A Formal Analysis of 5G Authentication

Abstract

Mobile communication networks connect much of the world's population. The security of users' calls, SMSs, and mobile data depends on the guarantees provided by the Authenticated Key Exchange protocols used. For the next-generation network (5G), the 3GPP group has standardized the 5G AKA protocol for this purpose. We provide the first comprehensive formal model of a protocol from the AKA family: 5G AKA. We also extract precise requirements from the 3GPP standards defining 5G and we identify missing security goals. Using the security protocol verification tool Tamarin, we conduct a full, systematic, security evaluation of the model with respect to the 5G security goals. Our automated analysis identifies the minimal security assumptions required for each security goal and we find that some critical security goals are not met, except under additional assumptions missing from the standard. Finally, we make explicit recommendations with provably secure fixes for the attacks and weaknesses we found.

arXiv commentCategories (ACM class 2012): Security and privacy - Formal methods and theory of security -- Security requirements -- Formal security models -- Logic and verification; Network protocols - Protocol correctness -- Formal specifications; Security and privacy - Network security -- Mobile and wireless security - Security services -- Privacy-preserving protocols

Cited by in corpus (20)

• Security and privacy for 6G: A survey on prospective technologies and challenges
• 5Greplay: a 5G Network Traffic Fuzzer -- Application to Attack Injection
• AdaptOver: Adaptive Overshadowing Attacks in Cellular Networks
• Group Handover for Drone Base Stations
• A Beyond-5G Authentication and Key Agreement Protocol
• Multi-factor Physical Layer Security Authentication in Short Blocklength Communication
• You have been warned: Abusing 5G's Warning and Emergency Systems
• The current state of affairs in 5G security and the main remaining security challenges
• 5G System Security Analysis
• MPInspector: A Systematic and Automatic Approach for Evaluating the Security of IoT Messaging Protocols
• Demystifying Privacy in 5G Stand Alone Networks
• Strong Privacy-Preserving Universally Composable AKA Protocol with Seamless Handover Support for Mobile Virtual Network Operator
• Improving Automated Symbolic Analysis for E-voting Protocols: A Method Based on Sufficient Conditions for Ballot Secrecy
• DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice
• 5G Security and Privacy: A Research Roadmap
• Verifying Security Protocols using Dynamic Strategies
• Symbolic Abstractions for Quantum Protocol Verification
• User-Guided Verification of Security Protocols via Sound Animation
• A Formal Security Analysis of the pEp Authentication Protocol for Decentralized Key Distribution and End-to-End Encrypted Email
• Towards a Data Centric Approach for the Design and Verification of Cryptographic Protocols