TSG SA WG3 #8, Sophia Antipolis, 16—19 November, 1999								S3-99541
	
 DRAFT 3G CHANGE REQUEST	Please see embedded help file at the bottom of this
page for instructions on how to fill in this form correctly.	
	
	TS 33.102	CR	026r1	Current Version:	V3.2.0		
					
3G specification number 		 CR number as allocated by 3G support team	
	
For submission to TSG		for approval	X	(only one box should	
list TSG meeting no. here 	for information		be marked with an X)	
	
Form: 3G CR cover sheet, version 1.0        The latest version of this form is available from: ftp://ftp.3gpp.org/Information/3GCRF-xx.rtf	
	
Proposed change affects:	USIM		ME		UTRAN		Core Network		
(at least one should be marked with an X)	
	
Source:	Telia	Date: 	16-11-99	
	
Subject:	Mobile IP security	
	
3G Work item:	Security Architecture	
	
Category: 	F	Correction					
	A	Corresponds to a correction in a 2G specification					
(only one category 	B	Addition of feature	x				
shall be marked	C	Functional modification of feature					
with an X)	D	Editorial modification					
	
Reason for 
change:
	The clause for IP (including Mobile IP) security in 33.102 has so far been marked as for further study. It is important to make clear that the MIP introduction in 3G has no influence on the 3G security architecture. The proposed text for clause 8.3 introduces the notion of mutual independence between 3G security and Mobile IP security. 

Clauses affected:	Clause 8	
	
Other specs	Other 3G core specifications		  List of CRs:		
affected:	Other 2G core specifications		  List of CRs:		
	MS test specifications		  List of CRs:		
	BSS test specifications		  List of CRs:		
	O&M specifications		  List of CRs:		
	
Other 
comments:		

8.3 Mobile IP security
The introduction of Mobile IP functionality for end users in 3G has no influence on the security architecture for 3G. 

Mobile IP terminals may be equipped with security functionality independent of the 3G network access security in order to allow security functions outside the 3G network.
3G networks, supporting Mobile IP services, should support its inherent security functionality.  
On the other hand, 3G network access security architecture can not be influenced or reduced by the Mobile IP option. 
The Mobile IP security functionality must thus be separate from the 3G network access security and it is developed in an other forum,  IETF.