Authentication protocols for personal communication systems

ABSTRACT

Masquerading and eavesdropping are major threats to the security of wireless communications. To provide proper protection for the communication of the wireless link, contents of the communication should be enciphered and mutual authentication should be conducted between the subscriber and the serving network. Several protocols have been proposed by standards bodies and independent researchers in recent years to counteract these threats. However, the strength of these protocols is usually weakened in the roaming environment where the security breach of a visited network could lead to persistent damages to subscribers who visit. The subscriber's identity is not well protected in most protocols, and appropriate mechanisms solving disputes on roaming bills are not supported either. To solve these problems, new authentication protocols are proposed in this paper with new security features that have not been fully explored before.

REFERENCES

• 1: A. Aziz and W. Diffie, "Privacy and Authentication for Wireless Local Area Network", IEEE Personal Communications, First Quarter, 1994, pp. 25-31.
• 2: M. J. Beller, L. Cheng, Y. Yacobi, "Privacy and Authentication on a Portable Communication System", IEEE J. on Selected Areas in Communications, Vol. 11, No. 6, pp. 821-829, Aug. 1993.
• 3: Dan Brown, Security planning for personal communications, Proceedings of the 1st ACM conference on Computer and communications security, p.107-111, November 03-05, 1993, Fairfax, Virginia, United States [doi>10.1145/168588.168602]
• 4: Michael Burrows , Martin Abadi , Roger Needham, A logic of authentication, ACM Transactions on Computer Systems (TOCS), v.8 n.1, p.18-36, Feb. 1990 [doi>10.1145/77648.77649]
• 5: Ulf Carlsen, Optimal privacy and authentication on a portable communications system, ACM SIGOPS Operating Systems Review, v.28 n.3, p.16-23, July 1994 [doi>10.1145/182110.182112]
• 6: Cellular Digital Packet data (CDPD) System Specification, Release 1.0, July 19, 1993.
• 7: J.C. Cook, and R.L. Brewster, "Cryptographic Security Techniques for Digital Mobile Phones", IEEE International Conference on Selected Topics in Wireless Communications, pp. 425~428, 1992.
• 8: S. Eckelman, "Minimizing Fraud", Telephone Engineering and Management, Vol. 94, No, 18, pp. 62-64, Sept. 1990.
• 9: EIA/TIA-IS-54-B
• 10: ETSi, ETS 300 175-7, October 1992.
• 11: ETSI/TC Recommendation GSM 03.20, Security Related Network Function, version 3.3.2, Jan. 1991.
• 12: H.Y. Lin and L. Ham, "Authentications in Wireless Communications," Proc. of GLOBECOM '93, pp. 550-554, Nov. 29-Dec. 2, 1993.
• 13: R. Molva, D. Samfat, and G. Tsudik, "Authentication of Mobile Users", IEEE Network, pp. 26-34, March/April, 1994.
• 14: R. L. Rivest , A. Shamir , L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Communications of the ACM, v.21 n.2, p.120-126, Feb. 1978 [doi>10.1145/359340.359342]
• 15: M. Shand and J. Vuillemin. Fast implementations of RSA cryptography. In Proceedings of the 11 th IEEE Symposium on Computer Arithmetic, p.p. 252--259, IEEE Computer Society Press, Los Alamitos, CA, 1993.
• 16: Michael Spreitzer , Marvin Theimer, Scalable, secure, mobile computing with location information, Communications of the ACM, v.36 n.7, p.27, July 1993 [doi>10.1145/159544.159558]
• 17: Klaus Vedder, Security Aspects of Mobile Communications, Computer Security and Industrial Cryptography - State of the Art and Evolution, ESAT Course, p.193-210, May 21-23, 1991
• 18: M. Walker, "Security in Mobile and Cordless Telecommunications", Computer Systems and Software Engineering, Proceedings of CompEuro 1992, 1992, pp. 493-496.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)
  C.3 SPECIAL-PURPOSE AND APPLICATION-BASED SYSTEMS
      Subjects: Signal processing systems

General Terms:
Algorithms, Performance, Security