User authentication scheme based on self-certified public-key for next generation wireless network

Abstract

The developing next generation (4G) mobile communication system will offer us great convenience and huge opportunities of service creation with numerous security threats. As a critical security mechanism, user authentication and key agreement (AKA) schemes have received considerable attentions in recent years. In this paper, a AKA scheme (SPAKA) based on self-certified public-key is proposed for the coming 4G system to reduce the storage, computation and communicational load of existing public-key based user authentication schemes while improving the security of 3G AKA scheme. Three authentication protocols including first-time authentication, re-authentication and handoff authentication are designed respectively for different authentication scenarios. According to the performance analysis, our approach has outperformed related schemes by providing better flexibility and scalability while maintain the expected security and efficiency. Consequently, it is more appropriate for 4G wireless system.Index Terms -Security of Wireless network, Authentication, Self-certified public-key, 4G wireless network.

Perspectives of Managing Mobile Service Security Risks

“…Since 4G wireless networks will be connected via IP (Internet Protocol) based bone networks, the unprotected link among the wired parties in 4G systems will suffer from many existing attacks from the Internet. In some cases, the system will leak user's IMSI (international mobile subscriber identity) in clear text over air interface causing user to suffer from illegal tracing risk [44]. Careful design and selection of authentication protocol can serve as security mechanism in 4G network scenarios.…”

“…The protocol offers mutual authentication through a challenge-response algorithm that occurs between the SIM card and the authentication service [14]. SPAKA scheme is one of the proposed schemes and is a self-certified public-key based AKA to offer fast access, flexibility, scalability, and nonrepudiation proof for 4G systems by categorizing authentication scenarios into registration authentication (first time registration) and call authentication (handoff process) [44]. Many 4G services are delayed sensitive.…”

Security Enhanced Authentication and Key Agreement Protocol in Next Generation Mobile Network

“…For the openness of the radio channels and randomness of the user's mobility, the security of mobile communication system has considered as one of the most challenging problems [1]. As a critical security mechanism, the authentication and key agreement protocol has received considerable attention since its introduction into mobile communication system.…”