A fast handover authentication mechanism based on ticket for IEEE 802.16m

Authors:
Anmin Fu;Yuqing Zhang;Zhenchao Zhu;Xuefeng Liu
Affiliations:
Key Lab of Computer Networks and Information Security of the Ministry of Education, Xidian University, Xi’an, PR China;National Computer Network Intrusion Protection Center, GUCAS, Beijing, PR China;Key Lab of Computer Networks and Information Security of the Ministry of Education, Xidian University, Xi’an, PR China;Key Lab of Computer Networks and Information Security of the Ministry of Education, Xidian University, Xi’an, PR China
Venue:
IEEE Communications Letters
Year:
2010

Citing 5
Cited 1

Kerberized handover keying: a media-independent handover key management architecture

Proceedings of 2nd ACM/IEEE international workshop on Mobility in the evolving internet architecture
Analysis of Handover Key Management schemes under IETF perspective

Computer Standards & Interfaces
Dynamic rekeying in 3GPP multimedia broadcast/multicast service (MBMS)

IEEE Communications Letters
An Identity-Based Security System for User Privacy in Vehicular Ad Hoc Networks

IEEE Transactions on Parallel and Distributed Systems
A kerberized architecture for fast re-authentication in heterogeneous wireless networks

Mobile Networks and Applications

GHAP: An Efficient Group-based Handover Authentication Mechanism for IEEE 802.16m Networks

Wireless Personal Communications: An International Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

IEEE 802.16m is now under consideration by the ITU to become the IMT-Advanced standard. However, handover authentication is a critical issue in this area. In this letter, we propose a fast handover authentication mechanism based on ticket for IEEE 802.16m. The credential ticket of Mobile Station (MS) is issued by the access Base Station (BS) using a multi-BS group key during the initial authentication. When the MS moves from the service BS to a target BS, it can show its ticket to the target BS and this BS can authenticate the MS without communicating with any other third party (e.g., previous BS and authentication server). Our analysis shows that the proposed scheme meets the security requirements in handover authentication semantics and provides robust efficiency in terms of communication overhead and computational cost.