Globally Unique Temporary UE Identity

Description

The Globally Unique Temporary UE Identity (GUTI) is a fundamental privacy and efficiency mechanism in 3GPP's Evolved Packet System (EPS) and 5G System (5GS). Its primary role is to replace the use of the permanent, subscriber-sensitive Superscript Permanent Identifier (SUPI) – which in 4G is the IMSI – in most radio signaling messages. The GUTI is assigned by the core network's Mobility Management Entity (MME) in EPS or the Access and Mobility Management Function (AMF) in 5GS during initial registration or attachment procedures. Once assigned, the UE uses the GUTI to identify itself in subsequent signaling interactions, such as during service requests, tracking area updates, or handovers.

The structure of the GUTI is hierarchical and contains information that allows the network to efficiently route signaling and locate the node managing the UE's mobility context. In EPS, the GUTI is composed of a Globally Unique MME Identifier (GUMMEI) and an MME-Temporary Mobile Subscriber Identity (M-TMSI). The GUMMEI uniquely identifies the MME that allocated the GUTI, and the M-TMSI is a unique identifier for the UE within that MME. In 5GS, the equivalent structure comprises a Globally Unique AMF Identifier (GUAMI) and a 5G-TMSI. This structure means that when a network entity receives a message with a GUTI, it can immediately determine which MME/AMF is responsible for the UE's context.

The operational lifecycle of a GUTI involves assignment, re-assignment, and usage. It is assigned during initial registration. The network may re-assign a new GUTI during certain procedures, like inter-MME/AMF handovers or for periodic privacy refresh. The UE stores its assigned GUTI in non-volatile memory to use it after power cycles. A key procedure involving the GUTI is identification. If a network node (like a new MME during inter-MME handover) receives a GUTI it does not recognize, it uses the embedded GUMMEI/GUAMI to query the old MME/AMF for the UE's context and permanent identity (IMSI/SUPI). This mechanism allows for seamless mobility and context transfer while still shielding the permanent identity on the radio link.

Purpose & Motivation

The GUTI was introduced primarily to address critical user privacy concerns associated with the permanent IMSI. In earlier 2G/3G systems, the IMSI was frequently sent in clear text over the radio interface, making it vulnerable to interception and tracking by passive eavesdroppers. An attacker could collect IMSIs to profile user locations, movements, and habits—a significant privacy breach. The GUTI solves this by acting as a pseudonym; the sensitive IMSI/SUPI is transmitted only during exceptional, secured initial procedures, and is otherwise replaced by the temporary GUTI.

Beyond privacy, the GUTI serves important network efficiency and operational purposes. The hierarchical structure of the GUTI (GUMMEI/GUAMI + TMSI) provides built-in routing information. This allows other network nodes, such as eNodeBs/gNBs or other MMEs/AMFs, to quickly determine the 'anchor' core network node managing the UE's session without needing complex lookups or broadcasting queries. This speeds up signaling procedures like handovers and paging.

The design of GUTI also supports scalability and network architecture evolution. By decoupling the temporary identity from the permanent one, operators can re-assign GUTIs independently (e.g., after a UE moves to a new MME/AMF area). This flexibility is crucial for load balancing, network optimization, and the distributed nature of 5G core networks. In essence, the GUTI is a cornerstone for enabling secure, efficient, and scalable mobility management in modern 3GPP systems.

Key Features

• Temporary identifier that protects the user's permanent SUPI/IMSI from over-the-air exposure
• Hierarchical structure containing a globally unique network node ID (GUMMEI/GUAMI) and a local UE ID (TMSI)
• Assigned by the MME (4G) or AMF (5G) during registration and can be re-assigned for mobility or privacy
• Used as the primary UE identifier in most NAS and AS signaling procedures after initial attachment
• Enables efficient routing of signaling messages and context retrieval between network nodes
• Stored in UE non-volatile memory to maintain identity across power cycles

Evolution Across Releases

Defining Specifications