Section: T.4 Security of EAS discovery procedure via V-EASDF in roaming Scenario
Content: Annex P of the present document should be followed, with the following additions, to protect the discovery messages between the UE and the V-EASDF which is used as the DNS server for EAS discovery in the roaming case. If the core network is used to configure the security information, the V-SMF is preconfigured with the V-EASDF security information (credentials to authenticate the V-EASDF, supported security mechanisms, port number, etc.) and provides the security information to the UE as follows: - In the case of LBO roaming, the V-SMF provides the V-EASDF security information to the UE via PCO. - In the case of HR with Session Breakout (HR-SBO) roaming scenarios, during the PDU session establishment or modification procedure, the V-SMF provides the V-EASDF security information via Nsmf_PDUSession_Create/ Nsmf_PDUSession_Update to H-SMF when the V-SMF determines to use a V-EASDF for EAS discovery, and the H-SMF provides the V-EASDF security information to UE via PCO if HR SBO is authorized. NOTE: The security information of V-EASDF provided to the UE is only related with the VPLMN parameter.