GB/T 46462-2025Technical requirements on communication security of 5G mobile communication network (English PDF)

National Standard of the People's Republic of China

ICS

33.020

Classification

M 04

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

• Preface
• 1.Scope
• 2 Normative References
• 3.Terms, Definitions, and Abbreviations 4.
• 3.1 Terms and Definitions
• 3.2 Abbreviations
• 4.Security Architecture Overview
• 4.1 Security Domain
• 4.2 Security Functions at the Edge of the 5G Core Network
• 4.3 Security Functions in 5G Core Networks
• 5.Safety Requirements and Functional Requirements
• 5.1 General Safety Requirements
• 5.2 UE Security Requirements
• 5.3 gNB Security Requirements
• 5.4 ng-eNB Security Requirements
• 5.5 AMF Safety Requirements
• 5.6 SEAF Safety Requirements
• 5.7 UDM Security Requirements
• 5.8 Core Network Security Requirements
• 5.9 Security Visibility and Configurability Requirements
• 5.10 Algorithms and Algorithm Selection Requirements
• 5.11 5G-RG Security Requirements
• 5.12 NSSAAF Safety Requirements
• 6.Security procedures between UE and 5G network functional entities
• 6.1 Master Authentication and Key Negotiation
• 6.2 Hierarchical structure of keys and derivation and distribution mechanism
• 6.3 Security Context
• 6.4 Non-access stratum security mechanisms
• 6.5 RRC Security Mechanism
• 6.6 Access Layer User Plane Security Mechanisms
• 6.7 Security Algorithm Negotiation
• 6.8 State Transition Safety Handling
• 6.9 Mobility Management Security
• 6.10 Dual-Connect Security
• 6.11 Safety procedures during RRC connection reconstruction
• 6.12 User Privacy Protection
• 6.13 Signaling Flow of PDCPCOUNT Verification
• 6.14 Roaming Guidance Security Mechanism
• 6.15 Security Mechanism for UE Parameter Update via UDM Control Plane
• 6.16 5G Cellular IoT Security
• 7.Security of non-cellular access to 5G core networks
• 7.1 Access Security Principles
• 7.2 Authentication Security Process for Untrusted Non-Cellular Access
• 7.3 Security Procedures for Trusted Non-Cellular Wireless Access
• 7.4 Wired Access Security Procedures
• 8.Interoperability Security 100%
• 8.1 General Safety Requirements
• 8.2 Security process for mobility registration from EPS to 5GS based on N26 interface
• 8.3 Switching process from 5GS to EPS based on N26 interface
• 8.4 Switching process from EPS to 5GS based on N26 interface
• 8.5 Idle State Mobility Safety Procedure from 5GS to EPS Based on N26 Interface
• 8.6 Mapping of Security Contexts
• 8.7 Single-registration interoperability security 110 without N26 interface
• 9.Security of Non-Service Interfaces (110)
• 9.1 Basic Principles
• 9.2 Security Mechanism of N2 Interface
• 9.3 Security Mechanism of N3 Interface
• 9.4 Security Mechanisms of the Xn Interface
• 9.5 Security mechanisms using GTP or DIAMETER protocol interfaces
• 9.6 Security Protection Mechanism for gNB Internal Interfaces
• 9.7 Security Mechanisms for Non-Service-Based Interfaces within the 5G Core Network
• 10 IMS Emergency Call Security
• 10.1 IMS emergency call to 113 via authentication
• 10.2 Unauthenticated IMS emergency calls to
• 11.Security procedures for UE interaction with external data networks via 5G network
• 11.1 General requirements for secondary authentication between EAP-based AAA servers and external data networks
• 11.2 Secondary Authentication Process
• 11.3 Re-authentication process
• 11.4 Revocation of Authentication Authorization
• 12 Security protection for Network Open Functional Entity (NEF)
• 12.1 Basic Principles
• 12.2 Two-way authentication
• 12.3 Safety protection between NEF and AF
• 12.4 Authorization Verification of AF Requests
• 12.5 Support for CAPIF
• 13 Service-Oriented Interface Security
• 13.1 Security protection at the network layer or transport layer
• 13.2 Application Layer Security Protection on N32 Interface
• 13.3 Authentication and Static Licensing
• 13.4 Authorization during NF service requests
• 13.5 Security Capability Negotiation among SEPPs
• 14 Security Services
• 14.1 Security Services Provided by AUSF
• 14.2 Security Services Provided by UDM
• 14.3 Security Services Provided by NRF
• 15 Network Slice Management Security
• 15.1 Overview
• 15.2 Two-way authentication