No replies to this topic

[anonyme]

Hello devs,

Do you think it would be possible implementing an option disabling the sim toolkit support on the next ICS release?

The idea is to make it possible to filter or inform the user of STK activity.

I don't talk about the stk user interface support which can be removed by deleting the stk.apk

I talk about the "proactive SIM" support, the "call control by SIM" or the "data download to SIM" that is talked about in the chap 4 and 6 of the GSM11-14V5-2-0 specification

See also the chapter 5.1 "This procedure is important, as it is by this that the SIM knows what the ME is capable of, and the SIM
can then limit its instruction range accordingly. If no command is sent by the ME, the SIM shall assume that
the ME does not support SIM Application Toolkit."

The chapter ME could tell the SIM that it doesn't support STK.

In addition, it could be more secured to completely disable / modifiy the related functions from the android source.
For example, on layers between "RIL" and "Commands queue" on "android 1.0".

I don't know if the implementation between RIL and STK is still the same for ICS but the idea would be to avoid the SIM to be able to send SMS, initiate calls, intercept calls, download data without user approval.

An additional feature could be to send a message to the user each time the SIM sends a SMS or initiate a call using the STK when it is active, with the SMS content and recipient, call recipient.

Please tell me if it could be done for everybody or if people has to hack sources to make it possible.

Regards

references :
http://laforge.gnumo...smocom_simtrace
http://bb.osmocom.or...c/wiki/RebelSIM
"The RebelSIM is typically used for SIM unlocking phones. However, as it is a general proxy SIM, it can be used for any purpose, e.g. for filtering any STK commands between SIM and ME (to fully SIM toolkit)"