8 Inter/Intra domain interface security

33.1793GPPRelease 13Security of Mission Critical Push To Talk (MCPTT) over LTETS

8.1 General

For all interfaces between network elements within trusted domain or between the trusted domains, namely HTTP‑2, HTTP-3, SIP-2 and SIP-3:

– 3GPP TS 33.210 [4] shall be applied to secure signalling messages on the reference points unless specified otherwise; and

– 3GPP TS 33.310 [5] may be applied regarding the use of certificates with the security mechanisms of 3GPP TS 33.210 [4] unless specified otherwise in the present document.

NOTE: For the case of an interface between two network elements in the same trusted domain, 3GPP TS 33.210 [4] does not mandate the protection of the interface by means of IPsec. However, it is up to the domain administrator’s policy to also protect interfaces within the same trusted domain.

SEG as specified in 3GPP TS 33.210 [4] may be used in the trusted domain to terminate the IPsec tunnel.