bobcheng_2006 2008-4-11 16:16
3GPP TS 21.133 V4.1.0
>>发附件贴请务必注明以下选项：>>
【资料成文时间】： 2001-12
【语言】：英文
【页数】： 26
【何人（公司）所著】： 3GPP
【文件格式】： word
【文件原名】： 3GPP TS 21.133 V4.1.0
【摘要或目录】：Contents
Foreword 5
1 Scope 6
2 References 6
3 Definitions and Abbreviations 7
3.1 Definitions 7
3.2 Abbreviations 8
4 General objectives for 3G security features 8
5 Security context 9
5.1 System assumptions 9
5.1.1 Type of services and service management 10
5.1.2 Access to services 10
5.1.3 Service provision 10
5.1.4 System architecture 10
5.1.5 Security management 10
5.1.6 Interworking and compatibility 11
5.1.7 Charging and billing 11
5.1.8 Supplementary services 11
5.2 3G roles 11
5.2.1 User domain 11
5.2.2 Infrastructure domain 12
5.2.3 Non-3G infrastructure domain 12
5.2.4 Off-line parties 12
5.2.5 Intruders 13
5.3 3G architecture 13
5.4 3G identities 13
5.5 3G data types and data groups 13
5.5.1 3G data types 13
5.5.1.1 User traffic 13
5.5.1.2 Signalling data 13
5.5.1.3 Control data 14
5.5.2 3G data groups 14
5.5.2.1 User-related data 14
6 Security threats 14
6.1 Threats associated with attacks on the radio interface 15
6.1.1 Unauthorised access to data 16
6.1.2 Threats to integrity 16
6.1.3 Denial of service attacks 16
6.1.4 Unauthorised access to services 16
6.2 Threats associated with attacks on other parts of the system 17
6.2.1 Unauthorised access to data 17
6.2.2 Threats to integrity 17
6.2.3 Denial of service attacks 18
6.2.4 Repudiation 18
6.2.5 Unauthorised access to services 18
6.3 Threats associated with attacks on the terminal and UICC/USIM 19
7 Risk Assessment 19
7.1 Evaluation of threats 19
7.1.1 Threats evaluated to be of major or medium value. 19
8 Security Requirements 21
8.1 Requirements derived from threat analysis 21
8.1.1 Requirements on security of 3GPP services 21
8.1.1.1 Requirements on secure service access 21
8.1.1.2 Requirements on secure service provision 21
8.1.2 Requirements on system integrity 22
8.1.3 Requirements on protection of personal data 22
8.1.3.1 Security of user-related transmitted data 22
8.1.3.2 Security of user-related stored data 22
8.1.4 Requirements on the terminal/USIM 23
8.1.4.1 USIM Security 23
8.1.4.2 Terminal Security 23
8.2 External requirements 23
8.2.1 Regulator requirements 23
8.2.1.1 Lawful interception 23
Annex A (Informative): Threats linked to active attacks on the radio access link 24
A.1 User identity catching 24
A.2 Suppression of encryption between target and intruder 24
A.3 Compromise of authentication data 25
A.4 Hijacking of services 25
Annex B: Change history 26