The 3rd Generation Partnership Project(3GPP)defined a new architecture,called Home eNode B(HeNB).The 3GPP has also presented a protocol for communications between HeNB and core networks for mutual authentication.To re...The 3rd Generation Partnership Project(3GPP)defined a new architecture,called Home eNode B(HeNB).The 3GPP has also presented a protocol for communications between HeNB and core networks for mutual authentication.To reduce the authentication costs associated with communication,computation and energy,this paper proposes a simple and low-cost re-authentication protocol that does not compromise the provided security services.The proposed protocol uses as the re-authentication parameter a Master Session Key(MSK)that has already been computed in the initial authentication,and does not require the full initial authentication to be repeated.Moreover,the proposed protocol does not modify the 3GPP infrastructure,and is easily applied to the HeNB system.Finally,the security of the proposed protocol is verified by Automated Validation of Internet Security Protocols and Applications(AVISPA)and Burrows-Abadi-Needham(BAN)Logic;detailed evaluations of performance are also given.The analysis results illustrate that the proposed protocol can achieve at least 50%cost reduction in communication and 58%cost reduction in energy.The computational cost is also reduced by half compared with the initial authentication.展开更多
There are two types of base stations in the long term evolution （LTE） wireless networks, home eNodeB （HeNB） and eNodeB （eNB）. It is critical to achieve seamless handovers between the HeNB and the eNB in order to...There are two types of base stations in the long term evolution （LTE） wireless networks, home eNodeB （HeNB） and eNodeB （eNB）. It is critical to achieve seamless handovers between the HeNB and the eNB in order to support mobility in the LTE networks. A handover from an eNB/HeNB to a new eNB/HeNB, suggested by the third generation partnership project （3GPP）, requires distinct procedures for different mobility scenarios, which will increase the system complexity. Besides, the existing handover schemes for other wireless networks are not suitable for the mobility scenarios in the LTE networks due to their inherent vulnerabilities. In this paper, we propose a fast and secure handover authentication scheme, which is to fit in with most of the mobility scenarios in the LTE networks. Compared with other handover schemes, our scheme cannot only achieve a simple authentication process with desirable efficiency, but also provide several security features including perfect forward/backward secrecy （PFS/PBS）, which have never been achieved by the previous works. The experiment results and formal verification by using the automated validation of internet security protocols and applications （AVISPA） tool show that the proposed scheme is efficient and secure against various malicious attacks.展开更多
基金supported by the China Scholarship Councilthe National Natural Science Foundation of China under Grants No. 60772136, No. 61102056+1 种基金the Fundamental Research Funds for the Central Universities under Grant No. JY10000901025the project supported by Natural Science Basic Research Plan in Shaanxi Province of China under Grant No. 2011JQ8042
文摘The 3rd Generation Partnership Project(3GPP)defined a new architecture,called Home eNode B(HeNB).The 3GPP has also presented a protocol for communications between HeNB and core networks for mutual authentication.To reduce the authentication costs associated with communication,computation and energy,this paper proposes a simple and low-cost re-authentication protocol that does not compromise the provided security services.The proposed protocol uses as the re-authentication parameter a Master Session Key(MSK)that has already been computed in the initial authentication,and does not require the full initial authentication to be repeated.Moreover,the proposed protocol does not modify the 3GPP infrastructure,and is easily applied to the HeNB system.Finally,the security of the proposed protocol is verified by Automated Validation of Internet Security Protocols and Applications(AVISPA)and Burrows-Abadi-Needham(BAN)Logic;detailed evaluations of performance are also given.The analysis results illustrate that the proposed protocol can achieve at least 50%cost reduction in communication and 58%cost reduction in energy.The computational cost is also reduced by half compared with the initial authentication.
基金supported by the National Basic Research Program of China(2012CB316100)the National Natural Science Foundation of China(61102056)+2 种基金the Fundamental Research Funds for the Central Universities(K50511010001)the National 111 Project(B08038)the Program for Changjiang Scholars and Innovative Research Team in University(PCSIRT1078)
文摘There are two types of base stations in the long term evolution （LTE） wireless networks, home eNodeB （HeNB） and eNodeB （eNB）. It is critical to achieve seamless handovers between the HeNB and the eNB in order to support mobility in the LTE networks. A handover from an eNB/HeNB to a new eNB/HeNB, suggested by the third generation partnership project （3GPP）, requires distinct procedures for different mobility scenarios, which will increase the system complexity. Besides, the existing handover schemes for other wireless networks are not suitable for the mobility scenarios in the LTE networks due to their inherent vulnerabilities. In this paper, we propose a fast and secure handover authentication scheme, which is to fit in with most of the mobility scenarios in the LTE networks. Compared with other handover schemes, our scheme cannot only achieve a simple authentication process with desirable efficiency, but also provide several security features including perfect forward/backward secrecy （PFS/PBS）, which have never been achieved by the previous works. The experiment results and formal verification by using the automated validation of internet security protocols and applications （AVISPA） tool show that the proposed scheme is efficient and secure against various malicious attacks.
