Section: M.3.2 Authentication and Authorization of IAB-node (Phase-1)
Content: The IAB-UE function shall behave as a UE, and shall reuse the UE procedures specified in this document for the primary authentication (see clause 6), key derivation and distribution scheme, subscription credential(s) storage requirements, NAS security and AS security. NOTE 1: For isolated deployment scenarios, Annex B describes how additional EAP methods can be used. NOTE 2: Storage of subscription credentials for EAP AKA’ and 5G AKA is described in clause 6 of the present document. Authorization of IAB-nodes shall be performed by the 5G core network supporting IAB architecture as described in TS 23.501[ System architecture for the 5G System (5GS) ]  [2].