TR‐AKA: A two‐phased, registered authentication and key agreement protocol for 5G mobile networks. (24th December 2021)

• Record Type: Journal Article
• Authors: Liu, Yibing; Huo, Lijun; Zhou, Gang
• Is Part Of: IET information security. Volume 16:Number 3(2022)
• Page Start: 193
• Page End: 207
• Publication Date: 2021-12-24
• Subjects: 5G‐AKA -- privacy formal methods -- Tamarin authentication; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/ise2.12054
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract: With the development of mobile communications, the authors step into the 5G era. 5G‐AKA is intended to serve as a certification standard for users to safely and stably enjoy 5G mobile services. However, recent research proves that some attacks may happened based on information deciphering and message replay. In addition, the authors found that some variants of 5G‐AKA are also at risk of linkability attacks. Therefore, in order to solve the above‐mentioned risks, the authors propose a two‐phased, registered protocol TR‐AKA. This protocol finishes two‐way authentication between the user and the home network through only two message‐sending rounds, and a temporary identity variable group is applied to replace the real information for transmission. A newly designed variable is also used to strictly control the increase of the sequence number to promote the sensitivity of freshness. Finally, the authors choose the Tamarin tool to prove that TR‐AKA has achieved authentication and privacy‐protection objectives, and further discussions have also verified the rationality of the protocol design.