tokens: ['Figure', '', 'depicts', 'the', 'GAA', 'related', 'functionalities', 'in', 'the', 'terminal', 'In', 'relation', 'to', 'the', 'GAA', 'architecture', 'the', 'GAA', 'server', 'communicates', 'with', 'the', 'BSF', 'server', 'over', 'Ub', 'reference', 'point', 'and', 'with', 'the', 'UICC', 'through', 'the', 'relevant', 'device', 'drivers', 'for', 'example', 'The', 'GAA', 'client', 'communicates', 'over', 'the', 'network', 'with', 'a', 'NAF', 'server', 'and', 'the', 'GAA', 'server', 'to', 'obtain', 'the', 'NAF', 'specific', 'GAA', 'credentials', 'When', 'a', 'NAF', 'server', 'requests', 'a', 'GAA', 'client', 'to', 'authenticate', 'itself', 'with', 'GAA', 'credentials', 'the', 'client', 'communicates', 'with', 'the', 'GAA', 'server', 'for', 'GAA', 'credentials', 'specific', 'to', 'that', 'NAF', 'Figure', '', 'GAA', 'related', 'modules', 'in', 'terminal', 'The', 'inherent', 'feature', 'of', 'open', 'platforms', 'is', 'that', 'new', 'applications', 'can', 'be', 'installed', 'to', 'the', 'terminal', 'In', 'relation', 'to', 'GAA', 'this', 'poses', 'a', 'security', 'threat', 'when', 'a', 'malicious', 'application', 'is', 'installed', 'in', 'a', 'type', 'of', 'terminal', 'that', 'does', 'not', 'protect', 'GAA', 'related', 'functionalities', 'The', 'GAA', 'related', 'security', 'threats', 'are', 'as', 'follows', '', 'A', 'malicious', 'application', 'can', 'access', 'the', 'UICC', 'directly', 'and', 'therefore', 'can', 'function', 'as', 'a', 'GAA', 'server']