4 Overview

33.5583GPPRelease 17Security aspects of enhancement of support for enabling edge applicationsTS

The overall application architecture for enabling Edge Applications that is given in TS 23.558 [5], includes several entities, such as 3GPP core network, Edge Enabler Client (EEC) deployed in the UE, Edge Configuration Server (ECS), Edge Enabler Server (EES), and Edge Application Server (EAS). The application architecture for enabling Edge Applications, is defined in TS 23.558 [2] clause 6.2.

This specification captures the following security requirements and procedures:

– Security for the EDGE interfaces: the set of security features that enable network nodes to exchange signalling data and user plane data securely.

– Authentication and Authorization between EEC and ECS/EES: the set of security features that enable the authentication between EEC and ECS/EES, and enable the EEC to be authorized by the ECS/EES.

– Authentication and Authorization between EES and ECS: the set of security features that enable the authentication between EES and ECS, and enable the EES to be authorized by the ECS.

– Authentication and Authorization in EES capability exposure: the set of security features that enable the EAS to be authenticated and authorized by the EES in EES capability exposure.

– Authentication and Authorization in 3GPP Core Network capability exposure: the set of security features that enable the ECS/EES/EAS to be authenticated and authorized by the 3GPP Core Network in 3GPP Core Network capability exposure.