The BSC6900 software connects to the core networks and manages the base stations in the GSM and UMTS networks. The BSC6900 software performs functions such as radio resource management, base station management, power control, and handover control. The BSC6900 software possesses the following functional features: 1. The BSC6900 software can work with GSM and UMTS technologies. Thus facilitating the smooth evolution from GSM to GSM&UMTS, and the evolution between GSM&UMTS and UMTS, 2. The BSC6900 software provides the highly efficient transmission resource management algorithm, 3. Industry-leading technologies, delivering excellent performance, 4. Easy maintenance through the Web LMT, 5. Flexible networking. The major security features implemented by BSC6900 software and subject to evaluation are: 1. Authentication: Operators accessing the TOE in order to execute device management functions are identified by individual user names and authenticated by passwords. Also, the TOE connects with the M2000 entity (external management element of the whole communication solution). The communication with the M2000 is protected connection using the SSL/TLS. Also an additional private arithmetic process common to both parties is applied before the authentication. Once the M2000 is properly connected the interaction with the TOE is made by the utilization of a special user (EMSCOMM) registered in the BSC6900 software. 2. Role-based access control: The TOE implements role-based access control, limiting access to different management functionality to different roles. 3. Auditing: Audit records are created for security-relevant events related to the use of BSC6900 software. Huawei BSC6900 Multimode Base Station Controller Software Security Target 2011-12-20 Huawei BSC6900 Multimode Base Station Controller Software Security Target Page 7/ 58 4. Communications security: BSC6900 software provides SSL/TLS channels (for FTP, HTTP, MML, BIN) to access the TOE. 5. Management of security functionality: The TOE offers management functionality for its security functionality. 6. Digital signature: For the installation of GBTS managed element, the TOE is able to check the software integrity of the package previous to the installation of the element in order to verify its integrity.
