3GPP TSG-T2 #5 / ETSI SMG4
Helsinki, FINLAND, 6-9 September 1999	TSGT2#5(99)634	

TSG-SA WG3 (Security) meeting #5	TSGS-WG3#5(99)252
Sophia Antipolis, 3-6 August 1999	

To:	3GPP TSG T2

Source:	TSG S3

Title:	Baseline Implementation Capabilities in the security domain 
_________________________________________________________________________

In response to the recent request from T2 for Baseline Implementation Capabilities in the security domain (T2-99585), S3 can confirm the capabilities listed in the table below. Further details can be derived from the Integration Guidelines specification, TS33.103 (attached). 
Note that this table is based on the example table supplied in T2-99585. The table references the Security Architecture specification, TS33.102.
Security feature	Mandatory/optional capabilities	Section
in TS 33.102 draft V3.2.0	
User Identity Confidentiality	-----	5.1.1	
	Identification by temporary identities and confidential transport of other USIM  information.	<mandatory>	6.1	
	Identification by a permanent identity
Note: This functionality is implemented in the USIM and is transparent to the UE.	Use of IMUI and other USIM information in cleartext	<mandatory>	6.2	
		Transport of an encrypted IMUI and other USIM information. 
	<mandatory>
Note: The use of the enhanced mechanism is HE-specific.	6.2	
Entity Authentication	-----	5.1.2	
	Authentication and key agreement
	The authentication and key agreement protocol	<mandatory>	6.3	
		Authentication and key agreement algorithms. 
Note: Algorithms are implemented on the USIM.	<option>
Note: The algorithms are HE-specific.		
					
Confidentiality	-----	5.1.3	
	Data confidentiality	<mandatory>  	6.6	
	Cipher indicator	<mandatory>	5.5	
Hooks for network wide encryption	<mandatory>	8.2	
Data integrity	-----	5.1.4	
	Data integrity of signalling elements	<mandatory>	6.4	
Mobile Equipment Identification
Note: Security features for UE identification have currently not been defined.	<mandatory>
Note: Includes capability of having IMEI and capability of reporting it to the network.	5.1.5	
User-to-USIM Authentication	<mandatory>	5.3.1	
USIM-Terminal Link	<option>	5.3.2	
Secure messaging between the USIM and the network	<option>
Note: Security features are HE and application specific	5.4.1	

Table 1. Terminal Baseline Implementation Capabilities in the security domain