PARC 03052748 BSC6900 POUC WP1D000POU01 WP11POUc 03051517 4 Port

Hua Wei PARC 03052748 BSC6900 POUC WP1D000POU01 WP11POUc 03051517 4-port IP over channelized Optical STM-1/OC-3

Huawei BSC6900 platform is an important Network Element (NE) of Huawei Single RAN solution. It adopts the industry-leading multiple Radio Access Technologies (RATs), IP transmission mode, and modular design. In addition, it is integrated with the functions of the Radio Network Controller (RNC) and Base Station Controller (BSC), thus
efficiently maintaining the trend of multi-RAT convergence in the mobile network. The BSC6900 operates as an integrated NE to access the GSM&UMTS network and integrates the functions of the GSM BSC and the UMTS RNC.
The BSC6900 software, running in the BSC6900 platform, is compatible with GSM and UMTS technologies. Nonetheless, one unique configuration and operation mode of the TOE, the BSC6900 software, is used. This mode belongs to the one obtained from the installation process. So, the configuration of the TOE according to the security features provided is always the same, independently of the technology used in operation (GSM or UMTS).

The BSC6900 software connects to the core networks and manages the base stations in the GSM and UMTS networks. The BSC6900 software performs functions such as radio resource management, base station management, power control, and handover control.
The BSC6900 software possesses the following functional features:
1. The BSC6900 software can work with GSM and UMTS technologies. Thus facilitating the smooth evolution from GSM to GSM&UMTS, and the evolution between GSM&UMTS and UMTS;
2. The BSC6900 software provides the highly efficient transmission resource management algorithm;
3. Industry-leading technologies, delivering excellent performance;
4. Easy maintenance through the Web LMT;
5. Flexible networking.

The major security features implemented by BSC6900 software and subject to
evaluation are:
1. Authentication: Operators accessing the TOE in order to execute device management functions are identified by individual user names and authenticated by passwords. Also, the TOE connects with the M2000 entity
(external management element of the whole communication solution). The communication with the M2000 is protected connection using the SSL/TLS. Also an additional private arithmetic process common to both parties is
applied before the authentication. Once the M2000 is properly connected the interaction with the TOE is made by the utilization of a special user (EMSCOMM) registered in the BSC6900 software.
2. Role-based access control: The TOE implements role-based access control, limiting access to different management functionality to different roles.
3. Auditing: Audit records are created for security-relevant events related to the use of BSC6900 software. 

4. Communications security: BSC6900 software provides SSL/TLS channels (for FTP, HTTP, MML, BIN) to access the TOE.
5. Management of security functionality: The TOE offers management functionality for its security functionality.
6. Digital signature: For the installation of GBTS managed element, the TOE is able to check the software integrity of the package previous to the installation of the element in order to verify its integrity.