Narrowband Internet Of Things (NB-IoT) Group Authentication Technical Research

Narrow bandwidth Internet of Things(NB-IoT)is the key business driver of the upcoming fifth generation(5G)mobile network,which in turn will support many innovative Io T applications,For example,smart cities,mobile health,and other large-scale NB-IoT use cases defined in the 5G standard.Today,NB-IoT technology has been introduced into the 3rd Generation Partnership Project(3GPP)standard,where low-cost,low-power Io T devices can safely access the 5G core network through the access network.Today,NB-IoT technology has been introduced into the 3rd Generation Partnership Project(3GPP)standard,where low-cost,low-power Io T devices can safely access the 5G core network through the access network.However,according to the current 3GPP standards,these NB-IoT devices still use the traditional authentication process of ordinary user equipment to achieve mutual authentication between NB-IoT devices and the 5G core network,which brings a lot of communication and storage overhead,When activating many NB-IoT devices,the situation will be more serious.Moreover,the authentication message triggered by the initial registration of the network is transmitted in the clear text in the wireless network,which is easy to reveal the important information in the authentication message,and the privacy protection of the NB-IoT device will also be threatened.In order to alleviate the signaling congestion during authentication and solve the insecurity of authentication messages during wireless transmission,this thesis proposes a group authentication scheme for large-scale NB-IoT devices.The solution mainly includes the encryption and protection of the identity information of the NB-IoT device and the group authentication process,and also realizes the authentication and data transmission of a group of NB-IoT devices.The NIGA-AKA solution first constructs large NB-IoT devices with the same or similar properties in the same area as NB-IoT fixed or temporary groups,and then selects the group leader.When multiple NB-IoT devices simultaneously initiate access authentication to the 5G network,the access authentication information and encrypted sensitive data of all group members will be aggregated by the group leader device.Then,the group leader sends the aggregated access authentication information to the 5G core network,so that the network can effectively verify the aggregated information generated by the group leader.In order to ensure the security of group authentication messages during wireless transmission,the NIGA-AKA mechanism also adds authentication protection and encryption protection for authentication-related messages.Based on the formal verification tool AVISPA,this thesis performs mutual authentication and security verification on the proposed NIGA-AKA scheme.The verification results show that the proposed scheme has strong security in the encryption and authentication process,and can resist most known attacks.The data analysis shows that our proposed group-based authentication scheme has a great improvement in communication overhead and calculation overhead compared with the existing scheme.