Section: 8 Security 8.2 General
Content: The 5G system shall support a secure mechanism to store cached data. The 5G system shall support a secure mechanism to access a content caching application. The 5G system shall support a secure mechanism to access a service or an application in an operator's Service Hosting Environment. The 5G system shall enable support of an access-independent security framework. The 5G system shall support a mechanism for the operator to authorize subscribers of other PLMNs to receive temporary service (e.g. mission critical services). The 5G system shall be able to provide temporary service for authorized users without access to their home network (e.g. IOPS, mission critical services). The 5G system shall allow the operator to authorize a third-party to create, modify and delete network slices, subject to an agreement between the third-party and the network operator. Based on operator policy, a 5G network shall provide suitable means to allow a trusted and authorized third-party to create and modify network slices used for the third-party with appropriate security policies (e.g. user data privacy handling, slices isolation, enhanced logging). The 5G system shall support a secure mechanism to protect relayed data from being intercepted by a relay UE. Subject to HPLMN policy as well as its service and operational needs, any USIM able to access EPS instead of a 5G USIM may be used to authenticate a user in a 5G system to access supported services according to the user subscription. The 5G system shall provide integrity protection and confidentiality for communications between authorized UEs using a 5G LAN-type service. The 5G LAN-VN shall be able to verify the identity of a UE requesting to join a specific private communication. The 5G system shall provide suitable means to allow the use of a trusted third-party provided encryption between any UE served by a private slice and a core network entity in that private slice. The 5G system shall provide suitable means to allow use of a trusted and authorized third-party provided integrity protection mechanism for data exchanged between an authorized UE served by a private slice and a core network entity in that private slice. The 5G system shall provide suitable means to allow use of a trusted and authorized third-party provided integrity protection mechanism for data exchanged between an authorized UE served by a non-public network and a core network entity in that non-public network. The 5G system shall enable a PLMN to host an NPN without compromising the security of that PLMN. NOTE: Dedicated network entities of NPN can be deployed in customer premises that are outside the control of the PLMN operator.