5G Security System Design for All Ages

Wan, Lei; Soong, Anthony C. K.; Liu, Jianghua; Wu, Yong; Classon, B.; Xiao, Weimin; Mazzarese, David; Zhao, Yang; Saboorian, Tony

doi:10.1007/978-3-030-73703-0_6

Cited by 2 publications

(1 citation statement)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…AKMA adapts to the architectural changes in the 5G system to meet the requirements for various scenarios, e.g., those related to the Internet of Things [17]. The authentication and key agreement rely on the credentials and identities of the mobile subscriber, and are pre-established with the mobile network operator (MNO) for 5G access [18]. A fundamental difference between AKMA and GBA is that AKMA bootstraps application security from the keys derived in the authentication and key agreement (AKA) during the network access authentication, whereas GBA is based on an AKA run that is independent of network access.…”

Section: Authentication and Key Management For Applications (Akma)mentioning

confidence: 99%

Privacy-Enhanced AKMA for Multi-Access Edge Computing Mobility

Akman

Ginzboorg²,

Damir

et al. 2022

Computers

View full text Add to dashboard Cite

Multi-access edge computing (MEC) is an emerging technology of 5G that brings cloud computing benefits closer to the user. The current specifications of MEC describe the connectivity of mobile users and the MEC host, but they have issues with application-level security and privacy. We consider how to provide secure and privacy-preserving communication channels between a mobile user and a MEC application in the non-roaming case. It includes protocols for registration of the user to the main server of the MEC application, renewal of the shared key, and usage of the MEC application in the MEC host when the user is stationary or mobile. For these protocols, we designed a privacy-enhanced version of the 5G authentication and key management for applications (AKMA) service. We formally verified the current specification of AKMA using ProVerif and found a new spoofing attack as well as other security and privacy vulnerabilities. Then we propose a fix against the spoofing attack. The privacy-enhanced AKMA is designed considering these shortcomings. We formally verified the privacy-enhanced AKMA and adapted it to our solution.

show abstract

Section: Authentication and Key Management For Applications (Akma)mentioning

confidence: 99%