GSM Security Using Identity-based Cryptography

TL;DR

This paper proposes a new GSM security protocol combining symmetric and asymmetric cryptography, enhancing security features like mutual authentication and user anonymity to better protect resource-constrained mobile devices.

Contribution

It introduces an identity-based cryptography protocol for GSM that improves security and privacy over traditional symmetric key methods.

Findings

Protocol provides authenticated key exchange

Ensures mutual authentication between entities

Enhances user anonymity in GSM communications

Abstract

Current security model in Global System for Mobile Communications (GSM) predominantly use symmetric key cryptography. The rapid advancement of Internet technology facilitates online trading, banking, downloading, emailing using resource-constrained handheld devices such as personal digital assistants and cell phones. However, these applications require more security than the present GSM supports. Consequently, a careful design of GSM security using both symmetric and asymmetric key cryptography would make GSM security more adaptable in security intensive applications. This paper presents a secure and efficient protocol for GSM security using identity based cryptography. The salient features of the proposed protocol are (i) authenticated key exchange; (ii) mutual authentication amongst communicating entities; and (iii) user anonymity. The security analysis of the protocol shows its strength against some known threats observed in conventional GSM security.