Analysis of GSM and GPRS Security

WANG Qi-hua,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.02.049

2005-01-01

Abstract:The GSM and GPRS system provides solutions to a few important aspects of security: subscriber authentication, subscriber identity confidentiality and confidentiality of voice and data over the radio path. An analysis of the security features provided in a GSM and GPRS network is given.

What problem does this paper attempt to address?

Secure communication mechanisms for GSM networks

Chi-Chun Lo,Yu-Jen Chen

DOI: https://doi.org/10.1109/30.809184

1999-01-01

IEEE Transactions on Consumer Electronics

Abstract:With the advance of wireless communications technology, mobile communications has become more convenient than ever. However, because of the openness of wireless communications, the protection of the privacy between communicating parties is becoming a very important issue. We focus on the security of the Global System for Mobile communication (GSM) networks. A secure communication architecture for the GSM network is proposed. In the proposed architecture, we use public-key cryptography for user authentication and stream cipher for message encryption and decryption. An authentication protocol and a key generation method are presented in conjunction with the proposed architecture. Cryptanalysis and operational analysis show that the authentication protocol is secure and efficient. Simulation results indicate that the key generation method can always produce key strings of evenly distributed 0s and 1s and with infinite period.

telecommunications,engineering, electrical & electronic
Solutions to the GSM Security Weaknesses

M. Toorani,A. A. Beheshti

DOI: https://doi.org/10.1109/NGMAST.2008.88

2012-03-17

Abstract:Recently, the mobile industry has experienced an extreme increment in number of its users. The GSM network with the greatest worldwide number of users succumbs to several security vulnerabilities. Although some of its security problems are addressed in its upper generations, there are still many operators using 2G systems. This paper briefly presents the most important security flaws of the GSM network and its transport channels. It also provides some practical solutions to improve the security of currently available 2G systems.

Cryptography and Security,Networking and Internet Architecture
GSM Security Using Identity-based Cryptography

Animesh Agarwal,Vaibhav Shrimali,Manik Lal Das

DOI: https://doi.org/10.48550/arXiv.0911.0727

2009-11-04

Cryptography and Security

Abstract:Current security model in Global System for Mobile Communications (GSM) predominantly use symmetric key cryptography. The rapid advancement of Internet technology facilitates online trading, banking, downloading, emailing using resource-constrained handheld devices such as personal digital assistants and cell phones. However, these applications require more security than the present GSM supports. Consequently, a careful design of GSM security using both symmetric and asymmetric key cryptography would make GSM security more adaptable in security intensive applications. This paper presents a secure and efficient protocol for GSM security using identity based cryptography. The salient features of the proposed protocol are (i) authenticated key exchange; (ii) mutual authentication amongst communicating entities; and (iii) user anonymity. The security analysis of the protocol shows its strength against some known threats observed in conventional GSM security.
Analysis of Security Problems in WAP

余华,钱松荣,胡方农

DOI: https://doi.org/10.3969/j.issn.1007-130x.2002.06.010

2002-01-01

Abstract:Based upon SSL and TLS, the security module WTLS in WAP takes into account of the features of wireless communications and makes a modification, but also causes some problems .WAP introduces a new piece of software, the WAP gateway. This programming model can accord well with the existing Internet standards. However, it makes end to end security difficult to implement.
A Robust Middleware Architecture for Mobile Communication Security

Chen Tianzhou,Mao Haixia,Dai Hongjun

2006-01-01

Abstract:This paper briefly analyzes the security mechanisms of GSM/UMTS and finds their security defects, such as unidirectional authentication and cipher key transmission without encryption. For these defects, existing mobile communication systems can not prevent hostile attacks to satisfy high-level security demands. To solve these problems, we propose the robust Middleware Architecture for Mobile Communication Security (MAMCS), which employs new Authentication and Key Agreement (AKA) protocols, chooses different encryption algorithms for different applications and implements integrity control mechanism. In the end, we analyze the performance of MAMCS and show that MAMCS gets a 200%~2% improvement in security only at the cost of 1.51% descent in bandwidth and 18.14 ms extra latency.
Security Protocols and Analysis of 3G-WLAN Interworking

Zhao Yao,Yin Hao,Lin Chuang

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.02.033

2006-01-01

Abstract:With the development of wireless Internet,the interworking of the third generation(3G)-Wireless Local Area Network(WLAN) has become a focus of research.3G systems have their advantages in charge management,roaming,and security facilities,and WLAN systems have the advantages of high bandwidth and low investment cost.Interworking of 3G-WLAN has complementary advantages.This paper introduces the system of 3G-WLAN interworking and its security structure,presents a comprehensive survey of the security protocols,analyzes its security challenges,points out the disadvantages of the existing security mechanism,and discusses the possible fields for further research.
Mobile Security Middleware Architecture in High Strength

MAO Hai-xia,CHEN Tian-zhou,DAI Hong-jun

DOI: https://doi.org/10.3969/j.issn.1001-3695.2006.08.029

2006-01-01

Abstract:This article briefly analyses the security mechanisms of GSM and UMTS and finds the faults in them.To solve these faults,a mobile security middleware architecture in high strength based on end-to-end security mechanism is proposed.This article introduces the middleware architecture and its security mechanism,including the design of authentication and key agreement,discusses the encryption algorithm and the scheme of integrity control.
A New Security Architecture for Mobile Communication

Chen Tianzhou,Huang Yu,Chen Feng,Hu Wei

2006-01-01

Abstract:There are many security defects in existing mobile communication systems, such as unidirectional authentication and cipher key transmission in plaintext. With the expansion of the mobile communication services, the mobile security becomes more and more important, but the existing communication systems can not prevent hostile attacks to supply high-quality service because of their defects in security. To solve these problems, we propose a new Security Architecture for Mobile Communication (SAMC), which employs new authentication protocols, chooses different encryption algorithms for different requirements and implements integrity control mechanism. Good security is developed in an open environment with the collaboration of experts. It has the robust security and the outstanding performance, just a slight and acceptable loss.
Review of Application and Analysis Techniques for Mobile System Security

Guan-Shi ZHENG,Zheng ZHANG,Wei-Hua ZHANG

DOI: https://doi.org/10.15888/j.cnki.csa.005354

2016-01-01

Abstract:The popularity of mobile system has attracted malware developers. To ensure the security of users’ privacy and property, there has been numerous solutions targeting current security issues of mobile system. In this paper, it introduces the prevalent mobile operating systems and the mobile application security analysis methodologies. In addition, it makes analysis and discussion. At last, it proposes the prospects of possible directions of mobile application analysis approaches and endswith a conclusion.
A Proactive Defense Mechanism for Mobile Communication User Data

Caixia Liu,Xinsheng Ji,Jiangxing Wu,Xiao Qin

DOI: https://doi.org/10.1007/s11432-017-9428-6

2018-01-01

Science China Information Sciences

Abstract:>Dear editor,Several studies have recently reported on major vulnerabilities in the Signaling System No.7 (SS7)used in mobile networks [1, 2]. The reported vulnerabilities and security issues would lead to the illegal acquisition and tampering of mobile communication user data, known as cellphone user data. The cellphone user data contain important information such as identity identification, location identification, security parameter-set. Due to
Research on New Method of Security Policy Distribution in Mobile Network

LI Yan-Mei,LUO Jian

DOI: https://doi.org/10.3969/j.issn.1007-1423-B.2010.02.005

2010-01-01

Abstract:Analyzes the necessity of providing different levels on 3G network,and designs a model of security system.Classifies the factor in security policy as:security level,security scene,security element and security algorithm & protocol,designs security policy table to manage the security policy.The solution provides a technology guarantee for mobile communication operator and solves the problem that allocating security services according to user's requirements.
General Application Research on GSM Module

Ma Yuchun,Huang Yinghong

DOI: https://doi.org/10.1109/icicis.2011.137

2012-01-01

Applied Mechanics and Materials

Abstract:GSM network is the most worldwide mobile communication network nowadays. Based on the SIEMENS MC35 GSM module, general techniques of communication with GSM network are depicted, including the initialization of terminal equipment, sending and reading short messages (SMS), sending SMS to group users, and the management on phonebook of SIM card, furthermore, a flexible solution on real-time reading SMS is proposed. Finally, application cases are given for GSM module.
A formal security analysis of the fast authentication procedure based on the security context in 5G networks

Su, Li,Du, Haitao

DOI: https://doi.org/10.1007/s00500-023-09486-x

IF: 3.732

2024-01-11

Soft Computing

Abstract:The security context, generally stored in the universal subscriber identity module card or the baseband chip, is the critical information applied by the subscriber to access the 5G network during the fast authentication procedure. Once exposed or illegally used, the security context can be exploited to derive various keys for authentication and encryption. Despite its importance, challenges and questions still remain in the previous relevant research. To fill this gap, by adopting the security protocol verification tool ProVerif, we provide a comprehensive formal model of the fast authentication procedure based on the security context to analyze whether security goals can be met. Unfortunately, we uncover two vulnerabilities, including one never reported before. Our analysis shows that these vulnerabilities stem from fundamental design flaws in the cellular network protocol and thus apply to the 4G network. These vulnerabilities could be exploited to launch several attacks, including impersonation and eavesdropping. We have validated these attacks using 5 mobile phones from 5 different baseband manufacturers through experimentation in three mobile carriers. We find an insecure implementation of one of these phones, which exposed it to replay attacks. And we further discuss the security threats posed by the impersonation attack, such as location spoofing and one-tap authentication bypass, which is verified on 10 popular apps. We finally propose several countermeasures to eliminate these security issues. Actually, we have reported the novel vulnerability to the GSM Association and received a confirmation in the form of a coordinated vulnerability disclosure (CVD) number CVD-2022-0057.

computer science, artificial intelligence, interdisciplinary applications
A Study of Wireless Channel on GSM-R Network

Jin, Xinyu,Jiang, Lurong,Wu, Duanpo

DOI: https://doi.org/10.1109/icise.2010.5691139

2010-01-01

Abstract:GSM-R is a railway communication system based on the GSM technology. With the widely develop of high-speed rail, the GSM-R quality of service (QoS) is becoming much more important than ever. We analyze GSM-R by measuring field coverage and radio field coverage model, deducing the Doppler frequency offset, giving the upper and lower limits of overlap in handover at different speed, and studying the data-transmitting error rate of GSM_R network. We propose that increasing the space of two neighbor cells does not significantly weaken the quality of field coverage, but can reduce the chance of ping-pong handover and other network performance. We also discover that the Doppler frequency is decreasing gradually and the error rate is decreasing shakingly when the train is becoming closer to the base station. All the data we used in this paper is comes from drive tests on JJ-DPL and W-G DPL, China.
Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services

Yaru Yang,Yiming Zhang,Tao Wan,Chuhan Wang,Haixin Duan,Jianjun Chen,Yishen Li

DOI: https://doi.org/10.1145/3643833.3656131

2024-01-01

Abstract:5G messaging services, based on Global System for Mobile Communications Association (GSMA) Rich Communication Service (RCS) and 3rd Generation Partnership Project (3GPP) IP Multimedia Subsystem (IMS), have been deployed globally by more than 90 mobile operators serving over 421 million monthly active users via 1.2 billion devices. Despite the widespread use, security research of 5G messaging remains sparse. In this paper, we present a comprehensive security analysis and measurement of 5G messaging services, assisted by a semi-automated testing tool we developed. We considered both carrier-side deployment and phone-side software implementations by testing against three large operators, each with hundreds of millions of subscribers, and six popular 5G messaging-enabled devices. We uncovered 4 categories of vulnerabilities, allowing for a wide range of attacks, including Man-In-The-Middle (MITM) attacks, zero-click remote information leakage, phone storage exhaustion and mobile data consumption, and Denial-of-Services (DoS) attacks. Our study underscores the need for further security enhancements in security specifications, implementation, and deployment of 5G messaging services.
Mobile emergency tele-control system based on GPRS ＆ CDMA

Hengjun ZHOU,Chuangxin GUO,Dou FAN,Ji CHEN

DOI: https://doi.org/10.3969/j.issn.1006-6047.2010.03.018

2010-01-01

Abstract:The operating features of wire and wireless communication modes used in tele-control system are the technologies of Access Point Name service,Virtual Private Network and IPSec security authentication to protect the system security in all aspects,applies the technologies of dual-network and protocol checksum retransfer to ensure the reliability of network data conununication,and adopts the smart sub-packet transfer mode to improve the real-time performance of system. The site test shows its extremely low error rate and communication lag,satisfying the requirements of tele-control communication,and validates the feasibility of wireless communication mode in tele-control system.
Analyse and Application of Protocols of Short Message Service Based on PSTN

徐树山,张春,宁彦卿,王志华

DOI: https://doi.org/10.3969/j.issn.1672-3600.2003.05.008

2003-01-01

Abstract:The transport protocols of SMS (Short Message Service)base on PSTN (Public Switch Telephone Network) was analyzed in detail in this paper. We also presented a rough SOC(System On Chip) scheme for SM-TE (Short Message Terminal Equipment) .
Based on IPv6 Network and 4G Network System Security Analysis and Research

Xin Min Wu,Hao Shu Wu

DOI: https://doi.org/10.4028/www.scientific.net/amm.530-531.773

2014-01-01

Applied Mechanics and Materials

Abstract:First, as the 4G network, the introduction of IPv6 network layer security mechanism, security is enhanced at the same time, IPv6 security mechanism applied to the 4G network system security as well as new demands and challenges, followed by the core network based on IPv6 network security to face the next 4G threats and security problems, concludes with IPv6 technical analysis and 4G network defense and countermeasures.
Research on Security Technology of Mobile Network in Software Architecture

CHEN Zhen,XU Jian-lin,YU Yi-fan,LIU Hong-jian

DOI: https://doi.org/10.3969/j.issn.1671-1122.2013.12.002

2013-01-01

Abstract:With the wide application of mobile terminal, security issues of mobile network software system have become increasingly prominent, the world has many researchers devoted themselves to the study of mobile network system security. This paper analyzes the current commonly used in mobile network software architecture and security risk, put forward a variety of security solutions for the direction and methods, summarizes the progress of research in the field on each direction, the security tools are analyzed, and the future research ideas are discussed.
Analysis on Security Technologies in Mobile Health

Ying DAI,Yu NIU,Hong ZHENG,Ji-jiang YANG

2016-01-01

Abstract:With the development of wireless communication technology and smart device,mobile healthcare provides more convenient medical service to patient. This paper discusses the application of mobile health care from in-patient and out-patient two areas. The paper focuses on the privacy preserving and security of mobile health data,especially the data security solutions on wireless body area network (WBAN) which is the key technology of mobile healthcare.

Analysis of GSM and GPRS Security

Secure communication mechanisms for GSM networks

Solutions to the GSM Security Weaknesses

GSM Security Using Identity-based Cryptography

Analysis of Security Problems in WAP

A Robust Middleware Architecture for Mobile Communication Security

Security Protocols and Analysis of 3G-WLAN Interworking

Mobile Security Middleware Architecture in High Strength

A New Security Architecture for Mobile Communication

Review of Application and Analysis Techniques for Mobile System Security

A Proactive Defense Mechanism for Mobile Communication User Data

Research on New Method of Security Policy Distribution in Mobile Network

General Application Research on GSM Module

A formal security analysis of the fast authentication procedure based on the security context in 5G networks

A Study of Wireless Channel on GSM-R Network

Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services

Mobile emergency tele-control system based on GPRS ＆ CDMA

Analyse and Application of Protocols of Short Message Service Based on PSTN

Based on IPv6 Network and 4G Network System Security Analysis and Research

Research on Security Technology of Mobile Network in Software Architecture

Analysis on Security Technologies in Mobile Health