International Mobile Station Equipment Identity - Wikipedia, the free encyclopedia Page 1 of 5

International Mobile Station Equipment Identity

From Wikipedia, the free encyclopedia

The International Mobile Station Equipment Identity or IMEI /aɪˈmiː/[1] is a number, usually unique,[2][3] to identify 3GPP
(i.e., GSM, UMTS and LTE) and iDEN mobile phones, as well as some satellite phones. It is usually found printed inside the
battery compartment of the phone, but can also be displayed on-screen on most phones by entering *#06# on the dialpad, or
alongside other system information in the settings menu on smartphone operating systems.

The IMEI number is used by a GSM network to identify valid devices and therefore can be used for stopping a stolen phone
from accessing that network. For example, if a mobile phone is stolen, the owner can call his or her network provider and
instruct them to "blacklist" the phone using its IMEI number. This renders the phone useless on that network and sometimes
other networks too, whether or not the phone's SIM is changed.

The IMEI is only used for identifying the device and has no permanent or semi-permanent relation to the subscriber. Instead,
the subscriber is identified by transmission of an IMSI number, which is stored on a SIM card that can (in theory) be
transferred to any handset. However, many network and security features are enabled by knowing the current device being
used by a subscriber.

Contents
◾ 1 IMEI and the law
◾ 1.1 Blacklists of stolen devices
◾ 1.2 Limitations
◾ 1.3 Lawful interception
◾ 2 Structure of the IMEI and IMEISV (IMEI Software Version)
◾ 2.1 Check digit computation
◾ 3 Usage on satellite phone networks
◾ 4 See also
◾ 5 References
◾ 6 External links

IMEI and the law

Many countries have acknowledged the use of the IMEI in reducing the effect of mobile phone theft. For example, in the
United Kingdom, under the Mobile Telephones (Re-programming) Act, changing the IMEI of a phone, or possessing
equipment that can change it, is considered an offence under some circumstance.[4][5]

IMEI blocking is not the only approach available for combating phone theft. For example, mobile operators in Singapore are
not required by the regulator to implement phone blocking or tracing systems, IMEI-based or other. The regulator has
expressed its doubts on the real effectiveness of this kind of system in the context of the mobile market in Singapore. Instead,
mobile operators are encouraged to take measures such as the immediate suspension of service and the replacement of SIM
cards in case of loss or theft.[6]

There is a misunderstanding amongst some regulators that the existence of a formally allocated IMEI number range for a
GSM terminal implies that the terminal is approved or complies with regulatory requirements. This is not the case. The
linkage between regulatory approval and IMEI allocation was removed in April 2000, with the introduction of the European

http://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity 4/14/2015
International Mobile Station Equipment Identity - Wikipedia, the free encyclopedia Page 2 of 5

R&TTE Directive.[7] Since that date, IMEIs have been allocated by BABT (or one of several other regional administrators
acting on behalf of the GSM Association) to legitimate GSM terminal manufacturers without the need to provide evidence of
approval.

Blacklists of stolen devices

When mobile equipment is stolen or lost, the owner can contact their local operator with a request that it should be blocked
from the operator's network, and the operator can be expected to do so if required by law in the operator's jurisdiction. If the
local operator possesses an Equipment Identity Register (EIR), it then may put the device IMEI into it, and can optionally
communicate this to shared registries, such as the Central Equipment Identity Register (CEIR) which blacklists the device in
switches of other operators that use the CEIR. With this blacklisting in place the device becomes unusable on any operator
that uses the CEIR, making theft of mobile equipment a useless business proposition, unless for parts.

The IMEI number is not supposed to be easy to change, making the CEIR blacklisting effective. However this is not always
the case: a phone's IMEI may be easy to change with special tools. In addition, IMEI is an un-authenticated mobile identifier
(as opposed to IMSI, which is routinely being authenticated by home and serving mobile networks.) Spoofed IMEI can thwart
all efforts to track handsets, or target handsets for Lawful Intercept. Australia was first to implement IMEI blocking across all
GSM networks, in 2003.[8]

In the UK, a voluntary charter operated by the mobile networks ensures that any operator's blacklisting of a handset is
communicated to the Central Equipment Identity Register (CEIR) and subsequently to all other networks. This ensures the
handset will be unusable for calls often quite quickly and, in any case, within 48 hours.

All UK Police forces including the Metropolitan Police Service actively check IMEI numbers of phones found involved in
crime, against the National Mobile Property Register (NMPR). The NMPR draws its information from many property
databases. One of the databases consulted is Immobilise,[9] which allows optional (and free) registration of devices by the
public. Such registration ensures that a device coming into Police possession may be easily reunited with its registered keeper.

In New Zealand the NZ Telecommunications Forum Inc [10] provide a blocked IMEI lookup service for New Zealand
consumers. The service allows up to 3 lookups per day [11] and checks against a database that is updated daily by the 3 major
mobile network operators. A blocked IMEI cannot be connected to any of these 3 operators.

In some countries, such blacklisting is not customary. In 2012, major network companies in the United States, under
government pressure, committed to introduce a blacklisting service, but it's not clear whether it will interoperate with the
CEIR.[12][13] GSM carriers AT&T and T-Mobile began blocking newly reported IMEIs in November 2012.[14] (Thefts reported
prior to November 2012 were not added to the database.)

It is unclear whether local barring of IMEI has any positive effect as it may result in international smuggling of stolen phones.
[15]

Limitations

IMEIs can sometimes be unlisted depending on local arrangements. This would typically include quoting a password which
was chosen at the time the blacklisting was applied..

Lawful interception

A target for lawful interception (wiretapping) can be specified by its IMEI number as well as IMSI and MSISDN.[16]

Structure of the IMEI and IMEISV (IMEI Software Version)

The IMEI (15 decimal digits: 14 digits plus a check digit) or IMEISV (16 digits) includes information on the origin, model,
and serial number of the device. The structure of the IMEI/SV are specified in 3GPP TS 23.003
(http://www.3gpp.org/ftp/Specs/html-info/23003.htm). The model and origin comprise the initial 8-digit portion of the

http://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity 4/14/2015
International Mobile Station Equipment Identity - Wikipedia, the free encyclopedia Page 3 of 5

IMEI/SV, known as the Type Allocation Code (TAC). The remainder of the IMEI is manufacturer-defined, with a Luhn
check digit at the end. For the IMEI format prior to 2003, the GSMA guideline was to have this Check Digit always
transmitted to the network as zero. This guideline seems to have disappeared for the format valid from 2003 and onwards.[17]

As of 2004, the format of the IMEI is AA-BBBBBB-CCCCCC-D, although it may not always be displayed this way. The
IMEISV drops the Luhn check digit in favour of an additional two digits for the Software Version Number (SVN), making
the format AA-BBBBBB-CCCCCC-EE

AA - BB BB BB - CC CC CC D or EE
Old IMEI TAC FAC
(Optional) Luhn checksum
New IMEI TAC
Serial number
Old IMEISV TAC FAC
Software Version Number (SVN).
New IMEISV TAC

Prior to 2002, the TAC was six digits long and was followed by a two-digit Final Assembly Code (FAC), which was a
manufacturer-specific code indicating the location of the device's construction. From January 1, 2003 until that April 1, 2004,
the FAC for all phones was 00. After April 1, 2004, the Final Assembly Code ceased to exist and the Type Allocation Code
increased to eight digits in length.

In any of the above cases, the first two digits of the TAC are the Reporting Body Identifier, which identifies the GSMA-
approved group that allocated the TAC. The RBI numbers are allocated by the Global Decimal Administrator. IMEI numbers
being decimal allows them to be distinguished from an MEID, which is hexadecimal and always has 0xA0 or larger as its first
two digits.

For example, the old style IMEI code 35-209900-176148-1 or IMEISV code 35-209900-176148-23 tells us the following:

TAC: 35-2099 - issued by the BABT (code 35) with the allocation number 2099
FAC: 00 - indicating the phone was made during the transition period when FACs were being removed.
SNR: 176148 - uniquely identifying a unit of this model
CD: 1 so it is a GSM Phase 2 or higher
SVN: 23 - The "software version number" identifying the revision of the software installed on the phone. 99 is
reserved.

By contrast, the new style IMEI code 49-015420-323751 has an 8-digit TAC of 49-015420.

The new CDMA Mobile Equipment Identifier (MEID) uses the same basic format as the IMEI.

Check digit computation

The last number of the IMEI is a check digit calculated using the Luhn algorithm.

According to the IMEI Allocation and Approval Guidelines (http://www.gsma.com/documents/ts-06-6-0-imei-allocation-and-

approval-guidelines/20164/),

The Check Digit shall be calculated according to Luhn formula (ISO/IEC 7812). (See GSM 02.16 / 3GPP
22.016). The Check Digit is a function of all other digits in the IMEI. The Software Version Number (SVN) of a
mobile is not included in the calculation.

The purpose of the Check Digit is to help guard against the possibility of incorrect entries to the CEIR and EIR
equipment.

The presentation of the Check Digit both electronically and in printed form on the label and packaging is very
important. Logistics (using bar-code reader) and EIR/CEIR administration cannot use the Check Digit unless it is
printed outside of the packaging, and on the ME IMEI/Type Accreditation label.

http://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity 4/14/2015
International Mobile Station Equipment Identity - Wikipedia, the free encyclopedia Page 4 of 5

The check digit is not transmitted over the radio interface, nor is it stored in the EIR database at any point.
Therefore, all references to the last three or six digits of an IMEI refer to the actual IMEI number, to which the
check digit does not belong.

The check digit is validated in three steps:

1. Starting from the right, double every other digit (e.g., 7 → 14).
2. Sum the digits (e.g., 14 → 1 + 4).
3. Check if the sum is divisible by 10.

Conversely, one can calculate the IMEI by choosing the check digit that would give a sum divisible by 10. For the example
IMEI 49015420323751?,

IMEI 4 9 0 1 5 4 2 0 3 2 3 7 5 1 ?
Double every other 4 18 0 2 5 8 2 0 3 4 3 14 5 2 ?
Sum digits 4 + (1 + 8) + 0 + 2 + 5 + 8 + 2 + 0 + 3 + 4 + 3 + (1 + 4) + 5 + 2 + ? = 52 + ?

To make the sum divisible by 10, we set ? = 8, so the IMEI is 490154203237518.

Usage on satellite phone networks

The BGAN, Iridium and Thuraya satellite phone networks all use IMEI numbers on their transceiver units as well as SIM
cards in much the same way as GSM phones do. The Iridium 9601 modem relies solely on its IMEI number for identification
and uses no SIM card; however, Iridium is a proprietary network and the device is incompatible with regular GSM networks.

See also
◾ International Mobile Subscriber Identity
◾ Luhn algorithm
◾ Mobile Equipment Identifier
◾ Mobile phone
◾ SIM lock

References
1. "3GPP TS 22.016: International Mobile Equipment Identities 4. Mobile Telephones (Re-programming) Act 2002
(IMEI)" (http://www.3gpp.org/ftp/Specs/archive/22_series/22.0 (http://www.legislation.gov.uk/ukpga/2002/31/contents).
900.zip) (ZIP/DOC; 36 KB). 2009-10-01. Retrieved Legislation.gov.uk. Retrieved on 2013-09-18.
2009-12-03. 5. http://www.vvc.gov.lv/export/sites/default/docs/LRTA/Likum
2. "Phone firms defend security 6. IMEI Specifications (https://techpayout.com/imei-number?
record" (http://news.bbc.co.uk/1/hi/uk/1749215.stm). BBC alias=imei-number)
News. January 8, 2002. Retrieved August 25, 2011. 7. R&TTE Directive (http://www.rtte.org/)
3. GSM Europe, "GSME proposals regarding mobile theft and 8. FAQs on mobile security
IMEI security" (http://docs.google.com/viewer? (http://www.amta.org.au/default.asp?id=210). Amta.org.au.
a=v&q=cache:0mXtXE_yM3EJ:www.gsmeurope.org/documen Retrieved on 2013-09-18.
2003-06 9. Immobilise (http://www.immobilise.com)
10. [1] (http://www.tcf.org.nz)

http://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity 4/14/2015
International Mobile Station Equipment Identity - Wikipedia, the free encyclopedia Page 5 of 5

11. [2] (http://www.tcf.org.nz/content/cfa46b54-509c-44aa-91da- 14. http://www.checkmend.com/us/latest_news. Accessed: 2012-

3bfe14d20f8f.html) 12-26. (Archived by WebCite® at
12. Carriers to allow Customers to Brick Stolen Phones http://www.webcitation.org/6DDHr0G1D)
(http://www.washingtoncitypaper.com/blogs/citydesk/2012/04/ (http://www.webcitation.org/6DDHr0G1D)
fcc-and-wireless-carriers-to-allow-customers-to-brick-stolen- 15. http://www.huffingtonpost.com/2013/07/13/smartphone-
phones/) by Shani Hilton, Apr. 10, 2012, Washington City black-market_n_3510341.html. Accessed: 2013-10-13.
Paper 16. TR 33.107, Lawful interception architecture and functions
13. Wireless carriers partner with FCC, police on database of (ftp://ftp.3gpp.org/Specs/2000-12/R1999/33_series/33106-
stolen cellphones 310.zip)
(http://www.washingtonpost.com/2012/04/10/gIQAZG9L7S_st 17. GSM Association, IMEI Allocation and Approval Guidelines
The Washington Post (2011-02-28). Retrieved on 2013-09- (http://www.gsma.com/documents/ts-06-6-0-imei-allocation-
18. and-approval-guidelines/20164/), Version 5.0, 2010-09-01,
chapter 2.1.5 vs. D.1.6

External links
◾ IMEI Allocation & Approval Guidelines (http://www.gsma.com/newsroom/wp-
content/uploads/2012/06/ts0660tacallocationprocessapproved.pdf) from the GSM Association
◾ Identify phone model and manufacturer by IMEI or TAC - mobile identification (https://imeidata.net)
◾ Analysis of IMEI numbers (https://www.numberingplans.com/?page=analysis&sub=imeinr)

Retrieved from "http://en.wikipedia.org/w/index.php?

title=International_Mobile_Station_Equipment_Identity&oldid=655210991"

Categories: Mobile telecommunications Checksum algorithms Mobile telecommunications standards

◾ This page was last modified on 6 April 2015, at 16:58.

◾ Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using
this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia
Foundation, Inc., a non-profit organization.

http://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity 4/14/2015