Secured fast link-layer handover protocols for 3G-WLAN interworking architecture

Shidhani, Ali Al; Leung, Victor C. M.

doi:10.1145/1577222.1577284

Cited by 3 publications

(4 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…UE might reauthenticate with the same AP (i.e., without handover) or with a target AP (TAP) during a handover. In this paper we focus on re-authentications with the same AP only; handover-initiated re-authentications are discussed in details in Reference [15]. A new UE local identity (ID) is included in the authentication challenge message generated by HAAA and WAAA in the modified EAP-AKA full authentication and LFR, respectively.…”

Section: Assumptionsmentioning

confidence: 99%

“…Since EMSK usage is not specified by EAP-AKA, we propose using it in handover re-authentication. The keys derived from EMSK are the handover root key (HOK), the domain-level handover key (DHOK), and the local-level handover key (LHOK) [15]. Figure 3 shows the proposed extensions to the key hierarchy.…”

Section: Extensions To the Key Hierarchymentioning

confidence: 99%

“…LRK is used to derive TSK in LFR and LHOK is used to derive TSK in the handover re-authentication protocols described in Reference [15]. The advantage of separating re-authentication only keys from handover re-authentication keys is to give the 3G service provider more control on different security parameters.…”

Section: Extensions To the Key Hierarchymentioning

confidence: 99%

See 2 more Smart Citations

Local fast re‐authentication for 3G‐WLAN interworking

Shidhani

Leung

2008

Security Comm Networks

Self Cite

View full text Add to dashboard Cite

SummaryInterworking third-generation (3G) mobile communications systems and wireless local area networks (WLANs) is advantageous for both service providers and end users. However, securing such interworking architectures is a challenging task. EAP-AKA is the security protocol adopted by 3GPP to achieve authentication in 3G-WLAN interworking architectures. This paper proposes enhancements to EAP-AKA to improve performance and security during re-authentication. A novel protocol named local fast re-authentication (LFR) is proposed to replace the reauthentication protocols in EAP-AKA. The EAP-AKA key hierarchy is restructured to suit the needs of LFR. Evaluations show that LFR is superior to the re-authentication protocols in EAP-AKA in terms of performance and security. LFR has been tested by the automated validation of internet security protocols and applications (AVISPA) security verification tool and proved to be secure.

show abstract

Section: Assumptionsmentioning

confidence: 99%

Section: Extensions To the Key Hierarchymentioning

confidence: 99%

See 1 more Smart Citation

Local fast re‐authentication for 3G‐WLAN interworking

Shidhani

Leung

2008

Security Comm Networks

Self Cite

View full text Add to dashboard Cite

show abstract

“…This includes VH situations when the VE detaches from a UMTS network and attaches to an AP it was previously associated with. DHOK is used in horizontal WLAN handovers [11]. VE and WAAA needs to generate an additional key, K WAAA -UE , to protect the communications between them.…”

Section: Local Fast Re-authentication Protocolmentioning

confidence: 99%

Reducing re-authentication delays during UMTS-WLAN vertical handovers

Shidhani

Leung

2008

2008 IEEE 19th International Symposium on Personal, Indoor and Mobile Radio Communications

Self Cite

View full text Add to dashboard Cite

Interworking Universal Mobile Telecommunication Systems (UMTS) and IEEE 802.11 wireless local area networks (WLANs) introduces new challenges in the design of secured and fast vertical handover (VH) protocols. VU operations must not compromise the security of the network. In addition, VH delays must be minimized to maintain the quality of service of the applications running on the User Equipment (UE). Reauthentication is normally required during UMTS-WLAN VU. Existing re-authentication protocols invoked in UMTS-WLAN VH are either inadequately secure or introduces unacceptable delays. This paper proposes couple of re-authentication protocols that reduce re-authentication delays during UMTS-WLAN VHs compared to existing protocols by substantially reducing message signaling. Additionally, they achieve secured key management and mutual authentication between the UE and authentication servers in the 3G Home Network.

show abstract