Authentication GSM network authentication (challenge-response mechanism) Ki = individual subscriber auth key (in SIM & AUC + HLR-VLR) (never transmitted) AUC (Authentication Center) --(RAND 128bits-> MS (Mobile) MS --(SignedRes(A3(RAND)Ki)--> AUC If ok -> auth