Security deficiencies and bugs in the Authentication of SIM cards in Global Systems for Mobile (GSM) have led us to present new protocols for these networks using the principles of quantum cryptography. In this paper first, we provide a protocol for detecting and removing SIM card that has a copy, using three entangle particles source and quantum channel when the original SIM card and its copy simultaneously logging in the mobile network. Then, another protocol based on the use of quantum memory (which is embedded in the SIM card) is presented. Both of these protocols can use to authenticate and remove SIM card that has a copy.
Security deficiencies and bugs in the Authentication of SIM cards in Global Systems for Mobile (GSM) have led us to present new protocols for these networks using the principles of quantum cryptography. In this paper first, we provide a protocol for detecting and removing SIM card that has a copy, using three entangle particles source and quantum channel when the original SIM card and its copy simultaneously logging in the mobile network. Then, another protocol based on the use of quantum memory (which is embedded in the SIM card) is presented. Both of these protocols can use to authenticate and remove SIM card that has a copy.
As the world rapidly embraces quantum technologies, the need for robust quantum security protocols becomes increasingly paramount. Quantum key distribution (QKD) has been at the forefront of secure key exchange, but establishing a root of trust remains unaddressed. This research article presents a pioneering approach for global system for mobile communications (GSM) that bridges the gap between QKD and device identity verification. Our approach utilizes single-qubit states and amplitude encoding, integrating the BB84 protocol to securely share secret keys between entities. We implement two-factor authentication (2FA) to further protect against attacks and unauthorized access. Unlike entangled state-based schemes that require quantum memory and face practical implementation challenges, our single-qubit approach avoids these issues, making it feasible with current technology. Central to our approach is the verification of the subscriber identity module (SIM) card holder’s authenticity using the quantum prover authentication protocol (QuPAP) at the mobile authentication Center. This quantum cryptography-based process enhances GSM communication security and can be integrated into existing networks with minimal modifications. Our proposed smartphone, equipped with dual SIM capabilities—one conventional (cSIM) and one quantum (QuSIM)—ensures compatibility with both current and future networks, allowing the benefits of quantum security without requiring a complete system overhaul. By integrating quantum security into classical GSM protocols, our scheme not only enhances security but also addresses crucial aspects of device identity authentication, attestation, and trust establishment. The security and performance analysis of the QuPAP prototype demonstrates a quantum leap in mobile security, fostering a future of trust, privacy, and resilience in the ever-evolving landscape of communication technologies.
In mobile networking, specifically in 5G networking, embedded SIM (eSIM) does not rely on the hardware chips to deliver the core network’s public key as traditional SIM cards do. Instead, eSIM utilizes remote digital certificates enabled by Public Key Infrastructure (PKI). In this research, we study the post-quantum transition of eSIM-based mobile networking by applying and incorporating the post-quantum ciphers to the digital certificates and authentication. While building on the existing mutual authentication between the user equipment and core network, we build quantum resistance in the digital signatures used for the digital certificate and authentication so that they are secure against quantum-computing attackers. We implement our scheme using the NIST-standardized post-quantum ciphers to evaluate the computing/time and battery/power overheads, which are important for resource-constrained mobile devices. We compare the post-quantum ciphers with the current quantum-vulnerable ciphers and show that the lattice-based schemes have comparable or even better overhead performances.
The advent of quantum computing threatens to undermine current encryption methods significantly, especially those employed in mobile data transmission networks. Quantum algorithms can solve the computational challenges behind present public-key encryption methods like RSA (Rivest-Shamir-Adleman) and elliptic curve cryptography at a speedy rate. With mobile communication networks handling more and more sensitive information, the availability of secure authentication methods is increasingly important. This project proposes to investigate how mobile data communication systems can leverage post-quantum cryptographic (PQC) techniques to enhance authentication protocols. The research compares some NIST-standardized post-quantum cryptography candidates, i.e., lattice-based, code-based, hash-based, and multivariate polynomial cryptography, focusing on their usage in mobile environments. We establish a guideline for constructing PQC-improved authentication protocols, focusing on their quantum-resistance, computational cost, and appropriateness for resource-constrained mobile devices. Our analysis proves that the regulations successfully protect information’s secrecy, integrity, and authenticity in the post-quantum era. This has led to the development of future-proof, safe, and resilient mobile communication networks. PQC augmented authentication systems offer good resistance against quantum attacks while supporting acceptable performance on mobile devices, as evidenced by previous research. Mobile communication systems can achieve long-term security through PQC, thus safeguarding user data and critical infrastructure against potential adversaries that might employ quantum computing in the future.
In the communication network, transmitting messages from source to destination may traverse several intermediate nodes. For a long period of time, multiple authentications and secure communications between the sender and the receiver are needed for us to transmit messages. In the classical field, authentication provides only conditional security and classical channel can not provide secure communication for liar detection. In the quantum field, multiple quantum entanglement pairs can be used for liar detection. In this paper, we design quantum authentication protocol and secure communication protocol by only using quantum channel. These protocols previously share a quantum key distribution to detect the dishonest node. The quantum key distribution can promote authentication and secure communication for achieving higher liar detection probability.
In resource-constrained devices such as Subscriber Identity Module (SIM), the possibility of using authentication and key exchange methods, which include the mutual verification of two parties to ensure the security of communication, provides a significant advantage. As the cost efficient computations may not be efficiently performed on resource-constrained devices, security is the main problem for SIMs. With the advancing technology and the use of quantum computers, it is predicted that this may lead to threats. It is a well-known fact that security on traditional public key cryptosystems will become vulnerable by using quantum computers due to Shor’s algorithm. In this paper, two different resistant to quantum attacks structures are proposed to ensure secure communication between SIM and service providers. In the proposed methods, Advanced Encryption Standard (AES-256) is used for communication with resource-constrained devices, and N-th degree Truncated polynomial Ring Units (NTRU) encryption system is used for communication with servers. Two methods are proposed, one with the private key and one without the private key in the production phase. This protocol provides authentication, data privacy and integrity for post-quantum SIM cards. The proposed method is inspired by the FLAT (Federated Lightweight Authentication) protocol. However, the main difference from the FLAT protocol is that it has more nodes and is resistant to quantum attacks.
In mobile networking such as 5G, embedded SIM or eSIM does not involve a connectivity-provider-specific hardware chip to deliver the provider’s core network’s public key, in contrast to the traditional SIM. eSIM instead uses the remote digital certificate and PKI to deliver the public key. We study the post-quantum transition by introducing post-quantum digital certificates for eSIM, including how the digital certificate gets used for the mutual authentication between the mobile client and the core network server. We investigate the eSIM authentication and post-quantum digital signature ciphers and outline the plan for the post-quantum design and transition in this paper.