Section: 14.1.2.1 Nausf_UEAuthentication_Authenticate service operation
Content: Service operation name: Nausf_UEAuthentication_authenticate. Description: Authenticate the UE and provides related keying material. Input, Required: One of the options below. 1. In the initial authentication request: SUPI or SUCI, serving network name. 2. In the subsequent authentication requests depending on the authentication method: a. 5G AKA: Authentication confirmation message with RES* as described in clause 6.1.3.2 or Synchronization Failure indication and related information (i.e. RAND/AUTS). b. EAP-AKA’: EAP packet as described in RFC 4187 [21] and RFC 5448 [12], and Annex F. Input, Optional: Disaster Roaming service indication, NSWO indicator. NOTE: If NSWO indicator is present then the serving network name contains "5G:NSWO". Output, Required: One of the options below. 1. Depending on the authentication method: a. 5G AKA: authentication vector, as described in clause 6.1.3.2 or Authentication confirmation acknowledge message. b. EAP-AKA’: EAP packet as described in RFC 4187 [21] and RFC 5448 [12], and Annex F. 2. Authentication result and if success the master key which are used by AMF to derive NAS security keys and other security key(s). Output, Optional: SUPI if the authentication was initiated with SUCI, MSK if either NSWO indicator was received as input or MSK indicator was received from UDM.