A Secure Handover Protocol Design in Wireless Networks with Formal Verification

Lim, Sun-Hee; Bang, Ki-Seok; Yi, Okyeon; Lim, Jongin

doi:10.1007/978-3-540-72697-5_6

Cited by 13 publications

(6 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…AVISPA is a complete tool-set used to test and validate the security of largescale Internet security protocols. It is widely used to verify the security of HO protocols [37][38][39]. The AVISPA toolset includes back-end security verification servers like On-the-fly Model-Checker (OFMC), Constraint-Logicbased Attack Searcher (CL-AtSe) and SAT-based ModelChecker (SATMC).…”

Section: S1: Mutual Authenticationmentioning

confidence: 99%

Enhancing the performance of secured handover protocols in UMTS-WiMAX interworking

Shidhani

Leung

2010

Wireless Netw

View full text Add to dashboard Cite

Interworking UMTS and WiMAX networks offers global roaming and cost effective broadband wireless Internet access. Designing efficient Intra and Inter WiMAX handovers in the interworking architecture is a challenging problem. Handovers must be instantaneous and secure at the same time. We attempt to solve this problem by designing Intra and Inter WiMAX handover protocols which are capable of operating in the UMTS-WiMAX interworking architecture and perform mutual pre-authentication between the mobile station and the target network prior to handover. Due to the pre-authentication procedure, our proposed handover protocols outperform standard handover protocols by dispatching fewer handover signaling messages, experiencing less handover delay and preserving computation resources of critical nodes in the interworking architecture. Furthermore, our proposed handover protocols meet essential security requirements and defend against common attacks affecting handover protocols.

show abstract

Section: S1: Mutual Authenticationmentioning

confidence: 99%

Enhancing the performance of secured handover protocols in UMTS-WiMAX interworking

Shidhani

Leung

2010

Wireless Netw

View full text Add to dashboard Cite

show abstract

“…The AVISPA tool is equipped with a web-based graphical user interface (www.avispa-project.org/software) that supports the editing of protocol specifications and allows the user to select and configure the different back-ends of the tool [31]. AVISPA provides a modular and expressive formal language called the High Level Protocol Specification Language (HLPSL) for specifying intended protocols and formally validating them [35].…”

Section: Avispa and Spanmentioning

confidence: 99%

Improved IPSec tunnel establishment for 3GPP–WLAN interworking

Samoui

Bouabidi

Obaidat

et al. 2014

Int J Communication

View full text Add to dashboard Cite

Interworking between wireless local area network (WLAN) and the 3rd Generation Partnership Project (3GPP) such as Long Term Evolution (LTE) is facing more and more problems linked to security threats. Securing this interworking is a major challenge because of the vastly different architectures used within each network. Therefore, security is one of the major technical concerns in wireless networks that include measures such as authentication and encryption. Among the major challenges in the interworking security is the securing of the network layer. The goal of this article is twofold. First, we propose a new scheme to secure 3GPP LTE-WLAN interworking by the establishment of an improved IP Security tunnel between them. The proposed solution combines the Internet Key Exchange (IKEv2) with the Host Identity Protocol (HIP) to set up a security association based on two parameters, which are location and identity. Our novel scheme, which is called HIP_IKEv2, guarantees better security properties than each protocol used alone. Second, we benefit from Mobile Internet Key Exchange protocol (MOBIKE) in case of mobility events (handover). And we extend HIP_IKEv2 to HIP_MOBIKEv2 protocol in order to reduce the authentication signaling traffic. The proposed solution reinforces authentication, eliminates man-in-the-middle attack, reduces denial-of-service attack, assures the integrity of messages, and secures against reply attack. Finally, our proposed solution has been modeled and verified using the Automated Validation of Internet Security Protocols and Applications and the Security Protocol Animator, which has proved its security when an intruder is present.First, the UE authenticates 3GPP_AAA server on AUTN and MAC sever . Then the 3GPP_AAA server authenticates the UE on RES. These three parameters are derived from the random number RAND. Thus, we have modeled this goal in HLPSL as follows:The same procedure is adopted to authenticate the UE by 3GPP_AAA server. Then, in the goal section of the protocol, we write the following: 8.2.2.2 Secrecy of the shared key The Diffie-Hellman shared key must only be known by the UE and the ePDG entities. The secret is the goal fact related to secrecy.This goal has been modeled in HLPSL as follows:Also, the Cipher Key CK and the Integrity Key IK must be a secret between UE and the 3GPP_AAA server to guarantee the secrecy of the Master Session Key MSK.This goal has been modeled in HLPSL, as follows:Then, in the goal section of the protocol, we write the following: 1195 3GPP-WLAN INTERWORKING some other types of attacks such as connection hijacking or impersonation, and trying to give solution for securing new mobility management protocols, such as FHMIPv6 and PMIPv6.

show abstract

“…The AVISPA Tool is equipped with a web-based graphical user interface (www.avispa-project.org/software) that supports the editing of protocol specifications and allows the user to select and configure the different back-ends of the tool (Armando, 2005). AVISPA provides a modular and expressive formal language called the High Level Protocol Specification Language (HLPSL) for specifying intended protocols and formally validating them (Lim et al, 2007).…”

Section: Avispa and Spanmentioning

confidence: 99%

HIP_IKEv2: A Proposal to Improve Internet Key Exchange Protocol-based on Host Identity Protocol

Smaoui

Zarai

Obaidat

et al. 2013

Proceedings of the 3rd International Conference on Simulation and Modeling Methodologies, Technologies and Applications

View full text Add to dashboard Cite

IKEv2 offers authentication, authorization and key agreement services to establish a security association between two peers bound to IP addresses, but it is still vulnerable to some security problems such as denial of service (Dos) and man-in-the-middle attack. Host Identity Protocol (HIP) is also a security protocol that defines host identifiers for naming the endpoints and performs authentication and creation of IPsec security associations between them bound to identifiers. The purpose of HIP is to support trust systems, enhance mobility and greatly reduce the Denial of Service (Dos) attacks. We focus on an extension to IKEv2 in order to enhance authentication, eliminate man-in-the-middle attack and guarantee denial of service to provide better security between the two peers. In this paper, we describe our proposal that consists of combining the IKEv2 with the HIP to set up a security association based on two parameters which are location and Identity. This combination can provide better security properties than each protocol used alone. This scheme, named (HIP_IKEv2) couples location and identity to define a security association between two peers. We have used the Automated Validation of Internet Security Protocols and Applications (AVISPA) and its Security Protocol Animator (SPAN), and two powerful automated tools in order to formally specify and validate the HIP_IKEv2 protocol.

show abstract

A Secure Handover Protocol Design in Wireless Networks with Formal Verification

Cited by 13 publications

References 3 publications

Enhancing the performance of secured handover protocols in UMTS-WiMAX interworking

Enhancing the performance of secured handover protocols in UMTS-WiMAX interworking

Improved IPSec tunnel establishment for 3GPP–WLAN interworking

HIP_IKEv2: A Proposal to Improve Internet Key Exchange Protocol-based on Host Identity Protocol

Contact Info

Product

Resources

About