Security Requirements for 4G & wireless security

Security is an important essential requirement for 4G:

1. Security requirements on ME (Mobile Equipment)/USIM (Universal Subscriber Identity Module):
   1. Protection of integrity of the hardware, software and OS in mobile platform.
   2. Data control access in ME/USIM.
   3. Maintenance of confidentiality and integrity of data stored in the ME/USIM or transported on the interface between ME and USIM.
   4. User identity privacy retention to ME.
2. Security requirements on radio interface and network operator:
   1. Entity authentication: mutual authentication between user and network shall be implemented to ensure secure service access and provision.
   2. Ensure confidentiality of data including user traffic and signaling data on wired or wireless interface.
   3. Ensure integrity and origin authentication of user traffic, signaling data and control data.
   4. Security of user identity: It shall protect user identity confidentiality, user location confidentiality and user untraceability.
   5. Lawful interception: It shall be possible for law enforcement agencies to monitor and intercept every call in accordance with national laws.
3. Security visibility, configurability and scalability:
   1. Transparency of security features of the visited network to the user.
   2. Ability to negotiate acceptable security lever with the visited network when user roams outside HE (home environment).
   3. Scalability of the security mechanism to support increase of user and/or network elements.