5G异构网络中基于群组的切换认证方案

doi:10.3778/j.issn.1002-8331.2106-0495

摘要/Abstract

摘要： 随着5G网络的发展，各类网络服务质量极大提升的同时网络环境也愈加复杂，从而带来了一系列安全挑战。切换认证可以解决用户在不同类型网络间的接入认证问题，但现存方案仍存在一些不足，还需要解决如全局切换认证、密钥协商、隐私保护、抵抗伪装攻击、抵抗中间人攻击、抵抗重放攻击以及群组用户切换效率等问题。针对这些问题，提出了一个5G异构网络中基于群组的切换认证方案。在所提出的方案中，注册域服务器在区块链上为每个用户存入一个通行证，任何实体都可以利用该通行证对用户进行认证，从而实现全局切换认证。对于群组用户，各用户分别设置可聚合的认证参数，验证者通过验证聚合签名实现对群组用户的批量验证。新方案不仅提升了群组用户切换时的效率，同时还满足上述安全性要求。基于形式化分析软件AVISPA的分析结果表明，所提出的方案是安全的。性能分析表明，所提出的方案执行批量验证时的效率比现存方案至少提升了89.8％。

关键词: 5G, 切换认证, 区块链, 批量验证, AVISPA工具

Abstract: With the development of the fifth-generation mobile communication technology（5G）, the quality of network services has been rapidly improving. However, the network environment is becoming more and more complex. Furthermore, it also brings more security challenges. The handover authentication can solve the problem of user access authentication between two different networks. But there are still some weaknesses in the existing schemes, such as universal handover authentication, key agreement, identity privacy, resistance to impersonation attacks, resistance to man-in-the-middle attacks, resistance to replay attacks and the group-based handover efficiency need to be improved. For these, a group-based handover authentication scheme for 5G heterogeneous networks is proposed. In the proposed scheme, the registered domain server stores a pass for each user on the blockchain. Using this data to authenticates the users can achieve the universal handover authentication. For group user access, each user sets aggregatable parameters separately. Then, the verifier performs batch verification by verifying the aggregate signature. By using the AVISPA tool to analyze the proposed protocol, it shows that the protocol is sufficiently secure. According to the performance analysis, the proposed scheme improves the efficiency by 89.8% compared with some existing schemes when performing batch verification.

Key words: 5G, handover authentication, blockchain, batch verification, AVISPA tool

张应辉, 李一鸣, 李怡飞, 郑东. 5G异构网络中基于群组的切换认证方案[J]. 计算机工程与应用, 2022, 58(18): 137-146.

ZHANG Yinghui, LI Yiming, LI Yifei, ZHENG Dong. Group-Based Handover Authentication Scheme for 5G Heterogeneous Networks[J]. Computer Engineering and Applications, 2022, 58(18): 137-146.

参考文献

[1] 3GPP.Study on the security aspects of the next generation system：TR 33.899 v 1.1.0[R].2017.
[2] 5G PPP.5G PPP phase 1 security landscape[R/OL].2017.https：//5G-PPP_White-Paper_Phase-1-Security-Landscape_
June-2017.pdf.
[3] NGMN.5G security recommendations（package #1，package #2：networking slicing，package #3：mobile edge computing）[R].White Paper，2016.
[4] Huawei Technologies Co.5G opening up new business opportunities[R].White Paper，2016.
[5] NOKIA.Security challenge and opportunities for 5G mobile networks[R].White Paper，2017.
[6] BARTOLETTI M，POMPIANU L.An analysis of bitcoin OP_RETURN metadata[C]//International Conference on Finacial Cryptography and Data Security，2017：218-230.
[7] TSCHORSCH F，SCHEUERMANN B.Bitcoin and beyond：a technical survey on decentralized digital currencies[J].IEEE Communications Surveys and Tutorials，2016（3）：2084-2123.
[8] DEHNEL-WILD M，CREMERS C.Security vulnerability in 5G-AKA draft[D/OL].University of Oxford.Department of Computer Science，2018.https：//www.cs.ox.ac.uk/5G-analysis/5G-AKA-draft-vulnerability.pdf.
[9] KOUTSOS A.The 5G-AKA authentication protocol privacy[C]//2019 IEEE European Symposium on Security and Privacy（EuroS&P），2019.
[10] ABDRABOU M A，ELBAYOUMY A，EA EL-WANIS.LTE authentication protocol（EPS-AKA） weaknesses solution[C]//2015 IEEE Seventh International Conference on Intelligent Computing and Information Systems（ICICIS），2016.
[11] ARUL R，RAJA G，BASHIR A K，et al.A console GRID leveraged authentication and key agreement mechanism for LTE/SAE[J].IEEE Transactions on Industrial Informatics，2018，14（6）：2677-2689.
[12] HE D，CHEN C，CHAN S，et al.Secure and efficient handover authentication based on bilinear pairing functions[J].IEEE Transactions on Wireless Communications，2012，11（1）：48-53.
[13] FU A，QIN N，WANG Y，et al.Nframe：a privacy-preserving with non-frameability handover authentication protocol based on [(t,n)] secret sharing for LTE/LTE-A networks[J].Wireless Networks，2017，23：2165-2176.
[14] CHAUM D，HEYST E V.Group signatures[C]//Advances in Cryptology-EUROCRYPT’91，Workshop on the Theory and Application of of Cryptographic Techniques，Brighton，UK，April 8-11，1991.Berlin，Heidelberg：Springer，1991.
[15] LAI C，LI H，LI X，et al.A novel group access authentication and key agreement protocol for machine-type communication[J].Transactions on Emerging Telecommunications Technologies，2015，26（3）：414-431.
[16] HE D，WANG D，XIE Q，et al.Anonymous handover authentication protocol for mobile wireless networks with conditional privacy preservation[J].Science China Information Sciences，2017，60（5）：1-17.
[17] MO J，LI K.A secure and efficient anonymous user authentication and key agreement scheme for global mobility networks based on bilinear pairing[C]//2020 IEEE 3rd International Conference on Electronic Information and Communication Technology（ICEICT），2020.
[18] FU A，LAN S，BO H，et al.A novel group-based handover authentication scheme with privacy preservation for mobile WiMAX networks[J].IEEE Communications Letters，2012，16（11）：1744-1747.
[19] HADDAD Z，MAHMOUD M.Secure and effificient uniform handover scheme for LTE-A networks[C]//IEEE Wireless Communications and Networking Conference，2016：1-6.
[20] SHARMA V，YOU I，LEU F Y，et al.Secure and efficient protocol for fast handover in 5G mobile xhaul networks[J].Journal of Network & Computer Applications，2018，102：38-57.
[21] ALMADHOUN R，KADADHA M，ALHEMEIRI M，et al.A user authentication scheme of IoT devices using blockchain-enabled fog nodes[C]//2018 IEEE/ACS 15th International Conference on Computer Systems and Applications（AICCSA），2018.
[22] LIN Z，HONG L，SUN L，et al.Poster：towards fully distributed user authentication with blockchain[C]//2017 IEEE Symposium on Privacy-Aware Computing（PAC），2017.
[23] WANG W，NING H，XIN L.BlockCAM：a blockchain-based cross-domain authentication model[C]//2018 IEEE Third International Conference on Data Science in Cyberspace（DSC），2018.
[24] LI D，WEI P，DENG W，et al.A blockchain-based authentication and security mechanism for IoT[C]//2018 27th International Conference on Computer Communication and Networks（ICCCN），2018.
[25] CAI T，YANG Z，CHEN W，et al.A blockchain-assisted trust access authentication system for solid[J].IEEE Access，2020（99）：1.
[26] CHEN Z，CHEN S，XU H，et al.A security authentication scheme of 5G ultra-dense network based on block chain[J].IEEE Access，2018，6：55372-55379.
[27] YAO Y，CHANG X，MISC J，et al.BLA：blockchain-assisted lightweight anonymous authentication for distributed vehicular fog services[J].IEEE Internet of Things Journal，2019.
[28] ZHANG Y，DENG R H，BERTINO E，et al.Robust and universal seamless handover authentication in 5G hetnets[J].IEEE Transactions on Dependable and Secure Computing，2019（99）：1.
[29] WANG W，HUANG H，XUE L，et al.Blockchain-assisted handover authentication for intelligent telehealth in multi-server edge computing environment[J].Journal of Systems Architecture，2021，115：102024.
[30] WANG Y，ZHONG H，XU Y，et al.Efficient extensible conditional privacy-preserving authentication scheme supporting batch verification for VANETs[J].Security and Communication Networks，2016.
[31] TZENG S F，HORNG S J，LI T，et al.Enhancing security and privacy for identity-based batch verification scheme in VANETs[J].IEEE Transactions on Vehicular Technology，2017，66（4）：3235-3248.
[32] THUMBUR G，REDDY P V，RAO G S，et al.Efficient and secure certificateless aggregate signature-based authentication scheme for vehicular Ad-Hoc networks[J].IEEE Internet of Things Journal，2021，8（3）：1908-1920.
[33] JOHNSON D，MENEZES A，VANSTONE S.The elliptic curve digital signature algorithm（ECDSA）[J].International Journal of Information Security，2001，1（1）：36-63.
[34] TSIROPOULOS G I，YADAV A，MING Z，et al.Cooperation in 5G hetnets：advanced spectrum access and D2D assisted communications[J].IEEE Wireless Communications，2017，24（5）：110-117.
[35] ARMANDO A，BASIN D，BOICHUT Y，et al.The AVISPA tool for the automated validation of internet security protocols and applications[C]//International Conference on Computer Aided Verification，2005.
[36] OHEIMB D V.The high-level protocol specification language HLPSL developed in the EU project AVISPA[C]//Proceedins of Appsem Workshop，2005.