Content for TR 33.702 Word version: 19.0.0
6 Solutions p. 14
6.0 Mapping of solutions to key issues p. 14
6.1 Solution #1: TNAP mobility solution with rand p. 14
6.1.1 Introduction p. 14
6.1.2 Solution details p. 15
6.1.2.1 Procedure p. 15
6.1.2.2 Key derivation p. 16
6.1.3 Evaluation p. 16
6.2 Solution #2: TNAP mobility solution with count p. 17
6.2.1 Introduction p. 17
6.2.2 Solution details p. 17
6.2.2.1 Procedure p. 17
6.2.2.2 Key derivation p. 18
6.2.3 Evaluation p. 19
6.3 Solution #3: Using Fast BSS Transition for TNAP mobility p. 19
6.3.1 Introduction p. 19
6.3.2 Solution details p. 19
6.3.2.1 Solution overview p. 19
6.3.2.2 Details of FT p. 20
6.3.3 Evaluation p. 22
6.4 Solution #4: Security Establishment for TNAP Mobility p. 23
6.5 Solution #5: TNAP mobility solution without full authentication p. 25
6.6 Solution #6: TNAP mobility using modified ERP p. 27
6.7 Solution #7: Using Fast BSS Transition for N5CW mobility p. 30
6.8 Solution #8: N5CW device reconnecting p. 31
6.9 Solution #9: N5CW device mobility solution with Nonce p. 33
6.10 Solution #10: FBSS over 5G architecture p. 36
6.11 Solution #11: Mobility of N5CW devices p. 37
6.12 Solution #12: AUN3 device mobility solution with Nonce p. 38
6.12.1 Introduction p. 38
6.12.2 Solution details p. 39
6.12.2.1 AUN3 device not supporting 5G key hierarchy p. 39
6.12.2.1.1 Procedure p. 39
6.12.2.1.2 PMK key derivation p. 40
6.12.2.2 AUN3 device supporting 5G key hierarchy p. 41
6.12.3 Evaluation p. 42
6.13 Solution #13: ERP based re-authentication for NSWO p. 43
6.14 Solution #14: solution for UE connecting to a new WLAN AP connected via the same NSWOF. p. 45
6.14.1 Introduction p. 45
6.14.2 Solution details p. 46
6.14.2.1 MSK refresh p. 47
6.14.3 Evaluation p. 47
6.15 Solution #15: Using FT for NSWO p. 48
6.16 Solution #16: N5CW device mobility using security context in AMF p. 48
6.17 Solution #17: N5CW device mobility solution without AMF impact p. 50
6.18 Solution #18: AUN3 device reconnecting p. 52
6.18.1 Introduction p. 52
6.18.2 Procedures p. 53
6.18.2.1 Procedure for AUN3 device not supporting key hierarchy p. 53
6.18.2.2 Procedure for AUN3 device supporting key hierarchy p. 55
6.18.3 Evaluation p. 56
6.19 Solution #19: AUN3 device mobility solution without AMF impact p. 56
6.19.1 Introduction p. 56
6.19.2 Solution details p. 57
6.19.2.1 AUN3 device not supporting 5G key hierarchy p. 57
6.19.2.2 AUN3 device supporting 5G key hierarchy p. 59
6.19.3 Evaluation p. 60
6.20 Solution #20: Using Fast BSS Transition for AUN3 mobility p. 60
6.21 Solution #21: IPSec and MOBIKE based solution for IPSec connection optimization between UE and TNGF during re-authentication p. 61
7 Conclusions p. 64
7.1 Key issue #1: Security aspect of UE connecting to a new TNAP within the same TNGF p. 64
7.2 Key issue #2: Security aspect of AUN3 device connecting to a new 5G-RG within the same W-AGF: p. 64
7.3 Key issue #3: Security aspect of N5CW device connecting to a new TWAP within the same TWIF p. 64
7.4 Key issue #4: Security aspect of UE connecting to a new WLAN AP connected via the same NSWOF p. 64
$ Change history p. 65
