Network cabinets next to a window, with cabling coming in from the ceiling
Mobile identity governance

For every IMEI, IMSI and MSISDN, the response the operator sets.

The decision belongs to the operator; Sx-EIR applies and records it. The rule belongs to the operator. Sx-EIR applies it at every network check and records every response.

How the response works

Six responses, each according to its rule

Allow, observe, restrict and the legitimate-holder exception act in the network; alert and notify act outside it. Every response comes from a source with authority.

In the network · the status the switch receives

  • Allow
  • ObserveExample: Foreign IMSI without a roaming agreement or in permanent roaming (IMSI)Based on: Operator rule
  • RestrictblockingExample: Device reported as stolen (IMEI)Based on: Authority order
  • Legitimate-holder exceptionarrives as “allowed”Example: Repeated IMEI with a verified holder (IMEI + IMSI)Based on: Operator rule

Outside the network · what the operator does

  • Alertfraud deskExample: IMEI rotating through many IMSIs (IMEI + IMSI)Based on: Operator rule
  • Notifysubscriber noticeExample: Subsidized device with an IMSI from the operator's own network that the contract does not authorize (IMEI + authorized duplet)Based on: Service contract

For an IMSI, “observe” means detection and measurement. The response by MSISDN is resolved through IMSI–MSISDN mapping, with the IMSI present in the query.

On what authority

Every response comes from a source with authority

Illustrative situations.

Authority order

  • Device reported as stolenRestrictPillar: IMEI
  • MSISDN blocking orderRestrict, through IMSI–MSISDN mapping with the IMSI present in the queryPillar: MSISDN

Operator rule

  • Repeated IMEI with a verified holderLegitimate-holder exceptionPillar: IMEI + IMSI
  • Foreign IMSI without a roaming agreement or in permanent roamingObserve (detection and measurement); then restrict with noticePillar: IMSI
  • IMEI rotating through many IMSIsAlert the fraud deskPillar: IMEI + IMSI

Service contract

  • Subsidized device with an IMSI from the operator's own network that the contract does not authorizeNotify; restrict according to the contract and the country's legal frameworkPillar: IMEI + authorized duplet
Governance cycle

Diagnostic · Rules · Response · Evidence · Adjustment

Diagnostic

Interfaces, IMSI presence and IMSI–MSISDN mapping are confirmed. List sources and the legal framework are reviewed. Sizing and review are provided at no cost.

Step 5 returns to step 2 while the service is in force. The operator manages its rules with severity-based support from ATC, or ATC operates the cycle continuously under a service level agreement. The rules and the decisions remain the operator's.

Next step

Data is processed on the infrastructure the operator designates, under its control.

ATC reviews the platform the operator prioritizes and proposes the appropriate configuration. Sizing and review are provided at no cost.

  • Review of the platform and the network interfaces
  • Sizing according to the operator's infrastructure
  • Staged proposal: module, platform or delegated operation

3GPPGSMAITU-TTM Forum

No-cost review and sizing, without access to production.