bangladesh telecommunication regulatory commission · 2019. 7. 3. · bangladesh telecommunication...

1 Bangladesh Telecommunication Regulatory Commission (BTRC) www.btrc.gov.bd

BANGLADESH TELECOMMUNICATION REGULATORY COMMISSION

DRAFT DIRECTIVES ON EQUIPMENT IDENTITY REGISTER (EIR) FOR MOBILE

NETWORK OPERATORS IN BANGLADESH

The main objective of these “Directives on Equipment Identity Register (EIR) for Mobile

Network Operators in Bangladesh” is to ensure the obligations set forth in the relevant cellular

mobile phone regulatory and licensing guidelines (2G/3G/4G) for the Mobile Network

Operators to deploy EIR. In Bangladesh, it has posed severe security challenges in regard to

device operability, illegal importation, theft, organized crimes, health hazard, availability of

fake and non-genuine mobile phone handsets, revenue losses etc. To address all such

challenges, there should be some regulatory and preventing mechanism. The Equipment

Identity Register (EIR) would be a database of all IMEI numbers consists of several types of

lists (e.g. black, white, grey etc.) of mobile phone handsets. Moreover, these Directives will

ensure effective actions in order to combat the illegal importation, supply and use of

counterfeit/non-standard/unauthorized mobile handsets by implementing EIRs at the MNOs

network.

The below directives were published in BTRC`s website few months back for public

consultation. After that some corrections have been made in the subjected directives. Now

BTRC would like to seek views again from the industry and consumers on any issues related to

these amended draft Directives. In other words, it is preferred that the clause in relation to which

a specific point/opinion is being expressed is clearly mentioned in the e-mail.

While expressing your views/opinion in the feedback e-mail please mention in the subject field

of the e-mail in the following way:

Subject: Response to the Public Consultation on Draft “Directives on Equipment Identity

Register (EIR) for Mobile Network Operators in Bangladesh”

E-mail Addresses for Feedback

[email protected]

[email protected]

[email protected]

Last Date for Submission of Opinion/Feedback

18 July, 2019

https://en.wikipedia.org/wiki/IMEI

https://en.wikipedia.org/wiki/Blacklist_(computing)


REF. NO.: 14.32.0000.500. DATE: -05-2019

DIRECTIVES ON EQUIPMENT IDENTITY REGISTER (EIR) FOR MOBILE NETWORK

OPERATORS IN BANGLADESH

BANGLADESH TELECOMMUNICATION REGULATORY COMMISSION (BTRC)

IEB BHABAN (5, 6 & 7 FLOOR), RAMNA, DHAKA-1000


CONTENTS

1. INTRODUCTION .............................................................................................................................................. 4

2. OBJECTIVES ..................................................................................................................................................... 4

3. SCOPE ................................................................................................................................................................. 4

4. REGULATORY OBLIGATIONS ..................................................................................................................... 5

5. NETWORK ARCHITECTURE……………………………………………………………………………….5

6. FUNCTIONAL REQUIREMENTS .................................................................................................................. 5

7. REGISTRATION PROCESS FLOW ............................................................................................................... 9

8. DEVICE DE-REGISTRATION ...................................................................................................................... 10

9. SPECIAL REGISTRATION ............................................................................................................................ 11

10. DEVICE LOST/STOLEN ................................................................................................................................. 12

11. IMPLEMENTATION STEPS ......................................................................................................................... 13

12. MISCELLANEOUS ......................................................................................................................................... 14

13. ABBREVIATIONS…………………………………………………………………………………………....14

14. DEFINITIONS……………………………………………………………………………………………..….14

ANNEXURE-1 ........................................................................................................................................................... 18


1. INTRODUCTION

1.1 The advancements and availability of all mobile handset devices e.g. basic-phone, smart-

phone, tablet etc. have been proliferated significantly. In Bangladesh, it has posed

numerous challenges in regard to device operability, illegal importation, theft, organized

crimes, health hazard, availability of fake and non-genuine mobile phone handsets, revenue

losses etc. To address all such challenges, there should be some regulatory and preventing

mechanism. The Equipment Identity Register (EIR) is a database (DB) of all IMEI numbers

consists of several types of lists (e.g. black, white, grey etc.) of mobile phone handsets.

1.2 The Commission encourages the efficient development of a telecommunication system that

enhances and strengthens the social and economic welfare of Bangladesh. The Commission

protects the social and economic interests of the consumers, responses to their needs, and

controls existing and probable oppressive or discriminatory conduct or activities in the

telecommunication sector.

1.3 To ensure the obligations set forth in the relevant cellular mobile phone regulatory and

licensing guidelines for the Mobile Network Operators (MNO) to deploy EIR module to

determine whether mobile terminals (e.g. mobile phones, Tabs, laptop, data cards, etc.)

registered with them are genuine and authorized. EIR module would allow the operators to

control access to mobile networks and to prevent the use of stolen, fraudulent and cloned

devices on the network. This applies to all 2G, 3G and 4G/LTE voice and data networks.

2. OBJECTIVES

2.1 The objective of this document is to describe and define the rules/instructions,

procedure and processes with a view to formulate operational and regulatory

framework for the successful implementation of Equipment Identity Register (EIR)

system in the mobile phone operator’s network.

2.2 The objective of EIR systems is to define the processes of mobile device registration

& access control using MNOs network and communication among NAID, EIR and NEIR.

BTRC’s enlisted vendors, importers, manufacturers and individual users will have to

register their devices into the NAID & EIR as applicable.

3. SCOPE

These directives are developed in order to set a regulatory and operational framework in

regard to mobile handset registration and access control mechanism. The EIR system will

have the total database of access equipment for a particular mobile network which will

ultimately be fed in to NEIR system. NEIR will perform the IMEI listings as well as to take

decision on the disposal of any illegal devices from the network.




4. REGULATORY OBLIGATIONS

4.1 As per Regulatory and Licensing Guidelines for establishing, operating and

maintaining 2G and 3G Cellular Mobile Phone Services, MNOs are responsible to

implement IMEI barring and EIR system in the network of the MNOs. More so, in

the 4G/LTE Cellular Mobile Phone Services Operator License, states as below:

“31.03 The Licensee shall ensure to implement Equipment Identity Register (EIR)

or related module in the network or as directed by the Commission. The Licensee

shall also ensure that the duplication of IMEI is not allowed in its network.”

4.2 The MNOs shall design, develop, build, install, operate and maintain their

respective EIR system which shall include all the features instructed by BTRC time

to time. It is to be mentioned that all MNOs should develop their respective EIR

having a common design and architecture compatible with NEIR which will be

determined by BTRC.

4.3 Once NEIR is established then MNOs will migrate all related data from their

respective EIR to the NEIR and maintain real time synchronization. Thereafter, all

activities (e.g. registration/de-registration, white/grey/black listing, IMEI blocking

etc.) will be controlled centrally from NEIR. However, basing on the instruction

from BTRC, MNOs EIR can also be used for the interest of Government, LEAs,

Customs, device users etc.


5. NETWORK ARCHITECTURE

Figure 1: NEIR system (Integrations of EIR, databases and stakeholders)

6. FUNCTIONAL REQUIREMENTS:

NIER will be the central system that will provide the ability to check any mobile devices,

ensure their network access eligibility based on BTRC directives time to time. It will lock

the MSISDN, IMEI, IMSI and NID of a user together and store it in the database. Based

on the specified criteria it will maintain a Black List, Grey List & White List etc.

All EIRs will be connected with NEIR established at BTRC. EIR will check all the device

type and maintain the database of mobile handsets along with other devices exists in their


network. Any mobile device not found in their lists during access the network, they will

forward necessary information to NEIR. NEIR will validate the information with the help

of NAID, GSMA DB and CVBMP. Then it will populate the database and NEIR will

provide the updated list of WL, GL, BL etc to EIR, after that the lists will be synced with

EIR periodically. EIR will be the access control gate keeper, it will grant/block access

based on NEIR provided lists.

6.1 Equipment Identity Register (EIR): The Equipment Identity Register (EIR)

database should be installed, maintained by MNO. It will contain the record of all

mobile stations/devices that are active in their own network. It will also restrict the

lost, stolen, reported devices according to the lists provided by NEIR. MNOs will

provide IMEI and MSISDN related information (required data/information) of all

users directly to NEIR in order to operate and manage lists or database.

EIR database will contain lists of IMEIs of all the mobile devices provided by

NEIR. The white list will consist of IMEIs of devices that are permitted to use. The

grey list consists of devices that does not conform to the standards but could be

permitted to connect under supervision or triggering an alert. The black list will

consist of IMEIs of devices which have been reported stolen or lost or shifted from

grey list after certain grace period is over and they are been denied access to the

network.

In the case of a complaint regarding lost/stolen handset, MNO shall receive the

complaint through their customer care center. In this regard, legal document (e.g.

GD copy) and ownership authentication will be verified. Thus, it will be forwarded

to NEIR in order to entry the device to be recorded in the Lost/Stolen List (LSL)

etc. Once this IMEI is declared to be in the Lost/Stolen List (LSL), same

notification will be forwarded to all EIRs of MNOs.

6.2 National Equipment Identity Register (NEIR): BTRC will build, operate and

manage a NEIR system. It would be a central database of all kinds of lists e.g. white,

grey, black etc. It will have a total statistic on the number of handset types exists

both in the network and not yet activated in the network but registered by NAID.

Different analytical report will be generated basing on the data stored in NEIR.

Once NEIR is implemented, all active devices under all MNOs shall be migrated

to NEIR. NEIR will have a complete database of existing device irrespective of

illegal/cloned/duplicated/void IMEI. NEIR shall be connected with CBVMP,

NAID and GSMA database for verification. NEIR shall create and maintain White

list, Grey list and Black list and synchronized with EIR. When a new mobile device

attempts for device registration, respective MNO shall send the MSISDN, IMEI

and other attributes (i.e. brand name, model number, IMSI, frequency band etc.) as

required by BTRC, to NEIR for verification. NEIR shall check the MSISDN with

CBVMP and IMEI with NAID, GSMA DB and existing device database for

necessary verification. Once verification is done NEIR shall provide information to

EIR to access/deny in respective networks. NEIR shall include the attempted IMEI

to respective list (WL/GL/BL) and the changes at the list shall be appended to all

EIRs accordingly.


MNOs shall ensure the compatibility to be connected with NEIR including but not

limited to connectivity, protocol, API etc. Necessary instructions related to

integration will be given by BTRC from time to time.

6.3 NOC Automation & IMEI Database (NAID): BTRC’s enlisted local handset

manufacturer and mobile phone importers can apply and receive the NOC

certificate for mobile phone importation through online system. An IMEI database

is also in-built with this system. IMEI numbers for both legally imported mobile

handsets as well as locally assembled/manufactured mobile handsets will be listed

to the system. Besides these IMEI numbers, database will also store all other

necessary attributes of mobile devices such as TAC, device name, model, device

image, device supported frequency bands, etc.

Using this NAID system, end user/subscriber is able to check the authenticity of a

handset by querying the IMEI database via SMS or through online.

NAID would be integrated to NEIR system for real-time device registration

checking and validation purposes.

These IMEI from NAID will be updated to NEIR and then to EIRs. NEIR will

prepare various list (eg. White list) which will be updated to EIR.

6.4 The steps of NEIR functionality:

(a) Subscribers will request access into the MNOs and MNOs will record IMEI,

MSISDN, IMSI and other attributes in the respective EIR of their own

subscribers.

(b) EIR will check if the device (IMEI) is a valid device type other than mobile

phone by the device ID flag. E.g. Vehicle tracking, Digital utility meters,

Modems etc. EIR will allow these network access.

(c) If the device is detected as a mobile phone EIR will check if the composite

number (IMEI) exists in the BL and/or LSL provided by the NEIR. If the device

exists in BL and/or LSL, EIR will deny the access of the device to the network.

(d) If not, EIR will check WL/GL/RL and if the composite number

(IMEI+MSISDN) exists, EIR will allow network access.

(e) If not, EIR system checks if IMEI found WL/GL with different MSISDN. Then

it will check if the MSISDN registered under same NID or not. If yes, then EIR

will allow network access and update the WL. If not, it will check NID and

MSISDN of the new user, if those matches with the registration it will allow

network access for new NID & MSISDN and update the WL. If the registration


of the new NID and MSISDN does not found then one SMS will be generated

to the old user for de-registration or to complaint further.

(f) If it is found that the IMEI is completely new, then it will check whether the

attached MSISDN is a roaming MSISDN or not.

(g) If yes, it will forward to NEIR to check whether it exists in GSMA BL or not.

If no, EIR will allow the device and the IMEI+MSISDN will be updated to RL.

Otherwise it will deny network access.

(h) If no, EIR will forward the request to NEIR for further process. NEIR will check

the MSISDN exist in CBVMP or not. If no, NEIR will direct EIR to deny

network access. if yes NEIR will check the IMEI exist in GSMA BL or not. If

yes, NEIR will direct EIR to deny network access and update BL. If no, NEIR

will check the IMEI exist in NAID or not. If not, NEIR will direct EIR to deny

network access and update BL. Otherwise it will allow network access and

update new entry (IMEI+MSISDN+IMSI+NID) in WL.


7. REGISTRATION PROCESS FLOW


8. DEVICE DE-REGISTRATION

8.1 Deregistration is detaching the IMEI from MSISDN/NID. Subscriber can de-

register their device by using a USSD code from their device or through the Customer

Care Center of MNO with their NID.

8.2 If the device is listed in any BL they will remain there. Otherwise after

deregistration IMEI number will be removed from all other lists in NEIR and added to

archives.

8.3 All the MSISDNs tagged with that IMEI will be automatically unbound and device

will be ready for registration.


9. SPECIAL REGISTRATION

9.1 Foreigners can acquire local MSISDN using their passport as mentioned in the

directive regarding subscriber registration through biometric verification issued by

Commission. If the MSISDN exist in CBVMP, the general process to get registered

in NEIR shall be followed accordingly.

9.2 For international roamers having foreign MSISDN & IMSI, NEIR system shall

check the IMEI with GSMA blacklist. If the IMEI that particular device is not listed

in GSMA BL, straightaway that device shall be included to Roaming List (RL) in

NEIR and allowed in the roaming network for roaming service only. Deregistration

is not required for roamers.

9.3 Individuals importing/carrying mobile devices from abroad for personal use will be

required to register IMEI of the devices in the NEIR through Personal/Manual/web

registration interface provided by NEIR.


10. DEVICE LOST/ STOLEN

10.1 If a device is lost or stolen the subscriber shall have to file a General Diary (GD) in

local police station and go to Customer Care Center of MNO of the SIM with the copy of

GD & NID to make a complaint and block the stolen device.

10.2 After EIR verifies the information the device, request shall be forwarded to NEIR for

further action. NEIR, after necessary verification, shall shift the IMEI from previous list

(except BL) to Lost/Stolen List (LSL) thus blocked from all MNO network access. If the

IMEI is already in BL it will remain there, no further action will be taken.


11. IMPLEMENTATION STEPS

11.1 Initial Implementation

A. MNOs will allow all the IMEI of the subscribers in their existing network and

register those in their respective EIR. The Commission will give a specific

timeline or date to integrate all of the data/information to NEIR.

B. NEIR will prepare a list of all those subscribers even with

faulty/duplicate/NULL IMEI for a specific period of time. After that no further

duplicate, NULL, cloned etc. devices would be allowed to be registered in the

EIR, only the new devices with authentic IMEI verified from NEIR will be

allowed in the MNO`s network.

11.2 Full Enforcement

A. After the specific time period decided by the Commission IMEI & SIM only

validated IMEI by NEIR will be allowed in the network.

B. All null, clone or invalid IMEIs will not be allowed.

11.3 MNOs shall have to deploy and implement their EIR system within 2 months of

issuance of this directive. Once the NEIR is established, EIRs shall be connected with

NEIR and the system will be commenced officially.

12. INTEGRATION WITH NEIR

All the MNOs shall keep necessary provisions in their EIR systems in order to integrate

with the central NEIR system installed at BTRC. In this regard, following provisions are

required:

a) MNOs shall keep the EIR properly synchronized and updated with NEIR

b) MNOs shall keep records sending /or receiving modules to/or from NEIR

c) EIRs should have API exposed for integration.

d) Various reports/data will be exchanged between the MNO’s EIR and

NEIR DB.

e) EIR shall be scalable to meet the present and future requirement.

f) EIR shall be interoperable with all the appropriate network elements and

interfaces.

g) EIR shall perform a check on the IMEI format to verify it is of a valid format

and range.

h) Other specifications related to integration will be given by BTRC from time

to time.

i) In relevant context, rules, procedures, instructions implied for NEIR would

also be applicable for EIR.


13. MISCELLANEOUS

13.1 The directive shall be read in conjunction with the Bangladesh Telecommunication

Regulatory Act-2001 (amended), any subsequent legislation and prevent laws or sector

policies framed by the Government and other rules, regulations, decrees, orders, decisions,

guidelines and directives issued by the Government or the Commission from time to time.

13.2 These directives may be withdrawn, revised, updated or amended from time to time

taking into consideration various factors including but not limited to national security and

Court orders.

13.3 These directives shall come into effect from the date of issuance by BTRC.

13.4 The Commission may impose appropriate legal action for the violation of any of

the provisions of these directives.

13.5 MNOs shall not disclose the contents of any data, except to the extent permitted by

BTRC in writing or through any regulations/instructions/directives etc. MNOs shall take

all reasonable measures to safeguard the databases from unauthorized interception or

unauthorized access.

13.6 In case of any doubt regarding interpretation of any of the provisions of these

directives, the clarification of the Commission shall be final authority.

13.7 All lists (BL, GL, WL, LSL etc) will be provided by NEIR and MNOs will take action as per

the instruction given by the Commission.

14. ABBREVIATIONS

The abbreviations of the terms used in this directive are annexed herewith as ANNEXURE-1.

15. DEFINITIONS

Unless the context otherwise requires, the different terms and expression used in the

instruction shall have the following meaning assigned to them.

1. “Act” means the Bangladesh Telecommunication Act, 2001 (Act No. XVIII of 2001).

2. “Commission” means the Bangladesh Telecommunication Regulatory Commission

established under the Bangladesh Telecommunication Act 2001.

3. “Customer” means any person who uses the services or purchases the products of a


particular licensee or vendor, without necessarily being a subscriber to that licensee or

vendor;

4. “License” means an license issued or deemed to have been issued by the Commission under

the Act for establishing or operating a telecommunication system or for providing

telecommunication service or for operating or maintaining such system or service or for

using a radio apparatus.

5. “Licensee” means the person/ organization to whom/ which the Commission has issued a

License.

6. “Operator” means an organization or a person licensed for establishing or operating a

telecommunication system or providing telecommunication service or operating a system

which is the combination or more than one of those facilities.

7. “Regulation” means, regulations made or will be made in the future by the Commission

under the Act.

8. “Subscriber” means any person who purchases a communications service or agrees to

receive and pay for the service from a licensee through a subscriber service agreement;

9. “Telecommunication” means transmission and reception of any speech, sound, sign, signal,

writing, visual image and any other intellectual expression by the way of using electricity

or electro-magnetic or electro-chemical or electro-mechanical energy through cable, radio,

optical fiber or other electro-magnetic or electro-chemical or electro- mechanical or

satellite communication system.

10. “Telecommunication Service” means any services provided under the Act.

11. “Telecommunication System” means a combination of the telecommunication apparatus

(e.g. switching system, transmission apparatus, terminal apparatus, satellite etc.) whether

or not this equipment are visibly connected with one another, or whether or not they are

combined in using the transmission or reception of any information or message.

12. “Vendor” means a person who carries out the business of selling, reselling or distributing

ICT terminal equipment used for the provision of licensed services.

13. “EIR” means Equipment Identity Register. It is a database (DB) of all IMEI numbers

consists of several types of lists (e.g. black, white, grey etc.) of mobile phone handsets.

14. “IMEI” means International Mobile Equipment Identity. It is a 15- or 17-digit code that

uniquely identifies mobile phone sets. In most mobile communications devices, the IMEI

appears on the display when the user enters the character sequence *#06# into the keypad.

The IMEI code may also be printed inside the battery compartment. When a phone set is

lost or stolen, the owner can call the EIR/CEIR (Central Equipment Identity Register) and

blacklist the device according to its IMEI number. After that action, the set will in most

cases become useless, even if someone swaps out the unit's SIM card. The IMEI code can

enable a GSM (Global System for Mobile communication) or UMTS (Universal Mobile

Telecommunications Service) network to prevent a misplaced or stolen phone from

initiating calls. Immediately after purchasing a mobile communications device, the owner

should record the IMEI code in a secure place so that it can be quickly accessed in the event

of loss or theft.

15. “IMSI” means International mobile subscriber identity. It is a unique number, usually 15




digits, associated with Global System for Mobile Communications (GSM) and Universal

Mobile Telecommunications System (UMTS) network mobile phone users. This number

has 2 parts. The initial part is comprised of 6 digits in the North American standard and 5

digits in the European standard. It identifies the network operator in a specific country with

whom the subscriber holds an account. The second part is allocated by the network operator

to uniquely identify the subscriber. The IMSI is stored in the subscriber identity module

inside the phone and is sent by the phone to the appropriate network. The IMSI is used to

acquire the details of the mobile in the home location register (HLR) or the visitor location

register (VLR).

16. “MSISDN” means Mobile Station International Subscriber Directory Number. MSISDN

is a number used to identify a mobile phone number internationally. MSISDN is defined

by the E.164 numbering plan. This number includes a country code and a National

Destination Code which identifies the subscriber's operator.

17. “CBVMP” means Central Biometric Verification Monitoring Platform. It is a server setup

to look upon the Biometric SIM verification documents of all mobile network operators in

Bangladesh. The System comprises the modules of Master Settings & Configuration,

Security and Exception Handling, NID Verification; Passport Verification, Queue

Management, Report Module.

18. “NAID” means NOC Automation and IMEI database. IMEI numbers for both legally

imported mobile handsets as well as locally assembled/manufactured mobile handsets will

be listed to the system.

19. “NEIR” means National Equipment Identity Register. The system solution would be like a

centralized database registry of all mobile devices (IMEI), which keeps information about

all the mobile devices registered within the country using all MNO`s EIR. The information

about the un-registered devices can also be detected by the operator’s network. The

advantage in having the NEIR is that it will empower each network operator to restrict or

prevent the operation of any given mobile handset throughout all MNO`s network that are

linked to NEIR.

20. “White list” is the list that comprises the IMEI ranges of all the mobile stations that have

been manufactured and imported legally, registered in the BTRC’s NAID and the devices

are legitimate to be used.

21. “Grey list” is the list in which any suspected mobile device appears and those will be

allowed to function but will trigger an alert to the network operator.

22. “Black list” is such a list in which mobile devices that are lost or stolen can be listed which

will prevent them from functioning on the home network or other global networks. Devices

may be Blacklisted for one or more following reasons:

▪ IMEI is reported as stolen or lost locally.

▪ IMEI is reported as stolen or lost according to GSMA.

▪ IMEI is invalid and has expired some grace period i.e. it is no longer in the

notification list.

▪ IMEI is duplicate and expired specific grace period i.e. it is no longer in the

notification list.


▪ Mobile device purchased on Equated Monthly Installment (EMI) and defaulter to

pay back.

▪ Black list will include IMEI of the device

23. “Roaming list” is a list in which IMEI of mobile devices of the roamers from abroad

subscribing roaming service in Bangladesh can be listed. This list will include IMEI of the

device and MSISDN of that person.

24. “Lost/Stolen List” is a list that comprises mobile devices of a subscriber which is reported

as stolen for at least once to the Customer Care Center of MNO. This list will include IMEI

of the device and MSISDN & NID of that subscriber.


ANNEXURE-1

ABBREVIATIONS

3GPP 3rd Generation Partnership Project

BTRC Bangladesh Telecommunication Regulatory Commission

CBVMP Central Biometric Verification Monitoring Platform

CEIR Central Equipment Identity Register

EIR Equipment Identity Register

IMEI International Mobile Equipment Identity

IMSI International Mobile Subscriber Identity

LEA Law Enforcing Agencies

MNO Mobile Network Operator

MSISDN Mobile Station International Subscriber Directory Number

NAID NOC Automation and IMEI Database

NEIR National Equipment Identity Register

NID National Identity/Identification

DB Database

BL Black List

GL Grey List

WL White List

VL VIP List

LSL Lost/Stolen List

RL Roaming List

bangladesh telecommunication regulatory commission · 2019. 7. 3. · bangladesh telecommunication...

Documents