M-Temporary Mobile Subscriber Identity

Description

The M-Temporary Mobile Subscriber Identity (M-TMSI) is a core network identifier used within the Evolved Packet System (EPS) for mobility management. It is assigned by the Mobility Management Entity (MME) to a User Equipment (UE) during the attach procedure or a subsequent tracking area update. The M-TMSI's primary function is to serve as a temporary alias for the permanent, subscription-based International Mobile Subscriber Identity (IMSI), thereby enhancing subscriber privacy over the radio interface. Architecturally, the M-TMSI is a 32-bit value that is used within the Non-Access Stratum (NAS) protocol exchanged directly between the UE and the MME. How it works is integral to the EPS attach and paging processes. Upon initial network attachment, if the UE provides its IMSI, the MME authenticates the subscriber and may assign a new M-TMSI. This M-TMSI is then sent to the UE encrypted within NAS signaling. For subsequent communications, such as a service request or response to a paging message, the UE includes the M-TMSI in the NAS message instead of the IMSI. When the MME needs to page a UE (e.g., for an incoming call), it uses the M-TMSI to construct the paging identity. The S-TMSI, which is a shortened version used for radio efficiency, is actually a concatenation of the MME Code (MMEC) and the M-TMSI. The MME maintains the mapping between the allocated M-TMSI and the subscriber's IMSI and other context in its database. Its role is critical for reducing signaling overhead (shorter than IMSI) and for implementing identity confidentiality, as the sensitive IMSI is rarely transmitted in clear text after initial registration. The M-TMSI is valid within the assigned MME's area; if the UE moves to an area served by a different MME, a new M-TMSI may be assigned.

Purpose & Motivation

The M-TMSI was created to address two key problems in mobile networks: subscriber identity privacy and signaling efficiency. The permanent IMSI, if transmitted frequently in clear text, could be used to track a user's location and activities. The purpose of the M-TMSI is to obfuscate this permanent identity on the radio interface after initial authentication. It solves the privacy issue by providing a temporary, frequently changing identifier for most NAS signaling transactions. Furthermore, the 32-bit M-TMSI (and its derived S-TMSI form) is shorter than the up-to-15-digit IMSI, leading to more efficient use of radio resources in paging messages and signaling procedures. Historically, temporary identifiers like TMSI existed in GSM and UMTS. The M-TMSI is the EPS equivalent, adapted for the all-IP, flatter architecture of LTE/EPC. Its introduction in Release 8 was motivated by the need to maintain and enhance subscriber privacy protections within the new 4G system architecture, while also optimizing the signaling load for massive numbers of connected devices. It allows the network to uniquely identify a UE for mobility management purposes without constantly exposing the subscriber's permanent credentials.

Key Features

• 32-bit temporary identifier assigned by the MME to a UE
• Used to maintain subscriber identity privacy by concealing the IMSI
• Employed in NAS layer signaling between UE and MME (e.g., Service Request, Paging Response)
• Part of the S-TMSI (MMEC + M-TMSI) used for radio-efficient paging
• Valid within the scope of the assigning MME
• Changed periodically or at specific events (e.g., inter-MME handover) to enhance security

Evolution Across Releases

Defining Specifications