describes how the access over HTTP can be secured using TLS in the Generic Authentication Architecture. An application residing on a UICC may advantageously use such a mechanism to secure its communication with a Network Application Function (NAF). Due to time constraint, this scenario was not fully covered in release 6.
The "HTTPS connection between a UICC and a NAF"
functionality is a candidate for early implementation since all required mechanisms are available in release 7 specifications.
The present document gives guidance on how to perform an early implementation of HTTPS connections between a UICC-based application and a Network Application Function in the Generic Authentication Architecture (GAA).