Table of Contents
Fetching ...

UniHand: Privacy-preserving Universal Handover for Small-Cell Networks in 5G-enabled Mobile Communication with KCI Resilience

Rabiah Alnashwan, Prosanta Gope, Benjamin Dowling

TL;DR

The paper tackles security and privacy challenges in dense 5G small-cell networks by introducing UniHand, a privacy-preserving universal handover and authentication scheme with $KCI$ resilience. It combines sanitisable signatures and dynamic accumulators to enable modifiable certificates and scalable revocation without reliance on a trusted escrow, while achieving mutual authentication, strong anonymity with unlinkability, perfect forward secrecy, and KEF. The authors provide formal security analyses in Bellare–Rogaway style games, with reductions to EUFCMA, DDH, and secure KDF/AuthEnc primitives, and compare computational and communication costs against state-of-the-art schemes, showing competitive performance and superior security properties. Practically, UniHand reduces AuC load during handovers and supports offline operation, making it attractive for high-density 5G deployments with roaming users and frequent HO. Overall, UniHand advances secure, privacy-preserving roaming in 5G SCNs by delivering comprehensive security guarantees and scalable revocation without infrastructural dependencies like blockchain.

Abstract

Introducing Small Cell Networks (SCN) has significantly improved wireless link quality, spectrum efficiency and network capacity, which has been viewed as one of the key technologies in the fifth-generation (5G) mobile network. However, this technology increases the frequency of handover (HO) procedures caused by the dense deployment of cells in the network with reduced cell coverage, bringing new security and privacy issues. The current 5G-AKA and HO protocols are vulnerable to security weaknesses, such as the lack of forward secrecy and identity confusion attacks. The high HO frequency of HOs might magnify these security and privacy concerns in the 5G mobile network. This work addresses these issues by proposing a secure privacy-preserving universal HO scheme ($\UniHand$) for SCNs in 5G mobile communication. $\UniHand$ can achieve mutual authentication, strong anonymity, perfect forward secrecy, key-escrow-free and key compromise impersonation (KCI) resilience. To the best of our knowledge, this is the \textit{first} scheme to achieve secure, privacy-preserving universal HO with \textit{KCI} resilience for roaming users in 5G environment. We demonstrate that our proposed scheme is resilient against all the essential security threats by performing a comprehensive formal security analysis and conducting relevant experiments to show the cost-effectiveness of the proposed scheme.

UniHand: Privacy-preserving Universal Handover for Small-Cell Networks in 5G-enabled Mobile Communication with KCI Resilience

TL;DR

The paper tackles security and privacy challenges in dense 5G small-cell networks by introducing UniHand, a privacy-preserving universal handover and authentication scheme with resilience. It combines sanitisable signatures and dynamic accumulators to enable modifiable certificates and scalable revocation without reliance on a trusted escrow, while achieving mutual authentication, strong anonymity with unlinkability, perfect forward secrecy, and KEF. The authors provide formal security analyses in Bellare–Rogaway style games, with reductions to EUFCMA, DDH, and secure KDF/AuthEnc primitives, and compare computational and communication costs against state-of-the-art schemes, showing competitive performance and superior security properties. Practically, UniHand reduces AuC load during handovers and supports offline operation, making it attractive for high-density 5G deployments with roaming users and frequent HO. Overall, UniHand advances secure, privacy-preserving roaming in 5G SCNs by delivering comprehensive security guarantees and scalable revocation without infrastructural dependencies like blockchain.

Abstract

Introducing Small Cell Networks (SCN) has significantly improved wireless link quality, spectrum efficiency and network capacity, which has been viewed as one of the key technologies in the fifth-generation (5G) mobile network. However, this technology increases the frequency of handover (HO) procedures caused by the dense deployment of cells in the network with reduced cell coverage, bringing new security and privacy issues. The current 5G-AKA and HO protocols are vulnerable to security weaknesses, such as the lack of forward secrecy and identity confusion attacks. The high HO frequency of HOs might magnify these security and privacy concerns in the 5G mobile network. This work addresses these issues by proposing a secure privacy-preserving universal HO scheme () for SCNs in 5G mobile communication. can achieve mutual authentication, strong anonymity, perfect forward secrecy, key-escrow-free and key compromise impersonation (KCI) resilience. To the best of our knowledge, this is the \textit{first} scheme to achieve secure, privacy-preserving universal HO with \textit{KCI} resilience for roaming users in 5G environment. We demonstrate that our proposed scheme is resilient against all the essential security threats by performing a comprehensive formal security analysis and conducting relevant experiments to show the cost-effectiveness of the proposed scheme.
Paper Structure (28 sections, 4 theorems, 5 figures, 3 tables)

This paper contains 28 sections, 4 theorems, 5 figures, 3 tables.

Key Result

Theorem 1

$\mathsf{MA}$-security of Initial Authentication. Initial Authentication depicted in Figure fig:init-auth-alt is $\mathsf{MA}$-secure under the cleanness predicate $\mathbf{clean}_{IA}$ in Definition ma-clean, Initial-auth. For any PPT algorithm $\mathcal{A}$, $\mathbf{Adv}^{\mathsf{MA},\mathbf{clea

Figures (5)

  • Figure 1: System Architecture
  • Figure 2: The Initial Authentication protocol of $\mathsf{UniHand}$ Scheme.
  • Figure 3: $\mathsf{UniHand}$'s Universal Handover phase.
  • Figure 4: Computation overhead at AuC during HO for conventional 5G and UniHand
  • Figure 5: Overall latency at AuC during the executions of UniHand protocols

Theorems & Definitions (15)

  • Definition 1: Matching Subset
  • Definition 2: Matching Sessions
  • Definition 3: Initial authentication cleanness
  • Definition 4: Universal Handover cleanness
  • Definition 5: Mutual Authentication Security
  • Definition 6: Key Indistinguishability
  • Definition 7: cleanness predicate
  • Definition 8: Cleanness predicate
  • Definition 9: Unlinkability
  • Theorem 1
  • ...and 5 more