Mobile device access list audit interface
|Publication Date:||1 January 2021|
In some countries, international mobile equipment identities (IMEIs) to be blacklisted, thus blocking access to the mobile network, or to be allowed (whitelisted) by the mobile network operators (MNOs), may be provided by a telecom authority or law enforcement agency (LEA) via mobile device identifier database (MDID). The mobile device access list as defined by the regulators under the country's governing laws and regulations are either directly provided to the MNOs by the authorities or only the access to these lists is provided to the MNOs instead of providing the actual lists.
There is no established mechanism to check and verify if the IMEI lists contained within each MNO's equipment identity register (EIR) contain all of the data provided by the various other IMEI sources and are therefore in compliance with locally mandated and/or agreed policies. Thus, there is a requirement to develop a common approach for audits and/or reconciliations of blacklist data to be undertaken.
This Recommendation suggests mechanisms to carry out such audits or reconciliations.