Specification
3GPP TS 33.501: Security architecture and procedures for 5G system
At a glance
- Title
- Security architecture and procedures for 5G system
- Newest version
- V20.3.0 (Rel-20)
- Versions indexed
- 9
- Newest per release
- Rel-16: V16.20.0 (2026-06-25); Rel-17: V17.16.0 (2026-06-25); Rel-18: V18.12.0 (2026-06-25); Rel-19: V19.7.0 (2026-06-25); Rel-20: V20.3.0 (2026-09-28)
In plain words
TS 33.501 specifies security features and mechanisms for the 5G System and 5G Core, including "security procedures performed within the 5G System including the 5G Core and the 5G New Radio." The overview includes security context delivery from SN to AN for access security, while application domain security is out of scope. V20.3.0 includes CRs on handling when the 3gpp-Sbi-Target-apiRoot HTTP header is not supported, missing WAB references, and CCA token verification failure. It also includes an RNAU terminology correction and security for a PLMN hosting a Non-Public Network (NPN), Phase 2.
Source: 3GPP TS 33.501 V20.3.0, clause 1. © 3GPP Organizational Partners (ARIB, ATIS, CCSA, ETSI, TSDSI, TTA, TTC). Official text: https://www.3gpp.org/ftp/Specs/archive/33_series/33.501/33501-k30.zip
Newest version in each release
| Release | Newest version | In the archive | TSG meeting |
|---|---|---|---|
| Rel-20 | V20.3.0 | 2026-09-28 | TSG SA #113 |
| Rel-19 | V19.7.0 | 2026-06-25 | TSG SA #112 |
| Rel-18 | V18.12.0 | 2026-06-25 | TSG SA #112 |
| Rel-17 | V17.16.0 | 2026-06-25 | TSG SA #112 |
| Rel-16 | V16.20.0 | 2026-06-25 | TSG SA #112 |
| Rel-15 | V15.20.0 | 2026-06-25 | TSG SA #112 |
Source: 3GPP specification archive, versions indexed by 3GPP Scout. Each version links its official file.
Change requests in V20.3.0
V20.3.0 of TS 33.501 includes 5 CRs.
| CR | Category | Subject | Source | Working group meeting | TSG TDoc |
|---|---|---|---|---|---|
| CR 2242 rev 1 | F | Handling the case of not supporting 3gpp-Sbi-Target-apiRoot HTTP header | Huawei, HiSilicon,Nokia | SA3 #129 | SP-260815 |
| CR 2243 | F | Add the missing references for WAB | China Telecom | SA3 #129 | SP-260813 |
| CR 2244 | B | Clarify CCA token verification failure handling | Ericsson, Nokia | SA3 #129 | SP-260806 |
| CR 2245 rev 1 | D | Editorial correction of RNAU terminology in clause 6.8.2.2.2 | Samsung | SA3 #129 | SP-260818 |
| CR 2246 | B | Security for a PLMN Hosting a Non-Public Network (NPN) Phase 2 | China Telecom | SA3 #129 | SP-260814 |
Source: 3GPP CR database.
Meetings behind the latest versions
Working group meetings that agreed the CRs in V20.3.0:
- SA3 #129: 5 CRs
Plenary meetings:
- TSG SA #113 approved V20.3.0 (Rel-20)
- TSG SA #112 approved V20.2.0 (Rel-20)
- TSG SA #112 approved V19.7.0 (Rel-19)
Source: 3GPP CR database and specification archive, as indexed by 3GPP Scout.
Clauses changed in V20.3.0
15 clauses changed or added in V20.3.0. The 10 with the largest edits are listed. Each clause number opens Scout on that clause.
| Clause | Title | Change | CRs |
|---|---|---|---|
| AD.1 | General | added | |
| AB.2 | Architecture | changed | |
| AD.2 | Architecture | added | |
| AD.3 | TEID | added | |
| 2 | References | changed | CR 2243 |
| AB.3 | Proxy entity at the border | changed | |
| 13.1.1.2 | TLS protection based on 3gpp-Sbi-Target-apiRoot HTTP header | changed | |
| AD | Annex AD (Normative): Security for PLMN hosting a NPN through N9 interface | added | |
| AB.1 | General | changed | |
| AC.3.1 | Security mechanism on WAB Nodes and OAM | changed | CR 2243 |
Source: 3GPP Scout comparison of this version with the one before it.
Sources
- 3GPP TS 33.501 V20.3.0, clause 1. © 3GPP Organizational Partners (ARIB, ATIS, CCSA, ETSI, TSDSI, TTA, TTC). Official text: https://www.3gpp.org/ftp/Specs/archive/33_series/33.501/33501-k30.zip
- 3GPP TS 33.501 V20.3.0, clause 4.1. © 3GPP Organizational Partners (ARIB, ATIS, CCSA, ETSI, TSDSI, TTA, TTC). Official text: https://www.3gpp.org/ftp/Specs/archive/33_series/33.501/33501-k30.zip
- 3GPP CR database.
How this page was made
The facts box and the tables come straight from the 3GPP specification archive and CR database as indexed by 3GPP Scout. An AI model (GPT-6 Luna) wrote the paragraph and named the source of each sentence. Code checked every quote word for word against the stored source text and every number against the cited source. A second AI model from another company (Claude Opus 5.5) reviewed the paragraph against the same sources. The 3GPP documents themselves govern.