Dan Forsberg

LTE key management analysis with session keys context

Handover key management in mobile wireless networks targets to minimize the effects of a possible key compromise in the access points. We describe and analyze how the new 3GPP Long Term Evolution (LTE) security architecture and handover keying management fulfills this target. We discuss possible LTE handover key management enhancements and implementation alternatives without losing interoperability over the air interface. We have chosen to compare it with our session keys context concept to see what the strengths in both are to get some perspective for deployments that benefit from distributed key management.

Secure Distributed AAA with Domain and User Reputation

We explore the problem space of distributing AAA and describe a novel distributed AAA model based on cost efficient hardware security with Access Point specific and domain specific certificates. We introduce new domain and user reputation mechanism on top of the distributed AAA system based on the resources and/or services provided and consumed. Our certificate model includes different provisioning scenarios for scalable deployment and new ways of handling user profiles securely with the help of overlay file sharing networks. Our starting point is similar to community based networks like FON.

Use Cases of Implicit Authentication and Key Establishment with Sender and Receiver ID Binding

Common public key based authentication and key establishment (AKE) mechanisms with related Public Key Infrastructures (PKI) are relatively heavy. In this paper we explore public key and identity (ID) based AKE protocols, which do not require certificate authorities. We apply this approach to the symmetric key cryptography by creating a novel and lightweight symmetric key AKE protocol based on sender and/or receiver IDs. To show, how our protocol can be used in places, where common PKI does not perform well we present four new and interesting use cases. One of them is a simple and efficient ISP service user AKE with the help of telecom operators Short Message Service (SMS). Our protocol can also be used for wireless network access AKE.

Protected session keys context for distributed session key management

Handoffs must be fast for wireless mobile nodes (MN) without sacrificing security between the MN and the wireless access points in the access networks. We describe and analyze our new secure Session Keys Context (SKC) scheme which has all the good features, like mobility and security optimization, of the currently existing key distribution proposals, namely key-request, pre-authentication, and pre-distribution. We analyze these solutions together, and provide some conclusions on possible co-operative scenarios and on which level of the network to implement them. Finally before conclusions we provide some handoff delay simulation results with SKC and key request schemes with corresponding example handoff scenarios with a next generation radio link layer.