Secure 3G user authentication in adhoc serving networks

Abstract

The convergence of cellular and IP technologies has pushed the integration of 3G and WLAN networks to the forefront. Gaining secure access to 3G services from 802.11 WLANs is a primary challenge for this new integrated wireless technology. Successful execution of 3G security algorithms can be limited to a specified area by encrypting a user's authentication challenge with spatial data defining his visited WLAN.With limited capacity to determine a user's location only to within a current cell and restrictions on accessing users' location due to privacy, 3G operators must rely on spatial data sent from visited WLANs to implement spatial authentication control. A potential risk is presented to 3G operators since no prior relationship or trust may exist with a WLAN owner. Algorithms to quantify the trust between all parties of 3G-WLAN integrated networks are presented to further secure user authentication. Ad-hoc serving networks and the trust relationships established between mobile users are explored to define stronger algorithms for 3G -WLAN user authentication

Universal Mobility with Global Identity (UMGI) Architecture

“…The merging of 4G and WLAN networks prompts the needs of operators to increase their coverage with a blended service offering that makes best use of their old investments in legacy infrastructure, low price technology and new technology at the least price to address the higher volume of delivered rich data services [1]. Studies have shown that mobile data services are hindered by too much complexity and too many different tariff models.…”

An authentication, authorization, and accounting mechanism for 3G/WLAN networks

“…These specifications use an Extensible Authentication Protocol–Authentication and Key Agreement (EAP‐AKA) protocol as the authentication and key exchange protocol to meet the security needs of 3G/WLAN interworking. The aspects of security and efficiency of EAP‐AKA can still be improved , for example, for the protection of user ID anonymity, large computation in mobile stations (MSs), or large message exchange frequency. Moreover, a billing mechanism is not included in the EAP‐AKA protocol, which is one of the most important reasons why 3G/WLAN interworking is not yet popular.…”