International Mobile Station Equipment Identities

Description

The International Mobile Equipment Identity (IMEI) is a critical identifier in mobile telecommunications, serving as a permanent, factory-assigned serial number for a mobile station (MS). It is a 15-digit decimal number, structured into several distinct parts. The first eight digits constitute the Type Allocation Code (TAC), which identifies the device model and its manufacturer. The following six digits are the unique serial number (SNR) assigned by the manufacturer. The final digit is a Luhn algorithm-based check digit (CD), used to validate the sequence of the preceding 14 digits. The IMEI is programmed into the device's firmware or hardware during manufacturing and is not intended to be changed by the user.

From a network operations perspective, the IMEI is reported by the device to the network during initial registration and attachment procedures. The network can request the IMEI via specific signaling messages, such as the Identity Request in NAS (Non-Access Stratum) procedures. The serving network entity, typically the MME in LTE or the AMF in 5G, can then forward this IMEI to the Equipment Identity Register (EIR) or a similar network function. The EIR contains lists (white, grey, black) against which the reported IMEI is checked. This process enables the network operator to permit, monitor, or deny service based on the device's status, such as blocking service to devices reported as stolen.

The IMEI's role extends beyond simple identification. It is a cornerstone for lawful interception, fraud prevention, and device analytics. For lawful interception, authorities may use the IMEI to uniquely identify a target device for surveillance. In fraud prevention, operators use IMEI blacklists to disable stolen phones across their networks, significantly reducing the resale value of stolen property and deterring theft. Furthermore, aggregated IMEI data helps manufacturers and operators analyze device populations, model penetration, and plan for network technology support (e.g., gauging the number of 5G-capable devices on the network). Its standardized format ensures global interoperability, allowing a device's identity to be recognized and processed consistently across different operators and countries.

Purpose & Motivation

The IMEI was created to solve the fundamental problem of uniquely and permanently identifying the physical mobile equipment itself, independent of the user's subscription (which is identified by the IMSI on the SIM/USIM). Prior to its standardization, there was no reliable, global method for networks to identify device types or track individual hardware units. This limitation made it difficult to combat mobile phone theft, as a stolen phone could simply be used with a different SIM card. It also hindered accurate device analytics and made implementing device-specific policies or restrictions nearly impossible.

The introduction of the IMEI in 3GPP Release 99 provided a standardized, tamper-resistant identifier that is hard-coded into the device. This allowed for the creation of centralized Equipment Identity Registers (EIRs), where operators could share lists of stolen devices. A key motivation was to protect consumers and operators by reducing the incentive for phone theft, thereby enhancing overall network security. Furthermore, it enabled regulatory compliance for device type approval and provided a mechanism for network operators to manage device access, for instance, by barring devices that are not type-approved for their network or that pose a security risk.