© All rights reserved
3GPP SA3
Security standards for mobile communication systems –
making mobile business happen
Dr. Anand R. Prasad, 3GPP TSG SA WG3 Chairman,
Chief Advanced Technologist, Executive Specialist, NEC Corp.
3GPP TSG SA WG3 (Security) Terms of
Reference
 The WG has the overall responsibility for security and
privacy in 3GPP systems
• performs analysis of potential threats to these systems
• determines the security and privacy requirements for 3GPP
systems
• specifies the security architectures and protocols
• ensures the availability of cryptographic algorithms which need
to be part of the specifications
http://www.3gpp.org/Specifications-groups/sa-plenary/54-sa3-security
3GPP SA3 specification location:
http://www.3gpp.org/ftp/Specs/html-info/33-series.htm
Finding specific specification:
http://www.3gpp.org/ftp/Specs/html-info/xxyyy.htm
Replace xxyyy by specification number, e.g., 33401 for TS 33.401
Mobile Network Security – Helicopter view
Service
Layer
Service
O&M,
OSS/BSS
Subscriber Identity
Module (SIM)
Radio
Network
Mobile Equipment
(ME)
Core Network
User Equipment
(UE)
Internet
Foreign Network
Home subscriber
subsystem
Control plane
(HSS)
User plane
Other
network
e.g. WiFi
Lawful Interception
New radio
network
Legacy radio
networks
3
Security, standardized
or otherwise
3GPP SA3 Activities: Selected Topics
IOPS
MCPTT
IOPS: Isolated E-UTRAN for Public Safety
Aggregation
MCPTT: Mission Critical Push to Talk for LTE
ProSe
ProSe: Proximity based Services
IOT
IOT: Internet Of Things
3GPP SA3 Activities: Security Assurance
SCAS = security
requirements &
associated test cases
3GPP
Role endorsed by
accredited vendor or
3rd party
Operator
Evaluator
SCAS
Evaluation
Evaluation
Report
Vendor
(Self)
Declaration
Operator
security
acceptance
decision
Network
Product
GSMA
SECAG
Accreditation
Makes the final decision based on
output documents and internal
policies
Legend:
Product /
Documentation
Role
Process
SECAM: Security Assurance Methodology
SCAS: Security Assurance Specifications
Contact Details:
Anand R. Prasad
[email protected]
https://jp.linkedin.com/in/arprasad
http://www.prasad.bz/
Thank you!