Skip to main content
Top

2019 | OriginalPaper | Chapter

Vulnerabilities in UMTS Location Update Procedure and Its Countermeasures

Authors : Zengshan Tian, Weiguang Li, Yujia Yao

Published in: Communications, Signal Processing, and Systems

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

Mobile communication systems have been developing for decades. Universal Mobile Telecommunications System (UMTS) is a third-generation mobile cellular system for networks based on the GSM standard. As an evolved technology of GSM, UMTS has adopted a more reliable security mechanism. Integrity protection and mutual authentication were added in UMTS. However we carefully analyzed UMTS location update procedure specifications and uncover several vulnerabilities in UMTS. By sending specific types of LOCATION UPDATING REJECT messages during location update procedure, the rogue base station can deny all services to a target UMTS device. We also present several countermeasures including increasing the rate of TMSI reallocation, rebooting or re-inserting the SIM/USIM card and installing the protection application on UE to resist these vulnerabilities.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Literature
1.
go back to reference Cattaneo, G., De Maio, G., Faruolo, P., et al.: A review of security attacks on the GSM standard. In: Information and Communication Technology-EurAsia Conference, pp. 507–512. Springer, Heidelberg (2013) Cattaneo, G., De Maio, G., Faruolo, P., et al.: A review of security attacks on the GSM standard. In: Information and Communication Technology-EurAsia Conference, pp. 507–512. Springer, Heidelberg (2013)
2.
go back to reference Song, Y., Zhou, K., Chen, X.: Fake BTS attacks of GSM system on software radio platform. JNW 7(2), 275–281 (2012) Song, Y., Zhou, K., Chen, X.: Fake BTS attacks of GSM system on software radio platform. JNW 7(2), 275–281 (2012)
3.
go back to reference ISO/IEC 9798-4: Information Technology; Security Techniques; Entity Authentication Part 4: Mechanisms using a cryptographic check function (1999) ISO/IEC 9798-4: Information Technology; Security Techniques; Entity Authentication Part 4: Mechanisms using a cryptographic check function (1999)
4.
go back to reference Kambourakis, G., Kolias, C., Gritzalis S., et al.: Signaling-oriented DoS attacks in UMTS networks. International Conference on Information Security and Assurance, pp. 280–289. Springer, Heidelberg (2009) Kambourakis, G., Kolias, C., Gritzalis S., et al.: Signaling-oriented DoS attacks in UMTS networks. International Conference on Information Security and Assurance, pp. 280–289. Springer, Heidelberg (2009)
5.
go back to reference Ricciato, F., Coluccia, A., Dalconzo, A.: A review of DoS attack models for 3G cellular networks from a system-design perspective. Comput. Commun. 33(5), 551–558 (2010) Ricciato, F., Coluccia, A., Dalconzo, A.: A review of DoS attack models for 3G cellular networks from a system-design perspective. Comput. Commun. 33(5), 551–558 (2010)
6.
go back to reference Kaaranen, H.: UMTS Networks: Architecture Mobility and Services, pp. 3–10. Wiley, Hoboken (2005) Kaaranen, H.: UMTS Networks: Architecture Mobility and Services, pp. 3–10. Wiley, Hoboken (2005)
7.
go back to reference Koien, G.M.: Entity Authentication and Personal Privacy in Future Cellular Systems, pp. 33–36. River Publishers, Aalborg (2009) Koien, G.M.: Entity Authentication and Personal Privacy in Future Cellular Systems, pp. 33–36. River Publishers, Aalborg (2009)
8.
go back to reference The 3rd Generation Partnership Project. 3GPP TS 25.304 v13.0.0. User Equipment (UE) procedures in idle mode and procedures for cell reselection in connected mode. USA: 3GPP Publications Offices, pp. 18–40 (2015) The 3rd Generation Partnership Project. 3GPP TS 25.304 v13.0.0. User Equipment (UE) procedures in idle mode and procedures for cell reselection in connected mode. USA: 3GPP Publications Offices, pp. 18–40 (2015)
Metadata
Title
Vulnerabilities in UMTS Location Update Procedure and Its Countermeasures
Authors
Zengshan Tian
Weiguang Li
Yujia Yao
Copyright Year
2019
Publisher
Springer Singapore
DOI
https://doi.org/10.1007/978-981-10-6571-2_67