Its been a while since I wrote about 5G security in this fast changing 5G world. If you are new to 3GPP security, you may want to start with my tutorial here.
3GPP SA3 Chairman, Anand R. Prasad recently mentioned in his LinkedIn post:
5G security specification finalized! Paving path for new business & worry less connected technology use.
3GPP SA3 delegates worked long hours diligently to conclude the specification for 5G security standard during 26 Feb.-2 Mar. Several obstacles were overcome by focussed effort of individuals & companies from around the globe. Thanks and congrats to everyone!
All together 1000s of hours of work with millions of miles of travel were spent in 1 week to get the work done. This took 8 meetings (kicked off Feb. 2017) numerous on-line meetings and conference calls.
Excited to declare that this tremendous effort led to timely completion of 5G security specification (TS 33.501) providing secure services to everyone and everything!
The latest version of specs is on 3GPP website here.
ITU also held a workshop on 5G Security in Geneva, Switzerland on 19 March 2018 (link). There were quite a few interesting presentations. Below are some slides that caught my attention.
The picture in the tweet above from China Mobile summarises the major 5G security issues very well. 5G security is going to be far more challenging than previous generations.Major 5G Security Issues via Min Zuo, China Mobile #RANSplit #NetworkSlicing #SBA #NFV #SDN #CloudComputing #MEC pic.twitter.com/GD8EMNP1Fk— 3G4G (@3g4gUK) March 20, 2018
The presentation by Haiguang Wang, Huawei contained a lot of good technical information. The picture at the top is from that presentation and highlights the difference between 4G & 5G Security Architecture.
New entities have been introduced to make 5G more open.
EPS-AKA vs 5G-AKA (AKA = Authentication and Key Agreement) for trusted nodes
EAP-AKA' for untrusted nodes.
Slice security is an important topic that multiple speakers touched upon and I think it would continue to be discussed for a foreseeable future.
Dr. Stan Wing S. Wong from King’s College London has some good slides on 5G security issues arising out of Multi-Tenancy and Multi-Network Slicing.
Peter Schneider from Nokia-Bell Labs had good slides on 5G Security Overview for Programmable Cloud-Based Mobile Networks
Sander Kievit from TNO, a regular participant of working group SA3 of 3GPP on behalf of the Dutch operator KPN presented a view from 3GPP SA3 on the Security work item progress (slides). The slide above highlights the changes in 5G key hierarchy.
The ITU 5G Security Workshop Outcomes is available here.
ETSI Security Week 2018 will be held 11-15 June 2018. 5G security/privacy is one of the topics.
There is also 5GPPP Workshop on 5G Networks Security (5G-NS 2018), being held in Hamburg, Germany on August 27-30, 2018.
In the meantime, please feel free to add your comments & suggestions below.
Related Posts & Further Reading:
- Introduction to 3GPP Security in Mobile Cellular Networks - 3G4G
- 5G Security Updates - July 2017 - 3G4G
- 3GPP 5G Specifications - 3G4G
- Tutorial: Service Based Architecture (SBA) for 5G Core (5GC) - 3G4G