Security aspects of ambient IoT services in 5G
The present document specifies the security and privacy aspects of AIoT services in the 5G System (5GS), complying to the requirements in TS 22.369 [4], applicable to the AIoT Device types, traffic types, use cases and connectivity topologies defined in TS 38.300 [3], and based on the architecture defined in TS 23.369 [2].
Security features for AIoT services include:
1. Network Layer Authentication between AIoT device and 5G core
a. AIoTF is the endpoint in the 5G core
b. Credentials are securely stored in the ADM on the network side
NOTE 1: The credentials are assumed to be stored in a secure environment in the ADM. How this is realized is left to implementation. The requirements will reflect this.
c. Secure storage and processing of credentials in the AIoT device.
NOTE 2: For SNPN deployment the storage of the credentials of non-AKA based methods is out of scope as described in TS 33.501[5] Annex I 2.2.
d. Security aspects of the storage of the credentials at the ADM
2. Confidentiality, anti-replay and integrity protection of information during AIoT service communication
3. Privacy of AIoT device identifiers using the AIoT Temp ID.
4. Security to protect the permanent disabling RF transmission capabilities of AIoT device(s).
Editor’s Note: Further refinement is FFS.