Tech-invite3GPPspaceIETF RFCsSIP
Quick21222324252627282931323334353637384‑5x

Content for  TR 33.857  Word version:  17.1.0

Top   Top   Up   Prev   None
0…   5…

 

5  Key issuesWord‑p. 11

6  SolutionsWord‑p. 15

6.0  Mapping of Solutions to Key IssuesWord‑p. 15

6.1  Solution #1: Primary authentication between an SNPN and third-party AAA server using EAPWord‑p. 15

6.1.1  IntroductionWord‑p. 15

6.1.2  Solution DetailsWord‑p. 16

6.1.2.0  GeneralWord‑p. 16

6.1.2.1  ProcedureWord‑p. 17

6.1.3  System impactWord‑p. 18

6.1.4  EvaluationWord‑p. 19

6.2  Solution #2: EAP authentication between UE and external AAA via AUSFWord‑p. 19

6.2.1  IntroductionWord‑p. 19

6.2.2  Solution detailsWord‑p. 19

6.2.3  System impactWord‑p. 20

6.2.4  EvaluationWord‑p. 21

6.3  Solution #3: Primary authentication between an SNPN and third-party AAA server using EAP-TTLSWord‑p. 21

6.3.1  IntroductionWord‑p. 21

6.3.2  Solution DetailsWord‑p. 21

6.3.2.0  GeneralWord‑p. 21

6.3.2.1  ProcedureWord‑p. 22

6.3.3  System impactWord‑p. 24

6.3.4  EvaluationWord‑p. 24

6.4  Solution #4: Authentication Framework Enhancements to support SNPN accessWord‑p. 24

6.5  Solution #5: Network Access Authentication with Credentials owned by an AAA external to the SNPNWord‑p. 27

6.5.1  IntroductionWord‑p. 27

6.5.2  Solution detailsWord‑p. 28

6.5.3  System impactWord‑p. 29

6.5.4  EvaluationWord‑p. 29

6.6  Solution #6: Network access authentication with credentials owned by an entity separate from the SNPNWord‑p. 29

6.6.1  IntroductionWord‑p. 29

6.6.2  Solution detailsWord‑p. 30

6.6.3  System impactWord‑p. 31

6.6.4  EvaluationWord‑p. 31

6.7  Solution #7: EAP authentication between UE and external AAA with enhanced security of KAUSFWord‑p. 31

6.7.1  IntroductionWord‑p. 31

6.7.2  Solution detailsWord‑p. 32

6.7.3  System impactWord‑p. 34

6.7.4  EvaluationWord‑p. 34

6.8  Solution #8: UE onboarding for SNPN with AAA-S as DCSWord‑p. 34

6.8.1  IntroductionWord‑p. 34

6.8.2  Solution detailsWord‑p. 36

6.8.3  System impactWord‑p. 37

6.8.4  EvaluationWord‑p. 37

6.9  Solution #9: UE onboarding for SNPN with UDM as DCSWord‑p. 37

6.9.1  IntroductionWord‑p. 37

6.9.2  Solution detailsWord‑p. 38

6.9.2.0  GeneralWord‑p. 38

6.9.2.1  ProcedureWord‑p. 38

6.9.3  System impactWord‑p. 39

6.9.4  EvaluationWord‑p. 39

6.10  Solution #10: Secure initial access to an SNPN onboarding networkWord‑p. 39

6.10.1  IntroductionWord‑p. 39

6.10.2  Solution detailsWord‑p. 40

6.10.3  System impactWord‑p. 41

6.10.4  EvaluationWord‑p. 41

6.11  Solution #11: Securing initial access by using primary authenticationWord‑p. 41

6.11.1  IntroductionWord‑p. 41

6.11.2  Solution detailsWord‑p. 42

6.11.3  System impactWord‑p. 43

6.11.4  EvaluationWord‑p. 43

6.12  Solution #12: Authentication for UE Onboarding for SNPNWord‑p. 43

6.13  Solution #13: UE Onboarding for an SNPN from Onboarding SNPN with Secondary Authentication using EAP method with UE identity privacyWord‑p. 47

6.13.1  IntroductionWord‑p. 47

6.13.2  Solution detailsWord‑p. 48

6.13.3  System impactWord‑p. 50

6.13.4  EvaluationWord‑p. 51

6.14  Solution #14: Initial access for UE Onboarding for an SNPN from Onboarding SNPN using primary and secondary authenticationWord‑p. 51

6.15  Solution #15: Privacy protection of UE onboarding identifierWord‑p. 57

6.15.1  IntroductionWord‑p. 57

6.15.2  Solution detailsWord‑p. 57

6.15.3  System impactWord‑p. 58

6.15.4  EvaluationWord‑p. 58

6.16  Solution #16: UE onboarding for SNPN with the interaction between PS and DCSWord‑p. 58

6.16.1  IntroductionWord‑p. 58

6.16.2  Solution detailsWord‑p. 59

6.16.2.1  ProcedureWord‑p. 59

6.16.2.2  ProcedureWord‑p. 60

6.16.3  System impactWord‑p. 61

6.16.4  EvaluationWord‑p. 61

6.17  Solution #17: Solution to Provisioning of PNI-NPN CredentialsWord‑p. 61

6.17.1  IntroductionWord‑p. 61

6.17.2  Solution detailsWord‑p. 61

6.17.3  System ImpactWord‑p. 62

6.17.4  EvaluationWord‑p. 62

6.18  Solution #18 Solution on service authorization for SNPNsWord‑p. 63

6.18.1  IntroductionWord‑p. 63

6.18.2  Solution DetailsWord‑p. 63

6.18.3  System impactWord‑p. 64

6.18.4  EvaluationWord‑p. 64

6.19  Solution #19: Secure onboarding without client authenticationWord‑p. 65

6.19.1  IntroductionWord‑p. 65

6.19.2  Solution detailsWord‑p. 65

6.19.3  System impactWord‑p. 68

6.19.4  EvaluationWord‑p. 68

6.20  Solution #20: Control plane based provisioning: PS to AUSFWord‑p. 68

6.20.1  IntroductionWord‑p. 68

6.20.2  Solution detailsWord‑p. 69

6.20.3  System impactWord‑p. 70

6.20.4  EvaluationWord‑p. 70

6.21  Solution #21: Control plane based provisioning: PS to UDMWord‑p. 71

6.21.1  IntroductionWord‑p. 71

6.21.2  Solution detailsWord‑p. 72

6.21.3  System impactWord‑p. 73

6.21.4  EvaluationWord‑p. 73

6.22  Solution #22: Solution for onboarding and provisioningWord‑p. 73

6.22.1  IntroductionWord‑p. 73

6.22.2  Solution detailsWord‑p. 73

6.22.3  System impactWord‑p. 75

6.22.4  EvaluationWord‑p. 75

6.23  Solution #23: Solution to enable onboarding and secured UE access based on credentials owned by an external entityWord‑p. 76

6.23.1  IntroductionWord‑p. 76

6.23.2  Solution detailsWord‑p. 76

6.23.3  System impactWord‑p. 78

6.23.4  EvaluationWord‑p. 78

6.24  Solution #24: Secure mutually authenticated onboarding without DCSWord‑p. 78

6.24.1  IntroductionWord‑p. 78

6.24.2  Solution detailsWord‑p. 79

6.24.3  System impactWord‑p. 81

6.24.4  EvaluationWord‑p. 81

6.25  Solution #25: UE Onboarding for an SNPN with EAP-TLSWord‑p. 81

6.25.1  IntroductionWord‑p. 81

6.25.2  Solution detailsWord‑p. 81

6.25.2.1  GeneralWord‑p. 81

6.25.2.2  ProcedureWord‑p. 82

6.25.3  System impactWord‑p. 83

6.25.4  EvaluationWord‑p. 83

7  ConclusionsWord‑p. 84

$  Change historyWord‑p. 86


Up   Top