Question: What two mutual authentication methods must a Universal Integrated Circuit Card (UICC) support for key establishment with a terminal, as per 3GPP security standards?
Option 1: Certificate-based mutual authentication using HTTPS and shared key based mutual authentication using PSK TLS
Option 2: Symmetric key encryption and Asymmetric key encryption
Option 3: Password-based authentication and Biometric authentication
Option 4: Challenge-Handshake Authentication Protocol (CHAP) and Password Authentication Protocol (PAP)
Explanation: In the context of telecom security, specifically for UICC-terminal interactions, supporting both certificate-based mutual authentication (utilizing protocols like HTTPS for secure communication) and shared key based mutual authentication (using Pre-Shared Key with Transport Layer Security, PSK TLS) is crucial. This dual approach enhances security by providing both robust identity verification through certificates and the efficiency of pre-shared keys, catering to various network and application requirements.