Editing My 3GPP 33.501 notes (section)

=== 5G AS security context for 3GPP access ===
The cryptographic keys at AS level with their identifiers, the Next Hop parameter (NH), the Next Hop Chaining Counter parameter (NCC) used for next hop access key derivation, the identifiers of the selected AS level cryptographic algorithms, the UE security capabilities, and the UP Security Policy at the network side, UP security activation status and the counters used for replay protection. 

NOTE 3:	NH and NCC need to be stored also at the AMF during connected mode.

NOTE 4:	UP security activation status is sent from gNB/ng-eNB in step 1b in clause 6.6.2 corresponding to the active PDU session(s).