TS 33.216
Security Assurance Specification (SCAS)
for evolved Node B (eNB) Network Product Class
V18.1.0 (PDF)
2024/03 26 p.
V17.0.0
2022/12 21 p.
V16.7.0
2021/09 22 p.
V15.3.0
2020/09 18 p.
- Rapporteur:
- Mr. Wong, Marcus
Huawei Tech.(UK) Co.. Ltd
full Table of Contents for TS 33.216 Word version: 18.1.0
1 Scope
2 References
3 Definitions and abbreviations
4 eNodeB-specific security requirements and related test cases
$ Change history
1 Scope p. 6
The present document contains objectives, requirements and test cases that are specific to the eNB network product class. It refers to the Catalogue of General Security Assurance Requirements and formulates specific adaptions of the requirements and test cases given there, as well as specifying requirements and test cases unique to the eNB network product class.
2 References p. 6
3 Definitions and abbreviations p. 6
3.1 Definitions p. 6
3.2 Abbreviations p. 7
4 eNodeB-specific security requirements and related test cases p. 7
4.1 Introduction p. 7
4.2 eNodeB-specific security functional adaptations of requirements and related test cases p. 7
4.2.1 Introduction p. 7
4.2.2 Security functional requirements on the eNodeB deriving from 3GPP specifications and related test cases p. 7
4.2.2.1 Security functional requirements on the eNodeB deriving from 3GPP specifications - TS 33.401 [3] p. 7
4.2.2.1.1 Control plane data confidentiality protection p. 7
4.2.2.1.2 Control plane data integrity protection p. 7
4.2.2.1.3 User plane data ciphering and deciphering at the eNB p. 8
4.2.2.1.4 User plane data integrity protection p. 8
4.2.2.1.5 AS algorithms selection p. 9
4.2.2.1.6 Verify RRC integrity protection p. 9
4.2.2.1.7 The selection of EIA0 p. 10
4.2.2.1.8 Key refresh at the eNB p. 11
4.2.2.1.9 AS Security Mode Command Procedure p. 12
4.2.2.1.10 Bidding down prevention in X2-handovers p. 12
4.2.2.1.11 AS protection algorithm selection in eNB change p. 13
4.2.2.1.12 RRC and UP downlink ciphering at the eNB p. 14
4.2.2.1.13 Map a UE NR security capability p. 15
4.2.2.1.14 UE NR security capability is only sent to a SgNB p. 15
4.2.2.1.15 Bidding down prevention in X2-handovers when target eNB receives a NR security capability p. 16
4.2.2.1.16 Integrity protection of user data between the UE and the eNB p. 16
4.2.2.1.17 Local UP integrity protection configuration p. 17
4.2.2.1.18 UP IP policy selection p. 18
4.2.2.1.19 UP IP policy selection in S1 Handover p. 18
4.2.2.1.20 Bidding down prevention for UP IP Policy p. 20
4.2.3 Technical baseline p. 21
4.2.3.1 Introduction p. 21
4.2.3.2 Protecting data and information p. 21
4.2.3.2.1 Protecting data and information - general p. 21
4.2.3.2.2 Protecting data and information - unauthorized viewing p. 21
4.2.3.2.3 Protecting data and information in storage p. 21
4.2.3.2.4 Protecting data and information in transfer p. 21
4.2.3.2.5 Logging access to personal data p. 21
4.2.3.3 Protecting availability and integrity p. 21
4.2.3.4 Authentication and authorization p. 21
4.2.3.5 Protecting sessions p. 21
4.2.3.6 Logging p. 21
4.2.4 Operating systems p. 21
4.2.5 Web servers p. 22
4.2.6 Network devices p. 22
4.2.6.1 Protection of data and information p. 22
4.2.6.2 Protecting availability and integrity p. 22
4.2.7 Void
4.3 eNodeB-specific adaptations of hardening requirements and related test cases p. 22
4.3.1 Introduction p. 22
4.3.2 Technical Baseline p. 22
4.3.3 Operating Systems p. 22
4.3.4 Web Servers p. 22
4.3.5 Network Devices p. 23
4.3.6 Void
4.4 eNodeB-specific adaptations of basic vulnerability testing requirements and related test cases p. 23
$ Change history p. 24
