Sign in Subscribe

5G Authentication and Key Management 5G-AKA

Last updated on 


5G Authentication and Key Management (5G-AKA) is a security mechanism used in 5G networks to ensure the confidentiality, integrity, and authenticity of communications between devices and the network. It plays a crucial role in securing the wireless communication and protecting user data from unauthorized access. Let's break down the technical details of 5G-AKA:

1. Authentication Procedure:

  • Initial Registration:
    1. When a device wants to connect to a 5G network, it initiates the authentication process by sending an initial registration request.
    2. The network responds with a random challenge.
  • Authentication Vector Derivation:
    1. The device uses the received challenge, along with a shared secret key (K), to compute a Response (RES).
    2. A function called a one-way function (f1) is applied to the challenge and the secret key, producing the RES.
  • Authentication Request:
    1. The device sends the RES along with its identity to the network.
    2. The network compares the received RES with the expected value.
  • Authentication Success:
    1. If the RES matches the expected value, the device is authenticated.
    2. The network generates a set of security parameters, including a new session key (K_SEAF), and sends them to the device.

2. Key Management:

  • Generation of Keys:
    1. Once authenticated, the device and the network use the established session key (K_SEAF) for securing subsequent communications.
    2. Additional keys may be derived for specific purposes (e.g., integrity protection, confidentiality).
  • Derivation of KeNB:*
    1. The KeNB* (Next Hop Encapsulation Key) is derived by applying a function (f5*) to the shared secret key (K) and the previous KeNB*.
    2. This key is used for integrity protection of signaling messages.
  • Derivation of K_AMF:
    1. K_AMF (Key for the Access and Mobility Management Function) is derived for securing signaling between the device and the network.
    2. The function f3 is applied to the shared secret key (K) and a random value to obtain K_AMF.

3. Security Algorithms:

  • 5G-AKA supports various security algorithms, such as integrity protection (Integrity Protection Algorithm - NIA) and confidentiality protection (Encryption Algorithm - NEA).
  • The algorithms used are negotiated during the authentication process based on the device and network capabilities.

4. Reauthentication:

  • Periodically, the device undergoes reauthentication to ensure continued access to the network.
  • The network generates a new set of security parameters during reauthentication.

5. Mutual Authentication:

  • Both the device and the network authenticate each other, ensuring a mutual trust relationship.

6. Subscriber Identity Privacy:

  • 5G-AKA includes mechanisms to protect the user's identity, providing enhanced privacy features.

5G-AKA involves a sophisticated authentication process, the generation and management of various cryptographic keys, and the use of security algorithms to ensure the secure and private communication between 5G devices and the network. It builds on the lessons learned from previous generations of mobile networks to address emerging security challenges in the 5G landscape.