> Each SIM has a 'default' number, and if
they want to instead use a
number they
pre-registred,
have them text a 'token' (long enough not to guess a
valid one, but not too long as to be annoying).
That token is just displayed on eventphone.de when they register a
number as 'GSM' without an IMSI.
ok, the other way around. The token is a unique value that they have
to SMS to
OpenBSC... great idea. I like it that way.
i would like to ask eventphone to add a 10 digits token to the
registration tool. this way it is hard enough guess. the token shall be
generated randomly when not yet assigned to a phone number. the token is
used to authenticate:
- by sending SMS with the token (like said above)
- by dialing a service number and entering the token
- by giving the token to the GSM help desk.