TR 31.826
Study on new UICC application for NSSA
V18.0.0 (Wzip)
2023/03 17 p.
- Rapporteur:
- Mr. COLLET, Hervé
THALES
full Table of Contents for TR 31.826 Word version: 18.0.0
0 Introduction
1 Scope
2 References
3 Definitions of terms, symbols and abbreviations
4 Solutions overview
5 Evaluation criteria
6 Solutions evaluations
7 Conclusion
$ Change history
0 Introduction p. 6
SA3 has finalized their security requirements on network slice-specific authentication and authorization (NSSAA) in clause 16 of TS 33.501 introduced in Release 16.
Among these requirements, there are few with potential UICC impact and hence need CT6's attention.
1 Scope p. 7
The aim of this Technical Report is to study the aspects for any potential enhancements on the UICC to be developed by CT6 based on the outcome of TS 33.501. This work does not include selecting or standardizing any specific EAP method or associated EAP credential types for NSSAA.
For each of the objectives in the scope of the CT6 study, the UICC aspects that are to be covered in this study are as follows:
-
Enhancements to support network slice-specific authentication and authorization using the UICC.
- Study potential solutions for slice-specific authentication using new specific UICC application.
- Study information the UICC application for NSSAA needs to contain.
- Study information needed by the ME to select the correct UICC application used for NSSAA, in the case where multiple such UICC applications are available on the UICC. This information will not include UICC application selection based on a specific EAP method or type of EAP credentials.
- Study the interface that the new UICC application should feature in order to support NSSAA.
2 References p. 7
The following documents contain provisions which, through reference in this text, constitute provisions of the present document.
- References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific.
- For a specific reference, subsequent revisions do not apply.
- For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document.
[1]
TR 21.905: "Vocabulary for 3GPP Specifications".
[2]
TS 24.501: "Non-Access-Stratum (NAS) protocol for 5G System (5GS); Stage 3".
[3]
TS 23.502: "Procedures for the 5G System; Stage 2".
[4]
ETSI TS 102 310: "Extensible Authentication Protocol support in the UICC".
[5]
TS 31.101: "UICC-Terminal Interface, Physical and Logical Characteristics".
[6]
ISO/IEC 8825-1 (2008): "Information technology - ASN.1 encoding rules : Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER)".
[7]
TS 23.003: "Numbering, Addressing and Identification".
[8]
TS 33.501: "Security Architecture and procedures for 5G system".
[9]
ISO/IEC 7816-4: "Identification cards - Integrated circuit cards,Part 4: Organization, security and commands for interchange".
[10]
RFC 3748: "Extensible Authentication Protocol (EAP)".
[11]
RFC 2716: "PPP EAP TLS Authentication Protocol".
[12]
ETSI TS 102 221: "Smart cards; UICC-Terminal interface; Physical and logical characteristics".
3 Definitions of terms, symbols and abbreviations p. 8
3.1 Terms p. 8
For the purposes of the present document, the terms given in TR 21.905 and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in TR 21.905.
authenticator:
end of the EAP link initiating EAP authentication
peer or supplicant:
end of the EAP Link that responds to the authenticator
3.2 Abbreviations p. 8
For the purposes of the present document, the abbreviations given in TR 21.905 and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in TR 21.905.
AAA-S
Authentication, Authorization and Accounting Server
EAP
Extensible Authentication Protocol
NSSAA
Network Slice-Specific Authentication and Authorization
S-NSSAI
Single Network Slice Selection Assistance Information
4 Solutions overview p. 8
4.1 Introduction p. 8
4.2 Key issues p. 8
4.2.1 Multiple NSSAA contexts p. 8
4.2.2 Discovery of the supported features p. 8
4.2.3 EAP framework p. 9
4.3 Solution 1 p. 9
4.3.1 Multiple NSSAA contexts p. 9
4.3.2 Discovery of the supported features p. 9
4.3.3 EAP framework p. 12
4.3.4 Security features p. 13
4.3.5 NSSAA application commands p. 13
4.3.5.1 AUTHENTICATE p. 13
4.3.6 List of SFI values (annex) p. 15
5 Evaluation criteria p. 15
5.1 Overview p. 15
5.2 Key issues addressed p. 15
5.3 Impact on USIM and ISIM p. 15
5.4 Impact on UICC p. 15
5.5 Backward compatibility p. 16
5.6 Impact on core and RAN networks p. 16
6 Solutions evaluations p. 16
6.1 Solution 1 p. 16
7 Conclusion p. 16
$ Change history p. 17
