H(e)NB Authentication Two separate concepts of authentication: Mutual authentication of H(e)NB and operator (SeGW) (mandatory) Certificate based Credentials stored in TrE in H(e)NB Authentication of hosting party by operator's network (optional) EAP-AKA based credentials contained in separate Hosting Party Module (HPM) in H(e)NB bundled with the device authentication (one step) Backhaul link protection IPSec, IKEv2, based on H(e)NB/SeGW authentication
{}