Base Station Certificate and Multi-Factor Authentication for Cellular Radio Control Communication Security

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Purification, Sourav, Wuthier, Simeon, Kim, Jinoh, Kim, Ikkyun, Chang, Sang-Yoon
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866913774655504384
author Purification, Sourav
Wuthier, Simeon
Kim, Jinoh
Kim, Ikkyun
Chang, Sang-Yoon
author_facet Purification, Sourav
Wuthier, Simeon
Kim, Jinoh
Kim, Ikkyun
Chang, Sang-Yoon
contents Current cellular networking remains vulnerable to malicious fake base stations due to the lack of base station authentication mechanism or even a key to enable authentication. We design and build a base station certificate (certifying the base station's public key and location) and a multi-factor authentication (making use of the certificate and the information transmitted in the online radio control communications) to secure the authenticity and message integrity of the base station control communications. We advance beyond the state-of-the-art research by introducing greater authentication factors (and analyzing their individual security properties and benefits), and by using blockchain to deliver the base station digital certificate offline (enabling greater key length or security strength and computational or networking efficiency). We design the certificate construction, delivery, and the multi-factor authentication use on the user equipment. The user verification involves multiple factors verified through the ledger database, the location sensing (GPS in our implementation), and the cryptographic signature verification of the cellular control communication (SIB1 broadcasting). We analyze our scheme's security, performance, and the fit to the existing standardized networking protocols. Our work involves the implementation of building on X.509 certificate (adapted), smart contract-based blockchain, 5G-standardized RRC control communications, and software-defined radios. Our analyses show that our scheme effectively defends against more security threats and can enable stronger security, i.e., ECDSA with greater key lengths. Furthermore, our scheme enables computing and energy to be more than three times efficient than the previous research on the mobile user equipment.
format Preprint
id arxiv_https___arxiv_org_abs_2504_02133
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Base Station Certificate and Multi-Factor Authentication for Cellular Radio Control Communication Security
Purification, Sourav
Wuthier, Simeon
Kim, Jinoh
Kim, Ikkyun
Chang, Sang-Yoon
Cryptography and Security
Current cellular networking remains vulnerable to malicious fake base stations due to the lack of base station authentication mechanism or even a key to enable authentication. We design and build a base station certificate (certifying the base station's public key and location) and a multi-factor authentication (making use of the certificate and the information transmitted in the online radio control communications) to secure the authenticity and message integrity of the base station control communications. We advance beyond the state-of-the-art research by introducing greater authentication factors (and analyzing their individual security properties and benefits), and by using blockchain to deliver the base station digital certificate offline (enabling greater key length or security strength and computational or networking efficiency). We design the certificate construction, delivery, and the multi-factor authentication use on the user equipment. The user verification involves multiple factors verified through the ledger database, the location sensing (GPS in our implementation), and the cryptographic signature verification of the cellular control communication (SIB1 broadcasting). We analyze our scheme's security, performance, and the fit to the existing standardized networking protocols. Our work involves the implementation of building on X.509 certificate (adapted), smart contract-based blockchain, 5G-standardized RRC control communications, and software-defined radios. Our analyses show that our scheme effectively defends against more security threats and can enable stronger security, i.e., ECDSA with greater key lengths. Furthermore, our scheme enables computing and energy to be more than three times efficient than the previous research on the mobile user equipment.
title Base Station Certificate and Multi-Factor Authentication for Cellular Radio Control Communication Security
topic Cryptography and Security
url https://arxiv.org/abs/2504.02133