Section: 6.38.2.6 Security
Content: The 5G system shall provide user privacy; location privacy, identity protection and communication confidentiallity for non-3GPP devices and UEs that are using the PIN Element with Gateway Capability, eRG or PRAS. NOTE 1: Privacy protection should not block differentiated routing and QoS for different destinations and services for the UE(s). The 5G system shall support a mechanism to minimize the security risk of communications using an eRG. The 5G system shall enable the network operator associated with an eRG to control the security policy of an eRG. The 5G system shall support a mechanism to minimize the security risk of communications via a PRAS. The PRAS (and its associated backhaul connectivity) shall provide a level of security equivalent to regular 5G base stations. The 5G system shall enable the network operator associated with the Premises Radio Access Station (PRAS) to control the security policy of the PRAS. The 5G system shall support authentication of a UE with 3GPP credentials for communication with entities (UEs, non-3GPP devices) in a CPN. NOTE 2: To support this functionality the CPN needs to be connected with the 5G core network. The 5G system shall provide support for a network operator to authenticate a PRAS. The 5G system shall provide support for a network operator to authorize a PRAS for its use in a CPN. The 5G system shall support a PIN Element using non operator managed credentials (e.g. provided by a third party) for performing communications within the PIN when those communications use PIN direct connections. The 5G system shall support a mechanism to mitigate repeated and unauthorized attempts to access PIN Elements (e.g. mitigate a malicious flood of messages).