When introducing sensing technology, new aspects on confidentiality, integrity, and privacy need to be considered, to ensure that these aspects are considered already when proposing service requirements.
For instance, with sensing technology by-standers can be affected in a completely new way, previously only UEs have been able to be tracked but now sensing capabilities may enable tracing and potentially identification of anything in the environment, including humans that do not carry a UE, or any objects. This has implications for privacy. Obviously humans should have a right to privacy.
For privately owned areas, respective permission is required for sensing operation from such as the homeowner for in-home sensing or the building management for the in-building sensing.
For public areas, such as a public road, park and airport, it is required to obtain the permission of the respective public area management.
It is important to have the user consent before the network uses UEs in providing sensing service. If the sensing results and user ID are brought together for further processing, user consent is also needed.
Of course, factors such as resolution, updating frequency, and type of application influence the security implications.
Requirements to minimize the risk of unwanted usage and awareness of the usage needs to be considered in stage 1. These are captured in the next chapter.
A set of general new requirements can be identified:
[PR 6.1.2-1]
The 5G system shall limit sending the sensing results only to third party authorized to receive that sensing results.
[PR 6.1.2-2]
The 5G system shall support encryption and integrity protection of the sensing result, to protect the data inside the 5G system and when used.
[PR 6.1.2-3]
The 5G system shall support appropriate level of sensing for both situations where consent can be obtained from the sensing targets, and where it cannot.
[PR 6.1.2-4]
Subject to regulation, the 5G system shall obtain user consent when sensing results and user identification are brought together for further processing.