A lightweight and secure handover authentication scheme for 5G network using neighbour base stations

Yan, Xiaobei

doi:10.1016/j.jnca.2021.103204

Cited by 23 publications

(14 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Considerations on Trust and Communications in Mobile Network. Other considerations of communication complexity in mobile networks (e.g., [30,25]) are generally not systematic, not even coarsely so like ours.…”

Section: Related Workmentioning

confidence: 70%

“…General Analyses of Non-XN/N2 Handovers or other 5G Procedures. [30] carry out a Dolev-Yao verification, in the Scyther tool [20], of their "home-made" protocol called the Lightweight and Secure Handover Authentication Scheme (LSHA), based on intra-RAN authentication in handovers. Other such ad-hoc extensions of handovers may exist, but since they are far from "standard" handovers, we do not cover them further here.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Systematic Improvement of Access-Stratum Security in Mobile Networks

Miller,

Boureanu,

Wesemeyer

et al. 2023

2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

In mobile networks, the User Equipment (UE) secures some of the communication with its serving Radio Access Network (RAN) node ("base station") via a set of keys known as Access Stratum (AS) keys. Unfortunately, the level of secrecy of these keys varies with the mobile procedures re-establishing them. To improve the secrecy of the AS keys, we propose minimal changes to 5G & 4G handovers, i.e., the main AS-key establishment procedures. We show the minimality of our changes also via an implementation of one of our protocols in the 3GPP-compliant Open5GCore 5G testbed. We also systematically crosscompare standard handovers with our amended handovers using MobTrustCom: a framework to quantify especially trust but also communication complexity in mobile networks. Moreover, we use Tamarin, a formal security-protocol verification tool, to prove no loss of "classical" security yet an increase in AS-keys' secrecy brought by our improvements to handovers.

show abstract

Section: Related Workmentioning

confidence: 70%

Section: Related Workmentioning

confidence: 99%

Systematic Improvement of Access-Stratum Security in Mobile Networks

Miller,

Boureanu,

Wesemeyer

et al. 2023

2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

show abstract

“…Advantages Drawbacks [20] Group Authentication Prevention of DoS using timestamp Weak DDoS prevention for individual authentication [21] Efficient group-based authentication [22] Computation Pool Fault-tolerant 5G-AKA authentication 5G-AKA is inherently vulnerable to DoS attacks [23] One-to-One Authentication…”

Section: Methodsmentioning

confidence: 99%

“…Additionally, the bandwidth in the AUSF pool is still finite and expensive, and thus needs more investment. Yan et al [23] have proposed a lightweight and secure handover authentication scheme based on a prediction of the potential target gNB from all neighbor gNBs in the 5G wireless network. The proposal facilitates fast 5G handover authentication by using time-to-live (TTL) attributes and encrypting the next hop chaining counter (NCC) with the Chinese remainder theorem.…”

Section: Aka Schemes Against Dos and Ddos Attacksmentioning

confidence: 99%

A Secure Blockchain-Based Authentication and Key Agreement Scheme for 3GPP 5G Networks

Chow

2022

Sensors

Self Cite

View full text Add to dashboard Cite

The futuristic fifth-generation cellular network (5G) not only supports high-speed internet, but must also connect a multitude of devices simultaneously without compromising network security. To ensure the security of the network, the Third Generation Partnership Project (3GPP) has standardized the 5G Authentication and Key Agreement (AKA) protocol for mutually authenticating user equipment (UE), base stations, and the core network. However, it has been found that 5G-AKA is vulnerable to many attacks, including linkability attacks, denial-of-service (DoS) attacks, and distributed denial-of-service (DDoS) attacks. To address these security issues and improve the robustness of the 5G network, in this paper, we introduce the Secure Blockchain-based Authentication and Key Agreement for 5G Networks (5GSBA). Using blockchain as a distributed database, our 5GSBA decentralizes authentication functions from a centralized server to all base stations. It can prevent single-point-of-failure and increase the difficulty of DDoS attacks. Moreover, to ensure the data in the blockchain cannot be used for device impersonation, our scheme employs the one-time secret hash function as the device secret key. Furthermore, our 5GSBA can protect device anonymity by mandating the encryption of device identities with Subscription Concealed Identifiers (SUCI). Linkability attacks are also prevented by deprecating the sequence number with Elliptic Curve Diffie–Hellman (ECDH). We use Burrows–Abadi–Needham (BAN) logic and the Scyther tool to formally verify our protocol. The security analysis shows that 5GSBA is superior to 5G-AKA in terms of perfect forward secrecy, device anonymity, and mutual Authentication and Key Agreement (AKA). Additionally, it effectively deters linkability attacks, replay attacks, and most importantly, DoS and DDoS attacks. Finally, the performance evaluation shows that 5GSBA is efficient for both UEs and base stations with reasonably low computational costs and energy consumption.

show abstract

“…The 5G networks possess increased capacities and data rates recommended over applications, including mobile banking and the Internet of Things (IoT) [1]. The 5G cellular technology intends to realize the next generation network where the devices, machines and objects employ together [2,3].…”

Section: Introductionmentioning

confidence: 99%

An Efficient Handover Authentication Mechanism Using Deep Learning in SDNBased 5G HetNets

2023

IJIES

View full text Add to dashboard Cite

The fifth generation (5G) networks are a popular standard that carries effective skills to conquer the tests of next generation wireless networks. Also, the 5G systems can support high data traffic by rendering high throughput and low latency towards the massively connected nodes. Here, handover is highly significant for data processing, portability and real time data creation in mobile technologies. With the 5G entrance, the cellular network has become a completely heterogeneous network (HetNet). The Software Defined Network (SDN) concept is used in 5G HetNets for better mobility management. Most existing research works have concentrated on handover authentication, but those works are often prone to re-authentication issues and increased handover delay. Therefore, to overcome the reauthentication process and provide users with better services, a novel handover authentication mechanism using deep learning (DHan_Auth) is proposed. Initially, the 5G data attack and normal data are collected, and the malicious and non-malicious users are classified using the Convolution Stacked long short term memory network model (Conv_SLSTM). To improve handover process and resist network attacks, only the non-malicious user data are authenticated through the key generation and the 5G Handover-Authentication and Key Agreement (5G_AKA) protocol. The process of encryption and decryption are performed using Extended Elliptic curve cryptography (Ex_ECC). When simulating with the PYTHON platform, performance such as handover latency, accuracy and precision are analyzed. The handover latency of the proposed model is 11.8 seconds to 200 nodes, while the classification accuracy in categorizing the malicious and non-malicious users reaches 98.98%.

show abstract

A lightweight and secure handover authentication scheme for 5G network using neighbour base stations

Cited by 23 publications

References 9 publications

Systematic Improvement of Access-Stratum Security in Mobile Networks

Systematic Improvement of Access-Stratum Security in Mobile Networks

A Secure Blockchain-Based Authentication and Key Agreement Scheme for 3GPP 5G Networks

An Efficient Handover Authentication Mechanism Using Deep Learning in SDNBased 5G HetNets

Contact Info

Product

Resources

About