name: NDS
full_form: Network Domain Security
context: In indirect communication scenarios, the NF Service Producer and NF Service Consumer shall use implicit authentication by relying on authentication between NF Service Consumer and SCP, and between SCP and NF Service Producer, provided by the transport layer protection solution, NDS/IP, or physical security. NOTE 0: Mutual authentication between NF Service Consumer and NF Service Producer is not achieved with hop-by-hop security. If the PLMN uses token-based authorization as specified by clause 13.4.1.2 and the PLMNâs policy mandates that the NRF authenticates the NF Service Consumer before granting an access token, the access token indicates to the NF Service Producer that the NF Service Consumer has been authenticated by the NRF. If additional authentication of the NF Service Consumer is required, the NF Service Producer authenticates the NF Service Consumer at the application layer using CCA based authentication as specified in clause 13.3.8. The NF Service Consumer authentication based on CCA based authentication is optional to use, and based on operator policy.
description: Network Domain Security (NDS) refers to a set of security mechanisms and protocols designed to protect the communication between network functions within a telecommunications network. In the context of 3GPP specifications, NDS is particularly relevant for ensuring secure indirect communication scenarios where NF Service Producers and NF Service Consumers interact through a Service Communication Proxy (SCP). The technology encompasses various aspects such as implicit authentication, transport layer protection solutions like NDS/IP, physical security measures, and application-layer authentication using CCA-based methods. Its primary goal is to safeguard the integrity and confidentiality of data exchanged between network functions while also ensuring mutual authentication where necessary.
explanation: NDS is categorized under Technology because it represents a specific set of standards and protocols aimed at securing network communications within the telecommunications domain, as outlined in the provided context from 3GPP specifications.
section_title: 13.3.2.2 Indirect communication
biotag_Context: O,O,O,O,O,B-Network Function,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,B-Network Function,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,B-Network,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,B-Network Function,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,B-Parameter,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,B-Parameter,O,O,O,O,O,O,O,O,O,O,O
biotag_Description: B-Technology,I-Technology,I-Technology,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Organization,O,B-Technology,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,B-Network Function,O,O,O,O,O,B-Network Function,I-Network Function,I-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O