UAV USS Authentication and Authorization

Description

UUAA (UAV USS Authentication and Authorization) is a security procedure introduced in 3GPP Release 17 to support Unmanned Aerial Systems (UAS) connectivity over 3GPP networks. The procedure ensures that an Unmanned Aerial Vehicle (UAV) is authenticated and authorized by its associated USS (UAS Service Supplier) before it is allowed to use 3GPP network connectivity for UAS services. The USS is an entity that provides services to UAVs, such as flight planning, traffic management, and authorization. The UUAA procedure is performed with the support of the 3GPP system, which acts as an intermediary between the UAV and the USS.

The UUAA procedure involves several steps. First, the UAV registers with the 3GPP network (e.g., 5G system) and establishes connectivity. Then, the UAV initiates the UUAA procedure by sending a request to the USS via the 3GPP network. The 3GPP system, specifically the UAS NF (Network Function) or similar entity, facilitates the communication between the UAV and the USS. The USS authenticates the UAV based on credentials provided by the UAV, and if successful, authorizes the UAV for UAS operations. The authorization may include specific permissions, such as allowed flight areas, time restrictions, or service levels. Once the UUAA procedure is successfully completed, the 3GPP system enables connectivity for UAS services, allowing the UAV to exchange data with the USS and other UAS entities.

The UUAA procedure is defined in several 3GPP specifications, including 23.256 (Architecture enhancements to support UAS), 24.301 (NAS protocol for EPS), 24.501 (NAS protocol for 5GS), 27.007 (AT commands), 28.853 (UAS management), 29.255 (UAS NF services), 29.256 (UAS NF services), 29.502 (5G system procedures), and 33.256 (Security aspects of UAS). These specifications detail the protocol messages, security mechanisms, and procedures for UUAA. The procedure uses the 3GPP system's authentication and authorization framework, which may involve the AUSF (Authentication Server Function) and UDM (Unified Data Management) in 5G core networks.

The UUAA procedure is critical for ensuring that only authorized UAVs are allowed to operate using 3GPP connectivity. This is important for safety and regulatory compliance, as UAV operations must be coordinated with air traffic management systems. The USS is responsible for authorizing UAVs based on their registration and operational requirements. The 3GPP system provides the secure communication channel and may also assist in the authentication process. The UUAA procedure is part of the broader UAS architecture defined in 3GPP, which includes entities such as the UAV, UAV Controller (UAVC), USS, and 3GPP network functions.

In Release 17, the UUAA procedure was introduced with the initial definition. In Release 18, the definition text was slightly reformatted but the content remained the same. In Release 19, the definition was carried over unchanged. The UUAA procedure continues to be a key enabler for integrating UAVs into 3GPP networks, supporting the growing market for commercial and civil UAV applications.

Purpose & Motivation

The UUAA procedure was created to address the security and authorization requirements for UAVs operating over 3GPP networks. As UAVs become increasingly common for commercial, civil, and government applications, there is a need to ensure that they are properly authenticated and authorized before they can use cellular connectivity. Without such a procedure, unauthorized UAVs could potentially access network resources, posing security risks and interfering with legitimate operations.

Before UUAA, UAVs might have used generic 3GPP connectivity without specific authorization from a USS. This was insufficient because UAV operations require coordination with airspace management and must comply with regulations. The USS is the entity responsible for authorizing UAV flights, and it needs to verify the identity and credentials of the UAV. The UUAA procedure provides a standardized way for the UAV to authenticate with the USS via the 3GPP network, leveraging the network's security features.

The UUAA procedure also solves the problem of integrating UAVs into the 3GPP ecosystem. By defining a clear procedure, 3GPP enables interoperability between different USS providers and network operators. This allows UAVs to operate seamlessly across different networks and regions, as long as they are authorized by their USS. The procedure is part of the broader UAS architecture that 3GPP has developed to support UAV communications, including command and control (C2) links, telemetry, and payload data. The UUAA procedure ensures that these communications are secure and authorized, which is essential for safe and reliable UAV operations.