Sms security

Sms security SearchSearch
Author Message
acartin
Posted on Sunday, April 27, 2003 - 09:38 pm:   

Hi, can somebody give me some address about security issues using sms over modem and, smpp.

Thanks.
Bryce Norwood - NowSMS Support (Bryce)
Posted on Monday, April 28, 2003 - 03:11 pm:   

Hi,

I'm not sure that I can directly address your question ...

But I can give you some general pointers.

The SMPP protocol does not support any form of encryption. Sessions are completed in plain text over TCP/IP (so if security was a concern, you may need a private line or VPN connection to the operator SMSC ... oddly enough it seems that I see a lot of VPNs used for UCP/EMI connections, but not so much in the SMPP world).

In a GSM modem interface, messages are sent out over the air ... to the operator SMSC ... and then sent back out to the recipient over the air.

Of course, you have the same "over the air" issue on the receiving side however the message is being sent.

That said, I haven't really read anything about people intercepting SMS messages "over the air".

I did a quick scan of the web, and found the following two links very interesting:

In the first link, it talks about a utility company piloting a solution from RSA Security (the SecureID people), where secure authentication codes are sent to remote users via SMS. Obviously, in this case, they must have high confidence in the security of the SMS network:

http://www.vnunet.com/News/1134783

And in this second link, a jealous boyfriend gets 2 employees of O2 in the UK to intercept text messages sent by his girlfriend's phone in order to catch her cheating on him:

http://www.theregister.co.uk/content/55/28326.html
http://md.hudora.de/blog/guids/98/20/0211280846053098.html


-bn
Sushil Govind
New member
Username: Django9

Post Number: 1
Registered: 07-2004
Posted on Monday, July 19, 2004 - 09:34 am:   

Hey,
I am trying to send a 03.48 sms from an smpp application to an stk application residing in a gemplus sim by setting a TAR value .
The PID I use is 0x7F and DCS I have tried is 0xF6 and 0x04 .I find that that for 0xF6 the msg (8 bit formatted)never gets delivered to sim/ph nor does it trigger any events in my sim application.I am trapping EVENT_FORMATTED_SMS_PP_ENV and EVENT_UNFORMATTED_SMS_PP_ENV.

For DCS 0x04 the msg gets delivered but does not trigger any events in my STK applet.

Any ideas as to why.

I am using a 2100 and 2300 Nokia for testing.I have also tested out on a SagemMyX2 but without any success.
vikram sharma
Unregistered guest
Posted on Thursday, January 20, 2005 - 04:35 am:   


I am looking for a solution to intercept(lawfully) the data(internet,sms,mms) in a GSM/GPRS environment.Are there any vendors who provide such solutions?
}
shiva prasad
Unregistered guest
Posted on Friday, July 22, 2005 - 05:57 am:   

i want to know how sms is goes from one mobile user to another mobile user or computer. What i want exctly is it goes in plane text or encripted form. if it goes in plane text, how it will counter spoofing and snoofing.
Anonymous
 
Posted on Monday, March 06, 2006 - 09:13 pm:   

deleted by admin 243