Secure Secondary Authentication Framework for Efficient Mutual Authentication on a 5G Data Network

Abstract

The service-based architecture of the Fifth Generation(5G) had combined the services and security architectures and enhanced the authentication process of services to expand the coverage of the network, including heterogeneous devices. This architecture uses the secondary authentication for mutual authentication between the User Equipment (UE) and the Data Network (DN) to authenticate devices and services. However, this authentication mechanism can cause a signaling storm in the Non-Access Stratum (NAS) because the end node needs to communicate with the authentication server of the NAS area. This problem could affect the availability of the network when the network is extended. This research proposes a mutual authentication framework that can efficiently perform a mutual authentication process through secondary authentication between UE and DN. The proposed framework uses newly devised network functions: Secondary Authentication Function (SAF) and the Authentication Data Management Function (ADMF). This framework proposes a methodology at the protocol level for efficient mutual authentication using the mobile edge computing architecture. We analyzed the proposed framework in the point of security considerations, and we evaluated the effect of the framework on the traffic of the NAS layer and user experience. Our simulation results show that the proposed framework can reduce the NAS traffic by 39% and total traffic of the overall network by 10%.

Applications and Evaluations ofBio-InspiredApproaches in Cloud Security: A Review

“…Primarily, the secondary authentication operates by SAF process. The SAF gets requests from the user, processes the request, and interacts with ADMF to increase the audibility of communique environment [39].…”

Fuzzy Logic Based Handover Authentication in 5g Telecommunication Heterogeneous Networks

“…In 5 delay-sensitive G applications, the impact of delay can be more extreme [13]. In terms of defense, a user identity disclosure attack is when users send their International Mobile Subscriber Identities (IMSIs) to HSS in plain text without encryption [14][15][16].…”