LTE Security

Based mobile networks supporting a rapidly growing number of computationally powerful devices  such as  smartphones and tablets is changing the mobile security landscape and will fundamentally 
change the way we perceive and deal with mobile security. Mobile networks are becoming more

pervasive, more widely used, and more deeply connected to other network.

 

Devices and the core network are most heavily targeted parts of the mobile network.



Basicaly we can separate the security as for subscriber authentication and attacking to mobile to core devices.

Authentication procedures use very complex algorithms, personally it is not a big threat for mobile operators. By the way, we are starting with authentication very briefly

Authentication
   
Operators like Verizon in USA are using 3GPP  SNOW 3G Specification for Confidentiality and Integrity Algorithms UEA2 & UIA2, 128-EEA1 & 128-EIA1.
  
SIM means Subscriber Identity Module (SIM). All wireless mobile technologies have different type of SIM cards. For example,USIM is using in 3G Sim cards with Milenage Authentication. Before 3G, we were using A3 and A8 authentication algorithms. 

A3/A8 had some weakness, that enable attackers to break the encryption key in less than one second, breaching customer’s identity and allowing billing fraud and  putting telecom operators in a serious legal situation.

The older SIM cards are not compatible and may not be used in LTE.

Security the keys used are128 bits in LTE.

  
Important: Mobile Phone has to support SNOW 3G algorithm.

 Securing LTE Backhaul

 

Most attacks will be directed at the mobile core network, external sites, and subscriber data and devices, but they can also be more limited in scope and target a single eNB or a group of nearby eNBs (eNB identity spoofing and impersonation).Tampering, traffic hijacking, eavesdropping, DoS,compromised control data,unauthorized access,and loss of accountability of the control plane are the biggest threats to the core network.

To secure traffic,as an my personal opinions based on my researches an IPsec tunnel has to be established between the eNB,and the MME, SGW and O&M in the core network over the user,control and management plane, and terminated at a SEG (security gateways) that sits at the border of the trusted area.

REFERENCES
http://www.mcit.gov.sa/nr/rdonlyres/d762830c-fbe7-4b36-aafc-780cfbafc92c/0/paper36.pdf 
http://www.3gpp.org/ftp/Information/presentations/presentations_2011/2011_05_Bangalore/DZBangalore290511.pdf
http://support.verizonwireless.com/faqs/VZAccess/4g_sim_card.html
http://security.stackexchange.com/questions/21395/how-is-4g-lte-encrypted
http://www.etsi.org/index.php/services/security-algorithms/3gpp-algorithms
http://www.authentec.com/Products/EmbeddedSecurity/SemiconductorIP/3G4GLTECiphers.aspx
http://itmf.uga.edu/minutes/2011-03-03/verizon_presentation.pdf
http://www.embedded.com/electronics-products/electronic-product-reviews/ip-eda-products/4212398/Elliptic-launches-security-processing-engine-for-4G-wireless-markets
http://www.radio-electronics.com/info/cellulartelecomms/lte-long-term-evolution/lte-security-authentication.php
http://www.sciencedirect.com/science/article/pii/S0140366410003105
http://www.slideshare.net/aliirfan04/lte-security-overview
http://www.f5.com/pdf/white-papers/wireless-security-lte-networks-wp.pdf
http://internetandwebsecurity.blogspot.com/2010/10/radisys-introduces-carrier-grade-lte.html
http://www.tellabs.com/resources/papers/tlab_ipsec_wp.pdf

Read More

What are the benefits of LTE?

Frankly, i not volunteer to dig into benefits of 4G for me. Why? maybe i do not like the new things in tech world. Right ?  Of course not. I really want bigger internet speed for my mobile phone to be able to watch HD movies from streamline. Based on Motorola reports "75% of users watch online video*
YouTube = 27% of internet traffic". I bet that people's data traffic will increase meteorically in near future.

But what about budget? I recently purchased new smart phone and it is not supporting 4G.  By the way, we  met with 3G few years ago and I think 4G will not reach here within at least several years.

My phone is not following smart phones listed below unfortunately which are Iphone5,  Samsung Galaxy S3 LTE , Samsung Galaxy Note 2 LTE , Nokia Lumia 820 and 920 , Huawei Ascend P1 LTE and so on. ( I saw pictures about Samsung Galaxy S4 and Samsung Galaxy note 3 in news this week)

On the other hand, if we forget about the bugdet and money things LTE has a following benefits for end-users like me :)

1) It can be an alternative for your wireline DSL internet at your home.
If your are not using Fiber-ADSL at your home. This is true. On the other hand, no body is expecting that the more faster Wireless data download speed than Wireline of course.

2) Better gaming, video chat... experience. 
We are expecting better success that 3G about this case thanks to LTE's lower mobile wireless latency. Sometimes we are facing bad situations even when we were using Wi-Fi.

3) Better Security. LTE uses Symmetric Key Cryptography
UMTS or WCDMA 3G is using Milenage paramethers for authentication. And now, we see much more better security with introducing Symmetric Key Cryptography.

4) Very nice pictures with advanced resolution.
Since LTE will be able to support higher data traffic, this will introduce us new mobile phones with high and/or ultra-high quality pictures.

5) Competition
I hope this theory is correct here. We are just hoping this result. It is still expensive in GSM operators and you should select tariffs with quota if you do not want to pay much in Turkey. (I hope USA has better prices :) )

We saw the full side of the water glass. Of course LTE will bring extra cost for end-users and operators. From the operator perspective , at least they have to add extra antennas. And also one interesting theory is signalling storm problem. I did not check it thoroughly but seems interesting.If you want to get more info about  you can visit the web page www.seven.com.

Thanks and see you in next blog

REFERANCES:
http://www.phones4u.co.uk/4g/
http://www.digitaltrends.com/mobile/smartphone-buyers-dont-care-about-4g-yet-study-shows/ 
http://www.netmanias.com/bbs/view.php?id=cshareforum_mobile&no=47
http://www.seven.com/press_releases/2012/wireless_network_worst_case_scenario.php
http://www.sonlte.com/2012/03/12/my-top-5-end-user-benefits-with-lte/
http://www.fiercetelecom.com
www.motorola.com

Read More