Content for TR 33.853 Word version: 17.0.0
5 Key Issues p. 12
5.1 Key Issue #1: UP integrity activation in EPS p. 12
5.1.1 Issue description p. 12
5.1.2 Network options affected p. 12
5.1.3 Threat description p. 12
5.1.4 Potential security requirements p. 12
5.2 Key Issue #2: Secure negotiation of integrity protection support in EPS p. 12
5.2.1 Issue description p. 12
5.2.2 Network options affected p. 12
5.2.3 Threat description p. 12
5.2.4 Potential security requirements p. 13
5.3 Key Issue #3: UE support of UP IP at the full uplink data rate p. 13
5.3.1 Issue description p. 13
5.3.2 Network options affected p. 13
5.3.3 Threat description p. 13
5.3.4 Potential security requirements p. 13
5.4 Key Issue #4: Integrity protection capability imbalance in enodeB connected to 5GC p. 13
5.4.1 Issue description p. 13
5.4.2 Network options affected p. 14
5.4.3 Threat description p. 14
5.4.4 Potential security requirements p. 14
5.5 Key Issue #5: Optionality of integrity protection in UP DRB with 5GC p. 15
5.5.1 Issue description p. 15
5.5.2 Network options affected p. 15
5.5.3 Threat description p. 15
5.5.4 Potential security requirements p. 15
5.6 Key Issue #6: UE connected to 5GC indicating support of UP IP over eUTRA p. 16
5.6.1 Issue description p. 16
5.6.2 Network options affected p. 16
5.6.3 Threat description p. 16
5.6.4 Potential security requirements p. 16
5.7 Key Issue #7: Ensuring UP IP is enforced at interworking p. 16
5.7.1 Issue description p. 16
5.7.2 Network options affected p. 16
5.7.3 Threat description p. 16
5.7.4 Potential security requirements p. 17
5.8 Key Issue #8: HPLMN Control of UP IP usage in EPC p. 17
6 Potential Solutions p. 17
6.1 Solution #1: Dedicated PDU for UP Signalling message IP p. 17
6.1.1 Introduction p. 17
6.1.2 Network options affected p. 17
6.1.3 Solution description p. 18
6.1.4 Solution evaluation p. 18
6.2 Solution #2: Integrity protection between SgNB and UE in NGEN-DC p. 19
6.2.1 Introduction p. 19
6.2.2 Network options affected p. 19
6.2.3 Solution description p. 19
6.2.4 Solution evaluation p. 19
6.3 Solution #3: Improved MR-DC bearer handling p. 19
6.3.1 Introduction p. 19
6.3.2 Network options affected p. 20
6.3.3 Solution description p. 20
6.3.4 Solution evaluation p. 21
6.4 Solution #4: Zero-overhead user plane integrity protection on the link layer p. 21
6.4.1 Introduction p. 21
6.4.2 Network options affected p. 23
6.4.3 Solution description p. 23
6.4.4 Solution evaluation p. 26
6.5 Solution #5: Integrity Protection of packet header in the User Plane p. 27
6.5.1 Introduction p. 27
6.5.2 Network options affected p. 27
6.5.3 Solution description p. 27
6.5.4 Solution evaluation p. 28
6.6 Solution #6: Addition of UP IP for eUTRA with 5GC p. 28
6.6.1 Introduction p. 28
6.6.2 Network options affected p. 28
6.6.3 Solution description p. 28
6.6.4 Solution evaluation p. 29
6.7 Solution #7: UE connected to 5GC indicating support of UP IP over eUTRA p. 29
6.7.1 Introduction p. 29
6.7.2 Network options affected p. 29
6.7.3 Solution description p. 29
6.7.3.1 Signalling flows p. 29
6.7.4 Solution evaluation p. 31
6.8 Solution #8: Using existing 5G UE security capability to signal the UE support of UP IP over eUTRA to 5GC p. 31
6.8.1 Introduction p. 31
6.8.2 Network options affected p. 32
6.8.3 Solution description p. 32
6.8.4 Solution evaluation p. 32
6.9 Solution #9: Adding padding in the data part p. 32
6.9.1 Introduction p. 32
6.9.2 Network options affected p. 32
6.9.3 Solution description p. 32
6.9.4 Solution evaluation p. 34
6.10 Solution #10: UE activating UP IP over eUTRA to EPC p. 34
6.10.1 Introduction p. 34
6.10.2 Network options affected p. 34
6.10.3 Solution description p. 34
6.10.4 Solution evaluation p. 34
6.11 Solution #11: Support of UP IP in EPS p. 34
6.11.1 Introduction p. 34
6.11.2 Network options affected p. 35
6.11.3 Solution description p. 35
6.11.4 Handling of legacy UE's and legacy network nodes in EPS p. 35
6.11.5 Solution evaluation p. 36
6.12 Solution #12: Using spare bit in existing 5G UE security capability to signal the UE support of UP IP over eUTRA to 5GC p. 36
6.12.1 Introduction p. 36
6.12.2 Network options affected p. 37
6.12.3 Solution description p. 37
6.12.4 Solution evaluation p. 37
6.13 Solution #13: Using existing IEs to signal the UE support of UP IP over UTRA to EPC p. 38
6.13.1 Introduction p. 38
6.13.2 Network options affected p. 38
6.13.3 Solution description p. 38
6.13.4 Solution evaluation p. 38
6.14 Solution #14: LTE-EPC UP IP with option 3X/1X p. 38
6.14.1 Introduction p. 38
6.14.2 Network options affected p. 39
6.14.3 Solution description p. 39
6.14.4 Solution evaluation p. 40
6.15 Solution #15: APN based control of UPIP usage p. 40
6.15.1 Introduction p. 40
6.15.2 Network options affected p. 40
6.15.3 Solution description p. 41
6.15.4 Solution evaluation p. 42
6.16 Solution #16: Use existing behaviour to block transfer to EPS of PDN connections that have UPIP set to "Required" p. 42
6.16.1 Introduction p. 42
6.16.2 Network options affected p. 42
6.16.3 Solution description p. 42
6.16.4 Solution evaluation p. 42
6.17 Solution #17: Support of UP IP in LTE eNB connected to EPS p. 43
6.17.1 Introduction p. 43
6.17.2 Network options affected p. 43
6.17.3 Solution description p. 43
6.17.4 Solution evaluation p. 43
6.18 Solution #18: Restricting handovers to RAN nodes that don't support UP IP p. 43
6.18.1 Introduction p. 43
6.18.2 Network options affected p. 43
6.18.3 Solution description p. 43
6.18.4 Solution evaluation p. 45
6.19 Solution #19: UP IP for EPC connected RAN options at NR or E-UTRA PDCP layer p. 45
6.19.1 Introduction p. 45
6.19.2 Network options affected p. 45
6.19.3 Solution description p. 45
6.19.4 Solution evaluation p. 46
6.20 Solution #20: 'Best effort' UP IP for EPS p. 46
6.20.1 Introduction p. 46
6.20.2 Network options affected p. 46
6.20.3 Solution description p. 46
6.20.4 Solution evaluation p. 47
6.21 Solution #21: Interworking handover from EPS to 5GS p. 47
6.21.1 Introduction p. 47
6.21.2 Network options affected p. 47
6.21.3 Solution description p. 47
6.21.3.1 Upgraded RAN nodes and core network nodes to support UP IP p. 48
6.21.3.2 Handling of legacy eNB and legacy ng-eNB p. 50
6.21.4 Solution evaluation p. 51
6.22 Solution #22: S1 handover p. 51
6.22.1 Introduction p. 51
6.22.2 Network options affected p. 51
6.22.3 Solution description p. 51
6.22.3.1 Upgraded eNB's and MME's to support UP IP p. 51
6.22.3.1.1 S1 handover p. 51
6.22.3.2 Handling of legacy eNB p. 53
6.22.4 Solution evaluation p. 53
6.23 Solution #23: X2 handover p. 54
6.23.1 Introduction p. 54
6.23.2 Network options affected p. 54
6.23.3 Solution description p. 54
6.23.3.1 Upgraded eNB's to support UP IP p. 54
6.23.3.1.1 X2 handover p. 54
6.23.3.2 Handling of legacy eNB's p. 55
6.23.4 Solution evaluation p. 56
6.24 Solution #24: Interworking handover from 5GS to EPS p. 56
6.24.1 Introduction p. 56
6.24.2 Network options affected p. 56
6.24.3 Solution description p. 56
6.24.3.1 Upgraded RAN nodes and core network nodes to support UP IP p. 57
6.24.3.2 Handling of legacy eNB and legacy ng-eNB p. 59
6.24.4 Solution evaluation p. 60
6.25 Solution #25: 'Best effort' with extensibility for HPLMN Control for UP IP for EPS p. 60
6.25.1 Introduction p. 60
6.25.2 Network options affected p. 60
6.25.3 Solution description p. 60
6.25.3.1 Indication for UP Security Support. p. 60
6.25.3.2 UP Security Policy Maintenance p. 60
6.25.3.3 UP Security Activation p. 61
6.25.4 Solution evaluation p. 61
6.26 Solution #26: 'Best effort' UP IP for EPS using UE Radio Access capabilities p. 61
6.27 Solution #27: Interworking handover from EPS to 5GS using R15 signalling and procedures p. 62
6.27.1 Introduction p. 62
6.27.2 Network options affected p. 62
6.27.3 Solution description p. 62
6.27.4 Solution evaluation p. 62
6.28 Solution #28: Interworking from 5GS to EPS p. 63
6.28.1 Introduction p. 63
6.28.2 Network options affected p. 63
6.28.3 Solution description p. 63
6.28.3.0 Solution Details p. 63
6.28.3.1 Impacts to 5GC procedures p. 64
6.28.3.2 5GS to EPS Idle Mode Mobility p. 64
6.28.3.3 5GS to EPS Handover p. 64
6.28.4 Solution evaluation p. 64
6.29 Solution #29: Source eNB pre-configured with neighbour target eNB's support of UP IP p. 65
6.29.1 Introduction p. 65
6.29.2 Network options affected p. 65
6.29.3 Solution description p. 65
6.29.4 Solution evaluation p. 65
6.30 Solution #30: Use of criticality information when UP IP policy is set to "Required" p. 65
6.30.1 Introduction p. 65
6.30.2 Network options affected p. 66
6.30.3 Solution description p. 66
6.30.4 Solution evaluation p. 66
7 Conclusions p. 66
7.1 Conclusions on UE connects to 5GC via eUTRA p. 66
7.2 Conclusions on UE connects to EPC via eUTRA p. 66
$ Change history p. 67
