Methods for Ensuring Data Security in Mobile Standards

Abstract

The analysis of mobile communication standards is carried out, the functional structure and interfaces of interaction between the structural elements of the cellular network are considered. To understand the principle of communication according to the GSM standard, a block diagram of a mobile switching center (MSC), base station equipment (BSS), control and service center (MCC), mobile stations (MS) is presented. The main algorithms for ensuring the confidentiality and security of mobile subscribers' data, in different types of standards, as well as the vulnerabilities of information flows are considered. In particular, the following dangerous types of attacks have been identified, to which mobile network subscribers are sensitive: sniffing; leakage of personal data; leakage of geolocation data; spoofing; remote capture of SIM-card, execution of arbitrary code (RCE); denial of service (DoS). It is established that the necessary function of the mobile network is the identification of subscribers, which is performed by IMSI, which is recorded in the SIM card of the subscriber and the HLR of the operator. To protect against spoofing, the network authenticates the subscriber before starting its service. In the case of subscriber identification, the subscriber and the network operator are protected from the effects of fraudulent access. In addition, the user must be protected from eavesdropping. This is achieved by encrypting the data transmitted over the radio interface. Thus, user authentication in UMTS, as well as in the GSM network, is carried out using encryption with a common key using the "hack-response" protocol (the authenticating party sends a random number to the authenticated party, which encrypts it according to a certain algorithm using a common key and returns the result back).

Method for Evaluation Quality Parameters of Telecommunications Services

“…For information estimation of the system "researched objectmeasuring instrument" the concept of entropy is introduced in the information theory. Entropy is the average amount of information per message [9].…”

“…𝑝(𝑎 𝑖 < 𝑥 < 𝛽 𝑖 ) = ∫ 𝜑(𝑋)𝑑𝑥 𝛽 𝑖 𝑎 𝑖 (11) Determining the probabilities of the values of the parameter in all intervals of the partition, according to Shannon's formula (9), we can obtain an estimate of the entropy in this case.…”

Monitoring of Link-Level Congestion in Telecommunication Systems Using Information Criteria

“…This state can be taken by mistake for equipment refusal (and vice versa). Therefore, control and removal of overloads are important tasks of a statistical character [14].…”

Generalized Model of Information Protection Process in Audiovisual Content Distribution Networks

“…One of the most important functions of effective protection of the organization's information system is threat tracking and analysis and calculation of quantitative indicators of the functional properties of the security of content distributed in networks [1,3,5,8,9,12,19]. In [11] methods for ensuring data security in mobile standards are presented. Some methods can be used in programming level with biometric technical realization [16].…”