The BSC6900 software connects to the core networks and manages the
base stations in the GSM and UMTS networks. The BSC6900 software
performs functions such as radio resource management, base station
management, power control, and handover control. The BSC6900
software possesses the following functional features:
1. The BSC6900 software can work with GSM and UMTS technologies.
Thus facilitating the smooth evolution from GSM to GSM&UMTS,
and the evolution between GSM&UMTS and UMTS;
2. The BSC6900 software provides the highly efficient transmission
resource management algorithm;
3. Industry-leading technologies, delivering excellent performance;
4. Easy maintenance through the Web LMT;
5. Flexible networking.
The major security features implemented by BSC6900 software and
subject to evaluation are:
1. Authentication: Operators accessing the TOE in order to execute
device management functions are identified by individual user names
and authenticated by passwords. Also, the TOE connects with the
M2000 entity (external management element of the whole
communication solution). The communication with the M2000 is
protected connection using the SSL/TLS. Also an additional private
arithmetic process common to both parties is applied before the
authentication. Once the M2000 is properly connected the
interaction with the TOE is made by the utilization of a special
user (EMSCOMM) registered in the BSC6900 software.
2. Role-based access control: The TOE implements role-based access
control, limiting access to different management functionality to
different roles.
3. Auditing: Audit records are created for security-relevant events
related to the use of BSC6900 software. Huawei BSC6900 Multimode
Base Station Controller Software Security Target 2011-12-20 Huawei
BSC6900 Multimode Base Station Controller Software Security Target
Page 7/ 58
4. Communications security: BSC6900 software provides SSL/TLS
channels (for FTP, HTTP, MML, BIN) to access the TOE. 5. Management
of security functionality: The TOE offers management functionality
for its security functionality.
6. Digital signature: For the installation of GBTS managed element,
the TOE is able to check the software integrity of the package
previous to the installation of the element in order to verify its
integrity.
