Abstract:The futuristic fifth-generation cellular network (5G) not only supports high-speed internet, but must also connect a multitude of devices simultaneously without compromising network security. To ensure the security of the network, the Third Generation Partnership Project (3GPP) has standardized the 5G Authentication and Key Agreement (AKA) protocol for mutually authenticating user equipment (UE), base stations, and the core network. However, it has been found that 5G-AKA is vulnerable to many attacks, including linkability attacks, denial-of-service (DoS) attacks, and distributed denial-of-service (DDoS) attacks. To address these security issues and improve the robustness of the 5G network, in this paper, we introduce the Secure Blockchain-based Authentication and Key Agreement for 5G Networks (5GSBA). Using blockchain as a distributed database, our 5GSBA decentralizes authentication functions from a centralized server to all base stations. It can prevent single-point-of-failure and increase the difficulty of DDoS attacks. Moreover, to ensure the data in the blockchain cannot be used for device impersonation, our scheme employs the one-time secret hash function as the device secret key. Furthermore, our 5GSBA can protect device anonymity by mandating the encryption of device identities with Subscription Concealed Identifiers (SUCI). Linkability attacks are also prevented by deprecating the sequence number with Elliptic Curve Diffie-Hellman (ECDH). We use Burrows-Abadi-Needham (BAN) logic and the Scyther tool to formally verify our protocol. The security analysis shows that 5GSBA is superior to 5G-AKA in terms of perfect forward secrecy, device anonymity, and mutual Authentication and Key Agreement (AKA). Additionally, it effectively deters linkability attacks, replay attacks, and most importantly, DoS and DDoS attacks. Finally, the performance evaluation shows that 5GSBA is efficient for both UEs and base stations with reasonably low computational costs and energy consumption.

Security Architecture and Key Technologies for Super SIM-Based 5G End-Cloud System

Device Authentication for 5G Terminals Via Radio Frequency Fingerprints

A Cloud-ICT Convergence Service Architecture SDN/NFV Powered

Analysis of Key Technologies on Cloud Computing Security

Secure Cloud Architecture for 5G Core Network

Overview of 5G Security Technology.

5G security architecture and light weight security authentication

High Performance and Security in Cloud Computing

A dual-factor access authentication scheme for IoT terminal in 5G environments with network slice selection

A Novel Terminal Security Access Method Based on Edge Computing for IoT

A Multi-Group-Supporting Policy Hidden Fine-Grained Data Sharing Scheme in 5G-Enabled IoT With Edge Computing

SecureSIM

An SM9-Based Secondary Authentication Framework for 5G Technology

A Security Awareness and Protection System for 5G Smart Healthcare Based on Zero-Trust Architecture

Trust-Based Secure Multi-Cloud Collaboration Framework in Cloud-Fog-Assisted IoT

Secure Interactive Architecture of Cloud Driving System Based on 5G and Quantum Encryption

Automated Attack and Defense Framework for 5G Security on Physical and Logical Layers

A Secure Blockchain-Based Authentication and Key Agreement Scheme for 3GPP 5G Networks

Survey on Research and Standardization of 5G Security Technology

Enhancing the Trustworthiness of 6G Based on Trusted Multi-Cloud Infrastructure: A Practice of Cryptography Approach

SEMS-5G: A Secure and Efficient Multi-Server Authentication Scheme for 5G Networks