Study on security aspects of user identities and authentication
The present document studies the security and privacy aspects for the creation and usage of user identities as studied in 3GPP TR 23.700-32 [2], with the following focus:
1) Study authentication and authorization of:
a) a user identifier associated with a subscription and used on a UE (i.e., human user) and
b) an identifier associated with a non-3GPP device behind a UE or 5G-RG.
2) Study privacy and security impacts of usage of user identifiers associated with a subscription or with a non-3GPP device behind a UE or 5G-RG, including exposure of user profile related information.