{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T00:01:26Z","timestamp":1784246486135,"version":"3.55.0"},"reference-count":29,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2023,12,27]],"date-time":"2023-12-27T00:00:00Z","timestamp":1703635200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100014188","name":"Institute of Information &amp; Communications Technology Planning &amp; Evaluation (IITP)","doi-asserted-by":"publisher","award":["2022-00207416"],"award-info":[{"award-number":["2022-00207416"]}],"id":[{"id":"10.13039\/501100014188","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>5G acts as a highway enabling innovative digital transformation and the Fourth Industrial Revolution in our lives. It is undeniable that the success of such a paradigm shift hinges on robust security measures. Foremost among these is primary authentication, the initial step in securing access to 5G network environments. For the 5G primary authentication, two protocols, namely 5G Authentication and Key Agreement (5G-AKA) and Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA\u2032), were proposed and standardized, where the former is for 3GPP devices, and the latter is for non-3GPP devices. Recent scrutiny has unveiled vulnerabilities in the 5G-AKA protocol, exposing it to security breaches, including linkability attacks. Moreover, mobile communication technologies are dramatically evolving while 3GPP has standardized Authentication and Key Management for Applications (AKMA) to reuse the credentials, generated during primary authentication, for 5G network applications. That makes it so significant for 5G-AKA to be improved to support forward secrecy as well as address security attacks. In response, several protocols have been proposed to mitigate these security challenges. In particular, they tried to strengthen security by reusing secret keys negotiated through the Elliptic Curve Integrated Encryption Scheme (ECIES) and countering linkability attacks. However, they still have encountered limitations in completing forward secrecy. Motivated by this, we propose an augmentation to 5G-AKA to achieve forward security and thwart linkability attacks (called 5G-AKA-FS). In 5G-AKA-FS, the home network (HN), instead of using its static ECIES key pair, generates a new ephemeral key pair to facilitate robust session key negotiation, truly realizing forward security. In order to thoroughly and precisely prove that 5G-AKA-FS is secure, formal security verification is performed by applying both BAN Logic and ProVerif. As a result, it is demonstrated that 5G-AKA-FS is valid. Besides, our performance comparison highlights that the communication and computation overheads are intrinsic to 5G-AKA-FS. This comprehensive analysis showcases how the protocol effectively balances between security and efficiency.<\/jats:p>","DOI":"10.3390\/s24010159","type":"journal-article","created":{"date-parts":[[2023,12,27]],"date-time":"2023-12-27T10:23:54Z","timestamp":1703672634000},"page":"159","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["5G-AKA-FS: A 5G Authentication and Key Agreement Protocol for Forward Secrecy"],"prefix":"10.3390","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0604-3445","authenticated-orcid":false,"given":"Ilsun","family":"You","sequence":"first","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul-si 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9420-7501","authenticated-orcid":false,"given":"Gunwoo","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul-si 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2827-7402","authenticated-orcid":false,"given":"Seonghan","family":"Shin","sequence":"additional","affiliation":[{"name":"Cyber Physical Security Research Center, National Institute of Advanced Industrial Science and Technology (AIST), Tokyo 135-0064, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-7883-3391","authenticated-orcid":false,"given":"Hoseok","family":"Kwon","sequence":"additional","affiliation":[{"name":"Department of Financial Information Security, Kookmin University, Seoul-si 02707, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5755-108X","authenticated-orcid":false,"given":"Jongkil","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Cyber Security, Ewha Womans University, Seoul-si 03760, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2613-2127","authenticated-orcid":false,"given":"Joonsang","family":"Baek","sequence":"additional","affiliation":[{"name":"School of Computing and Information Technology, University of Wollongong, Northfields Avenue, Wollongong, NSW 2522, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,12,27]]},"reference":[{"key":"ref_1","unstructured":"(2023, December 10). European 5G Performance Trails its International Peers. Available online: https:\/\/www.gsma.com\/membership\/resources\/european-5g-performance-trails-its-international-peers\/."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"42828","DOI":"10.1109\/ACCESS.2020.2977406","article-title":"5G is real: Evaluating the compliance of the 3GPP 5G new radio system with the ITU IMT-2020 requirements","volume":"8","author":"Henry","year":"2020","journal-title":"IEEE Access"},{"key":"ref_3","unstructured":"3GPP (2023, December 10). Security Architecture and Procedures for 5G System TS33.501 v18.2.0. Technical Report, The 3rd Generation Partnership Project. Available online: https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=3169."},{"key":"ref_4","unstructured":"3GPP (2023, December 10). 3GPP System Architecture Evolution (SAE)\u2014Security Architecture (Release 17) TS33.401 V17.4.0. Technical Report, The 3rd Generation Partnership Project. Available online: https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=2296."},{"key":"ref_5","unstructured":"Arkko, J., Lehtovirta, V., and Eronen, P. (2023, December 10). Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA\u2032). Technical Report. Available online: https:\/\/www.rfc-editor.org\/info\/rfc5448."},{"key":"ref_6","unstructured":"Arkko, J., and Haverinen, H. (2023, December 10). Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA). Technical Report. Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc4187."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"24956","DOI":"10.1109\/ACCESS.2019.2899254","article-title":"Security and protocol exploit analysis of the 5G specifications","volume":"7","author":"Jover","year":"2019","journal-title":"IEEE Access"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Kunz, A., and Zhang, X. (2018, January 29\u201331). New 3GPP security features in 5G phase 1. Proceedings of the 4st IEEE Conference on Standards for Communications and Networkin (CSCN \u201918), Paris, France.","DOI":"10.1109\/CSCN.2018.8581763"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"196","DOI":"10.1109\/COMST.2019.2933899","article-title":"A survey on security and privacy of 5G technologies: Potential solutions, recent advancements, and future directions","volume":"22","author":"Khan","year":"2019","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Liu, F., Peng, J., and Zuo, M. (2018, January 1\u20133). Toward a secure access to 5G network. Proceedings of the 17st IEEE Conference on Trust, Security and Privacy in Computing and Communications (TrustCom \u201918)\/12th IEEE Conference On Big Data Science And Engineering (TrustCom\/BigDataSE \u201918), New York, NY, USA.","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00156"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Hussain, S.R., Echeverria, M., Karim, I., Chowdhury, O., and Bertino, E. (2019, January 11\u201315). 5GReasoner: A property-directed security and privacy analysis framework for 5G cellular network protocol. Proceedings of the 26st ACM SIGSAC Conference on Computer and Communications Security (CCS\u201919), London, UK.","DOI":"10.1145\/3319535.3354263"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1016\/j.jnca.2017.10.017","article-title":"Security for 4G and 5G cellular networks: A survey of existing authentication and privacy-preserving schemes","volume":"101","author":"Ferrag","year":"2018","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Basin, D., Dreier, J., Hirschi, L., Radomirovic, S., Sasse, R., and Stettler, V. (2018, January 15\u201319). A formal analysis of 5G authentication. Proceedings of the 25st ACM SIGSAC Conference on Computer and Communications Security (CCS\u201918), Toronto, ON, Canada.","DOI":"10.1145\/3243734.3243846"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"3682","DOI":"10.1109\/COMST.2019.2916180","article-title":"Security for 5G and beyond","volume":"21","author":"Ahmad","year":"2019","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Xiao, Y., and Gao, S. (2022). Formal verification and analysis of 5G AKA protocol using mixed strand space model. Electronics, 11.","DOI":"10.3390\/electronics11091333"},{"key":"ref_16","unstructured":"Wang, Y., Zhang, Z., and Xie, Y. (2021, January 11\u201313). Privacy-Preserving and Standard-Compatible AKA Protocol for 5G. Proceedings of the 30th USENIX Security Symposium (USENIX Security \u201921), Online. Available online: https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/wang-yuchen."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Xiao, Y., and Wu, Y. (2022). 5G-IPAKA: An improved primary authentication and key agreement protocol for 5g networks. Information, 13.","DOI":"10.3390\/info13030125"},{"key":"ref_18","unstructured":"3GPP (2023, December 10). Authentication and Key Management for Applications (AKMA) Based on 3GPP Credentials in the 5G System (5GS) TS 33.535 (Release 18). Technical Report, The 3rd Generation Partnership Project. Available online: https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=3690."},{"key":"ref_19","unstructured":"Arkko, J., Norrman, K., and Mattsson, J.P. (2023, December 10). Forward Secrecy for the Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA\u2032 FS). Internet-Draft draft-ietf-emu-aka-pfs-11, Internet Engineering Task Force. Available online: https:\/\/datatracker.ietf.org\/doc\/draft-ietf-emu-aka-pfs\/11\/."},{"key":"ref_20","unstructured":"K\u00f8ien, G.M. (2020, January 23\u201325). The SUCI-AKA Authentication Protocol for 5G Systems. Proceedings of the 13rd NISK Conference on Norwegian Information Security (NISK\u201920), Online. Available online: https:\/\/ojs.bibsys.no\/index.php\/NIK\/article\/view\/885."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Xiao, Y., and Gao, S. (2022). 5GAKA-LCCO: A secure 5G authentication and key agreement protocol with less communication and computation overhead. Information, 13.","DOI":"10.3390\/info13050257"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1145\/77648.77649","article-title":"A logic of authentication","volume":"8","author":"Burrows","year":"1990","journal-title":"ACM Trans. Comput. Syst. (TOCS)"},{"key":"ref_23","unstructured":"Blanchet, B., Smyth, B., Cheval, V., and Sylvestre, M. (2023, December 10). ProVerif 2.04: Automatic Cryptographic Protocol Verifier, User Manual and Tutorial. Proverif User Manual. Available online: https:\/\/bblanche.gitlabpages.inria.fr\/proverif\/manual.pdf."},{"key":"ref_24","unstructured":"Shoup, V. (2023, December 10). A Proposal for an ISO Standard for Public Key Encryption. Cryptology ePrint Archive, Paper 2001\/112. Available online: https:\/\/eprint.iacr.org\/2001\/112."},{"key":"ref_25","unstructured":"Research, C. (2023, December 10). SEC 1: Elliptic Curve Cryptography. Standards for Efficient Cryptography. Available online: https:\/\/www.secg.org\/sec1-v2.pdf."},{"key":"ref_26","unstructured":"Research, C. (2023, December 10). SEC 2: Recommended Elliptic Curve Domain Parameters. Standards for Efficient Cryptography. Available online: https:\/\/www.secg.org\/sec2-v2.pdf."},{"key":"ref_27","unstructured":"3GPP (2023, December 10). 3G Security Architecture TS 33.102 (Release 16). Technical Report, The 3rd Generation Partnership Project. Available online: https:\/\/portal.3gpp.org\/desktopmodules\/Specifications\/SpecificationDetails.aspx?specificationId=2262."},{"key":"ref_28","unstructured":"ISO (2023, December 10). ISO\/IEC 29128-1:2023 Information Security, Cybersecurity and Privacy Protection\u2014Verification of Cryptographic Protocols\u2014Part 1: Framework. Technical Report, the International Organization for Standardization. Available online: https:\/\/standards.iteh.ai\/catalog\/standards\/iso\/5a8c7c4d-434f-4816-a4e0-b33660dd311c\/iso-iec-29128-1-2023."},{"key":"ref_29","first-page":"249","article-title":"A Beyond-5G Authentication and Key Agreement Protocol","volume":"Volume 13787","author":"Damir","year":"2022","journal-title":"Proceedings of the Network and System Security\u201416th International Conference, NSS 2022"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/24\/1\/159\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:42:53Z","timestamp":1760132573000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/24\/1\/159"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,27]]},"references-count":29,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,1]]}},"alternative-id":["s24010159"],"URL":"https:\/\/doi.org\/10.3390\/s24010159","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,27]]}}}