ISO/IEC 15432:1999 PDF

Overview

ISO/IEC 15432:1999 defines Wireless Terminal Authentication supplementary services for Private Integrated Services Networks (PISN). It specifies two complementary services:

• SS‑WTAT - authentication of a Wireless Terminal (WTM) user by the PISN, and
• SS‑WTAN - authentication of the PISN by a served WTM user.

The standard describes the functional model and information flows needed to carry authentication parameters; the actual cryptographic algorithms are explicitly outside its scope. It provides stage 1 (user-facing service descriptions) and stage 2 (functional entity roles and information flows) specifications; a stage 3 document is required to define signalling protocols and equipment behaviour for conformance.

Key topics and requirements

• Scope and applicability
  • Applicable to basic services defined in ISO/IEC 11574 for circuit-mode bearer services in PISNs.
  • Uses challenge‑and‑response mechanisms to validate identities.
• Service behaviour
  • SS‑WTAT: PISN sends a challenge to the WTM user and validates the response; failure may lead to service rejection or restriction.
  • SS‑WTAN: enables a WTM user to validate the identity of the PISN (stage details in standard).
• Functional model and information flows
  • Stage 2 defines functional entities (e.g., Authentication Server, Call Control agents) and the message flows conveying security parameters between WTM and PINX.
• Conformance and staging
  • Stage 1 (clauses 6–7): how users perceive the service.
  • Stage 2 (clauses 8–9): internal functional behaviour and interfaces.
  • Stage 3 (required separately) must define signalling protocols to claim conformance.
• Design constraints
  • Authentication algorithms and cryptographic details are out of scope - the standard focuses on parameter exchange and process.
• Interactions
  • The standard documents interactions with related PISN supplementary services and ANFs (for example, wireless terminal location or incoming/outgoing call features may trigger authentication).

Applications and users

Who benefits from ISO/IEC 15432:

• Telecom system architects and PISN operators implementing secure wireless access.
• Protocol designers creating stage‑3 signalling for PISN authentication.
• Network equipment manufacturers (PINX and WTM vendors) aligning device behaviour with PISN authentication flows.
• Security engineers and auditors verifying that authentication procedures and information flows meet standardized expectations.

Practical uses:

• Protecting access to corporate private networks via wireless terminals.
• Enabling mutual authentication between terminal users and PISN exchanges.
• Informing the development of interoperable signalling protocols and secure network deployments.

Related standards

• ISO/IEC 11574 (PISN basic services)
• ISO/IEC 11579‑1 (PINX reference configuration)
• ITU‑T Rec. I.130, I.210, I.112 and Z.100 (service characterization, descriptions, terminology, SDL)