Mitigating Security Vulnerabilities in 6G Networks: A Comprehensive Analysis of the DMRN Protocol Using SVO Logic and ProVerif
Source abstract
Abstract
The rapid evolution of mobile and optical communication technologies is driving the transition from 5G to 6G networks. This transition inevitably brings about changes in authentication scenarios, as new security demands emerge that go beyond the capabilities of existing frameworks. Therefore, it is necessary to address these evolving requirements and the associated key challenges: ensuring Perfect Forward Secrecy (PFS) to protect communications even if long-term keys are compromised and integrating Post-Quantum Cryptography (PQC) techniques to defend against the threats posed by quantum computing. These are essential for both radio and optical communications, which are foundational elements of future 6G infrastructures. The DMRN Protocol, introduced in 2022, represents a major advancement by offering both PFS and PQC while maintaining compatibility with existing 3rd Generation Partnership Project (3GPP) standards. Given the looming quantum-era challenges, it is imperative to analyze the protocol’s security architecture through formal verification. Accordingly, we formally analyze the DMRN Protocol using SVO logic and ProVerif to assess its effectiveness in mitigating attack vectors, such as malicious or compromised serving networks (SNs) and home network (HN) masquerading. Our research found that the DMRN Protocol has vulnerabilities in key areas such as mutual authentication and key exchange. In light of these findings, our study provides critical insights into the design of secure and quantum-safe authentication protocols for the transition to 6G networks. Furthermore, by identifying the vulnerabilities in and discussing countermeasures to address the DMRN Protocol, this study lays the groundwork for the future standardization of secure 6G Authentication and Key Agreement protocols.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Advanced Authentication Protocols Security · User Authentication and Security Systems · Cryptographic Implementations and Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Financial Information Security, Kookmin University, Seoul 02707, Republic of Korea
Department of Computer Science and Engineering, Gyeongsang National University, Jinju 52828, Republic of Korea
Department of Electrical Engineering, Udayana University, Bali 80361, Indonesia
Funding
Institute of Information & Communications Technology Planning & Evaluation (IITP)
References (27)
Show source-provided references
1. (2024, August 16). Security Architecture and Procedure for 5G Systems. Technical Report TS 33.501, 3rd Generation Partnership Project. Available online: https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=3169.
2. Arkko, J., Lehtovirta, V., Torvinen, V., and Eronen, P. (2024, August 16). Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA’). Requeset for Comments 9048, Internet Engineering Task Force. Available online: https://datatracker.ietf.org/doc/rfc9048/.
3. Arkko, J., Norrman, K., and Mattsson, J.P. (2024, August 16). Forward Secrecy for the Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA’ FS). Internet-Draft draft-ietf-emu-aka-pfs-12, Internet Engineering Task Force. Available online: https://datatracker.ietf.org/doc/draft-ietf-emu-aka-pfs/12/.
4. Banerjee, A., and Reddy, K.T. (2024, August 16). Enhancing Security in EAP-AKA’ with Hybrid Post-Quantum Cryptography. Internet-Draft draft-ar-emu-pqc-eapaka-02, Internet Engineering Task Force. Available online: https://datatracker.ietf.org/doc/draft-ar-emu-pqc-eapaka/.
5. Damir, M.T., Meskanen, T., Ramezanian, S., and Niemi, V. (2022). A Beyond-5G Authentication and Key Agreement Protocol. arXiv.10.1007/978-3-031-23020-2_14 ↗
6. The Road Towards 6G: A Comprehensive Survey10.1109/OJCOMS.2021.3057679 ↗
7. Jeon, H.B., Kim, S.M., Moon, H.J., Kwon, D.H., Lee, J.W., Chung, J.M., Han, S.K., Chae, C.B., and Alouini, M.S. (2022). Free-Space Optical Communications for 6G Wireless Networks: Challenges, Opportunities, and Prototype Validation. arXiv.10.1109/MCOM.001.2200220 ↗
8. Fayad, A., Cinkler, T., and Rak, J. (IEEE Commun. Surv. Tutor., 2024). Toward 6G Optical Fronthaul: A Survey on Enabling Technologies and Research Perspectives, IEEE Commun. Surv. Tutor., early access.10.1109/COMST.2024.3408090 ↗
9. Xiao, Y., and Gao, S. (2022). Formal Verification and Analysis of 5G AKA Protocol Using Mixed Strand Space Model. Electronics, 11.10.3390/electronics11091333 ↗
10. Hussain, S., Echeverria, M., Karim, I., Chowdhury, O., and Bertino, E. (2019, January 11–15). 5GReasoner: A Property-Directed Security and Privacy Analysis Framework for 5G Cellular Network Protocol. Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Securit, London, UK.10.1145/3319535.3354263 ↗
11. Parne, B.L., Gupta, S., Gandhi, K., and Meena, S. (2020, January 14–17). PPSE: Privacy Preservation and Security Efficient AKA Protocol for 5G Communication Networks. Proceedings of the 2020 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS), New Delhi, India.10.1109/ANTS50601.2020.9342780 ↗
12. Wang, Y., Zhang, Z., and Xie, Y. (2021, January 11–13). Privacy-Preserving and Standard-Compatible AKA Protocol for 5G. Proceedings of the 30th USENIX Security Symposium (USENIX Security 21), Virtual.
13. Køien, G.M. (2024, August 19). The SUCI-AKA Authentication Protocol for 5G Systems. In Proceedings of the Norsk IKT-Konferanse for Forskning og Utdanning. Available online: https://www.ntnu.no/ojs/index.php/nikt/article/view/5550/5022.
14. Xiao, Y., and Wu, Y. (2022). 5G-ipaka: An improved primary authentication and key agreement protocol for 5G networks. Information, 13.10.3390/info13030125 ↗
15. Xiao, Y., and Gao, S. (2022). 5GAKA-LCCO: A secure 5G authentication and key agreement protocol with less communication and computation overhead. Information, 13.10.3390/info13050257 ↗
16. You, I., Kim, G., Shin, S., Kwon, H., Kim, J., and Baek, J. (2024). 5G-AKA-FS: A 5G Authentication and Key Agreement Protocol for Forward Secrecy. Sensors, 24.10.3390/s24010159 ↗
17. Vuppala, R.C., Kumar, D., Je, D., Sharma, N., Nigam, A., and Kim, D. (2023, January 4–8). Post-Quantum Secure Hybrid Methods for UE Primary Authentication in 6G with Forward Secrecy. Proceedings of the GLOBECOM 2023—2023 IEEE Global Communications Conference, Kuala Lumpur, Malaysia.10.1109/GLOBECOM54140.2023.10437815 ↗
18. Deirdre, d.P.S., and Bas, W. (2024, August 21). X-Wing: General-Purpose Hybrid Post-Quantum KEM. Internet-Draft draft-connolly-cfrg-xwing-kem-04, Internet Engineering Task Force. Available online: https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/.
19. (2024, September 22). OpenAI. ChatGPT (Version GPT-4). Available online: https://openai.com/chatgpt.
20. On the security of public key protocols10.1109/TIT.1983.1056650 ↗
21. ISO (2023). ISO/IEC 29128-1:2023Information Security, Cybersecurity and Privacy Protection—Verification of Cryptographic Protocols—Part 1: Framework. Available online: https://standards.iteh.ai/catalog/standards/iso/5a8c7c4d-434f-4816-a4e0-b33660dd311c/iso-iec-29128-1-2023.
22. Syverson, P.F., and van Oorschot, P.C. (1994, January 16–18). On unifying some cryptographic protocol logics. Proceedings of the 1994 IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA, USA.10.21236/ADA465512 ↗
23. A Logic of Authentication
24. Gong, L., Needham, R.M., and Yahalom, R.M. (1990, January 7–9). Reasoning about Belief in Cryptographic Protocols. Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA, USA.10.1109/RISP.1990.63854 ↗
25. A Logic of Authentication10.1145/77648.77649 ↗
26. Formal Verification of Authentication Protocols
27. Blanchet, B. (2014). Automatic Verification of Security Protocols in the Symbolic Model: The Verifier ProVerif. Foundations of Security Analysis and Design VII, Springer.10.1007/978-3-319-10082-1_3 ↗