ANONYMITY AND POST QUANTUM SECURITY SUBSCRIBER IDENTITY MODULE (SIM) TECHNOLOGY FOR 5G/6G NTN (ARTES 4.0 SPL 4S 3D.040) - RE-ISSUE

Objective: The objective of the activity is to develop advanced and post-quantum Subscriber Identity Module (SIMs) for 5G/6G NTN. The focus is to improve user anonymity for robust non-terrestrialnetworks (NTNs) used for governmental applications which have a more urgent need for post-quantum anonymity protection than the commercial market. These SIMs shall implementsecurity improvements of the part of the primary authentication protocol which is implemented in the SIM. Additionally, the corresponding SIM provisioning infrastructure and the corenetwork responsible for the communication with the SIMs will be developed.TargetedImprovements: Enablinga European or Canadian source for robust NTN SIM (Physical Universal Integrated Circuit Card (UICC) or Embedded UICC (eUICC)) for 5G/6G satellite constellation withhardened primary authentication protocolDescription: Current 5G Universal Subscriber Identity Modules (USIMs) to be used in Non-Terrestrial Networks (NTN) for Satellite Communication (SATCOM) terminals lack adequate protectionagainst user tracking when assuming a quantum attacker. While 3GPP is working on the migration to post-quantum cryptography, the privacy needs in governmental NTN networks arehigher than in usual mobile networks and regulatory needs will require the full post-Quantum migration as early as 2030 for governmental communication solutions. An appropriatesolution therefore needs to be developed earlier than the 3GPP timeline foresees.The activity will design, develop and test prototypes of advanced 5G/6G USIMs integrating security improvements to the primary authentication protocol (user tracking enhancements inNTNs and anticipated regulatory requirements for post-quantum cryptography), with all components adhering to GSMA/ETSI security standards and targeting Common Criteria evaluationto prepare for future accreditation.The activity will evaluate two implementation paths to address this need: Physical Universal Integrated Circuit Card (UICC) development, potentially as an applet on an existing smartcard platform, or Embedded UICC (eUICC) with appropriate SIM profiles for multi-provider service access. Post-Quantum Key Exchange Management (KEM) implementations on smartcards prove the technical feasibility of implementing such protocols in the UICC approach.The activity will be implemented in a phased approach.The first phase will study the implementation of post quantum security in the authentication protocol and perform a trade-off analysis between the two implementation paths. It will designand develop an initial prototype of the USIM and provisioning infrastructure compatible with standardised 3GPP interfaces between USIM and Mobile Equipment and perform the designof the security functions of the Core network solution to interoperate with the USIM. Phase 1 deliverables consist of architecture and design documents, initial documents to prepare thecertification, software prototype and adapted core network functions to interoperate with the software. The budget for Phase 1 is up to 700 kEuros.In the second phase, the activity will further develop and test the USIM components (UICC or eUICC), create the complete SIM provisioning infrastructure, and develop and test the corenetwork security functionsincluding the Subscriber Identifier De-concealing Function (SIDF) to support enhanced authentication of the USIM to the network. Phase 2 deliverables includethe adaptation of smart card including applet design and SIM printer or chip development for eUICC and refined certification preparation.During the activity, dissemination towards 3GPP standardisation shall be performed to ensure futureindustry adoption.