Section: I.2.4 Requirements for handling control plane data
Content: An RNC in an exposed location has to provide confidentiality and integrity protection for control plane packets on the Iu and Iur reference points. 1. Control plane data ciphering/deciphering and integrity handling shall take place inside the secure environment where the related keys are stored. 2. The transport of control plane data over Iu and Iur shall be integrity-, confidentiality- and replay-protected from unauthorized parties. If this is to be accomplished by cryptographic means, Annex I.3 shall be applied. NOTE: Protection for signalling data that is sent from or to the UE extends between the UE and the serving RNC, cf. the NOTE in Annex I.2.3. This protection does not, however, cover the signalling data exchanged between RNCs over Iur; hence a separate requirement is needed for Iur.