Local fast re‐authentication for 3G‐WLAN interworking

Abstract

SummaryInterworking third-generation (3G) mobile communications systems and wireless local area networks (WLANs) is advantageous for both service providers and end users. However, securing such interworking architectures is a challenging task. EAP-AKA is the security protocol adopted by 3GPP to achieve authentication in 3G-WLAN interworking architectures. This paper proposes enhancements to EAP-AKA to improve performance and security during re-authentication. A novel protocol named local fast re-authentication (LFR) is proposed to replace the reauthentication protocols in EAP-AKA. The EAP-AKA key hierarchy is restructured to suit the needs of LFR. Evaluations show that LFR is superior to the re-authentication protocols in EAP-AKA in terms of performance and security. LFR has been tested by the automated validation of internet security protocols and applications (AVISPA) security verification tool and proved to be secure.

Improved IP Multimedia Subsystem authentication mechanism for 3G-WLAN networks

“…We make use of an improved version of EAP-AKA, which distinctly minimizes re-authentication delays. In modified EAP-AKA protocol [12], the WAAA locally reauthenticates stationary users on behalf of HAAA and HSS. The strategy of localizing authentications within the WLAN domain reduces authentication delays and minimizes dependence on critical servers in the 3G Home Network (3GHN).…”

“…In addition, the UE generates a nonce, UN. 2) Five new keys are generated [12]. (a) A Root handover key, HOK is derived from EM SK by the HAAA and the UE only.…”

Fast and Secure Reauthentications for 3GPP Subscribers during WiMAX-WLAN Handovers

“…[22], where the security and performance analyses are preliminary and limited. More thorough security and performance analyses were presented in [23].…”

“…[22], where the security and performance analyses are preliminary and limited. More thorough security and performance analyses were presented in [23]. The protocol in [22] was used in [24] to reduce HO delays between 3GPP and WLAN.…”

Improved IP Multimedia Subsystem Authentication mechanism for 3G-WLAN networks

“…(b) The domain-level handover key, DHK is derived from HOK by HAAA and UE only This key is only derived by the UE and WAAA. The derivation is explained in [12].…”