As the world rapidly embraces quantum technologies, the need for robust quantum security protocols becomes increasingly paramount. Quantum key distribution (QKD) has been at the forefront of secure key exchange, but establishing a root of trust remains unaddressed. This research article presents a pioneering approach for global system for mobile communications (GSM) that bridges the gap between QKD and device identity verification. Our approach utilizes single-qubit states and amplitude encoding, integrating the BB84 protocol to securely share secret keys between entities. We implement two-factor authentication (2FA) to further protect against attacks and unauthorized access. Unlike entangled state-based schemes that require quantum memory and face practical implementation challenges, our single-qubit approach avoids these issues, making it feasible with current technology. Central to our approach is the verification of the subscriber identity module (SIM) card holder’s authenticity using the quantum prover authentication protocol (QuPAP) at the mobile authentication Center. This quantum cryptography-based process enhances GSM communication security and can be integrated into existing networks with minimal modifications. Our proposed smartphone, equipped with dual SIM capabilities—one conventional (cSIM) and one quantum (QuSIM)—ensures compatibility with both current and future networks, allowing the benefits of quantum security without requiring a complete system overhaul. By integrating quantum security into classical GSM protocols, our scheme not only enhances security but also addresses crucial aspects of device identity authentication, attestation, and trust establishment. The security and performance analysis of the QuPAP prototype demonstrates a quantum leap in mobile security, fostering a future of trust, privacy, and resilience in the ever-evolving landscape of communication technologies.
As the world rapidly embraces quantum technologies, the need for robust quantum security protocols becomes increasingly paramount. Quantum key distribution (QKD) has been at the forefront of secure key exchange, but establishing a root of trust remains unaddressed. This research article presents a pioneering approach for global system for mobile communications (GSM) that bridges the gap between QKD and device identity verification. Our approach utilizes single-qubit states and amplitude encoding, integrating the BB84 protocol to securely share secret keys between entities. We implement two-factor authentication (2FA) to further protect against attacks and unauthorized access. Unlike entangled state-based schemes that require quantum memory and face practical implementation challenges, our single-qubit approach avoids these issues, making it feasible with current technology. Central to our approach is the verification of the subscriber identity module (SIM) card holder’s authenticity using the quantum prover authentication protocol (QuPAP) at the mobile authentication Center. This quantum cryptography-based process enhances GSM communication security and can be integrated into existing networks with minimal modifications. Our proposed smartphone, equipped with dual SIM capabilities—one conventional (cSIM) and one quantum (QuSIM)—ensures compatibility with both current and future networks, allowing the benefits of quantum security without requiring a complete system overhaul. By integrating quantum security into classical GSM protocols, our scheme not only enhances security but also addresses crucial aspects of device identity authentication, attestation, and trust establishment. The security and performance analysis of the QuPAP prototype demonstrates a quantum leap in mobile security, fostering a future of trust, privacy, and resilience in the ever-evolving landscape of communication technologies.
In resource-constrained devices such as Subscriber Identity Module (SIM), the possibility of using authentication and key exchange methods, which include the mutual verification of two parties to ensure the security of communication, provides a significant advantage. As the cost efficient computations may not be efficiently performed on resource-constrained devices, security is the main problem for SIMs. With the advancing technology and the use of quantum computers, it is predicted that this may lead to threats. It is a well-known fact that security on traditional public key cryptosystems will become vulnerable by using quantum computers due to Shor’s algorithm. In this paper, two different resistant to quantum attacks structures are proposed to ensure secure communication between SIM and service providers. In the proposed methods, Advanced Encryption Standard (AES-256) is used for communication with resource-constrained devices, and N-th degree Truncated polynomial Ring Units (NTRU) encryption system is used for communication with servers. Two methods are proposed, one with the private key and one without the private key in the production phase. This protocol provides authentication, data privacy and integrity for post-quantum SIM cards. The proposed method is inspired by the FLAT (Federated Lightweight Authentication) protocol. However, the main difference from the FLAT protocol is that it has more nodes and is resistant to quantum attacks.
Security deficiencies and bugs in the Authentication of SIM cards in Global Systems for Mobile (GSM) have led us to present new protocols for these networks using the principles of quantum cryptography. In this paper first, we provide a protocol for detecting and removing SIM card that has a copy, using three entangle particles source and quantum channel when the original SIM card and its copy simultaneously logging in the mobile network. Then, another protocol based on the use of quantum memory (which is embedded in the SIM card) is presented. Both of these protocols can use to authenticate and remove SIM card that has a copy.
In cellular systems, user devices (UEs) establish secure sessions with each other through a trusted server such as the Home Subscriber Server (HSS) or Authentication Center (AuC). The proposed two-party authenticated key establishment allows two users to authenticate and exchange encrypted data with minimal involvement of the server -improving efficiency and scalability in mobile communication. Moreover, this paper presents a cryptanalysis of two post-quantum authentication and key agreement protocols proposed by Dabra et al. and Kumar et al. Our analysis identifies specific weaknesses, a design flaw in the registration phase of Dabra et al.’s protocol, and vulnerabilities to identity guessing and impersonation attacks in Kumar et al.’s scheme. Motivated by these findings, we propose a new communication framework for a two-party authenticated key establishment protocol assisted by a server. In the proposed model, user UA initiates communication by sending a request to a central server and receives a corresponding response to establish an authenticated session key with user UB. Notably, user UB does not need to interact with the server during session initiation or key derivation phases, thereby significantly reducing communication overhead and enhancing efficiency. Through extensive formal analysis and simulation, our protocol achieves 21.37% and 19.99% improvement in computational efficiency and 35.13% and 21.05% reduction in communication overhead compared to the lattice-based authenticated key agreement protocols of Dabra et al. and Kumar et al., respectively. Furthermore, the proposed scheme ensures key freshness, meaning that each session key is unique and has never been used in any prior communication session. This guarantees that every session remains protected by a distinct cryptographic key, even when the same users communicate repeatedly. Additionally, user UA can establish a secure session with user UB without revealing its identity to either UB or any intermediate server, thereby preserving user anonymity. Overall, the proposed protocol offers strong privacy guarantees while enabling secure, authenticated communication with a minimal number of message exchanges.
The advent of quantum computing threatens to undermine current encryption methods significantly, especially those employed in mobile data transmission networks. Quantum algorithms can solve the computational challenges behind present public-key encryption methods like RSA (Rivest-Shamir-Adleman) and elliptic curve cryptography at a speedy rate. With mobile communication networks handling more and more sensitive information, the availability of secure authentication methods is increasingly important. This project proposes to investigate how mobile data communication systems can leverage post-quantum cryptographic (PQC) techniques to enhance authentication protocols. The research compares some NIST-standardized post-quantum cryptography candidates, i.e., lattice-based, code-based, hash-based, and multivariate polynomial cryptography, focusing on their usage in mobile environments. We establish a guideline for constructing PQC-improved authentication protocols, focusing on their quantum-resistance, computational cost, and appropriateness for resource-constrained mobile devices. Our analysis proves that the regulations successfully protect information’s secrecy, integrity, and authenticity in the post-quantum era. This has led to the development of future-proof, safe, and resilient mobile communication networks. PQC augmented authentication systems offer good resistance against quantum attacks while supporting acceptable performance on mobile devices, as evidenced by previous research. Mobile communication systems can achieve long-term security through PQC, thus safeguarding user data and critical infrastructure against potential adversaries that might employ quantum computing in the future.
The quantum communication technology is an evolving design which connects multiple quantum enabled devices to internet for secret communication or sensitive information exchange. In future, the number of these compact quantum enabled devices will increase immensely making them an integral part of present communication systems. Therefore, safety and security of such devices is also a major concern for us. To ensure the customer sensitive information will not be eavesdropped or deciphered, we need a strong authentications and encryption mechanism. In this paper, we propose a mutual authentication scheme between these smart quantum devices and server based on the secure exchange of information through quantum channel which gives better solutions for symmetric key exchange issues. An important part of this work is to propose a secure mutual authentication protocol over the quantum channel. We show that our approach offers robust authentication protocol and further our solution is lightweight, scalable, cost-effective with optimized computational processing overheads.
Biometric authentication has become integral to digital identity systems, particularly in smart cities where it enables secure access to services across governance, transportation, and public infrastructure. Centralised architectures, though widely used, pose privacy and scalability challenges due to the aggregation of sensitive biometric data. Decentralised identity frameworks offer better data sovereignty and eliminate single points of failure but introduce new security concerns, particularly around mutual trust among distributed devices. In such environments, biometric sensors and verification agents must authenticate one another before sharing sensitive biometric data. Existing authentication schemes rely on classical public key infrastructure, which is increasingly susceptible to quantum attacks. This work addresses this gap by proposing a quantum-secure communication protocol for decentralised biometric systems, built upon an enhanced Quantum Key Distribution (QKD) system. The protocol incorporates quantum-resilient authentication at both the classical and quantum layers of QKD: post-quantum cryptography (PQC) is used to secure the classical channel, while authentication qubits verify the integrity of the quantum channel. Once trust is established, QKD generates symmetric keys for encrypting biometric data in transit. Qiskit-based simulations show a key generation rate of 15 bits/sec and 89% efficiency. This layered, quantum-resilient approach offers scalable, robust authentication for next-generation smart city infrastructures.