Section: 8.9 Data security and privacy
Content: The 5G system shall support data integrity protection and confidentiality methods that serve URLLC, high data rates and energy constrained devices. The 5G system shall support a mechanism to verify the integrity of a message as well as the authenticity of the sender of the message. The 5G system shall support encryption for URLLC services within the requested end-to-end latency. Subject to regulatory requirements, the 5G system shall enable an MNO to provide end-to-end integrity protection, confidentiality, and protection against replay attacks between a UE and third-party application server, such that the 3GPP network is not able to intercept or modify the data transferred between a UE and third-party application server. Subject to regulatory requirements and based on operator policy, the 5G system shall provide a mechanism to support data integrity verification service to assure the integrity of the data exchanged between the 5G network and a third-party service provider. NOTE: This requirement could apply to mechanisms supported over the interface between 5G core network and an external application, with no impact on RAN and UE. Subject to regulatory requirements and based on operator policy, the 5G system shall provide a mechanism to support confidentiality to prevent exposure of data exchanged between the 5G network and a third party service provider. NOTE: This requirement could apply to mechanisms supported over the interface between 5G core network and an external application, with no impact on RAN and UE. Subject to operator’s policies, a 5G system with satellite access supporting S&F Satellite operation shall be able to preserve security of the data stored and forwarded.