Nausf_SoRProtection

The Authentication Server Function (AUSF) acts as NF Service Producer. It provides SoRProtection service to the NF Service Consumer. This service permits to provide the NF Service Consumer (for example, UDM) with the SoR-MAC-IAUSFand CounterSoR to protect the the Steering Information List from being tampered with or removed by the VPLMN.

Note

If the Steering Information List is not available or HPLMN determines that no steering of the UE is required, a SOR transparent container information element with an HPLMN indication that no change of the "Operator Controlled PLMN Selector with Access Technology" list stored in the UE protected by SoR-MAC-IAUSF and CounterSoR is still sent to the UE during registration. The Steering Information List in such a case, the NF Service Consumer shall send an empty list to the AUSF when consuming the Nausf_SoRProtection Service.

The service operation defined for the Nausf_SoRProtection is as follows:

Protect: The Protect service operation is used in the following procedures:
- Procedure for steering of UE in VPLMN during registration (see subclause 6.14.2.1 of 3GPP TS 33.501 [8])
- Procedure for steering of UE in VPLMN after registration (see subclause 6.14.2.2 of 3GPP TS 33.501 [8])

Reference: 3GPP TS 33.501 v15.5.0

OpenAPI

OpenAPI Version: 3.0.0

info

Version: 1.0.0

Title: Nausf_SoRProtection Service

Description: AUSF SoR Protection Service

externalDocs

Description: 3GPP TS 29.509 V15.2.0; 5G System; Authentication Server Services

URL: 'http://www.3gpp.org/ftp/Specs/archive/29_series/29.509'

security

- {}

- oAuth2ClientCredentials:

- nausf-sorprotection

servers

URL: '{apiRoot}/nausf-sorprotection/v1'

Variables:

API Root:

Default: https://example.com

Description: apiRoot as defined in subclause 4.4 of 3GPP TS 29.501

paths

supi ue-sor

Method: Post

Parameters:

- name: supi

In: path

Description: Identifier of the UE

Required/Optional: true

Schema:

Reference: 'TS29571_CommonData.yaml#/components/schemas/Supi'

Request Body:

Content:

Application/JSON:

Schema:

Reference: '#/components/schemas/SorInfo'

Required/Optional: true

Responses:

'201' SorSecurityInfo

Content:

Application/JSON:

Schema:

Reference: '#/components/schemas/SorSecurityInfo'

'503' Service Unavailable

Content:

application/problem+json:

Schema:

Reference: 'TS29571_CommonData.yaml#/components/schemas/ProblemDetails'

components

securitySchemes

oAuth2ClientCredentials

Type: oauth2

Flows:

clientCredentials:

tokenUrl: '{nrfApiRoot}/oauth2/token'

scopes:

nausf-sorprotection: Access to the Nausf_SoRProtection API

schemas

SorInfo

Type: object

Properties:

steeringContainer:

Reference: '#/components/schemas/SteeringContainer'

ackInd:

Reference: '#/components/schemas/AckInd'

Required:

- ackInd

SorSecurityInfo

Type: object

Properties:

sorMacIausf:

Reference: '#/components/schemas/SorMac'

counterSor:

Reference: '#/components/schemas/CounterSor'

sorXmacIue:

Reference: '#/components/schemas/SorMac'

Required:

- sorMacIausf

- counterSor

SteeringContainer

oneOf:

- type: array

Items:

Reference: 'TS29509_Nausf_SoRProtection.yaml#/components/schemas/SteeringInfo'

minItems: 1

- $ref: '#/components/schemas/SecuredPacket'

SteeringInfo

Type: object

Properties:

plmnId:

Reference: 'TS29571_CommonData.yaml#/components/schemas/PlmnId'

accessTechList:

Type: array

Items:

Reference: '#/components/schemas/AccessTech'

minItems: 1

Required:

- plmnId

SorMac

Type: string

Pattern: '^[A-Fa-f0-9]{32}$'

CounterSor

Type: string

Pattern: '^[A-Fa-f0-9]{4}$'

AckInd

Type: boolean

SecuredPacket

Type: string

format: base64

AccessTech

anyOf:

- type: string

Ultra Cloud Core 5G Session Management Function, Release 2020.03 - API Reference

Book Title

Chapter Title

Results

Chapter: Nausf_SoRProtection

Nausf_SoRProtection

OpenAPI

info

externalDocs

security

servers

paths

supi ue-sor

components

securitySchemes

oAuth2ClientCredentials

schemas

SorInfo

SorSecurityInfo

SteeringContainer

SteeringInfo

SorMac

CounterSor

AckInd

SecuredPacket

AccessTech

Was this Document Helpful?

Contact Cisco

Related Cisco Community Discussions