TS 33.533
Security aspects of Ranging based Services and Sidelink Positioning
V18.0.0 (Wzip)
2023/09 22 p.
- Rapporteur:
- Ms. Lu, Wei
Xiaomi Technology
full Table of Contents for TS 33.533 Word version: 18.0.0
1 Scope
2 References
3 Definitions of terms, symbols and abbreviations
4 Overview of security architecture
5 Common security
6 Security for Ranging/SL positioning features
7 Security related services
A Key derivation functions
$ Change history
1 Scope p. 7
The present document specifies the security and privacy aspects of Ranging based services and Sidelink positioning in the 5G System (5GS) for commercial, V2X and public safety use cases, with the UE in coverage, partial coverage, and out-of-coverage of 5G network using 5G NR PC5 RAT, based on the architecture defined in TS 23.586.
Security features for Ranging based services and Sidelink positioning include:
- authorization for Ranging/SL positioning service;
- security and privacy protection for Ranging/SL positioning UE discovery;
- security and privacy protection for unicast communication of Ranging/SL positioning control; and
- security and privacy protection for broadcast/groupcast communication of Ranging/SL positioning control.
2 References p. 7
3 Definitions of terms, symbols and abbreviations p. 8
4 Overview of security architecture p. 9
5 Common security p. 10
5.1 General p. 10
5.2 Security for PC8* interface p. 10
6 Security for Ranging/SL positioning features p. 11
6.1 Void
6.2 Security for Ranging/SL positioning UE discovery p. 11
6.2.1 General p. 11
6.2.2 Security requirements p. 11
6.2.3 Security procedures for ProSe capable UEs p. 11
6.2.4 Security procedures for V2X capable UEs p. 11
6.3 Authorization for Ranging/SL positioning service p. 11
6.3.1 General p. 11
6.3.2 Authorization requirements p. 12
6.3.3 Procedures of UE role authorization during discovery p. 12
6.3.4 Procedures of UE authorization for Ranging/SL positioning communication p. 12
6.3.5 Procedures for authorization of AF/5GC NF for Ranging/SL positioning service exposure p. 12
6.3.6 Procedures for authorization of UE for Ranging/SL positioning service exposure p. 13
6.3.6.1 General p. 13
6.3.6.2 Authorization procedure for Ranging/SL positioning service exposure through 5GC control plane p. 13
6.3.6.3 Authorization procedure for Ranging/SL positioning service exposure through PC5 p. 13
6.3.7 Procedure of UE privacy verification for UE-only operation p. 13
6.4 Security for communication of Ranging/SL positioning control p. 13
6.4.1 General p. 13
6.4.2 Security requirements p. 13
6.4.3 Security procedures for unicast direct communication over RSPP between the UEs p. 14
6.4.3.1 General p. 14
6.4.3.2 Unicast direct communication with long term credentials p. 14
6.4.3.3 Unicast direct communication for Ranging/SL Positioning services provided by network p. 14
6.4.4 Security procedure for broadcast/groupcast communication over RSPP p. 15
6.4.4.1 General p. 15
6.4.4.2 Security flows for broadcast/groupcast communication p. 15
6.4.4.3 Protection of messages between UEs p. 16
6.4.4.3.1 Message processing in the sending UE p. 16
6.4.4.3.2 Protected message processing in the receiving UE p. 17
6.4.4.4 Key hierarchy for broadcast/groupcast protection communication over RSPP p. 17
6.4.5 Security procedure for communication between the UE and LMF p. 17
7 Security related services p. 18
7.1 General p. 18
7.2 SLPKMF services p. 18
7.2.1 General p. 18
7.2.2 Nslpkmf_Discovery service p. 18
7.2.2.1 Nslpkmf_Discovery_AnnounceAuthorize service operation p. 18
7.2.2.2 Nslpkmf_Discovery_MonitorAuthorize service operation p. 18
7.2.2.3 Nslpkmf_Discovery_DiscoveryAuthorize service operation p. 18
7.2.3 Nslpkmf_SLPKMFKeyRequest service p. 19
A (Normative) Key derivation functions p. 20
A.1 KDF interface and input parameter construction p. 20
A.1.1 General p. 20
A.1.2 FC value allocations p. 20
A.2 Calculation of KSLP p. 20
A.3 Calculation of SLPTK p. 20
A.4 Calculation of keys from SLPTK p. 21
$ Change history p. 22
