Content for  TS 33.141  Word version:  17.0.0

Top   Top   None   None   Next
0…   4…   C…


0  Introductionp. 4

This technical specification gives an overview of the security architecture and defines the security features and security mechanisms for the presence services.
Presence services enable the dissemination of presence information of a user to other users or services. A presence entity or presentity comprises the user, user's devices, services and service components. It is the intention that this platform will enable new services like e.g. enhancement to chat, multimedia messaging, cinema ticket information, the score of a football game and so on.
A user has the possibility to control if her or his information is made available to other users or services. This control is possible to achieve with high granularity e.g. explicitly define which user or users and services have access to presence information.
A presentity is a uniquely identifiable entity with the capability to provide the presence information and it has only one principal associated with it. Hence a principal is distinct from all other principals and can be e.g. a human, organisation, program or even a collection thereof. One example of such a relation is when the presentity is a terminal and the principal of the terminal is the subscriber. However, the presence service is based on Public Identities, and consequently it is possible to have several terminals related to the same presentity. A watcher is also a uniquely identifiable entity but with the aim to fetch or request information about a presentity. There are access rules that set the rules for how presence information gets available to watchers.
Presence information consists of a number of elements or presence tuples as defined in TS 23.141

1  Scopep. 5

The present document is the Stage 2 specification for the security requirements, security architecture, security features and security mechanisms for the Presence Service, which includes the elements necessary to realise the requirements in TS 22.141 and TS 23.141. As far as SIP-based procedures are concerned, this specification refers to TS 33.203. The main content of this specification is the security for the Ut reference point, which is HTTP-based, as applied in presence services.
The present document includes information applicable to network operators, service providers and manufacturers.

2  Referencesp. 5

The following documents contain provisions which, through reference in this text, constitute provisions of the present document.
  • References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific.
  • For a specific reference, subsequent revisions do not apply.
  • For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document.
TR 21.905: "Vocabulary for 3GPP Specifications".
TS 22.141: "Presence service; Stage 1".
TS 23.141: "Presence service; Architecture and functional description".
TS 33.203: "3G Security; Access security for IP-based services".
[5]  Void
[6]  Void
TS 23.002: "Network architecture".
[8]  Void
[9]  Void
TS 33.210: "3G Security; Network Domain Security; IP network layer security".
TS 33.220: "Generic Authentication Architecture (GAA); Generic Bootstrapping Architecture".
[12]  Void
[13]  Void.
[14]  Void
TR 33.919: "Generic Authentication Architecture (GAA); System description".
[16]  Void
[17]  Void
[18]  Void
TS 33.222: "Generic Authentication Architecture (GAA); Access to network application functions using secure hypertext transfer protocol (HTTPS)".
[20]  Void.
3GPP2 S.S0109-A v1.0: "Generic bootstrapping architecture"
3GPP2 S.S0114-A v1.0: "Security mechanisms using GBA"
TS 29.329: "Sh interface based on the Diameter protocol; Protocol details"
TS 24.109: "Bootstrapping interface (Ub) and network application function interface (Ua); Protocol details
TS 23.003: "Numbering, addressing and identification".
TS 29.328: "IP Multimedia (IM) Subsystem Sh interface; Signalling flows and message contents".

3  Definitions and abbreviationsp. 6

3.1  Definitionsp. 6

For the purposes of the present document, the following terms and definitions apply.
The property that information is not made available or disclosed to unauthorised individuals, entities or processes.
Data integrity:
The property that data has not been altered in an unauthorised manner.
Data origin authentication:
The corroboration that the source of data received is as claimed.
Entity authentication:
The provision of assurance of the claimed identity of an entity.

3.2  Abbreviationsp. 6

For the purposes of the present document, the following abbreviations apply, TR 21.905 contains additional applicable abbreviations:
Authentication and key agreement
Authentication Proxy
Access Point Name
Application Server
Bootstrapping Server Function
Call Session Control Function
Encapsulating Security Payload
Generic Bootstrapping Architecture
Gateway GPRS Support Node
GPRS-IMS-Bundled Authentication
HyperText Transfer Protocol
IP Multimedia
IM Private Identity
IM Public Identity
IP Multimedia Core Network Subsystem
Internet Protocol
IP Security
IM Services Identity Module
Network Application Function
Network Domain Security for IP based Protocols
Proxy Call Session Control Function
Packet Data Protocol
Security Gateway
Session Initiation Protocol
Transport Layer Security

Up   Top   ToC