Anonymous authentication and location privacy preserving schemes for LTE-A networks

Haddad, Zaher; Taha, Sanaa; Saroit, Imane Aly

doi:10.1016/j.eij.2017.01.002

Cited by 21 publications

(12 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Firstly, false base station attack which is a redirection attack where a UE's attack request is redirected from the intended network to other networks separated by a long distance [19]. Secondly, the impersonation attack where an intruder is given a corrupted AV to impersonate any legitimate user [11,19,20]. Thirdly, usage of synchronization approach among UE and HSS where if periodic synchronization fails, it leads to synchronization error and communication failure [19,20].…”

Section: Related Workmentioning

confidence: 99%

“…In the LTE network, LTE-K is the source key from which the entire key hierarchy is derived to secure the full LTE communication [27]. If this LTE-K is compromised [11] at any level of communication, the whole key hierarchy becomes vulnerable. Our analysis of the key hierarchy reveals that the existing LTE networks are prone to compromise due to weak key management.…”

Section: Related Workmentioning

confidence: 99%

“…All the above-mentioned keys are derived from the static LTE-K that stays constant throughout the LTE communication. Thus, the impact of a compromised LTE-K may compromise all derived keys [11]. In other words, the single key problem in LTE can lead to the compromise of the entire key sets derived during an LTE lifetime for a UE.…”

Section: The Lte Architecture With Ipg-akamentioning

confidence: 99%

“…During every UE access request to LTE network, the Access Security Management Entity (ASME) in MME performs access security and EPS-AKA based key distribution functionalities [9,10]. Even though EPS-AKA is claimed to be safe and efficient, it suffers from identity attacks, high bandwidth utilization, and communication cost [11]. Another major problem is absence of an appropriate authentication mechanism to avoid Personally Identifiable Information (PII) theft through International Mobile Subscriber Identity (IMSI) exposure.…”

mentioning

confidence: 99%

“…In the LTE network, EPS-AKA performs key management operations. Once the source key (LTE-K) is compromised [11], the whole key hierarchy becomes vulnerable as LTE-K is the seed for subsequent key derivatives. This LTE-K based vulnerability is coined as a single key problem in [14,15].…”

mentioning

confidence: 99%

See 4 more Smart Citations

A Console GRID Leveraged Authentication and Key Agreement Mechanism for LTE/SAE

Arul

Raja

Chaudry

et al. 2018

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

 Abstract-Growing popularity of multimedia applications, pervasive connectivity, higher bandwidth, and euphoric technology penetration among bulk of the human race that happens to be cellular technology users, has fueled the adaptation to Long Term Evolution (LTE)/ System Architecture Evolution (SAE). The LTE fulfills the resource demands of the next generation applications for now. We identify security issues in authentication mechanism used in LTE that without countermeasures might give super user rights to unauthorized users. The LTE uses static LTE Key (LTE-K) to derive the entire key hierarchy, i.e., LTE follows Evolved Packet System -Authentication and Key Agreement (EPS-AKA) based authentication, which discloses user identity, location, and other Personally Identifiable Information (PII). To counter this, we propose a public key cryptosystem named "International mobile subscriber identity Protected Console Grid based Authentication and Key Agreement (IPG-AKA) protocol" to address the vulnerabilities related to weak key management. From the data obtained from threat modeling and simulation results, we claim that the IPG-AKA scheme not only improves security of authentication procedures, it also shows improvements in authentication loads and reduction in key generation time. The empirical results and qualitative analysis presented in this paper proves that IPG-AKA improves security in authentication procedure and performance in the LTE.

show abstract