Sign in Subscribe

eap sim authentication

Last updated on 

EAP-SIM (Extensible Authentication Protocol-Subscriber Identity Module) is a type of authentication method used in wireless networks, primarily in GSM (Global System for Mobile Communications) and UMTS (Universal Mobile Telecommunications System) cellular networks. EAP-SIM provides a mechanism for user authentication without transmitting sensitive information, such as passwords, over the air.

Here's a technical breakdown of EAP-SIM:

1. Overview:

EAP-SIM utilizes the existing SIM (Subscriber Identity Module) card present in GSM and UMTS devices to authenticate users on wireless networks securely.

2. Components Involved:

  • User (Mobile Device): The device trying to connect to a wireless network.
  • Authentication Server (AuC): Central entity that stores user credentials.
  • Home Location Register (HLR): Database that contains the subscriber information.
  • Visited Location Register (VLR): Database that contains temporary subscriber information when the user roams into another network.
  • Authentication Center (AuC): Entity responsible for generating the authentication tokens.

3. Authentication Process:

  1. Initiation: When a mobile device attempts to connect to a wireless network, it initiates an EAP authentication process by sending an authentication request.
  2. Challenge: The authentication server sends a challenge to the mobile device. This challenge typically contains a random number.
  3. Response: The mobile device generates a response by combining the random number with its IMSI (International Mobile Subscriber Identity) and sends it back to the authentication server. The IMSI is a unique identifier stored in the SIM card.
  4. Authentication Token Generation: The authentication server (AuC) retrieves the user's identity (IMS) from the HLR or VLR. It then uses this information, along with a secret key stored in the SIM card and a secret key stored in the AuC, to generate an authentication token (also known as a triplet). This token consists of:
    • RAND: The random challenge initially sent.
    • SRES: A signed response that is generated based on the secret key and the challenge. It serves as a proof of identity.
    • Kc: An encryption key for securing the communication session between the mobile device and the network.
  5. Authentication Verification: The mobile device receives the authentication token and checks it against its own calculations using the SIM card's secret key. If the received SRES matches the computed SRES, the authentication is successful. The Kc is used to secure the communication session between the mobile device and the network.

4. Security Considerations:

  • Mutual Authentication: EAP-SIM not only authenticates the user to the network but also authenticates the network to the user, ensuring both parties are genuine.
  • Protection against Eavesdropping: Since sensitive information like passwords isn't transmitted over the air, EAP-SIM provides protection against eavesdropping attacks.

5. Advantages:

  • Security: Protects against various types of attacks such as eavesdropping, man-in-the-middle, and replay attacks.
  • Simplicity: Utilizes the existing SIM infrastructure in GSM and UMTS networks, reducing the need for additional authentication mechanisms.