3 Definitions, symbols and abbreviations

29.1093GPPGeneric Authentication Architecture (GAA)Release 17Stage 3TSZh and Zn Interfaces based on the Diameter protocol

3.1 Definitions

For the purposes of the present document, the terms and definitions given in 3GPP TS 23.008 [10], 3GPP TR 33.919 [4], 3GPP TS 33.220 [5] apply with following additions.

Bootstrapping information (Bootstrapped data) in a BSF consists of a bootstrapping transaction identifier (B-TID), a key material (Ks), the key lifetime (expiry time), the boostrapinfo creation time, the IMPI and the GUSS (if received from HSS) with BSF control information. Each bootstrapping procedure creates a bootstrapped data entity with B-TID as retrieval key..

GAA application is an application that uses the security association created by GBA Bootstrapping procedure.

GAA service is an operator specific end user service that uses the security association created by GAA Bootstrapping procedure. GAA services are identified by GAA Service Identifiers. A GAA service is implemented using some standardised or propriatary GAA application defined by GAA application type.

NAF specific Bootstrapping information transferred from a BSF to a NAF contains NAF and its service specific parts from bootstrapped data and needed key information derived from the bootstrapped data.

Service/Application. The term service is used here in its common meaning. A service is something that a MNO offers to subscribers. GAA Services are identified by GAA Service Identifier (GSID). In stage 2 documents ([4], [5], [6] and [11]) the term application is used in the same meaning i.e. MNOs offer applications to subscribers. There is a reason to avoid the usage of the term application here. The application is an already reserved term in Diameter. In Diameter applications are identified by Application Identifiers.

3.2 Symbols

For the purposes of the present document, the terms and definitions given in 3GPP TS 23.008 [10].

3.3 Abbreviations

For the purposes of the present document, the following abbreviations apply:

AK Anonymity Key

AKA Authentication and Key Agreement

AUTN Authentication token

AV Authentication Vector. 3GPP AV=[RAND,AUTN,XRES,CK,IK].

AVP Attribute-Value-Pair in Diameter messages.

BIA BootstrappingInfo-Answer message

BIR BootstrappingInfo-Request message

BS BootStrapping Procedure

BSF Bootstrapping server functionality
BSF is hosted in a network element under the control of an MNO.

B-TID Bootstrapping Transaction Identifier

CA Certificate Authority

CK Confidential Key

FQDN Full Qualified Domain Name in URI (e.g. http://FQDN:80)

GAA Generic Authentication Architecture

GBA Generic Bootstrapping Architecture

GPI GBA Push Information

GSID GAA Service Identifier

GUSS GBA User Security Settings

HSS Home Subscriber System

IK Integrity Key

IMPI IP Multimedia Private Identity

IMPU IP Multimedia Public Identity

Ks Key Material

Ks_ext_NAF MEbased key for a specific NAF

Ks_int_NAF UICC based key for a specific NAF

ME Mobile Equipment

MNO Mobile network operator

NAF Operator-controlled network application function functionality.
NAF is hosted in a network element under the control of an MNO.

P-TID Push Temporary Identifier

RAND Random challenge in authentication

REQ In Diameter header indicates that the message is a Request.

SCTP Stream Control Transmission Protocol

SLF Subscription Location Function

SSC Subscriber Certificate Procedure

Ua UE-NAF interface for GAA applications

Ub UE-BSF interface for bootstrapping

UE User Equipment

USS User Security Settings (a part of GUSS)

XRES Expected response in authentication

Zh BSF-HSS interface for bootstrapping procedure

Zh’ BSF-HLR interface for bootstrapping procedure

Zn BSF-NAF interface for GAA applications

Zpn BSF-NAF interface for GBA push.