Question: What authentication methods must a Terminal support for key establishment with a Universal Integrated Circuit Card (UICC), as per 3GPP security standards?
Option 1: Only Certificate-based Mutual Authentication using a Server Certificate
Option 2: Either Certificate-based Mutual Authentication using a Client Certificate or Shared Key based Mutual Authentication using PSK TLS
Option 3: Both Certificate-based Mutual Authentication using a Client Certificate and Shared Key based Mutual Authentication using PSK TLS, with the Terminal equipped with either a valid Client Certificate or a valid pre-shared key respectively
Option 4: Neither Certificate-based nor Shared Key based Mutual Authentication is mandated for the Terminal
Explanation: This option correctly identifies that the Terminal must support both certificate-based mutual authentication (with a valid Client Certificate) and shared key based mutual authentication using PSK TLS (with a valid pre-shared key), aligning with enhanced security protocols for UICC-terminal interactions as outlined in relevant 3GPP specifications (TS 33.222 and TS 33.310). This ensures flexibility and robust security, catering to different deployment scenarios while emphasizing the importance of mutual authentication for secure key establishment.