Security, identity and trust
5G system security
Authentication, key hierarchy, subscriber privacy and network domain security for 5G.
We design, integrate and operate.
3GPP TS 33.501 (Rel-18)
/
Protocol & Grid/
Provider admissionManifest, rights and security review, then admitted for scope.
Provider admission, inside Protocol & Grid: 5G system security, network product security assurance, open RAN security, 5G security reference practice and more. Every item is traced to its specification, from 3GPP TS 33.501 (Rel-18) to 3GPP TS 33.117 (SCAS general requirements), and runs on the open Observatory Protocol.
Plan with usArchitectureThe protocol- Technologies
- 9
- At the frontier
- 0
- Protocol functions
- 5 of 8
- Industries served
- 6
Reference design, drawn to scale · drag to turn · hover a part
01What it is
5G and wireless security.
How every node proves what it is and what it runs, how links and keys are protected, how software is traced to its source, how personal data is minimised, and how incidents are found and handled. Each technology below carries what it is, what we do with it, and the standard it is drawn against.
Security, identity and trust
Network product security assurance
Security test specifications and assessment schemes for 5G network functions.
We design and integrate.
3GPP TS 33.117 (SCAS general requirements) · GSMA NESAS
Security, identity and trust
Open RAN security
Security requirements for open fronthaul, near-real-time RIC and O-Cloud interfaces.
We design and integrate.
O-RAN WG11 security specifications
Security, identity and trust
5G security reference practice
Practical guidance for securing 5G deployments.
We design.
NIST SP 1800-33 (5G cybersecurity)
Security, identity and trust
LPWAN security
Session keys, join servers and key provisioning for LoRaWAN and cellular IoT.
We design, integrate and operate.
LoRaWAN L2 1.0.4 (TS001-1.0.4) · LoRaWAN Backend Interfaces (TS002)
Security, identity and trust
RF jamming and rogue emitter detection
Spectrum monitoring that flags jamming, rogue base stations and unauthorised links.
We design, integrate and operate.
ITU-R Handbook on Spectrum Monitoring
Security, identity and trust
Industrial security programmes
Security management system for asset owners of control and monitoring systems.
We design and operate.
IEC 62443-2-1
Security, identity and trust
System and component security levels
Security requirements for systems and components at target security levels.
We design and integrate.
IEC 62443-3-3 (system requirements) · IEC 62443-4-2 (component requirements)
Security, identity and trust
Secure development lifecycle
Secure product development practice for anything shipped to sites.
We design.
IEC 62443-4-1 · NIST SP 800-218 (SSDF)
02Architecture
Where it sits, and what it speaks.
Provider admission draws on 1 domain and 8 layers of the spectrum; the highlighted layers carry this area. It speaks 5 of the protocol’s 8 core functions.
Device identity and attestation
8
PKI, secure boot and updates
7
Zero trust and network security
7
5G and wireless security
6
OT security and software supply chain
9
Privacy and data protection
7
Keys, cryptography and post-quantum migration
9
Monitoring, incident response and governance
8
01JoinIdentity, attestation quote, signed policy.
02AdmitAdmitted for a stated scope, nothing wider.
03DescribeWhat, where, how and by whom, with calibration.
04TimeOne clock across the grid, with its error bound.
05ObserveEvery value with quality and provenance.
06QualifyTested against the specification, state on record.
07FederateSigned exchange across grids and trust domains.
08OrchestrateSoftware and configuration by signed plan.
03On the grid
Every site joins one observing grid.
The open networks on the grid today, over real relief and the geodesic cells we count them into. A site built here enrols into the same grid.
04In the field
Where this runs, sector by sector.
6 deployment scenarios from the sector research that rely on provider admission.
Government and public safetyNational GBON surface and upper-air network
WMO-grade stations reporting through WIS 2.0, funded through the systematic-observations financing pathway.Government and public safetyWildfire camera network and fire-weather stations
Camera towers with edge inference and co-located fire-weather stations, utility- or agency-funded.Government and public safetyUrban street-flood sensor network
Open-hardware depth sensors with open data and alerts to emergency management.CitiesHybrid air-quality network
Reference analysers plus calibrated low-cost nodes; low-cost sensors alone do not meet regulatory requirements.Communities and ruralRemote microgrid, sensing and connectivity bundle
Solar-plus-storage telemetry with a weather station and a small cell in a diesel-reduction project.Communities and ruralInterim public-safety broadband where no national network exists
Private LTE or 5G for fire and medical services in territories without a national public-safety network.05Open and enterprise
Open by default. Enterprise by contract.
The open counterpart lives on the main site for anyone to read and run. The enterprise service is designed, deployed and operated with you, under contract.
Open, on the main site
- Protocol specification
- State machines and node roles
- Conformance tool
- Device class catalogue
Enterprise, on this site
- Private grid design and operation
- Federation agreements
- Provider qualification testing
- Works-with programme
06The rest of the line
Protocol & Grid, area by area.
Protocol & GridPrivate grids
Your nodes, your authority, the open specification.Protocol & GridFederation
Signed exchange across sites, owners and trust domains.Protocol & GridQualification
Devices and releases tested against the protocol, state on record.Protocol & GridOrchestration
Software and configuration by signed plan, with rollback.Bring us the site.
Survey, design, deployment and operation for provider admission. The form names who receives your details.
Talk to uscontact@observatory.global