Enjoy secure and flexible 5G SA Roaming
We are offering a truly innovative approach to global roaming security – especially in 5G roaming scenarios. It is our firm belief that 5G Standalone (SA) is disrupting our industry because its possibilities cause changes in our customers’ needs. Our 5G SA Roaming Enablement services are therefore designed to support your business by increasing the quality of your cyber-defense systems, while reducing cost and complexity.
Three tailor-made 5G SA roaming enablement services
Our Security Edge Protection Proxy (SEPP) solutions enable secure interconnect between 5G networks, ensuring end-to-end confidentiality and/or integrity between source and destination network for all 5G interconnect roaming messages. By choosing our Outsourced SEPP solutions, you can outsource investment and operation of 5G SA roaming, with the required SEPP owned and operated by us.
You can also use our Hosted SEPP maintenance service for the destinations you do not want to manage directly.
With our new Group Hosted SEPP for Family & Friends service, you can efficiently assign the highest security to each of your roaming interconnections and make roaming security a commercial rather than technical decision.
Learn more about our 5G SA Roaming Enablement Sub Solutions
Outsourced SEPP
Monetize 5G SA roaming by securely interconnecting your core network, and enjoy end-to-end security in each roaming interconnection with no investment.
Hosted SEPP
Hand over high maintenance connections while keeping owenership where necessary with this plug-and-play solution that controls your roaming partners' interconnections.
Goup-hosted SEPP for Family & Friends
Access our own and other market leading networks with our no-man-in-the-middle guarantee, and fully adopt the 5G security paradigm without exceptions.
Benefits
| Remove complexity as you don’t host or operate any SEPP yourself. |
| Guarantee end-to-end security in each roaming interconnection. |
| Monetize 5G SA with no upfront investment and minimal manpower as you offload all roaming interconnections management to us. |
| Safely interconnect Deutsche Telekom’s dedicated SEPP you’ve outsourced to your core network. |
| Connect your outsourced SEPP to all roaming partners via our IPX, upon request. |
| Keep full control with Deutsche Telekom as your trusted partner. |
Benefits
| Reduce complexity while keeping control with our plug and play solution which controls roaming partners’ interconnections, and is fully compliant with GSMA and 3GPP guidelines. |
| Host and operate your own SEPP with the option of handing over high maintenance interconnections to us – we manage them via an additional SEPP for you. |
| Connect your hosted SEPP to selected roaming partners, upon request. |
| Guarantee end-to-end security in each roaming interconnection. |
| Keep full control on direct and indirect interconnections (case-by-case decision). |
Benefits
| Take advantage of the only solution on the market that fully adopts the 5G security paradigm without exceptions in an operational-friendly way. |
| Access the Deutsche Telekom Group and market leading networks with our no-man-in-the-middle guarantee for all your roaming relationships. |
| Host and operate your own SEPP (or outsource it), while we manage an additional Group Hosted SEPP for Family & Friends for easier reach. |
| Connect your Group Hosted SEPP to the roaming partners of your choice, upon request. |
| Guarantee end-to-end security in each roaming interconnection with full control and flexibility while interconnecting partners with differing security requirements. |
| Enhance security by choosing the security level and operational complexity for each roaming interconnection. Our Group Hosted SEPP is your shield. |
Future-proof roaming security with Magenta Security Roaming
Our 5G SA Roaming Enablement services are part of Magenta Security Roaming, our new and exclusive one-stop shop for all your roaming security needs. It offers secure and innovative connectivity for all protocols currently used by our customers: 2G, 3G, 4G, 5G NSA and 5G SA. For each protocol, corresponding protection layers are in place which work in unison: SS7 Firewall, Diameter Edge Agent (DEA) Firewall, Diameter End-to-End Signaling Security (DESS), phase 1, as well as Security Edge Protection Proxy (SEPP) in several configurations.
Magenta Security Roaming keeps technology, operations, and management under one umbrella so that you don’t need to worry about platforms, operations, analytics, and reporting. All our services come with dedicated support and strict SLAs, and are available to both, our own Group national operator companies (NatCos), as well as operators across the globe.
Key facts for our 5G SA Roaming Enablement solution
Features
| Features | Description |
|---|---|
| 3GPP compliant roaming | Deutsche Telekom embraces the end-to-end security paradigm of 3GPP, and avoids man-in-the-middle attacks wherever possible with a flexible solution to adapt to the needs of any roaming partners. |
| Keep roaming under control | Choose how to interconnect with roaming partners and receive a fully managed service via our Outsourced SEPP or remain flexible with our Hosted SEPP or Group Hosted SEPP options. |
| Direct connectivity | Instruct Deutsche Telekom how to connect to your roaming partners. Both Outsourced or Hosted SEPP direct interconnections are built on demand for you and are mono-PLMN interconnections. |
| Flexibility where needed | Easily adapt to your roaming partners’ needs for different connectivity solutions. Group Hosted SEPP is the mechanism to keep security loopholes at bay. |
| Designed for the family | Protecting the privacy of our customers is our mission. Group Hosted SEPP is the mechanism Deutsche Telekom has chosen to avoid man-in-the-middle roaming connections. |
| Offered to friends | Operators with a security focus like us can benefit from the secure ecosystem our Group Hosted SEPP provides. Joining forces, we can guarantee end-to-end security to our partners and embrace change in roaming. |
Services
| Outsourced SEPP | Hosted SEPP | Group Hosted SEPP for Family & Friends | |
|---|---|---|---|
| End-to-End Security | guaranteed | guaranteed | guaranteed |
| 3GPP Compliance | Yes | Yes | Yes |
| Managed Service | For each roaming interconnection | Operator’s choice | Operator’s choice |
| Interconnection | Via SCP or TLS and FW | Via N32-s | Combination of all |
Explore related solutions to our 5G SA Roaming Enablement solution
Discover more solutions from the mobile roaming world.
IP Exchange (IPX)
The significant growth in international mobile connectivity and data roaming volumes makes Internetwork Packet Exchange (IPX) indispensable to ensure an efficient end-to-end process of timely, ...
Read more
Secure Signaling for 2G, 3G, 4G, 5G NSA & SA roaming
Connect globally with Deutsche Telekom Global Carrier, the leading and world’s most secured signaling solutions provider, ensuring subscriber safety and enhanced user experience.
Read more
Roaming Value-Added Services (VAS)
Our large portfolio of hosted Roaming VAS helps you to optimize your roaming business by increasing revenues while reducing cost, protecting your networks and significantly improving customer ...
Read moreTune up with global news updates
Enjoy the latest updates around our 5G SA Roaming Enablement solution and related Internet services.
The rise of 5G Standalone: a new wave of possibilities
5G Standalone is disrupting our industry because its possibilities cause changes in our customers’ needs.
Here are three examples:
- 5G SA triggers a shift from connecting people to connecting things.
Until today, the telco industry has been dedicated to connecting people. Now, 5G is the first protocol designed to mainly address non-human use cases. We’re connecting everything to everything, everywhere, and are moving to a world where each “everything” might have different connectivity needs.
- 5G SA enables new ‘situational’ options for our customers when they roam.
5G SA allows the same user, be that a consumer, a business customer or a device, to choose various service qualities for different situations. A good example is an autonomous vehicle that requires minimal latency while driving but not when it is parked.
- 5G SA brings increasing roaming speed.
High data rates of up to 20Gbit/s, high density designed to connect up to 1 million devices per square, and low latency on a level that did not exist before (<10ms) allow for entirely new customer use cases, for example remote surgery.
FAQs for our 5G SA Roaming Enablement solution
Why is 5G SA changing roaming?
With 5G SA, we have for the first time a technology designed to address today’s and tomorrow’s needs in terms of connectivity and security. It is not an option for our industry to continue acting like we did in the past. Operators now finally can and must control the players accessing their data.
What is the 'Hub & Spoke' model and why is it no longer secure?
The ‘Hub & Spoke’ model is a system where a central hub (core) connects to various spokes (secondary points). Hub & Spoke models are heavily used in roaming today and can be secured via several mechanisms such as firewalls and other security policies regulated by GSMA and 3GPP. However, they were designed for past technologies that were addressing the different security needs of that time.
5G SA is designed for today’s (and tomorrow’s!) evermore complex requirements where security plays a crucial factor in protecting our end customers properly. Hub & Spoke models, which by their nature introduce man-in-the-middle scenarios, should therefore be avoided for 5G in our and 3GPP’s point of view.
To steer clear of Hub & Spoke as much as possible whilst still fully supporting 3GPP guidelines, T Wholesale introduced its Magenta Security Roaming proposition and specifically the Group Hosted SEPP for Family and Friends. With 5G SA architecture, we now also have the means to further protect signaling traffic and avoid man-in-the-middle scenarios by design.
What is the difference between mono- and multi-PLMN interconnections?
Mono-PLMN (public land mobile network) interconnections are direct interconnections created between two operators’ SEPPs. In these connections, only traffic between the two operators is shared.
Multi-PLMN interconnections are interconnections offered by service HUBs to their own reach list in a Hub & Spoke model. Those interconnections are shared between operators accessing the bespoke reach list of destinations.
3GPP consider Mono-PLMN also as interconnections where one or both operators receive an Outsourced or Hosted SEPP by their trusted partner as long as those interconnections transport traffic between the two operators only.
We have received your message and forwarded it to the responsible expert. He or she will get in touch with you as soon as possible.