Section: 8.5 Identity management
Content: The 5G system shall provide a mechanism for an operator to allow access from a UE using a temporary identifier that hides its subscriber identity. The 5G system shall provide a mechanism for an operator to allow access from a UE connected in an indirect network connection using a temporary identifier that hides its subscriber identity. The HPLMN shall be able to associate a temporary identifier to a UE's subscriber identity. The 5G system shall be able to protect subscriber identity and other user identifying information from passive attacks. Subject to regional or national regulatory requirements, the 5G system shall be able to protect subscriber identity and other user identifying information from active attacks. The 5G system shall be able to allow the equipment identifier to be collected by legitimate entity regardless of UE's user interface, when required. The 5G system shall be able to support identification of subscriptions independently of identification of equipment. The 5G system shall support a secure mechanism to collect system information while ensuring end-user and application privacy (e.g. application level information is not to be related to an individual user identity or subscriber identity and UE information is not to be related to an individual subscriber identity). Subject to regional or national regulatory requirements, the 5G system shall be able to provide the 5G positioning services while ensuring the protection of the privacy of the UE's user or owner, including the respect of his consent to the positioning services. NOTE 1: this includes the ability for the 5G system to provide the positioning services on demand without having to track continuously the position of the involved UE. NOTE 2: the respect of the user's consent to some positioning services could abide by different rules in case of emergency (for example, rules that would also receive consent from the user, but well before the emergency occurs). For a private network using 5G technology, the 5G system shall support network access using identities, credentials, and authentication methods provided and managed by a third-party and supported by 3GPP.