[{"name":"S2-1905038","title":"Enforcement of UP integrity protection","source":"Ericsson","contact":"Shabnam Sultana","contact-id":21207,"tdoctype":"CR","for":"Approval","abstract":"Summary of change: Clarifies UE requirement for enforcement of the Integrity Protection Data Rate in uplink.","secretary_remarks":"Noted in parallel session","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":11560,"status":"noted","reservation_date":"2019-05-03 21:54:27","uploaded":"2019-05-07 13:27:50","revisionof":"","revisedto":"","release":"Rel-15","crspec":23.501,"crspecversion":"15.5.0","workitem":[{"winame":"5GS_Ph1"}],"crnumber":1304.0,"crrevision":"","crcategory":"F","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1905038.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1905039","title":"Enforcement of UP integrity protection","source":"Ericsson","contact":"Shabnam Sultana","contact-id":21207,"tdoctype":"CR","for":"Approval","abstract":"Rel-16 mirror CR: Summary of change: Clarifies UE requirement for enforcement of the Integrity Protection Data Rate in uplink.","secretary_remarks":"Revised in parallel session to S2-1906577.","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":11570,"status":"revised","reservation_date":"2019-05-03 21:54:29","uploaded":"2019-05-07 13:27:50","revisionof":"","revisedto":"S2-1906577","release":"Rel-16","crspec":23.501,"crspecversion":"16.0.2","workitem":[{"winame":"5GS_Ph1"}],"crnumber":1305.0,"crrevision":"","crcategory":"A","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1905039.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1905819","title":"LS from SA WG3: LS on Reply LS on Nudr Sensitive Data Protection","source":"SA WG3","contact":"Joonwoong Kim","contact-id":66512,"tdoctype":"LS in","for":"Action","abstract":"SA WG3 would like to thank CT WG4 for the reply LS on Nudr Sensitive Data Protection. SA WG3 acknowledges that SA WG2 has introduced the concept of stateless network functions (such as UDM) (potentially) separate from function-less storage: UDR. With respect to the storing and handling of credential data this could lead to the storage in the UDR as described in 3GPP TS 29.505 and the handling in (a separate) UDM\/ARPF as described in 3GPP TS 33.501. SA WG3 has defined ARPF as the entity to handle all cryptographic functions, cryptographic parameters and keys associated with the generation of authentication vectors. As deployment options, the ARPF may contain a secure environment such as an HSM (Hardware Security Module) which shall be dedicated for ARPF use only. There is no standardized interface between UDM and ARPF in Rel-15. The credentials used by the ARPF for authentication are critical to the security of the 5G system and must be kept secure. TS 33.501 defines the subscriber credentials as being stored in the ARPF. This is due to: - the sensitive nature of these credentials; - the level of security needed to adequately protect these credentials in transit and at rest. - the advances in quantum computing that would affect the algorithms being recommended over the life of 5G (3GPP TS 33.841). SA WG3 advises CT WG4 that data described in table 5.4.2.2-1 in 3GPP TS 29.505 shall be stored in the ARPF only. SA WG3 expects that, once CT WG4 updates its specification by removing the credential storage from the UDR, the UDR will not need special additional security. Action: SA WG3 asks CT WG4 and SA WG2 to take this information into account.","secretary_remarks":"Response drafted in S2-1906576. Final response in S2-1906761","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":11520,"status":"replied to","reservation_date":"2019-05-11 08:39:03","uploaded":"2019-05-11 08:40:48","revisionof":"","revisedto":"","release":"Rel-15","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT WG4, SA WG2","Cc":"TSG SA","lsoriginalls":"S3-191629","lsreply":"S2-1906761","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1905819.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1906576","title":"[DRAFT] Reply LS on Nudr Sensitive Data Protection","source":"SA WG2","contact":"Devaki Chandramouli","contact-id":68275,"tdoctype":"LS out","for":"Approval","abstract":"To: SA WG3, CT WG4. CC: TSG SA.","secretary_remarks":"Created in parallel session. Response to S2-1905819.","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":13790,"status":"revised","reservation_date":"2019-05-15 17:19:43","uploaded":"2019-05-19 20:07:54","revisionof":"","revisedto":"S2-1906714","release":"Rel-15","crspec":"","crspecversion":"","workitem":[{"winame":"5GS_Ph1-CT"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA WG3, CT WG4","Cc":"TSG SA","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1906576.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1906577","title":"Enforcement of UP integrity protection","source":"Ericsson","contact":"Shabnam Sultana","contact-id":21207,"tdoctype":"CR","for":"Approval","abstract":"Rel-16 mirror CR: Summary of change: Clarifies UE requirement for enforcement of the Integrity Protection Data Rate in uplink.","secretary_remarks":"Revision of S2-1905039.","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":13820,"status":"revised","reservation_date":"2019-05-15 17:19:43","uploaded":"2019-05-19 20:07:54","revisionof":"S2-1905039","revisedto":"S2-1906713","release":"Rel-16","crspec":23.501,"crspecversion":"16.0.2","workitem":[{"winame":"5GS_Ph1"}],"crnumber":1305.0,"crrevision":1.0,"crcategory":"A","tsg_crp":"","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1906577.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1906713","title":"Enforcement of UP integrity protection","source":"Ericsson, Intel, MediaTek Inc.","contact":"Shabnam Sultana","contact-id":21207,"tdoctype":"CR","for":"Approval","abstract":"Summary of change: Clarifies UE requirement for enforcement of the Integrity Protection Data Rate in uplink. Rev2: Removed statement of network release of PDU Session, based on network policy, in case UE exceeds the indicated maximum supported data rate as such network actions are always possible.","secretary_remarks":"Revision of S2-1906577. Agreed in parallel session. This was Block approved","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":11590,"status":"agreed","reservation_date":"2019-05-17 02:43:40","uploaded":"2019-05-19 20:07:56","revisionof":"S2-1906577","revisedto":"","release":"Rel-16","crspec":23.501,"crspecversion":"16.0.2","workitem":[{"winame":"5GS_Ph1"},{"winame":"TEI16"}],"crnumber":1305.0,"crrevision":2.0,"crcategory":"F","tsg_crp":"SP-190413","lsreplyto":"","lsto":"","Cc":"","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1906713.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1906714","title":"[DRAFT] Reply LS on Nudr Sensitive Data Protection","source":"SA WG2","contact":"Devaki Chandramouli","contact-id":68275,"tdoctype":"LS out","for":"Approval","abstract":"To: SA WG3, CT WG4. CC: TSG SA, TSG CT.","secretary_remarks":"Revision of S2-1906576.","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":12850,"status":"revised","reservation_date":"2019-05-17 02:43:41","uploaded":"2019-05-19 20:07:56","revisionof":"S2-1906576","revisedto":"S2-1906761","release":"Rel-15","crspec":"","crspecversion":"","workitem":[{"winame":"5GS_Ph1-CT"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA WG3, CT WG4","Cc":"TSG SA, TSG CT","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1906714.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0},
{"name":"S2-1906761","title":"Reply LS on Nudr Sensitive Data Protection","source":"SA WG2","contact":"Devaki Chandramouli","contact-id":68275,"tdoctype":"LS out","for":"Approval","abstract":"To: TSG SA. CC: TSG CT, SA WG3, CT WG4","secretary_remarks":"Revision of S2-1906714. Agreed in parallel session. This was Block approved","agenda_item_sort_order":22,"ainumber":"6.5.4","ainame":"Security related functions and flows","tdoc_agenda_sort_order":11550,"status":"approved","reservation_date":"2019-05-19 19:38:54","uploaded":"2019-05-19 20:07:57","revisionof":"S2-1906714","revisedto":"","release":"Rel-15","crspec":"","crspecversion":"","workitem":[{"winame":"5GS_Ph1-CT"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"S2-1905819","lsto":"TSG SA","Cc":"TSG CT, SA WG3, CT WG4","lsoriginalls":"","lsreply":"","link":"http:\/\/www.3gpp.org\/ftp\/tsg_sa\/WG2_Arch\/TSGS2_133_Reno\/Docs\/S2-1906761.zip","group":"S2","meeting":"S2-133","year":2019,"uicc_affected":null,"me_affected":null,"ran_affected":null,"cn_affected":null,"clauses_affected":null,"crsinpack":null,"crsinpacknumber":0}]