Closed Subscriber Group Identity Validation

Description

CSG ID Validation is a security and mobility management procedure in 3GPP networks that verifies the Closed Subscriber Group Identity (CSG ID) during handover. When a User Equipment (UE) is being handed over to a target E-UTRAN cell that is a CSG cell or hybrid cell, the source cell includes the CSG ID of the target cell in the handover request message. The target cell then compares this received CSG ID with the CSG ID it broadcasts. If they match, the handover proceeds; if not, the handover is rejected. This validation prevents unauthorized access and ensures that the UE only connects to CSG cells for which it has a valid subscription.

The process is defined in 3GPP TS 25.467 and TS 36.300. It is particularly important for inbound mobility to CSG cells, where the UE may not have prior knowledge of the target cell's CSG ID. The source eNodeB obtains the CSG ID from the UE's measurement reports or from the target cell's system information. During the handover preparation phase, the source eNodeB sends a Handover Request to the target eNodeB, including the CSG ID. The target eNodeB validates that the CSG ID matches its own broadcast CSG ID. If validation fails, the target eNodeB responds with a Handover Preparation Failure message, and the handover is aborted.

CSG ID validation is also applicable to handovers between different radio access technologies, such as from E-UTRAN to UTRAN or NR. In these cases, the CSG ID is included in the handover messages and validated by the target cell. The validation process ensures that the UE is a member of the CSG and has the right to access the cell. It also prevents handover attempts to unauthorized CSG cells, which could lead to service disruption or security breaches.

The validation mechanism relies on the accuracy of the CSG ID broadcast by the target cell and the correctness of the CSG ID included in the handover messages. Any mismatch indicates a potential error or malicious attempt, and the handover is rejected. This contributes to the overall security and integrity of the network.

In summary, CSG ID Validation is a critical procedure for ensuring that handovers to CSG cells are only performed for authorized UEs, thereby maintaining access control and network security.

Purpose & Motivation

CSG ID Validation was introduced to address the need for secure and authorized handovers to CSG cells. Before its introduction, handovers to CSG cells could be attempted without proper validation, potentially allowing unauthorized UEs to access restricted cells. This could lead to security breaches, service degradation, and incorrect charging.

The motivation for CSG ID Validation came from the deployment of CSG cells in Release 8 and the need to ensure that only members of the CSG can access these cells. The validation process prevents handover attempts to CSG cells that the UE is not authorized to access, thereby enforcing access control. It also ensures that the UE is handed over to the correct CSG cell, avoiding confusion when multiple CSG cells share the same CSG ID.

The standardization of CSG ID Validation in Release 9 provided a consistent mechanism across different radio access technologies, enabling secure and efficient mobility management for CSG deployments. It is a key enabler for the widespread adoption of femtocells and enterprise small cells.