SETOKEN:A secure protection mechanism based on service API for 5G network access token
Yiming Zhang, Caixia Liu, Shuxin Liu, Fei Pan · 2021 2nd International Conference on Electronics, Communications and Information Technology (CECIT) · 2021
The introduction of new technologies, new mechanisms, and new architectures in 5G mobile communication system has made higher data rate, greater user capacity, and richer service provision possible. However, exploiting the reusability of tokens, malicious attacker can launch man-in-the-middle attack to obtain service illegally. In this paper, we propose SETOKEN, a 5G access token security enhancement mechanism. We grant the CA certificate to a trusted network function repository (NRF) and add digital signature, random factor and serial number in the token to defend against attacks. Moreover, we have optimized the usage of tokens in terms of efficiency. Evaluation results show the security and effectiveness of SETOKEN. Besides, the overheads introduced by SEAPP is acceptable.