Formal Security Reassessment of the 5G-AKA-FS Protocol: Methodological Corrections and Augmented Verification Techniques

对 5G-AKA-FS 协议进行正式的安全重新评估:方法论修正和增强验证技术

阅读:2

Abstract

The 5G-AKA protocol, a foundational component for 5G network authentication, has been found vulnerable to various security threats, including linkability attacks that compromise user privacy. To address these vulnerabilities, we previously proposed the 5G-AKA-Forward Secrecy (5G-AKA-FS) protocol, which introduces an ephemeral key pair within the home network (HN) to support forward secrecy and prevent linkability attacks. However, a re-evaluation uncovered minor errors in the initial BAN-logic verification and highlighted the need for more rigorous security validation using formal methods. In this paper, we correct the BAN-logic verification and advance the formal security analysis by applying an extended SVO logic, which was adopted as it provides a higher level of verification compared to BAN logic, incorporating a new axiom specifically for forward secrecy. Additionally, we enhance the ProVerif analysis by employing a stronger adversarial model. These refinements in formal verification validate the security and reliability of 5G-AKA-FS, ensuring its resilience against advanced attacks. Our findings offer a comprehensive reference for future security protocol verification in 5G networks.

特别声明

1、本页面内容包含部分的内容是基于公开信息的合理引用;引用内容仅为补充信息,不代表本站立场。

2、若认为本页面引用内容涉及侵权,请及时与本站联系,我们将第一时间处理。

3、其他媒体/个人如需使用本页面原创内容,需注明“来源:[生知库]”并获得授权;使用引用内容的,需自行联系原作者获得许可。

4、投稿及合作请联系:info@biocloudy.com。