MME (Mobility Management Entity)

The Mobility Management Entity is the main control-plane element of the 4G LTE Evolved Packet Core. It handles UE attach and detach, authentication with the HSS over the Diameter S6a interface, NAS signalling, tracking-area updates and bearer setup via the Serving Gateway. As the anchor for LTE mobility and paging, an exposed or abused MME is a route to subscriber location tracking and denial of service, and it is the 4G counterpart of the 5G AMF.

Categories: Core NetworkSignalingIdentity and Subscriber

MME in context

The mobile core is where subscriber sessions, mobility and policy live. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF. Core exposure is the difference between a single-subscriber leak and a fleet-wide breach.

Signaling protocols carry the control-plane instructions that set up calls, register subscribers, hand over sessions and route SMS. SS7, Diameter, GTP-C and SIP are the four dominant families, and interconnect exposure of any of them is treated by GSMA FS.11 / FS.19 / FS.20 as a top-tier telecom risk.

To place MME in the wider telecom-security picture, review AMF, HSS, SGSN, S1AP, eNodeB and Paging Attacks.

Related terms

Equipment

Mobility management (MME, AMF, SGSN)

Articles in the P1 mobile network security guide

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.