How does 3GPP release 16 address the security and privacy issues of 5G?

1 Enhanced Authentication

One of the main security improvements in 3GPP release 16 is the enhanced authentication framework (EAP-AKA'), which is based on the extensible authentication protocol (EAP). EAP-AKA' provides stronger protection against various attacks, such as replay, impersonation, and downgrade. It also supports multiple authentication methods, such as certificates, tokens, and biometrics, to accommodate different scenarios and user preferences. EAP-AKA' also enables mutual authentication between the user and the network, as well as between different network entities, such as base stations, core networks, and edge servers.

2 Privacy Protection

Another important aspect of 3GPP release 16 is the privacy protection mechanism, which aims to prevent the exposure and tracking of user identities and locations. 3GPP release 16 introduces a new concept of subscription permanent identifier (SUPI), which is a unique and encrypted identifier that replaces the previous subscriber identity (IMSI). The SUPI is only known to the user and the home network, and is never transmitted in clear text over the air. Instead, the network assigns a temporary and pseudonymous identifier (SUCI) to the user, which changes frequently and randomly. The SUCI is derived from the SUPI using a public key encryption scheme, which ensures that only the home network can decrypt it and verify the user's identity.

3 Network Slicing

Network slicing is a key feature of 5G that allows the creation of multiple virtual networks on top of a shared physical infrastructure. Each network slice can have different characteristics and requirements, such as latency, bandwidth, reliability, and security. For example, a network slice for autonomous vehicles may need high availability and integrity, while a network slice for video streaming may need high throughput and quality of service. 3GPP release 16 defines the security architecture and procedures for network slicing, such as how to isolate and protect each slice, how to authenticate and authorize users and devices, and how to manage and monitor security policies and events.

4 Edge Computing

Edge computing is another feature of 5G that enables the processing and storage of data closer to the end users and devices, rather than in centralized servers. This can reduce the latency and bandwidth consumption, as well as enhance the user experience and privacy. However, edge computing also introduces new security risks, such as data leakage, tampering, and denial of service. 3GPP release 16 specifies the security aspects of edge computing, such as how to secure the communication between the edge nodes and the core network, how to establish trust and identity among the edge nodes, and how to protect the data and applications at the edge.

5 IoT Security

IoT security refers to the security of the internet of things (IoT), which is the network of connected devices that can collect, exchange, and act on data. IoT devices can range from smart watches and sensors to drones and robots. 5G can enable new and innovative IoT applications, such as smart cities, smart factories, and smart healthcare. However, IoT devices can also pose significant security threats, such as data breaches, malware infections, and botnet attacks. 3GPP release 16 addresses the IoT security challenges by providing a flexible and scalable security framework that can support different types of IoT devices, services, and protocols. For example, 3GPP release 16 supports lightweight cryptography and authentication methods for resource-constrained devices, as well as secure group communication and multicast for large-scale IoT deployments.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?