Tech-invite 3GPPspace IETFspace

21 22 23 24 25 26 27 28 29 31 32 33 34 35 36 37 38 4‑5x

TR 33.892
Study on UE Route Selection Policy (URSP) rules
to securely Identify applications

V18.0.0 (Wzip) 2023/09 13 p.

Rapporteur:: Dr. Kunz, Andreas
Motorola Mobility Germany GmbH

full Table of Contents for TR 33.892 Word version: 18.0.0

1 Scope p. 6

The present document analyses mechanisms to ensure the identity of a genuine application in order to apply the URSP rule accordingly, such that malicious applications cannot get access towards the operator regulated resources. The present document identifies key issues and develops solutions for enhancements that enables a URSP rule to securely identify the application for which the URSP rule should be applied.

2 References p. 6

3 Definitions of terms, symbols and abbreviations p. 6

3.1 Terms p. 6

3.2 Symbols p. 6

3.3 Abbreviations p. 6

4 Void

5 Key issues p. 7

5.1 Key issue #1: Determination of application identification p. 7

5.1.1 Key issue details p. 7

5.1.2 Threats p. 7

5.1.3 Potential security requirements p. 7

6 Proposed solutions p. 7

6.0 Mapping of solutions to key issues p. 7

6.1 Solution #1: Provide additional authentication information to enhance URSP policy enforcement p. 7

6.1.1 Introduction p. 7

6.1.2 Solution details p. 8

6.1.3 Evaluation p. 8

6.2 Solution #2: Solution on enhancing the URSP rule with certificate fingerprint p. 9

6.2.1 Introduction p. 9

6.2.2 Solution details p. 9

6.2.3 Evaluation p. 10

6.3 Solution on prevention of URSP rule misuse by a non-genuine application using home network anchor p. 11

6.3.1 Introduction p. 11

6.3.2 Solution details p. 11

6.3.2.1 Overview p. 11

6.3.2.2 URSPAUTH-MAC-IAUSF generation function p. 12

6.3.3 Evaluation p. 12

7 Conclusions p. 12

$ Change history p. 13