Abstract:5G acts as a highway enabling innovative digital transformation and the Fourth Industrial Revolution in our lives. It is undeniable that the success of such a paradigm shift hinges on robust security measures. Foremost among these is primary authentication, the initial step in securing access to 5G network environments. For the 5G primary authentication, two protocols, namely 5G Authentication and Key Agreement (5G-AKA) and Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA'), were proposed and standardized, where the former is for 3GPP devices, and the latter is for non-3GPP devices. Recent scrutiny has unveiled vulnerabilities in the 5G-AKA protocol, exposing it to security breaches, including linkability attacks. Moreover, mobile communication technologies are dramatically evolving while 3GPP has standardized Authentication and Key Management for Applications (AKMA) to reuse the credentials, generated during primary authentication, for 5G network applications. That makes it so significant for 5G-AKA to be improved to support forward secrecy as well as address security attacks. In response, several protocols have been proposed to mitigate these security challenges. In particular, they tried to strengthen security by reusing secret keys negotiated through the Elliptic Curve Integrated Encryption Scheme (ECIES) and countering linkability attacks. However, they still have encountered limitations in completing forward secrecy. Motivated by this, we propose an augmentation to 5G-AKA to achieve forward security and thwart linkability attacks (called 5G-AKA-FS). In 5G-AKA-FS, the home network (HN), instead of using its static ECIES key pair, generates a new ephemeral key pair to facilitate robust session key negotiation, truly realizing forward security. In order to thoroughly and precisely prove that 5G-AKA-FS is secure, formal security verification is performed by applying both BAN Logic and ProVerif. As a result, it is demonstrated that 5G-AKA-FS is valid. Besides, our performance comparison highlights that the communication and computation overheads are intrinsic to 5G-AKA-FS. This comprehensive analysis showcases how the protocol effectively balances between security and efficiency.

User-to-User Mutual Authentication and Key Agreement Scheme for LTE Cellular System

Authentication scheme based on biometric encryption for pervasive computing environments

A Console GRID LA Console GRID Leveraged Authentication and Key Agreement Mechanism for LTE/SAE

A secure wireless communication system integrating RSA, Diffie–Hellman PKDS, intelligent protection-key chains and a Data Connection Core in a 4G environment

Enhanced Privacy and Authentication: an Efficient and Secure Anonymous Communication for Location Based Service Using Asymmetric Cryptography Scheme

A Robust Middleware Architecture for Mobile Communication Security

A User Authentication Scheme Based on Elliptic Curves Cryptography for Wireless Ad Hoc Networks

Improved LTE-R Access Authentication Scheme Based on Blockchain and secgear

Temporary Internet Access for Authentication and Key Agreement for LTE Networks

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Anonymity guarantees of the UMTS/LTE authentication and connection protocol

A novel authentication and key‐agreement scheme for satellite communication network

A formal security analysis of the fast authentication procedure based on the security context in 5G networks

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.

Pairwise and Group Key Setup Mechanism for Secure Machine-to-machine Communication

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

A Secure Blockchain-Based Authentication and Key Agreement Scheme for 3GPP 5G Networks

Lightweight anonymous authentication and key agreement protocols for mobile edge computing

5G-AKA-FS: A 5G Authentication and Key Agreement Protocol for Forward Secrecy

On the Security of A Secure Anonymous Identity-Based Scheme in New Authentication Architecture for Mobile Edge Computing

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services