923359 - Support EAP-SIM

Status: RESOLVED FIXED

(Firefox OS Graveyard :: Vendcom, defect)

Description

[Shao Hang Kao [:skao]]

this is the tracking bug for EAP-SIM

Comment 1

[Shao Hang Kao [:skao]]

to summarize, we have 2 different concept to implement this:

1. without patching wpa_supplicant, we need help of pcsc-lite and implement related interface with 3 RIL requests: SIM_OPEN_CHANNEL, SIM_ACCESS_CHANNEL, SIM_CLOSE_CHANNEL
2. by patching wpa_supplicant, replace get imsi & authentication functions in pcsc.c, and call related apis in RIL or elsewhere.

Both concept need Qualcomm or vendor support (for 3 RIL requests or authentication apis)

Comment 2

[Ken Chang[:kenkai]]

This is a feature in 1.3.

Comment 3

[Shao Hang Kao [:skao]]

status update: since we'll need vendor's support to implement this, so now we proposed another approach to make things simpler:
* we simply tell wpa_supplicant to do EAP-SIM authentication (which was already done in bug 890694)
* chip set vendor support have their implementation in wpa_supplicant
* some patches for gecko may be needed
** set imsi as identity
*** this depends on whether imsi reading implemented in wpa_supplicant, if not we'll have to set it in setNetworkConfiguration (WifiWorker.js), ex. config.identity = quote("[e-mail]");
** deal with multi-sim
** send correct configuration to wpa_supplicant
*** depends on the implementation too, if implemented in the similar way we previously proposed (through pcsc) then we only have to set this config in setNetworkConfiguration (WifiWorker.js): config.pcsc = quote("");

Comment 4

[Shao Hang Kao [:skao]]

Update about latest design,

Gecko send the following parameters to wpa_supplicant:
network={
ssid="eapsim"
key_mgmt=WPA-EAP
eap=SIM
} 

Vendors have to handle eapsim identity/authentication in wpa_supplicant.

Comment 5

[Shao Hang Kao [:skao]]

Attachment: sim_funcs.c.patch

this is a patch for external/wpa_supplicant_8/src/utils/sim_funcs.c to testing with hard coded kc.

Comment 6

[Ken Chang[:kenkai]]

This bug is for tracking Vender status. it should not block user story.

Comment 7

[Wesley Huang [:wesley_huang] (EPM) (NI me)]

Hi Ken, Steven, 
Should we mark POVB on this bug, and assign to vendor?
Also I would like to know if there's ETA for it.

Comment 8

[Ken Chang[:kenkai]]

(In reply to Wesley Huang [:wesley_huang] from comment #7)
> Hi Ken, Steven, 
> Should we mark POVB on this bug, and assign to vendor?
Yes, it is a better method.

Comment 9

[vulcain]

@  Wesley Huang and @ Ken Chang: If i understand good, Firefox OS don't have software's support of EAP-SIM, it's only by device ?? Some phone could have support EAP-SIM and some not ??

Comment 10

[Wesley Huang [:wesley_huang] (EPM) (NI me)]

(In reply to vulcain from comment #9)
> @  Wesley Huang and @ Ken Chang: If i understand good, Firefox OS don't have
> software's support of EAP-SIM, it's only by device ?? Some phone could have
> support EAP-SIM and some not ??

In 1.3, FireFox OS should support EAP-SIM.
However, from my understanding, this will also depend on device as EAP-SIM requires interop between modem and WiFi module.

Comment 11

[Steven Yang [:styang]]

Sam, could you resume the works on EAM-SIM?

Comment 12

[sam.hua]

okay.
which route will moz continue now? RIL or WIFI?

Comment 13

[Wesley Huang [:wesley_huang] (EPM) (NI me)]

(In reply to sam.hua from comment #12)
> okay.
> which route will moz continue now? RIL or WIFI?

Dimi, 
Do you have answer for Sam's question?

Comment 14

[vulcain]

(In reply to sam.hua from comment #12)
> okay.
> which route will moz continue now? RIL or WIFI?

RIL means Radio Interface Layer ??
https://en.wikipedia.org/wiki/Radio_Interface_Layer

Comment 15

[sam.hua]

yes,
Use the following requests to send auth request to modem
this.REQUEST_SIM_OPEN_CHANNEL = 121;
this.REQUEST_SIM_CLOSE_CHANNEL = 122;
this.REQUEST_SIM_ACCESS_CHANNEL = 123;

Comment 16

[vulcain]

For information, it's RFC 4187: https://tools.ietf.org/html/rfc4186

Comment 17

[Ken Chang[:kenkai]]

(In reply to sam.hua from comment #12)
> okay.
> which route will moz continue now? RIL or WIFI?
Sam, James had told me that you modified the wpa_supplicate for getting authentication information from SIM via RILC. And that is what you did in Android phone. I think Shao-hang had worked on this with you for a long time before. You can contact with dimi to know more detail.

Comment 18

[Ken Chang[:kenkai]]

(In reply to vulcain from comment #14)
> (In reply to sam.hua from comment #12)
> > okay.
> > which route will moz continue now? RIL or WIFI?
> 
> RIL means Radio Interface Layer ??
> https://en.wikipedia.org/wiki/Radio_Interface_Layer

Yes, it is.

Comment 19

[Ken Chang[:kenkai]]

(In reply to vulcain from comment #16)
> For information, it's RFC 4187: https://tools.ietf.org/html/rfc4186

Thanks for this information. However, this is only to define EAP-SIM authentication flow. Currently, we need a method to get KC and SRES from SIM via RIL daemon. And the problem is there is not vendor provide method for getting these via RIL daemon. Even 3GPP had defined AT command for getting KC and SRES.

Comment 20

[vulcain]

(In reply to Ken Chang[:ken] from comment #19)

> Thanks for this information. However, this is only to define EAP-SIM
> authentication flow. Currently, we need a method to get KC and SRES from SIM
> via RIL daemon. And the problem is there is not vendor provide method for
> getting these via RIL daemon. Even 3GPP had defined AT command for getting
> KC and SRES.

ok

Comment 21

[Joe Cheng [:jcheng] (please needinfo)]

hi Steven, is our partner still working on this ? Thanks

Comment 22

[Steven Yang [:styang]]

Sam, could you let us know the current status? Thanks

Comment 23

[sam.hua]

There are two ways:

1 we can get the KC and SRES from SIM by sending AT directly to modem in WIFI without RILC support.

2 if we want to get them via RIL,we have finished the code in RILC but need the be verified.

Comment 24

[Jason Smith [:jsmith]]

We're past 1.3 feature complete here - are we still planning to do this? Renominating for more discussion.

Comment 25

[Ken Chang[:kenkai]]

(In reply to Jason Smith [:jsmith] from comment #24)
> We're past 1.3 feature complete here - are we still planning to do this?
> Renominating for more discussion.
For gecko part, EAP_SIM is supported and verified with a test fix in partner's code. 
This bug is for tracking partner's status. I don't think it is 1.3+.

Comment 26

[Ken Chang[:kenkai]]

(In reply to Wesley Huang [:wesley_huang] from comment #13)
> (In reply to sam.hua from comment #12)
> > okay.
> > which route will moz continue now? RIL or WIFI?
Sam, in current design and what we discussed before, you should make your WPA_Supplicant to get KC and SRES from your RILC directly. Thanks.

Comment 27

[sam.hua]

yes,our new modem bin will support it.

Comment 28

[kael]

What's the state of the implementation of EAP-SIM ?

I'm asking 'cos I'd like to test it with the french carrier Free Mobile which supports EAP-SIM.

Testing yesterday with the Peak and the last release of 1.4, the connection seemed to be established with the SSID but was then lost.

Is there something to do like activate a hidden parameter or something to make use of EAP-SIM with the Keon or the Peak ?

Comment 29

[Ken Chang[:kenkai]]

(In reply to kael from comment #28)
> What's the state of the implementation of EAP-SIM ?
> 
> I'm asking 'cos I'd like to test it with the french carrier Free Mobile
> which supports EAP-SIM.
> 
> Testing yesterday with the Peak and the last release of 1.4, the connection
> seemed to be established with the SSID but was then lost.
> 
> Is there something to do like activate a hidden parameter or something to
> make use of EAP-SIM with the Keon or the Peak ?
Besides to support EAP-SIM in Firefox OS, it still needs vendor's support in WPA supplicant. Currently, Keon and Peak doesn't support EAP-SIM.

Comment 30

[howie [:howie]]

according to comment 27, close this ticket.