CellularPrivacy/Android-IMSI-Catcher-Detector

Detection: Network data consistency

E3V3A opened this issue · 4 comments

E3V3A commented

Another detection mechanism to consider is to check for consistency of the various network parameters. For example, how CID is related to RAT and so on. Similarly we can follow some of THESE ichnaea (MLS) suggestions.

[TBA]

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

E3V3A commented

It seem that MLS have now implemented some consistency checks, HERE and HERE. This is great and we should find out what exactly they did as it would reduce our data processing needs if using their data.

He3556 commented

I just found a good summary about the BCCH and frequency band:
(I hope this is the best place for this information.)

Once the mobile is switched on and the registered home PLMN was selected (e.x. SMART), it will next search for a BCCH frequency list, stored in its memory or in its SIM card. The list can have up to 32 BCCH frequencies for the mobile to scan. This reduces the time of cell selection, compared to scanning the whole frequency band. If this feature is turned off at the switch then the mobile has to scan the entire frequency band for the strongest BCCH carrier.

The BCCH frequency list is called BA (BCCH Allocation) list and there are 2 types, Active and Idle.

Idle is a list of BCCH used for scanning when the mobile is in an idle mode and Active is a list of BCCH used during mobile busy mode.

E3V3A commented

But for BCCH info we need access to SIM or other?
What other options do we have here?
I though for example using known values and add them to the DB table DBe_capabilities...

SecUpwN commented

But for BCCH info we need access to SIM or other?
What other options do we have here?

Re-opening this due to a missing clarification. @ichnaea can you tell us, please?