UDM (Unified Data Management)

The Unified Data Management function is the 5G core network function that stores subscription data, generates authentication credentials, manages user identifiers, and supports SMS over NAS. It works closely with the AUSF for authentication and with the UDR (Unified Data Repository) where subscription data is actually persisted. The UDM is the 5G evolution of the HSS/HLR and holds the long-term security material for every subscriber, making it one of the most security-critical functions in the 5G core.

Categories: Core NetworkIdentity and SubscriberSecurity Controls

UDM in context

The mobile core is where subscriber sessions, mobility and policy live. In 4G it is the EPC (MME, HSS, S/PGW); in 5G it is the Service-Based Architecture with AMF, SMF, UPF, AUSF, UDM and the NRF. Core exposure is the difference between a single-subscriber leak and a fleet-wide breach.

Subscriber identifiers (IMSI, SUPI, MSISDN, IMEI) are the anchor for authentication, charging, lawful interception and fraud analytics. Any protocol or interface that leaks a permanent identifier is treated as a serious privacy defect, which is why 5G introduced SUCI concealment on the air interface.

To place UDM in the wider telecom-security picture, review USIM, UPF, WPA, UDR, Network Exposure Function (NEF) and SIM.

Related terms

Equipment

Subscriber registers (HLR, HSS, UDM, UDR, AuC, ARPF)

Articles in the P1 mobile network security guide

Related topic hubs

  • 5G Security 5G SBA, SEPP, SUCI, 5G-AKA, N32 and service-based interface security.
  • SMS Firewall SMS spam, phishing, A2P bypass and MAP-layer SMS filtering.
  • Signaling Firewall Unified SS7/Diameter/GTP/SMS signaling firewall framework.
  • 5G NEF Security Network Exposure Function security in the 5G core.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.