Scribd Logo
Upload

Welcome to Scribd!

  • 109 views

    LTE Security Presentation

    Uploaded by

    soueee

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd

    LTE Security Presentation

    Uploaded by

    soueee
    109 views11 pages

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    109 views11 pages

    LTE Security Presentation

    Uploaded by

    soueee

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 11

    EventHelix.

    com
    telecommunication design systems engineering real-time and embedded systems

    LTE Security
    Encryption and Integrity Protection in LTE

    2012 EventHelix.com Inc.

    EventHelix.com

    LTE Security: Key Concepts


    Authentication The LTE Network verifies the UEs identity by challenging the UT use the keys and report a result. The network checks the result against the expected result Integrity Signaling message receiver verifies that the received message is exactly the message that the transmitter sent This is done using an integrity checksum Guards against man in the middle attacks where the senders messages and intercepted by a hacker and a modified message is relayed to the receiver

    telecommunication design systems engineering real-time and embedded systems

    Encryption The sender encrypts the data with a secret key that is only known to the receiver Only the receiver is able to decode the message Guards against hackers listening in on the data

    2012 EventHelix.com Inc.

    EventHelix.com

    LTE Security Key Hierarchy


    USIM and AuC UE and HSS UE and MME UE and MME UE and eNodeB
    KNASint K CK, IK KASME KNASenc KUPenc
    2012 EventHelix.com Inc.

    telecommunication design systems engineering real-time and embedded systems

    KeNB KRRCint KRRCenc


    3

    Encryption and Integrity Protection in the LTE Control Plan


    MME
    NAS
    KNASint KNASenc

    EventHelix.com
    telecommunication design systems engineering real-time and embedded systems

    eNodeB

    UE
    NAS
    KNASint KNASenc

    LTE supports two levels on security on the control plane


    The NAS traffic between the MME and the UE is protected with NAS level keys The RRC connection traffic between the MME and the UE is protected with RRC level keys

    RRC
    KRRCint KRRCenc

    RRC
    KRRCint KRRCenc

    This means that the NAS traffic is being protected with NAS as well as RRC level security
    4

    2012 EventHelix.com Inc.

    Encryption and Integrity EventHelix.com Protection in the LTE User Plane


    telecommunication design systems engineering real-time and embedded systems

    eNodeB

    UE

    User plane data is encrypted with the KUPenc key

    User Plane
    KUPenc

    User Plane
    KUPenc

    2012 EventHelix.com Inc.

    LTE NAS Key Derivation at the MME and UE


    KNASint: Integrity protection key for NAS signaling messages

    EventHelix.com
    telecommunication design systems engineering real-time and embedded systems

    KNASenc: Encryption key for NAS signaling messages

    K CK, IK KASME KNASint

    K CK, IK KASME KNASenc


    6

    2012 EventHelix.com Inc.

    LTE RRC Key Derivation at the eNodeB and UE


    KRRCint: Integrity protection key for RRC signaling messages

    EventHelix.com
    telecommunication design systems engineering real-time and embedded systems

    KRRCenc: Encryption key for RRC signaling messages


    K

    K CK, IK KASME KeNB KRRCint

    CK, IK KASME KeNB KRRCenc

    2012 EventHelix.com Inc.

    LTE User Plane Key Derivation at the eNodeB and UE


    K

    EventHelix.com
    telecommunication design systems engineering real-time and embedded systems

    KUPenc: User plane encryption key

    CK, IK
    KASME KeNB KUPenc
    2012 EventHelix.com Inc. 8

    EventHelix.com

    Key Stream Computation


    Ciphering

    telecommunication design systems engineering real-time and embedded systems

    Integrity Protection

    Bearer Count Direction Count

    Message Bearer

    Key

    Key Stream

    Length

    Key

    Key Stream

    Direction

    2012 EventHelix.com Inc.

    3GPP Security Specifications


    LTE Security
    33.401: System Architecture Evolution (SAE); Security architecture 33.402: System Architecture Evolution (SAE); Security aspects of non-3GPP

    EventHelix.com
    telecommunication design systems engineering real-time and embedded systems

    Lawful Interception
    33.106: Lawful interception requirements 33.107: Lawful interception architecture and functions 33.108: Handover interface for Lawful Interception

    Key Derivation Function


    33.220: GAA: Generic Bootstrapping Architecture (GBA)

    Backhaul Security
    33.310: Network Domain Security (NDS); Authentication Framework (AF)

    Relay Node Security


    33.816: Feasibility study on LTE relay node security (also 33.401)

    Home (e) Node B Security


    33.320: Home (evolved) Node B Security

    2012 EventHelix.com Inc.

    10

    EventHelix.com

    Thank You
    Links EventStudio System Designer Description

    telecommunication design systems engineering real-time and embedded systems

    Thank you for visiting EventHelix.com. The following links provide more information about telecom design tools and techniques:

    Sequence diagram based systems engineering tool.

    VisualEther Protocol Analyzer


    Telecom Call Flows TCP/IP Sequence Diagrams Telecom Networking Software

    Wireshark based visual protocol analysis and system design reverse engineering tool.
    GSM, SIP, H.323, ISUP, LTE and IMS call flows. TCP/IP explained with sequence diagrams. Real-time and embedded systems, call flows and object oriented design articles.

    2012 EventHelix.com Inc.

    11

    You might also like