Content for TS 33.535 Word version: 18.4.0

C.1 General C.1.1 Requirement on the UE C.1.2 Requirement on the AF C.2 Shared key-based mutual authentication between UE and AF C.2.1 General C.2.2 Procedures for DTLS 1.3

C (Normative) AKMA Ua* protocol based on DTLS |R18| p. 30

C.1 General p. 30

This Annex covers the aspects specific to the AKMA Ua* protocol based on DTLS. This feature is optional to be supported for the UE and AF. If the feature is supported, the following clauses apply.

C.1.1 Requirement on the UE p. 30

UE hosts the DTLS client. The UE should be able to send the AKMA PSK identity to the AF to indicate which key (KAF) the UE intends to use to secure the Ua* reference point based on DTLS.

The PSK identity specified in clause B.1 for TLS is also applicable for DTLS.

C.1.2 Requirement on the AF p. 30

DTLS should be supported by the AF for the UE-AF reference point (Ua*).

The AF should be able to require that a certain key (i.e., KAF) used to secure the Ua reference point based on DTLS.

C.2 Shared key-based mutual authentication between UE and AF p. 30

C.2.1 General p. 30

The TLS profile specified in clause 6.2 of TS 33.210 apply to DTLS 1.3 RFC 9147.

C.2.2 Procedures for DTLS 1.3 p. 30

The procedures given in clause B.1.3.2.2 for TLS 1.3 is also applicable for DTLS 1.3 RFC 9147.

AKMA PSK identity should be delivered via DTLS message.