Etsi stylesheet (V 0)

Third Generation Partnership Project (3GPP™)

Meeting Report

for
TSG SA WG3
meeting: 90

Gothenburg, Sweden, 22/01/2018 to 26/01/2018

TABLE OF CONTENTS

1 Opening of the meeting 5

2 Approval of Agenda and Meeting Objectives 5

3 IPR and Anti-Trust Law Reminder 5

4 Meeting Reports 5

4.1 Approval of the report from previous SA3 meeting(s) 5

4.2 Report from SA Plenary 6

4.3 Report from SA3-LI 6

5 Items for early consideration 6

6 Reports and Liaisons from other Groups 9

6.1 3GPP Working Groups 9

6.2 IETF 10

6.3 ETSI SAGE 10

6.4 GSMA 10

6.5 3GPP2 10

6.6 OMA 10

6.7 TCG 10

6.8 oneM2M 11

6.9 TC-CYBER 11

6.10 ETSI NFV security 11

6.11 Other Groups 11

7 Work Areas 11

7.1 EPC enhancements to support 5G New Radio via Dual Connectivity (EDCE5) (Rel-15) 11

7.2 Security aspects of 5G System - Phase 1 (5GS_Ph1-SEC) (Rel-15) 12

7.2.1 Key hierarchy 12

7.2.1.1 Miscellaneous 12

7.2.1.2 Editorials 15

7.2.2 Key derivation 15

7.2.2.1 Key derivation mobility related 15

7.2.2.2 Key derivation NAS related 15

7.2.2.3 Key derivation AS related 15

7.2.2.4 Miscellaneous 15

7.2.2.5 Editorials 16

7.2.3 Mobility 16

7.2.3.1 Key derivations during handovers 16

7.2.3.2 Security in AMF change between AMF sets 17

7.2.3.3 Security in AMF change within an AMF set 18

7.2.3.4 Resolving Editor’s Notes in Section 8.3 (Access Stratum) 18

7.2.3.5 Parameter/Message Name alignment 18

7.2.3.6 Miscellaneous 18

7.2.3.7 Editorials 19

7.2.4 AS security 19

7.2.4.1 User plane open issues 19

7.2.4.2 User plane security 21

7.2.4.3 RRC security 22

7.2.4.4 Miscellaneous 25

7.2.4.5 Editorials 27

7.2.5 NAS security 28

7.2.5.1 Requirements 28

7.2.5.2 Protection of initial NAS message 28

7.2.5.3 NAS algorithm selection 29

7.2.5.4 NAS integrity and confidentiality mechanisms 29

7.2.5.5 NAS Security Mode Command 29

7.2.5.6 NAS security handling during state-transitions 30

7.2.5.7 Multi-NAS security 31

7.2.5.8 SMS over NAS 36

7.2.5.9 Miscellaneous 36

7.2.5.10 Editorials 37

7.2.6 Security context 37

7.2.6.1 Multiple registrations 37

7.2.6.2 KDF agility 38

7.2.6.3 Intra-serving network handling 38

7.2.6.4 UE handling 38

7.2.6.5 Emergency call 38

7.2.6.6 Miscellaneous 38

7.2.6.7 Editorials 39

7.2.7 Visibility and Configurability 39

7.2.7.1 Miscellaneous 39

7.2.7.2 Editorials 40

7.2.8 Primary authentication 40

7.2.8.1 5G AKA over 3gpp/non3gpp access 40

7.2.8.2 EAP AKA’ over 3gpp/non3gpp access 42

7.2.8.3 Roaming/Multiple Authentication vectors 42

7.2.8.4 Authentication using EAP TLS 42

7.2.8.5 Enhancements to authentication (Diffie-Hellman proposals etc) 43

7.2.8.6 Authentication in Network sharing/limited deployment scenarios 43

7.2.8.7 Editorial corrections 44

7.2.9 Secondary authentication 45

7.2.9.1 MitM 45

7.2.9.2 Incomplete procedure 46

7.2.9.3 Efficiency / security improvement 47

7.2.9.4 Miscellaneous 48

7.2.9.5 Editorial and clarification 48

7.2.10 Interworking 48

7.2.10.1 Idle mode 4G-5G 48

7.2.10.2 Idle mode 5G-4G 49

7.2.10.3 Handover 5GC-EPS 50

7.2.10.4 Handover EPS-5GC 51

7.2.10.5 Security context mapping 52

7.2.10.6 Miscellaneous 52

7.2.10.7 Editorials 53

7.2.11 non-3GPP access 53

7.2.11.1 Miscellaneous 53

7.2.11.2 Editorials 54

7.2.12 NDS 54

7.2.12.1 Miscellaneous 54

7.2.12.2 Editorials 54

7.2.13 Service based architecture 54

7.2.13.1 Interconnect (SEPP related) 54

7.2.13.2 Protection of Attributes 56

7.2.13.3 Transport security (intra and inter-PLMN) 58

7.2.13.4 NF-NRF Authentication & Authorization 58

7.2.13.5 NF-NF Authentication & Authorization 61

7.2.13.6 Miscellaneous 62

7.2.13.7 Editorials 62

7.2.14 Privacy 63

7.2.14.1 SUPI and LI 63

7.2.14.2 SUCI and Schemes 66

7.2.14.3 SIDF 71

7.2.14.4 Miscellaneous 72

7.2.14.5 Editorials 74

7.2.15 Incoming and outgoing LSes 74

7.2.16 PLMN RAT selection 77

7.2.17 Others 80

7.3 Mission Critical Security Enhancements (eMCSec) (Rel-15) 81

7.4 Northbound APIs Security for SCEF - SCS/AS Interworking (NAPS_Sec) (Rel-15) 84

7.5 Security Aspects of Common API Framework for 3GPP Northbound APIs (CAPIF_Sec) (Rel-15) 85

7.6 Other work areas 88

7.6.1 SAE/LTE Security 88

7.6.2 IP Multimedia Subsystem (IMS) Security 88

7.6.3 Network Domain Security (NDS) 88

7.6.4 UTRAN Network Access Security 89

7.6.5 GERAN Network Access Security 89

7.6.6 Generic Authentication Architecture (GAA) 89

7.6.7 Multimedia Broadcast/Multicast Service (MBMS) 89

7.6.8 Security Aspects of Home(e)NodeB (H(e)NB) 89

7.6.9 Security Aspects related to Machine-Type Communication ((e)MTC) 89

7.6.10 Security Aspects of Isolated E-UTRAN Operation for Public Safety (IOPS) 89

7.6.11 Security of MCPTT (MCPTT) 89

7.6.12 Security for Enhancements to Proximity-based Services - Extensions (eProSe-Ext-SA3) 89

7.6.13 Enhanced Access Security for Extended Coverage GSM in relation to Cellular IoT (EASE_EC_GSM) 89

7.6.14 New GPRS algorithms for EASE (EASE_ALGOs_SA3) 89

7.6.15 Support of EAP Re-Authentication Protocol for WLAN Interworking (ERP) 89

7.6.16 Security Assurance Specifications (SCAS-SA3, SCAS_PGW, SCAS_eNB) 89

7.6.17 Security aspect of architecture enhancements for LTE support of V2X services (V2XLTE-Sec) 91

7.6.18 Security of the Mission Critical Service (MCSec) 91

7.6.19 Other work items 92

7.7 New Work Item proposals 92

7.8 Documents on joint meeting with SA6 regarding eMCSec 93

8 Studies 94

8.1 Study on Mission Critical Security Enhancements (FS_MC_Sec) (Rel-15) 94

8.2 Study on security aspects of enhancements to ProSe UE-to-Network Relay (FS_REAR_Sec) (Rel-15) 95

8.3 Study on security aspects of 5G Network Slicing Management (FS_ NETSLICE-MGT_Sec) (Rel-15) 100

8.4 Other study areas 102

8.5 New study item proposals 102

9 Review and Update of Work Plan 104

10 Future Meeting Dates and Venues 104

11 Any Other Business 104

12 Close 105

Annex A: List of contribution documents 106

Annex B: List of change requests 120

Annex C: Lists of liaisons 123

C1: Incoming liaison statements 123

C2: Outgoing liaison statements 124

Annex D: List of agreed/approved new and revised Work Items 125

Annex E: List of draft Technical Specifications and Reports 126

Annex F: List of action items 127

Annex G: List of decisions 128

Annex H: List of participants 129

Annex I: List of future meetings 132