Content for TR 33.811 Word version: 15.0.0

0 Introduction p. 5

The 5G mobile networks is envisioned to enable fast deployment of new services, support of diverse services and business models, and provision of differentiated services in terms of functionalities, performance, and security protection. Network slicing is a new network technology/architecture to be employed to meet these requirements.

Network slicing has been studied and is being standardized in various aspects. For example, the architecture for next generation system is being specified with the network slicing as one of the 5G features in TS 23.501 and TS 23.502. More recently, the management and orchestration of network slicing has been studied for the next generation network and the study report was published in TR 28.801. The normative text for the provisioning of network slicing for 5G networks and services and the management of network slicing in mobile networks, concepts, use cases and requirements will be specified in TS 28.531 and TS 28.530.

However, the security aspects of above issues of TS 28.531 and TS 28.530 are not addressed. It is thus the motivation and objectives of the study in the present document.

1 Scope p. 6

The present document is a study on the threats, potential security requirements and solutions for the features of 5G network slicing management as described in TS 28.530 and TS 28.531.

2 References p. 6

The following documents contain provisions which, through reference in this text, constitute provisions of the present document.

References are either specific (identified by date of publication, edition number, version number, etc.) or non specific.
For a specific reference, subsequent revisions do not apply.
For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document.

[1]

TR 21.905: "Vocabulary for 3GPP Specifications".

[2]

TS 28.530: "Management of network slicing in mobile networks; Concepts, use cases and requirements".

[3]

TS 28.531: "Provisioning of network slicing for 5G networks and services".

[4]

TS 22.261: "Service requirements for the 5G system; Stage 1 (Release 15)".

[5]

TR 28.801: V2.0.1 (2017-09) "Study on management and orchestration of network slicing for next generation network (Release 15)".

[6]

RFC 5246 "The Transport Layer Security (TLS) Protocol Version 1.2".

[7]

RFC 4279 "Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)".

[8]

TS 33.310: "Network Domain Security (NDS); Authenticaiton Framework (AF)".

[9]

RFC 6749: "OAuth2.0 Authorization Framework".

[10]

TS 28.532: "Management and orchestration of networks and network slicing; Provisioning".

[11]

TS 23.501: "System Architecture for the 5G System".

[12]

TS 23.502: "Procedures for the 5G System".

3 Definitions and abbreviations p. 6

3.1 Definitions p. 6

For the purposes of the present document, the terms and definitions given in TR 21.905 and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in TR 21.905.

Managed network slice:

Defined in TS 28.530.

Managed network slice instance:

Defined in TS 28.530.

Managed network slice subnet:

Defined in TS 28.530.

Managed network slice subnet instance:

Defined in TS 28.530

Network slice:

Defined in TS 23.501

Network slice instance:

Defined in TS 23.501

Network Slice Subnet Template (NSST):

Defined in TS 28.530.

3.2 Abbreviations p. 7

For the purposes of the present document, the abbreviations given in TR 21.905 and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in TR 21.905.

NSaaS

Network Slice as a Service

NSI

Network Slice Instance

NSSI

Network Slice Subnet Instance

NSST

Network Slice Subnet Template