Tech-invite  3GPPspace  IETFspace
◀  ▶  21  22  23  24  25  26  27  28  29  31  32  33  34  35  36  37  38  4‑5x
Top   in Index   Prev   Next

TR 33.858
Study on Security aspects of enhanced support of Non-Public Networks (NPN)
Phase 2

3GPP‑Page   fToC↓   Partial Content →
V18.1.0 (Wzip)  2023/09  35 p.
Rapporteur:
Dr. Jost, Christine
Ericsson LM

full Table of Contents for  TR 33.858  Word version:  18.1.0

each clause number in 'red' refers to the equivalent title in the Partial Content
Here   Top
1Scope  p. 8
2References  p. 8
3Definitions of terms, symbols and abbreviations  p. 9
3.1Terms  p. 9
3.2Symbols  p. 9
3.3Abbreviations  p. 9
4Assumptions  p. 9
5Key issues  p. 9
5.1Key issue #1: Security of non-3GPP access for SNPN  p. 9
5.1.1Key issue details  p. 9
5.1.2Threats  p. 9
5.1.3Potential security requirements  p. 10
5.2Key issue #2: Authentication for UE access to hosting network  p. 10
5.2.1Key issue details  p. 10
5.2.2Threats  p. 10
5.2.3Potential security requirements  p. 10
6Proposed solutions  p. 11
6.0Mapping of solutions to key issues  p. 11
6.1Solution #1: Authentication mechanism for untrusted non-3GPP Access in SNPN scenarios  p. 11
6.1.1Introduction  p. 11
6.1.2Solution details  p. 12
6.1.3System impact  p. 12
6.1.4Evaluation  p. 12
6.2Solution #2: Authentication mechanism for trusted non-3GPP Access in SNPN scenarios  p. 12
6.2.1Introduction  p. 12
6.2.2Solution details  p. 13
6.2.3System impact  p. 13
6.2.4Evaluation  p. 13
6.3Solution #3: Use of anonymous SUCI in trusted non-3GPP access for SNPN  p. 13
6.3.1Introduction  p. 13
6.3.2Solution details  p. 14
6.3.3System impact  p. 14
6.3.4Evaluation  p. 14
6.4Solution #4: Authentication for devices that do not support 5GC NAS over WLAN access in SNPN scenarios  p. 14
6.4.1Introduction  p. 14
6.4.2Solution details  p. 14
6.4.3System impact  p. 15
6.4.4Evaluation  p. 15
6.5Solution #5: Anonymous authentication during connection establishment in trusted non-3GPP network access.  p. 15
6.5.1Introduction  p. 15
6.5.2Solution details  p. 15
6.5.3System impact  p. 16
6.5.4Evaluation  p. 16
6.6Solution #6: Trusted non-3GPP Access for SNPN  p. 16
6.6.1Introduction  p. 16
6.6.2Solution details  p. 16
6.6.3System impact  p. 16
6.6.4Evaluation  p. 16
6.7Solution #7: Untrusted non-3GPP Access for SNPN  p. 16
6.7.1Introduction  p. 16
6.7.2Solution details  p. 17
6.7.3System impact  p. 17
6.7.4Evaluation  p. 17
6.8Solution #8: Reusing Existing N3GPP Security for SNPN  p. 17
6.8.1Introduction  p. 17
6.8.2Solution details  p. 17
6.8.3Evaluation  p. 17
6.9Solution #9: NSWO support in SNPN using any key-generating EAP-method  p. 18
6.9.1Introduction  p. 18
6.9.2Solution details  p. 18
6.9.3System impact  p. 19
6.9.4Evaluation  p. 19
6.10Solution #10: Access to localized services using existing mechanisms  p. 19
6.10.1Introduction  p. 19
6.10.2Solution details  p. 19
6.10.2.1Solution for access to localized services based on Home Network Credentials  p. 19
6.10.2.2Solution for access to localized services based on Onboarding Mechanism  p. 19
6.10.3System Impact  p. 22
6.10.4Evaluation  p. 22
6.11Solution #11: High-level solution on authentication for UE access to hosting network  p. 22
6.11.1Introduction  p. 22
6.11.2Solution details  p. 22
6.11.3System impact  p. 23
6.11.4Evaluation  p. 23
6.12Solution #12: Localised service authentication through onboarding procedure and registration afterwards.  p. 23
6.12.1Introduction  p. 23
6.12.2Solution details  p. 24
6.12.3System impact  p. 24
6.12.4Evaluation  p. 24
6.13Solution #13: Home network primary authentication - secondary authentication towards localised service  p. 25
6.13.1Introduction  p. 25
6.13.2Solution details  p. 25
6.13.3System impact  p. 25
6.13.4Evaluation  p. 26
6.14Solution #14: NSWO support in SNPN using any key-generating EAP-method for SNPN using CH AUSF/UDM  p. 26
6.14.1Introduction  p. 26
6.14.2Solution details  p. 26
6.14.3System impact  p. 26
6.14.4Evaluation  p. 27
6.15Solution #15: NSWO using SNPN credentials from CH AAA  p. 27
6.15.1Introduction  p. 27
6.15.2Solution details  p. 27
6.15.3System impact  p. 27
6.15.4Evaluation  p. 27
6.16Solution #16: Localized Service related authentication and network access  p. 27
6.16.1Introduction  p. 27
6.16.2Solution details  p. 28
6.16.3System impact  p. 29
6.16.4Evaluation  p. 29
6.17Solution #17: Authentication for UE to access hosting network and receive localized services using existing mechanisms.  p. 29
6.17.1Introduction  p. 29
6.17.2Solution details  p. 29
6.17.3System impact  p. 30
6.17.4Evaluation  p. 30
6.18Solution #18: UE creates the identifier in trusted non-3GPP access  p. 30
6.18.1Introduction  p. 30
6.18.2Solution details  p. 30
6.18.3System impact  p. 31
6.18.4Evaluation  p. 31
6.19Solution #19: Supporting CH using AAA for N3GPP Security in SNPN  p. 31
6.19.1Introduction  p. 31
6.19.2Solution details  p. 31
6.19.3Evaluation  p. 31
6.20Solution #20: NSWO using SNPN credentials from CH AAA via 5GC  p. 31
6.20.1Introduction  p. 31
6.20.2Solution details  p. 32
6.20.3System impact  p. 32
6.20.4Evaluation  p. 32
7Conclusions  p. 32
7.1Conclusions for KI#1 Security of non-3GPP access for SNPN  p. 32
7.1.1Scope  p. 32
7.1.2Conclusion for Untrusted N3GPP access to SNPN  p. 33
7.1.3Conclusion for Trusted N3GPP access to SNPN  p. 33
7.1.4Conclusion for N5CW device access to SNPN  p. 33
7.1.5Conclusion for NSWO support in SNPN  p. 34
7.2Conclusions for KI#2 Authentication for UE access to hosting network  p. 34
7.3Other conclusions  p. 34
$Change history  p. 35

Up   Top