Tech-invite  3GPPspace  IETFspace
21  22  23  24  25  26  27  28  29  31  32  33  34  35  36  37  38  4‑5x

Content for  TS 33.401  Word version:  18.1.0

Top   Top   Up   Prev   Next
1…   4   5…   6…   6.2…   7…   7.2.5…   7.2.8   7.2.9…   7.3…   8…   9…   10…   11…   15…   A…   B…   C…   C.1.6   C.2…   C.2.7   C.2.8   C.3…   C.4.7   D…   E…   E.2…   E.3…   F…   G…   H…   I…   K… 
8 Security mechanisms for non-access stratum signalling and data via MME  8.0 General  8.1 NAS integrity mechanisms  8.2 NAS confidentiality mechanisms 
...

 

8  Security mechanisms for non-access stratum signalling and data via MME  p. 59

8.0  General |R10|  p. 59

The statements relating to UEs in clause 8 apply also to RNs regarding the security between a relay node and its MME.
Clause 8 also applies to the security procedures for data sent via the MME.

8.1  NAS integrity mechanisms  p. 59

Integrity protection for NAS signalling messages shall be provided as part of the NAS protocol.

8.1.1  NAS input parameters and mechanism  p. 59

Input parameters to the NAS 128-bit integrity algorithms as described in Annex B are an 128-bit integrity key KNASint as KEY, an 5-bit bearer identity BEARER which shall equal the constant value 0x00, the direction of transmission DIRECTION, and a bearer specific, time and direction dependent 32-bit input COUNT which is constructed as follows:
COUNT := 0x00 || NAS OVERFLOW || NAS SQN
Where
  • the leftmost 8 bits are padding bits including all zeros.
  • NAS OVERFLOW is a 16-bit value which is incremented each time the NAS SQN is incremented from the maximum value.
  • NAS SQN is the 8-bit sequence number carried within each NAS message.
The use and mode of operation of the 128-bit integrity algorithms are specified in Annex B.
The supervision of failed NAS integrity checks shall be performed both in the ME and the MME. In case of failed integrity check (i.e. faulty or missing NAS-MAC) is detected after the start of NAS integrity protection, the concerned message shall be discarded except for some NAS messages specified in TS 24.301. For those exceptions the MME shall take the actions specified in TS 24.301 when receiving a NAS message with faulty or missing NAS-MAC. Discarding NAS messages can happen on the MME side or on the ME side.
Up

8.1.2  NAS integrity activation  p. 60

NAS integrity shall be activated using the NAS SMC procedure or after a handover to E-UTRAN from UTRAN/GERAN. Replay protection shall be activated when integrity protection is activated (except for when the selected integrity protection algorithm is EIA0, see Annex B). Replay protection shall ensure that the receiver only accepts each particular incoming NAS COUNT value once using the same NAS security context. Once NAS integrity has been activated, NAS messages without integrity protection shall not be accepted by the UE or MME. Before NAS integrity has been activated, NAS messages without integrity protection shall only be accepted by the UE or MME in certain cases where it is not possible to apply integrity protection as specified in TS 24.301. While some NAS messages such as reject messages need to be accepted by the UE without integrity protection, the MME shall only send a reject message that causes the CSG list on the UE to be modified after the start of NAS security. The UE shall discard any message modifying the CSG list if it is not integrity protected.
NAS integrity stays activated until the EPS security context is deleted in either the UE or MME. In particular the NAS service request shall always be integrity protected and the NAS attach request message shall be integrity protected if the EPS security context is not deleted while UE is in EMM-DEREGISTERED. The length of the NAS-MAC is 32 bit. The full NAS-MAC shall be appended to all integrity protected messages except for the NAS service request. Only the 16 least significant bits of the 32 bit NAS-MAC shall be appended to the NAS service request message.
The use and mode of operation of the 128-EIA algorithms are specified in Annex B.
Up

8.2  NAS confidentiality mechanisms  p. 60

The input parameters for the NAS 128-bit ciphering algorithms shall be the same as the ones used for NAS integrity protection as described in clause 8.1, with the exception that a different key, KNASenc , is used as KEY, and there is an additional input parameter, namely the length of the key stream to be generated by the encryption algorithms.
If UE in EMM-IDLE mode uses Control Plane CIoT EPS optimisation for data transport, an initial plain NAS message including user data needs to be partially ciphered (see clause 4.4.5 of TS 24.301) with the same encryption algorithm that was agreed during the NAS SMC exchange. In this case the length of the key stream is set to the length of the part of the initial plain NAS message that is to be ciphered.
The use and mode of operation of the 128-bit ciphering algorithms are specified in Annex B.
Up

Up   Top   ToC