The present document describes the security features and a mechanism to bootstrap keys for application security.

The scope of this document includes a generic bootstrapping function, an architecture overview and the detailed procedures on how to bootstrap the credential.

This document also describes a mechanism, called GBA_U, to bootstrap keys inside the (R-)UIM as well as keys in the ME. GBA_U requires GBA support in the (R-)UIM, but provides enhanced security by storing certain derived keys on the (R-)UIM.

In this document, several key words are used to signify the requirements. The key words "shall", "shall not", "should", "should not" and "may" are to be interpreted as described in the TIA Engineering Style Manual.