilities_present = 0 (0x0)
GERAN Feature Package 2 = 0 (0x0)
GMSK Multislot Power Profile = 0 (0x0)
gsm 8-PSK Multislot Power Profile = 0 (0x0)
t_gsm_400_bands_supported_present = 0 (0x0)
t_gsm_900_associated_radio_capability_present = 0 (0x0)
Downlink Advanced Receiver Performance = 1 (0x1)
DTM Enhancements Capability = 1 (0x1)
dtm_gprs_high_multi_slot_class_present = 0 (0x0)
Repeated ACCH Capability = 1 (0x1)
gsm_710_associated_radio_capability_present = 0 (0x0)
t_gsm_810_associated_radio_capability_present = 0 (0x0)
Ciphering Mode Setting Capability = 1 (0x1)
Additional Positioning Capabilities = 0 (0x0)
E-UTRA FDD support = 1 (0x1)
E-UTRA TDD support = 1 (0x1)
E-UTRA Measurement and Reporting support = 1 (0x1)
Priority-based reselection support = 1 (0x1)
UTRA CSG Cells Reporting = 0 (0x0)
VAMOS Level = 1 (0x1)
TIGHTER Capability = 1 (0x1)
Selective Ciphering of Downlink SACCH = 0 (0x0)
CS to PS SRVCC from GERAN to UTRA = 0 (0x0)
CS to PS SRVCC from GERAN to E-UTRA = 0 (0x0)
GERAN Network Sharing support = 0 (0x0)
E-UTRA Wideband RSRQ measurements support = 0 (0x0)
ER Band Support = 0 (0x0)
UTRA Multiple Frequency Band Indicators support = 0 (0x0)
E-UTRA Multiple Frequency Band Indicators support = 0 (0x0)
Extended TSC Set Capability support = 0 (0x0)
Extended EARFCN value range = 0 (0x0)
spare_bits0_count = 3 (0x3)
spare_bits0 = 0 (0x0)
supp_codecs_incl = 1 (0x1)
supp_codecs
num_codecs = 2 (0x2)
codecs[0]
sysid = 4 (0x4)
length = 2 (0x2)
bitmap[0] = 96 (0x60)
bitmap[1] = 4 (0x4)
codecs[1]
sysid = 0 (0x0)
length = 2 (0x2)
bitmap[0] = 31 (0x1f)
bitmap[1] = 2 (0x2)
add_update_type_incl = 0 (0x0)
voice_domain_pref_incl = 1 (0x1)
voice_domain_pref
length = 1 (0x1)
UE_usage_setting = 0 (0x0) (Voice centric)
voice_domain_pref_for_EUTRAN = 3 (0x3) (IMS PS Voice preferred, CS Voice as secondary)
dev_properties_incl = 0 (0x0)
old_guti_incl = 1 (0x1)
old_guti
guti_type = 0 (0x0) (Native GUTI)
ms_network_feature_incl = 1 (0x1)
ms_network_feature_support
ext_periodic_timers = 1 (0x1)
network_resource_id_container_incl = 1 (0x1)
network_resource_id_container
length = 2 (0x2)
NRI_container_value = 797 (0x31d)
t3324_incl = 0 (0x0)
t3412_ext_incl = 0 (0x0)
ext_drx_par_incl = 0 (0x0)
ue_add_security_cap_incl = 1 (0x1)
ue_add_security_cap
length = 4 (0x4)
_5G_EA0 = 1 (0x1)
_128_5G_EA1 = 1 (0x1)
_128_5G_EA2 = 1 (0x1)
_128_5G_EA3 = 1 (0x1)
_5G_EA4 = 0 (0x0)
_5G_EA5 = 0 (0x0)
_5G_EA6 = 0 (0x0)
_5G_EA7 = 0 (0x0)
_5G_EA8 = 0 (0x0)
_5G_EA9 = 0 (0x0)
_5G_EA10 = 0 (0x0)
_5G_EA11 = 0 (0x0)
_5G_EA12 = 0 (0x0)
_5G_EA13 = 0 (0x0)
_5G_EA14 = 0 (0x0)
_5G_EA15 = 0 (0x0)
_5G_IA0 = 0 (0x0)
_128_5G_IA1 = 1 (0x1)
_128_5G_IA2 = 1 (0x1)
_128_5G_IA3 = 1 (0x1)
_5G_IA4 = 0 (0x0)
_5G_IA5 = 0 (0x0)
_5G_IA6 = 0 (0x0)
_5G_IA7 = 0 (0x0)
_5G_IA8 = 0 (0x0)
_5G_IA9 = 0 (0x0)
_5G_IA10 = 0 (0x0)
_5G_IA11 = 0 (0x0)
_5G_IA12 = 0 (0x0)
_5G_IA13 = 0 (0x0)
_5G_IA14 = 0 (0x0)
_5G_IA15 = 0 (0x0)

LTE RRC OTA Packet – UL_CCCH / RRCConnectionRequest

Subscription ID = 1
Pkt Version = 26
RRC Release Number.Major.minor = 15.4.0
NR RRC Release Number.Major.minor = 15.4.0
Radio Bearer ID = 0, Physical Cell ID = 188
Freq = 6200
SysFrameNum = N/A, SubFrameNum = 0
PDU Number = UL_CCCH Message, Msg Length = 6
SIB Mask in SI = 0x00

Interpreted PDU:

value UL-CCCH-Message ::=
{
message c1 : rrcConnectionRequest :
{
criticalExtensions rrcConnectionRequest-r8 :
{
ue-Identity randomValue : '00100000 11011010 10101111 10110010 10001100’B,
establishmentCause mo-Signalling,
spare '0’B
}
}
}

LTE RRC OTA Packet – DL_CCCH / RRCConnectionSetup

Subscription ID = 1
Pkt Version = 26
RRC Release Number.Major.minor = 15.4.0
NR RRC Release Number.Major.minor = 15.4.0
Radio Bearer ID = 0, Physical Cell ID = 188
Freq = 6200
SysFrameNum = 456, SubFrameNum = 9
PDU Number = DL_CCCH Message, Msg Length = 29
SIB Mask in SI = 0x00

Interpreted PDU:

value DL-CCCH-Message ::=
{
message c1 : rrcConnectionSetup :
{
rrc-TransactionIdentifier 1,
criticalExtensions c1 : rrcConnectionSetup-r8 :
{
radioResourceConfigDedicated
{
srb-ToAddModList
{
{
srb-Identity 1,
rlc-Config explicitValue : am :
{
ul-AM-RLC
{
t-PollRetransmit ms45,
pollPDU pInfinity,
pollByte kBinfinity,
maxRetxThreshold t32
},
dl-AM-RLC
{
t-Reordering ms35,
t-StatusProhibit ms0
}
},
logicalChannelConfig explicitValue :
{
ul-SpecificParameters
{
priority 1,
prioritisedBitRate infinity,
bucketSizeDuration ms300,
logicalChannelGroup 0
}
}
}
},
mac-MainConfig explicitValue :
{
ul-SCH-Config
{
maxHARQ-Tx n5,
periodicBSR-Timer sf10,
retxBSR-Timer sf320,
ttiBundling FALSE
},
timeAlignmentTimerDedicated sf10240,
phr-Config setup :
{
periodicPHR-Timer sf100,
prohibitPHR-Timer sf100,
dl-PathlossChange dB1
}
},
physicalConfigDedicated
{
pdsch-ConfigDedicated
{
p-a dB-3
},
pucch-ConfigDedicated
{
ackNackRepetition release : NULL
},
pusch-ConfigDedicated
{
betaOffset-ACK-Index 9,
betaOffset-RI-Index 5,
betaOffset-CQI-Index 12
},
uplinkPowerControlDedicated
{
p0-UE-PUSCH 0,
deltaMCS-Enabled en0,
accumulationEnabled TRUE,
p0-UE-PUCCH 0,
pSRS-Offset 5,
filterCoefficient fc6
},
tpc-PDCCH-ConfigPUCCH release : NULL,
tpc-PDCCH-ConfigPUSCH release : NULL,
cqi-ReportConfig
{
cqi-ReportModeAperiodic rm30,
nomPDSCH-RS-EPRE-Offset 0,
cqi-ReportPeriodic setup :
{
cqi-PUCCH-ResourceIndex 12,
cqi-pmi-ConfigIndex 46,
cqi-FormatIndicatorPeriodic widebandCQI : NULL,
ri-ConfigIndex 161,
simultaneousAckNackAndCQI FALSE
}
},
soundingRS-UL-ConfigDedicated release : NULL,
antennaInfo explicitValue :
{
transmissionMode tm3,
codebookSubsetRestriction n2TxAntenna-tm3 : '11’B,
ue-TransmitAntennaSelection release : NULL
},
schedulingRequestConfig setup :
{
sr-PUCCH-ResourceIndex 3,
sr-ConfigIndex 9,
dsr-TransMax n64
}
}
}
}
}
}

LTE RRC OTA Packet – UL_DCCH / RRCConnectionSetupComplete

Subscription ID = 1
Pkt Version = 26
RRC Release Number.Major.minor = 15.4.0
NR RRC Release Number.Major.minor = 15.4.0
Radio Bearer ID = 1, Physical Cell ID = 188
Freq = 6200
SysFrameNum = N/A, SubFrameNum = 0
PDU Number = UL_DCCH Message, Msg Length = 150
SIB Mask in SI = 0x00

Interpreted PDU:

value UL-DCCH-Message ::=
{
message c1 : rrcConnectionSetupComplete :
{
rrc-TransactionIdentifier 1,
criticalExtensions c1 : rrcConnectionSetupComplete-r8 :
{
selectedPLMN-Identity 1,
registeredMME
{
mmegi '10000000 00000010’B,
mmec '00011000’B
},
dedicatedInfoNAS '1795AA008E210741320BF622F820800218C1FC787807F070C040190010002D020DD031D127268080211001000010810600000000830600000000000D00000300000A000005000010000011005222F8209C405C0A003104E5E03E011322F8204E2011035758A6200D601404EF65233B8800D2F2800040080402600400021F025D0103E0C11002C7406F04F0007000’H,
nonCriticalExtension
{
nonCriticalExtension
{
gummei-Type-r10 native
}
}
}
}
}

LTE NAS EMM Plain OTA Incoming Message – Authentication request Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 82 (0x52) (Authentication request)
lte_emm_msg
emm_auth_req
tsc = 0 (0x0) (cached sec context)
nas_key_set_id = 4 (0x4)
auth_param_RAND
rand_val[0] = 45 (0x2d)
rand_val[1] = 73 (0x49)
rand_val[2] = 31 (0x1f)
rand_val[3] = 162 (0xa2)
rand_val[4] = 124 (0x7c)
rand_val[5] = 235 (0xeb)
rand_val[6] = 184 (0xb8)
rand_val[7] = 73 (0x49)
rand_val[8] = 94 (0x5e)
rand_val[9] = 218 (0xda)
rand_val[10] = 209 (0xd1)
rand_val[11] = 107 (0x6b)
rand_val[12] = 88 (0x58)
rand_val[13] = 88 (0x58)
rand_val[14] = 49 (0x31)
rand_val[15] = 31 (0x1f)
auth_param_AUTN
autn_len = 16 (0x10)
autn[0] = 143 (0x8f)
autn[1] = 109 (0x6d)
autn[2] = 76 (0x4c)
autn[3] = 81 (0x51)
autn[4] = 177 (0xb1)
autn[5] = 36 (0x24)
autn[6] = 163 (0xa3)
autn[7] = 15 (0xf)
autn[8] = 136 (0x88)
autn[9] = 60 (0x3c)
autn[10] = 237 (0xed)
autn[11] = 214 (0xd6)
autn[12] = 76 (0x4c)
autn[13] = 79 (0x4f)
autn[14] = 27 (0x1b)
autn[15] = 142 (0x8e)

LTE NAS EMM Plain OTA Outgoing Message – Authentication response Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 83 (0x53) (Authentication response)
lte_emm_msg
emm_auth_resp
auth_resp_param
len_auth_resp = 4 (0x4)
res[0] = 126 (0x7e)
res[1] = 17 (0x11)
res[2] = 173 (0xad)
res[3] = 27 (0x1b)

LTE NAS EMM Plain OTA Incoming Message – Security mode command Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 93 (0x5d) (Security mode command)
lte_emm_msg
emm_sec_mode_cmd
nas_sec_algorithms
cipher_algorithm = 2 (0x2) (128-EEA2)
inte_prot_algorithm = 2 (0x2) (128-EIA2)
tsc_asme = 0 (0x0) (cached sec context)
nas_key_set_id_asme = 4 (0x4)
replayed_ue_sec_capabilities
EEA0 = 1 (0x1)
EEA1_128 = 1 (0x1)
EEA2_128 = 1 (0x1)
EEA3_128 = 1 (0x1)
EEA4 = 0 (0x0)
EEA5 = 0 (0x0)
EEA6 = 0 (0x0)
EEA7 = 0 (0x0)
EIA0 = 0 (0x0)
EIA1_128 = 1 (0x1)
EIA2_128 = 1 (0x1)
EIA3_128 = 1 (0x1)
EIA4 = 0 (0x0)
EIA5 = 0 (0x0)
EIA6 = 0 (0x0)
EIA7 = 0 (0x0)
oct5_incl = 1 (0x1)
UEA0 = 1 (0x1)
UEA1 = 1 (0x1)
UEA2 = 0 (0x0)
UEA3 = 0 (0x0)
UEA4 = 0 (0x0)
UEA5 = 0 (0x0)
UEA6 = 0 (0x0)
UEA7 = 0 (0x0)
oct6_incl = 1 (0x1)
UIA1 = 1 (0x1)
UIA2 = 0 (0x0)
UIA3 = 0 (0x0)
UIA4 = 0 (0x0)
UIA5 = 0 (0x0)
UIA6 = 0 (0x0)
UIA7 = 0 (0x0)
oct7_incl = 1 (0x1)
GEA1 = 1 (0x1)
GEA2 = 1 (0x1)
GEA3 = 1 (0x1)
GEA4 = 0 (0x0)
GEA5 = 0 (0x0)
GEA6 = 0 (0x0)
GEA7 = 0 (0x0)
imesv_incl = 0 (0x0)
replaynounce_incl = 0 (0x0)
nounce_incl = 0 (0x0)
hash_mime_incl = 0 (0x0)
replayed_ue_add_security_cap_incl = 1 (0x1)
replayed_ue_add_security_cap
length = 4 (0x4)
_5G_EA0 = 1 (0x1)
_128_5G_EA1 = 1 (0x1)
_128_5G_EA2 = 1 (0x1)
_128_5G_EA3 = 1 (0x1)
_5G_EA4 = 0 (0x0)
_5G_EA5 = 0 (0x0)
_5G_EA6 = 0 (0x0)
_5G_EA7 = 0 (0x0)
_5G_EA8 = 0 (0x0)
_5G_EA9 = 0 (0x0)
_5G_EA10 = 0 (0x0)
_5G_EA11 = 0 (0x0)
_5G_EA12 = 0 (0x0)
_5G_EA13 = 0 (0x0)
_5G_EA14 = 0 (0x0)
_5G_EA15 = 0 (0x0)
_5G_IA0 = 0 (0x0)
_128_5G_IA1 = 1 (0x1)
_128_5G_IA2 = 1 (0x1)
_128_5G_IA3 = 1 (0x1)
_5G_IA4 = 0 (0x0)
_5G_IA5 = 0 (0x0)
_5G_IA6 = 0 (0x0)
_5G_IA7 = 0 (0x0)
_5G_IA8 = 0 (0x0)
_5G_IA9 = 0 (0x0)
_5G_IA10 = 0 (0x0)
_5G_IA11 = 0 (0x0)
_5G_IA12 = 0 (0x0)
_5G_IA13 = 0 (0x0)
_5G_IA14 = 0 (0x0)
_5G_IA15 = 0 (0x0)

LTE NAS EMM Plain OTA Outgoing Message – Security mode complete Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 94 (0x5e) (Security mode complete)
lte_emm_msg
emm_sec_mode_complete
mod_id_incl = 0 (0x0)
Replayed_nas_contianer_incl = 0 (0x0)

LTE NAS ESM Plain OTA Incoming Message – ESM information request Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
eps_bearer_id_or_skip_id = 0 (0x0)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 13 (0xd)
msg_type = 217 (0xd9) (ESM information request)
lte_esm_msg

LTE NAS ESM Plain OTA Outgoing Message – ESM information response Msg

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
eps_bearer_id_or_skip_id = 0 (0x0)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 13 (0xd)
msg_type = 218 (0xda) (ESM information response)
lte_esm_msg
esm_info_res
acc_pt_name_incl = 1 (0x1)
access_point_name
num_acc_pt_val = 9 (0x9)
acc_pt_name_val[0] = 8 (0x8) (length)
acc_pt_name_val[1] = 105 (0x69) (i)
acc_pt_name_val[2] = 110 (0x6e) (n)
acc_pt_name_val[3] = 116 (0x74) (t)
acc_pt_name_val[4] = 101 (0x65) (e)
acc_pt_name_val[5] = 114 (0x72) ®
acc_pt_name_val[6] = 110 (0x6e) (n)
acc_pt_name_val[7] = 101 (0x65) (e)
acc_pt_name_val[8] = 116 (0x74) (t)
prot_config_incl = 0 (0x0)
ext_prot_config_incl = 0 (0x0)

LTE NAS EMM Plain OTA Incoming Message – Attach accept Msg（含EPS bearer request）

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 66 (0x42) (Attach accept)
lte_emm_msg
emm_attach_accept
attach_result = 2 (0x2) (comb EPS/IMSI attach)
t3412
unit = 2 (0x2)
timer_value = 9 (0x9)
tai_list
num_tai_list = 1 (0x1)
tai_list[0]
list_type = 2 (0x2)
num_element = 3 (0x3)
type2[0]
mcc_mnc
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
tac = 40000 (0x9c40)
type2[1]
mcc_mnc
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
tac = 40010 (0x9c4a)
type2[2]
mcc_mnc
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
tac = 40020 (0x9c54)
type2[3]
mcc_mnc
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
tac = 43000 (0xa7f8)
esm_msg_container
eps_bearer_id_or_skip_id = 5 (0x5)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 13 (0xd)
msg_type = 193 (0xc1) (Activate default EPS bearer context request)
lte_esm_msg
act_def_eps_bearer_context_req
eps_qos
qci = 6 (0x6) (QC6)
oct4_incl = 0 (0x0)
oct5_incl = 0 (0x0)
oct6_incl = 0 (0x0)
oct7_incl = 0 (0x0)
oct8_incl = 0 (0x0)
oct9_incl = 0 (0x0)
oct10_incl = 0 (0x0)
oct11_incl = 0 (0x0)
oct12_incl = 0 (0x0)
oct13_incl = 0 (0x0)
oct14_incl = 0 (0x0)
oct15_incl = 0 (0x0)
access_point
num_acc_pt_val = 28 (0x1c)
acc_pt_name_val[0] = 8 (0x8) (length)
acc_pt_name_val[1] = 105 (0x69) (i)
acc_pt_name_val[2] = 110 (0x6e) (n)
acc_pt_name_val[3] = 116 (0x74) (t)
acc_pt_name_val[4] = 101 (0x65) (e)
acc_pt_name_val[5] = 114 (0x72) ®
acc_pt_name_val[6] = 110 (0x6e) (n)
acc_pt_name_val[7] = 101 (0x65) (e)
acc_pt_name_val[8] = 116 (0x74) (t)
acc_pt_name_val[9] = 6 (0x6) (length)
acc_pt_name_val[10] = 77 (0x4d) (M)
acc_pt_name_val[11] = 78 (0x4e) (N)
acc_pt_name_val[12] = 67 (0x43) ©
acc_pt_name_val[13] = 48 (0x30) (0)
acc_pt_name_val[14] = 48 (0x30) (0)
acc_pt_name_val[15] = 50 (0x32) (2)
acc_pt_name_val[16] = 6 (0x6) (length)
acc_pt_name_val[17] = 77 (0x4d) (M)
acc_pt_name_val[18] = 67 (0x43) ©
acc_pt_name_val[19] = 67 (0x43) ©
acc_pt_name_val[20] = 50 (0x32) (2)
acc_pt_name_val[21] = 50 (0x32) (2)
acc_pt_name_val[22] = 56 (0x38) (8)
acc_pt_name_val[23] = 4 (0x4) (length)
acc_pt_name_val[24] = 71 (0x47) (G)
acc_pt_name_val[25] = 80 (0x50) §
acc_pt_name_val[26] = 82 (0x52) ®
acc_pt_name_val[27] = 83 (0x53) (S)
pdn_addr
pdn_addr_len = 5 (0x5)
pdn_type = 1 (0x1) (IPv4)
ipv4_addr = 172752917 (0xa4c0015) (10.76.0.21)
trans_id_incl = 1 (0x1)
trans_id
length = 1 (0x1)
ti_flag = 0 (0x0)
ti_value = 0 (0x0)
qos_incl = 1 (0x1)
qos
delay_class = 1 (0x1) (Delay class 1)
reliability_class = 3 (0x3) (Unacknowledged GTP and LLC; Acknowledged RLC, Protected data)
peak_throughput = 9 (0x9) (Up to 256 000 octet/s)
precedence_class = 2 (0x2) (Normal priority)
mean_throughput = 31 (0x1f) (Best effort)
traffic_class = 3 (0x3) (Interactive class)
delivery_order = 2 (0x2) (Without delivery order (‘no’))
delivery_err_sdu = 1 (0x1) (No detect (’-’))
max_sdu_size = 150 (0x96) (1500 octets)
max_bitrate_uplink = 254 (0xfe) (8640 kbps)
max_bitrate_downlink = 254 (0xfe) (8640 kbps)
residual_ber = 7 (0x7) (110^(-5))
sdu_error_ratio = 4 (0x4) (110^(-4))
transfer_delay = 18 (0x12) (300 ms)
traffic_hand_pri = 1 (0x1) (Priority level 1)
guar_bitrate_uplink = 255 (0xff) (0kbps)
guar_bitrate_downlink = 255 (0xff) (0kbps)
signalling_ind = 0 (0x0) (Not optimised for signalling traffic)
source_stat_desc = 0 (0x0) (spare)
downlink_ext_incl = 1 (0x1)
max_bitrate_downlink_ext = 250 (0xfa) (256 Mbps)
guar_bitrate_downlink_ext = 0 (0x0) (Use value in oct 13)
uplink_ext_incl = 1 (0x1)
max_bitrate_uplink_ext = 250 (0xfa) (256 Mbps)
guar_bitrate_uplink_ext = 0 (0x0) (Use value in oct 12)
llc_sapi_incl = 1 (0x1)
llc_sapi
llc_sapi_value = 3 (0x3)
radio_priority_incl = 1 (0x1)
radio_priority
radio_pri_val = 2 (0x2)
pkt_flow_id_incl = 1 (0x1)
pkt_flow_id
length = 1 (0x1)
packet_flow_id = 8 (0x8)
apn_ambr_incl = 1 (0x1)
apn_ambr
apn_ambr_dl = 254 (0xfe) (8640 kbps)
apn_ambr_ul = 254 (0xfe) (8640 kbps)
oct5_incl = 1 (0x1)
apn_ambr_dl_ext = 226 (0xe2) (208 Mbps)
oct6_incl = 1 (0x1)
apn_ambr_ul_ext = 102 (0x66) (44 Mbps)
oct7_incl = 1 (0x1)
apn_ambr_dl_ext2 = 7 (0x7) (2008.640000 Mbps)
oct8_incl = 1 (0x1)
apn_ambr_ul_ext2 = 1 (0x1) (308.640000 Mbps)
esm_cause_incl = 1 (0x1)
esm_cause
esm_cause = 50 (0x32) (PDN type IPv4 only allowed)
prot_config_incl = 1 (0x1)
prot_config
ext = 1 (0x1)
conf_prot = 0 (0x0)
num_recs = 1 (0x1)
sm_prot[0]
protocol_id = 32801 (0x8021) (IPCP)
prot_len = 16 (0x10)
ipcp_prot
ipcp_prot_id = 3 (0x3) (CONF_NAK)
identifier = 0 (0x0)
rfc1332_conf_nak
num_options = 2 (0x2)
conf_options[0]
type = 129 (0x81)
rfc1877_primary_dns_server_add
length = 6 (0x6)
ip_addr = 180905715 (0xac866f3) (10.200.102.243)
conf_options[1]
type = 131 (0x83)
rfc1877_sec_dns_server_add
length = 6 (0x6)
ip_addr = 180905716 (0xac866f4) (10.200.102.244)
num_recs2 = 2 (0x2)
sm_container[0]
container_id = 13 (0xd) (DNS Server IPv4 Address)
container_len = 4 (0x4)
container_contents[0] = 10 (0xa)
container_contents[1] = 200 (0xc8)
container_contents[2] = 102 (0x66)
container_contents[3] = 243 (0xf3)
sm_container[1]
container_id = 5 (0x5) (Selected Bearer Control Mode)
container_len = 1 (0x1)
container_contents[0] = 2 (0x2)
connectivity_type_incl = 0 (0x0)
wlan_offload_acceptability_incl = 0 (0x0)
nbifom_incl = 0 (0x0)
header_compression_config_inclu = 0 (0x0)
ctrl_plane_only_ind_incl = 0 (0x0)
ext_prot_config_incl = 0 (0x0)
serv_plmn_rate_ctrl_incl = 0 (0x0)
ext_apn_ambr_incl = 0 (0x0)
ext_eps_qos_incl = 0 (0x0)
guti_incl = 1 (0x1)
guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
MME_group_id = 32770 (0x8002)
MME_code = 24 (0x18)
m_tmsi = 3247010424 (0xc1897278)
loc_id_incl = 1 (0x1)
loc_area_id
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 8 (0x8)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 2 (0x2)
loc_area_code = 20000 (0x4e20)
ms_id_incl = 1 (0x1)
ms_id
id_type_check = 4 (0x4)
ident_type = 4 (0x4)
odd_even_ind = 0 (0x0)
tmsi_1111 = 15 (0xf)
num_tmsi_ident = 4 (0x4)
tmsi_ident[0] = 151 (0x97)
tmsi_ident[1] = 177 (0xb1)
tmsi_ident[2] = 106 (0x6a)
tmsi_ident[3] = 43 (0x2b)
emm_cause_incl = 0 (0x0)
T3402_incl = 0 (0x0)
T3423_incl = 0 (0x0)
equ_plmns_incl = 0 (0x0)
emergnecy_num_list_incl = 0 (0x0)
eps_netwk_feature_support_incl = 1 (0x1)
eps_netwk_feature_support
length = 1 (0x1)
CPCIoT = 0 (0x0)
ERwoPDN = 0 (0x0)
ESRPS = 0 (0x0)
CS_LCS = 0 (0x0) (No info about support of loc service via cs is available)
EPC_LCS = 0 (0x0) (Location Services via EPC not supported)
EMC_BS = 0 (0x0) (Emergency bearer services in S1 Mode not supported)
IMSVoPS = 1 (0x1) (IMS Vo PS Session in S1 Mode supported)
add_update_result_incl = 0 (0x0)
t3412_ext_incl = 0 (0x0)
t3324_incl = 0 (0x0)
ext_drx_par_incl = 0 (0x0)
dcn_id_incl = 0 (0x0)
sms_srvc_status_incl = 0 (0x0)
non_3gpp_access_emerg_num_policy_incl = 0 (0x0)
t3448_incl = 0 (0x0)
nwk_policy_incl = 0 (0x0)

LTE NAS EMM Plain OTA Outgoing Message – Attach complete Msg（含EPS bearer accept）

Subscription ID = 1
pkt_version = 1 (0x1)
rel_number = 9 (0x9)
rel_version_major = 5 (0x5)
rel_version_minor = 0 (0x0)
security_header_or_skip_ind = 0 (0x0)
prot_disc = 7 (0x7) (EPS mobility management messages)
msg_type = 67 (0x43) (Attach complete)
lte_emm_msg
emm_attach_complete
esm_msg_container
eps_bearer_id_or_skip_id = 5 (0x5)
prot_disc = 2 (0x2) (EPS session management messages)
trans_id = 0 (0x0)
msg_type = 194 (0xc2) (Activate default EPS bearer context accept)
lte_esm_msg
act_def_eps_bearer_context_accept
prot_config_incl = 0 (0x0)
ext_prot_config_incl = 0 (0x0)

最后

以上就是寂寞宝贝为你收集整理的关于身份认证和鉴权过程开机信令流程总结：附的全部内容，希望文章能够帮你解决关于身份认证和鉴权过程开机信令流程总结：附所遇到的程序开发问题。

如果觉得靠谱客网站的内容还不错，欢迎将靠谱客网站推荐给程序员好友。