Section: 4.1 Security domains
Content: Figure 4-1 gives an overview of security architecture. Figure 4-1: Overview of the security architecture The figure illustrates the following security domains: - Network access security (I): the set of security features that enable a UE to authenticate and access services via the network securely, including the 3GPP access and Non-3GPP access, and in particularly, to protect against attacks on the (radio) interfaces. In addition, it includes the security context delivery from SN to AN for the access security. - Network domain security (II): the set of security features that enable network nodes to securely exchange signalling data and user plane data. - User domain security (III): the set of security features that secure the user access to mobile equipment. - Application domain security (IV): the set of security features that enable applications in the user domain and in the provider domain to exchange messages securely. Application domain security is out of scope of the present document. - SBA domain security (V): the set of security features that enables network functions of the SBA architecture to securely communicate within the serving network domain and with other network domains . Such features include network function registration, discovery, and authorization security aspects, as well as the protection for the service-based interfaces. SBA domain security is a new security feature compared to TS 33.401[ 3GPP System Architecture Evolution (SAE); Security architecture ]  [10]. - Visibility and configurability of security (VI): the set of features that enable the user to be informed whether a security feature is in operation or not. NOTE: The visibility and configurability of security is not shown in the figure.