Geneva, Switzerland, 17-18 November 2014

IMEI Ecosystem & its Role in Combatting Use of Counterfeit Devices

James Moran,Security Director, GSM Association

jmoran@gsma.com

Combating Counterfeit and Substandard ICT Devices

(Geneva, Switzerland, 17-18 November 2014)

Geneva, Switzerland, 17-18 November 2014

2

Introducing GSMA

Level 1 text to appear in Verdana font, Point size 32Founded in 1987 by 15 operators committed to the joint development of a cross border digital system for mobile communications.Became the global trade group for the mobile industry, representing the vast majority of mobile phone networks across the world

Now encompassing commercial, public policy and technical initiatives, ensuring mobile services work globally

The Association’s members now serve more than 6 billion customers

More than 800 operator Members across 220 countriesOver 200 Associate Members (manufacturers and suppliers)

Success built on open standards, interoperability and scale

Geneva, Switzerland, 17-18 November 2014

3

Identifying Mobile Devices

International Mobile Equipment Identifier (IMEI) defined in 3GPP specifications to uniquely identify mobile devicesIMEI originally introduced to prevent non-type approved devices from accessing mobile networksType Approval Advisory Board (consisting of type approval and government officials) endorsed IMEI as satisfactory serial numberType approval regime disbanded in 1999 and replaced by industry initiated voluntary certification schemeIMEI is globally recognised and government approved mechanism to uniquely identify devicesIMEI is the only universally applicable and necessary device identifier

Geneva, Switzerland, 17-18 November 2014

4

IMEI Characteristics

IMEI No. 15 DigitsTAC Serial

NoCheck Digit

NNXXXXXX ZZZZZZ A

TAC Type Allocation Code, can generate 1 million IMEIs

NN Reporting Body Identifier

XXXXXX ME Type Identifier defined by the Reporting Body

ZZZZZZ Allocated by the Reporting Body but assigned per ME by the manufacturer

A Check digit, defined as a function of all other IMEI digits

Geneva, Switzerland, 17-18 November 2014

5

Obtaining IMEIs

Type Allocation refers to the process by which mobile devices are allocated a Type Allocation Code (TAC) and an IMEI number range

The TAC is an 8 digit element of the IMEI and identifies the device make and model

TACs are allocated, as part of the IMEI number ranges, to device manufacturers

Geneva, Switzerland, 17-18 November 2014

6

History of TAC Allocation

TACs originally administered and funded by national approval authoritiesAbolition of Type Approval in 1999 required industry to establish alternative regimeGSMA given responsibility in April 2000 for IMEI number range and TAC allocationGSMA formally appointed the Global Decimal Administrator (GDA) in 2004:

Appointing regional bodies to allocate TAC/IMEI rangesMaintaining list of allocated TACs/IMEIsDistributing list of allocated ranges via IMEI DatabaseProvide expertise and advice on allocations

GSMA is the sole allocation authority for 3GPP compliant devices

Geneva, Switzerland, 17-18 November 2014

7

TAC Allocation Principles

GSMA must adhere to defined principles:Process must be open, fair and transparent that allocates TACs in a non-discriminatory manner and with the minimum of delayProcess must allocate unique TACs that can be universally used by manufacturers to ensure global network accessAllocation of finite TAC resources must be done in an efficient manner that ensures future availabilityThere should be one single defined processProcess should be accessible on-lineDatabase containing TAC allocations should be confidentially maintainedProcess and tools should be compatible with existing systems

All requirements satisfied by GSMA

Geneva, Switzerland, 17-18 November 2014

8

GSMA Responsibilities

Coordinate the overall allocation of equipment identifiersAppoint Regional Bodies to allocate equipment identifiersDefine and maintain equipment identifier allocation processesEnsure adherence to agreed allocation processesResolve disputes related to the allocation of equipment identifiersPreserve confidentiality of data pertaining to the TAC allocationsMaintain list of TAC allocations in IMEI DatabaseDistribute Model Summary report (MSR) to eligible partiesProvide expertise and advice on allocation and IMEI issuesWork with all stakeholders to build and preserve integrity of the IMEI

IMEI Database

Amazon Hosting

Global repository of all TAC and IMEI number ranges allocated to device manufacturers

Operationally available 24 X 7 Enabler for customs and law enforcement agencies

Regulators

Customs

MNOs

StakeholdersLEAs

Geneva, Switzerland, 17-18 November 2014

10

Device Database Report

Distributed by GSMA for the benefit of all stakeholdersFacilitates the identification of devices and device characteristicsUnderpins efforts to control devices that attach to mobile networks and to reduce value by blocking spurious devicesFacilitates identification of counterfeit devices and grey market productsDeters device crime and supports prosecutions, device recovery, laundering prevention, etc.Critical to enhancing consumer education and protection

TAC Marketing Name Manufacturer (or) ApplicantBand Radio InterfaceBrand Name Model Name Operating SystemNFC BluetoothWLAN Device Type35436106 Archos A5 Archos SA 1 SIM 1 MicroSIM, GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), WCDMA FDD Band I, WCDMA FDD Band VIII3GPP2 Archos A5 Android Y Y Y Mobile Phone35940405 HTC 0P6M100 HTC CorporationGSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), LTE FDD BAND 17, LTE FDD BAND 2, LTE FDD BAND 4, LTE FDD BAND 5, WCDMA FDD Band I, WCDMA FDD Band II, WCDMA FDD Band IV, WCDMA FDD Band V3GPP2 HTC 0P6M100 Android Y Y Y Smartphone86519802 MI 2014022 Xiaomi Inc 2 SIM, 802.11 a/b/g/n/ac, 802.11a/b/g/n 2.4GHz, Bluetooth, Bluetooth 3.0, Bluetooth 4.0, DC-HSDPA, FM Receiver, GPRS, GPS, GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), LTE TDD BAND 39, LTE TDD BAND 40, LTE TDD BAND 41, TD-SCDMA, WAP,JAVA,MMS,AMR, WAPI, WLAN 11a,11b,11g,11n3GPP2 MI 2014022 Android N Y Y Smartphone86541102 MI3 Xiaomi Inc 802.11 a/b/g/n/ac, Bluetooth, EDGE, FM Receiver, GPRS, GPS, GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), NFC, TD-SCDMA, WAP,JAVA,MMS,AMR, WAPI, WLAN 11a,11b,11g,11n, WLAN 11ac3GPP2 MI 2013061 Android Y Y Y Smartphone35160506 Samsung SM-N750Samsung Korea GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), WCDMA FDD Band I, WCDMA FDD Band II, WCDMA FDD Band V, WCDMA FDD Band VIIICDMA Samsung SM-N750 Android Y Y Y Smartphone35166506 Samsung SM-N750Samsung Korea GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), WCDMA FDD Band I, WCDMA FDD Band II, WCDMA FDD Band V, WCDMA FDD Band VIIICDMA Samsung SM-N750 Android Y Y Y Smartphone35418606 G2 LG Electronics Inc.802.11a/b/g/n 2.4GHz, CDMA2000, GSM 1800, GSM 1900, GSM 900, GSM850 (GSM800), LTE FDD BAND 25, LTE FDD BAND 26, LTE TDD BAND 41, WCDMA FDD Band I, WCDMA FDD Band II, WCDMA FDD Band VCDMA LG LG-LS980 Android Y Y Y Smartphone

Geneva, Switzerland, 17-18 November 2014

11

Device Database Users

Network operators – over 700 GSMA members

National Regulatory authorities – 14Bangladesh, Costa Rica, Cyprus, Egypt, Gambia, India, Jordan, Mauritius, Pakistan, Portugal, Rwanda, Turkey, Uganda, UAE

Law enforcement agencies – 14Australia, Canada, Channel Islands, Czech Republic, Finland, France, Germany, Israel, Netherlands, South Africa, Sweden, Switzerland, United Kingdom, USA

Customs agencies – 2Italy, Mauritius

Conclusions and Recommendations

We already have a standards based identifier – the IMEIIMEIs allocated to applicants in accordance with defined processesEffective solutions already exist that use the IMEI to identify and block devicesNo demonstrable failure on the part of the IMEI systemNot enough use currently being made of the available data

The primacy of the IMEI as a device identifier should be recognised

Industry investment in IMEI needs to be supported

GSMA willing to support efforts to combat counterfeits – use us!

Governments and stakeholders should come take our data – it’s free!

Geneva, Switzerland, 17-18 November 2014

12