5G Security.

The security architecture for 5G mobile networks, defined in 3GPP TS 33.501, covering subscriber privacy, mutual authentication, and protection of signalling and user-plane traffic. It belongs to the Network Security category of cybersecurity.

The security architecture for 5G mobile networks, defined in 3GPP TS 33.501, covering subscriber privacy, mutual authentication, and protection of signalling and user-plane traffic.

5G security, specified in 3GPP TS 33.501, builds on but significantly hardens the LTE model. Primary authentication uses 5G-AKA or EAP-AKA' with the home network's Authentication Server Function (AUSF) and Unified Data Management (UDM), achieving mutual authentication and a hierarchical key tree (KAUSF, KSEAF, KAMF, KgNB). To prevent IMSI catchers, the long-term identifier (SUPI) is never sent in the clear: instead, the UE encrypts it with the home operator's public key into a SUCI using ECIES (Curve25519 or P-256). User-plane traffic between UE and gNB can be ciphered and integrity-protected with NEA1/2/3 (SNOW 3G, AES-128, ZUC). Service-Based Architecture between network functions is protected by TLS 1.3 and OAuth 2.0 access tokens.

Defences for 5G Security typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: 5G AKA, SUCI, TS 33.501.