Dynamic group based effective identity authentication and key agreement scheme in LTE-A networks

doi:10.11772/j.issn.1001-9081.2020091428

Abstract

Abstract: As one of the communication methods in future mobile communications, Machine Type Communication (MTC) is an important mobile communication method in Internet of Things (IoT). When many MTC devices want to access the network at the same time, each MTC device needs to perform independent identity authentication, which will cause network congestion. In order to solve this problem and improve the security of key agreement of MTC device, a dynamic group based effective identity authentication and key agreement scheme was proposed in Long Term Evolution-Advanced (LTE-A) networks. Based on symmetric bivariate polynomials, the proposed scheme was able to authenticate a large number of MTC devices at the same time and establish independent session keys between the devices and the network. In the proposed scheme, multiple group authentications were supported, and the updating of access policies was provided. Compared with the scheme based on linear polynomials, bandwidth analysis shows that the bandwidth consumptions of the proposed scheme during transmission are optimized:the transmission bandwidth between the MTC devices in the Home Network (HN) and the Service Network (SN) is reduced by 132 bit for each group authentication, the transmission bandwidth between the MTC devices within the HN is reduced by 18.2%. Security analysis and experimental results show that the proposed scheme is safe in actual identity authentication and session key establishment, and can effectively avoid signaling congestion in the network.

Key words: access control, identity authentication, key agreement, Machine Type Communication (MTC), Long Term Evolution-Advanced (LET-A) network, symmetric bivariate polynomial

摘要： 机器类通信（MTC）作为未来移动通信中的通信方法之一，在物联网（IoT）中是一种重要的移动通信方法。当大量MTC设备同时想要访问网络时，每个MTC设备需要执行独立的身份认证，而这会导致网络拥塞。为了解决MTC设备在认证时的网络拥塞问题并提高其密钥协商的安全性，在LTE-A网络中提出了一种基于动态组的有效身份认证和密钥协商方案。该方案基于对称二次多项式，可以同时认证大量的MTC设备，并使这些设备分别与网络建立独立的会话密钥。该方案支持多次组认证，并且提供访问策略的更新。带宽分析表明，相较于基于线性多项式的方案，所提方案传输时的带宽消耗得到了优化：在家庭网络（HN）中的MTC设备与服务网络（SN）之间每次组认证传输带宽减少了132 bit，在HN内MTC设备之间的认证传输带宽减少了18.2%。安全性分析和实验结果表明，该方案在实际的身份认证和会话密钥建立中是安全的，能够有效避免网络中的信令拥塞。

关键词: 访问控制, 身份认证, 密钥协商, 机器类通信, LTE-A网络, 对称二元多项式

CLC Number:

TP393.08

DU Xinyu, WANG Huaqun. Dynamic group based effective identity authentication and key agreement scheme in LTE-A networks[J]. Journal of Computer Applications, 2021, 41(6): 1715-1722.

杜心雨, 王化群. LTE-A网络中基于动态组的有效的身份认证和密钥协商方案[J]. 计算机应用, 2021, 41(6): 1715-1722.

References

[1] 王胡成, 徐晖, 程志密, 等. 5G网络技术研究现状和发展趋势[J]. 电信科学, 2015, 31(9):149-155.(WANG H C,XU H, CHENG Z M,et al. Current research and development trend of 5G network technologies[J]. Telecommunications Science,2015,31(9):149-155.)
[2] SAEDY M,MOJTAHED V. Machine-to-machine communications and security solution in cellular systems[J]. International Journal of Interdisciplinary Telecommunications and Networking,2011,3(2):66-75.
[3] FADLULLAH Z M,FOUDA M M,KATO N,et al. Toward intelligent machine-to-machine communications in smart grid[J]. IEEE Communications Magazine,2011,49(4):60-65.
[4] SALAM T,REHMAN W U,TAO X. Data aggregation in massive machine type communication:challenges and solutions[J]. IEEE Access,2019,7:41921-41946.
[5] 3rd Generation Partnership Project. Service requirements for Machine-Type Communication(MTC)(release 13):TS 22.368 V13.1. 0[S]. Sophia Antipolis:3GPP,2014.
[6] 3rd Generation Partnership Project. Study on security aspects of Machine-Type Communications (MTC) and other mobile data applications communications enhancements (release 11):TR 33.868 VO. 7.0[S]. Sophia Antipolis:3GPP,2012.
[7] JUNG K R, PARK A, LEE S. Machine-Type-Communication (MTC) device grouping algorithm for congestion avoidance of MTC oriented LTE network[C]//Proceedings of the 2010 International Conference on Security-Enriched Urban Computing and Smart Grid, CCIS 78. Berlin:Springer,2010:167-178.
[8] CAO J,MA M,LI H. A group-based authentication and key agreement for MTC in LTE networks[C]//Proceedings of the 2012 IEEE Global Communications Conference. Piscataway:IEEE, 2012:1017-1022.
[9] ADHIKARI M,PANDA P K,CHATTOPADHYAY S,et al. a novel group-based authentication and key agreement protocol for IoT enabled LTE/LTE-A network[C]//Proceedings of the 2020 International Conference on Wireless Communications Signal Processing and Networking. Piscataway:IEEE,2020:168-172.
[10] HARN L. Group authentication[J]. IEEE Transactions on Computers,2013,62(9):1893-1898.
[11] HARN L,HSU C F. A novel design of membership authentication and group key establishment protocol[J]. Security and Communication Networks,2017,2017:Article No. 8547876.
[12] LI J,WEN M,ZHANG T. Group-based authentication and key agreement with dynamic policy updating for MTC in LTE-A networks[J]. IEEE Internet of Things Journal,2016,3(3):408-417.
[13] SHAMIR A. How to share a secret[J]. Communications of the ACM,1979,22(11):612-613.
[14] KUMARESAN R, PATRA A, RANGAN C P. The round complexity of verifiable secret sharing:the statistical case[C]//Proceedings of the 2010 International Conference on the Theory and Application of Cryptology and Information Security,LNCS 6477. Berlin:Springer,2010:431-447.
[15] LIU D,NING P,LI R. Establishing pairwise keys in distributed sensor networks[J]. ACM Transactions on Information and System Security,2005,8(1):41-77.
[16] JIANG Q,ZEADALLY S,MA J,et al. Lightweight three-factor authentication and key agreement protocol for internet-integrated wireless sensor networks[J]. IEEE Access,2017,5:3376-3392.
[17] MUHAMMAD M, SAFDAR G A. Survey on existing authentication issues for cellular-assisted V2X communication[J]. Vehicular Communications,2018,12:50-65.
[18] 3rd Generation Partnership Project. 3G security;security threats and requirements(release 4):TS 21.133 V4.1. 0[S]. Sophia Antipolis:3GPP,2002.
[19] 3rd Generation Partnership Project. 3GPP System Architecture Evolution(SAE);security architecture(release 15):TS 33.401 V15.8. 0[S]. Sophia Antipolis:3GPP,2019.
[20] OUAISSA M, HOUMER M, OUAISSA M. An enhanced authentication protocol based group for vehicular communications over 5G networks[C]//Proceedings of the 2020 3rd International Conference on Advanced Communication Technologies and Networking. Piscataway:IEEE,2020:1-8.
[21] 王霏, 陈明. 完美前向安全的基于身份认证密钥协商方案[J]. 密码学报, 2020, 7(1):56-68.(WANG F,CHEN M. An identitybased authenticated key agreement scheme with perfect forward secrecy[J]. Journal of Cryptologic Research,2020,7(1):56-68.)
[22] BASSIL R,CHEHAB A,ELHAJJ I,et al. Signaling oriented denial of service on LTE networks[C]//Proceedings of the 2012 10th ACM International Symposium on Mobility Management and Wireless Access. New York:ACM,2012:153-158.
[23] ZHANG M,FANG Y. Security analysis and enhancements of 3GPP authentication and key agreement protocol[J]. IEEE Transactions on Wireless Communications,2005,4(2):734-742.
[24] LAI C,LI H,LU R,et al. SE-AKA:a secure and efficient group authentication and key agreement protocol for LTE networks[J]. Computer Networks,2013,57(17):3492-3510.
[25] YAO J,WANG T,CHEN M,et al. GBS-AKA:group-based secure authentication and key agreement for M2M in 4G network[C]//Proceedings of the 2016 International Conference on Cloud Computing Research and Innovations. Piscataway:IEEE,2016:42-48.