TR 33.815
SA3
★
Study on Security aspects of PARLOS
use "3GPP‑Page" to get the Word version
for a better overview, the Table of Contents (ToC) is reproduced
for a better overview, the Table of Contents (ToC) is reproduced
V16.0.1 (Wzip)
2019/09 17 p.
WI Acronym: FS_PARLOS_Sec
Rapporteur: Mr. Schumacher, Greg
Rapporteur: Mr. Schumacher, Greg
TS 22.011 defines a new service to provide Restricted Local Operator Services (RLOS) for unauthenticated
UEs. The present document is a study of the security aspects of this service.
This study will examine potential security and privacy threat scenarios enabled by PARLOS, evaluate whether solutions must be found for these and, if required, identify security solutions and approaches which can mitigate the identified security and privacy threat scenarios while meeting the US regulatory obligations spelled out in the referenced regulations. This study will make recommendations on the solutions considered.
This study will consider user notification regarding security and privacy risks when using PARLOS.
This study will consider the applicability of external security and privacy standards (e.g. Payment Card Industry Data Security Standard) to PARLOS.
full Table of Contents for TR 33.815 Word version: 16.0.1
1 Scope Word-p. 6
2 References
3 Definitions of terms, symbols and abbreviations
4 Background Word-p. 7
4.1 Summary
4.2 Manual roaming in operation
4.3 Manual roaming service
4.4 Manual roaming implications for RLOS Word-p. 8
5 Key Issues
5.1 Introduction
5.2 Key issue #1: Establishing temporary security for PARLOS session
5.3 Key Issue #2: Support for Unauthenticated UEs access to RLOS using EPC
5.4 Key Issue #3: Authorization of use of PARLOS service.
5.5 Key Issue #4: User awareness of use of PARLOS service. Word-p. 10
6 Solutions
6.1 Solution #1 AS and NAS security for RLOS services 
6.2 Solution #2 AS and NAS security based on the emergency call procedures Word-p. 13
7 Conclusions Word-p. 15
A Change history Word-p. 16
6.2 Solution #2 AS and NAS security based on the emergency call procedures Word-p. 13
