Secure and Privacy-preserving Network Slicing in 3GPP 5G System Architecture

Xiangman Li,Miao He,Jianbing Ni

2023-05-28

Abstract:Network slicing in 3GPP 5G system architecture has introduced significant improvements in the flexibility and efficiency of mobile communication. However, this new functionality poses challenges in maintaining the privacy of mobile users, especially in multi-hop environments. In this paper, we propose a secure and privacy-preserving network slicing protocol (SPNS) that combines 5G network slicing and onion routing to address these challenges and provide secure and efficient communication. Our approach enables mobile users to select network slices while incorporating measures to prevent curious RAN nodes or external attackers from accessing full slice information. Additionally, we ensure that the 5G core network can authenticate all RANs, while avoiding reliance on a single RAN for service provision. Besides, SPNS implements end-to-end encryption for data transmission within the network slices, providing an extra layer of privacy and security. Finally, we conducted extensive experiments to evaluate the time cost of establishing network slice links under varying conditions. SPNS provides a promising solution for enhancing the privacy and security of communication in 5G networks.

Cryptography and Security

What problem does this paper attempt to address?

### Problems the Paper Aims to Solve

The paper aims to address privacy leakage and security issues brought by network slicing in 5G system architecture. Specifically:

1. **User Privacy Protection**: Since multiple entities share the same physical network infrastructure, there is a potential risk of data leakage or unauthorized access. Without proper security measures, sensitive information transmitted through one network slice may be accessed or intercepted by other slices.
2. **Traffic Pattern Leakage**: When multiple slices coexist on the same physical infrastructure, the traffic patterns, resource allocation, or characteristics of certain services may be observed or inferred by other slices.
3. **Network Slice ID Leakage**: Each network slice has an ID, which is associated with the type of services accessible to mobile users. Exposure of the network slice ID may reveal the specific services or applications being used by the user.

To address these issues, the authors propose a Secure and Privacy-preserving Network Slicing protocol (SPNS), which combines 5G network slicing with onion routing technology. The main features of SPNS include:
- Allowing users to select network slices and taking measures to prevent curious RAN nodes or external attackers from obtaining complete slice information, including service types and network slice IDs.
- Implementing end-to-end encryption to ensure privacy and security during data transmission.
- Supporting the 5G core network in authenticating connected RANs and avoiding reliance on a single RAN to provide services, thereby enhancing the overall security and reliability of the system.