Source-linked AI summary
Blockchain-enabled Authentication Handover with Efficient Privacy Protection in SDN-based 5G Networks
Abbas Yazdinejad, Reza M. Parizi, Ali Dehghantanha, Kim-Kwang Raymond Choo
TL;DR
Frequent movement among heterogeneous 5G cells creates authentication-handover delay and privacy challenges. The paper proposes a blockchain-enabled authentication handover approach within an SDN platform, reporting less than 1 ms delay alongside lower signaling overhead and better energy consumption than POW-based and network-based models.
Problem
Frequent user movement causes repeated authentication handovers and delay, while heterogeneous 5G cells also create authentication, resource-management, security, and privacy challenges.
Method
The paper combines blockchain and SDN, using encrypted keys and shared device characteristics to eliminate re-authentication across heterogeneous-cell handovers.
Results
Less than 1 ms authentication-handover delay was reported, with less signaling overhead and better energy consumption than POW-based and network-based models.
Takeaways & Limitations
The reported results make the proposed approach well suited for 5G authentication handover while protecting user privacy.
Takeaways & Limitations
The evaluation considers Class 1 network-level attacks and Class 2 attacks occurring when mobile users join a cell or blockchain center.
Abstract
from arXiv · showhide
5G mobile networks provide additional benefits in terms of lower latency, higher data rates, and more coverage, in comparison to 4G networks, and they are also coming close to standardization. For example, 5G has a new level of data transfer and processing speed that assures users are not disconnected when they move from one cell to another; thus, supporting faster connection. However, it comes with its own technical challenges relating to resource management, authentication handover and user privacy protection. In 5G, the frequent displacement of the users among the cells as a result of repeated authentication handovers often lead to a delay, contradicting the 5G objectives. In this paper, we propose a new authentication approach that utilizes blockchain and software defined networking (SDN) techniques to remove the re-authentication in repeated handover among heterogeneous cells. The proposed approach is designed to assure the low delay, appropriate for the 5G network in which users can be replaced with the least delay among heterogeneous cells using their public and private keys provided by the devised blockchain component while protecting their privacy. In our comparison between Proof-of-Work (POW)-based and network-based models, the delay of our authentication handover was shown to be less than 1ms. Also, our approach demonstrated less signaling overhead and energy consumption compared to peer models.
1 INTRODUCTION
5G heterogeneous-cell networks must reduce handover delay while addressing authentication, resource, security, and privacy challenges. The paper combines SDN and blockchain to pursue faster, privacy-protecting authentication handover.
- 1 INTRODUCTION: Frequent movement among heterogeneous cells can make repeated handover authentication delay 5G communication.Power and resource constraints also require low-complexity, efficient handover authentication.
- 1 INTRODUCTION: 5G security requires faster and more effective validation and privacy protection than solutions developed for earlier networks.The paper emphasizes higher security requirements than 2G, 3G, and LTE.
- 1 INTRODUCTION: SDN separates control and data planes and provides programmability and flexibility for managing 5G networks.These properties support experimentation and future scalability.
- 1 INTRODUCTION: Blockchain provides a decentralized ledger that can support secure communication and authentication without intermediaries, although consensus and validation are resource-intensive.The paper proposes combining blockchain with SDN to enhance privacy protection and security in 5G.
- 1 INTRODUCTION: The proposed approach removes repeated re-authentication across heterogeneous-cell handovers and reports less than 1 ms delay, lower signaling overhead, and better energy consumption than comparison models.The approach uses an upgraded DPOS algorithm described as scalable, energy-optimized, and effective in reducing latency relative to POW.
2 THE PROPOSED ARCHITECTURE OF 5G WITH A HETEROGENEOUS CELL
The proposed architecture combines blockchain and SDN to simplify authentication handover across heterogeneous 5G cells while protecting device privacy. A blockchain center manages encrypted device information and identity changes, while SDN controllers coordinate cell operations and transactions.
- 2 THE PROPOSED ARCHITECTURE OF 5G WITH A HETEROGENEOUS CELL: Blockchain and SDN are introduced into 5G to simplify and eliminate frequent handover authentication in small and heterogeneous cells.The architecture is presented in Fig. 1.
- 2 THE PROPOSED ARCHITECTURE OF 5G WITH A HETEROGENEOUS CELL: The blockchain center stores and encrypts device identification, certification, and unique data under aliases to support privacy and security.It handles initial registration, identity changes, and hostile cancellation, with registration permission controlled by mobile operators.
- 2 THE PROPOSED ARCHITECTURE OF 5G WITH A HETEROGENEOUS CELL: SDN controllers manage heterogeneous cells, communicate with each other and the blockchain center, and exchange information through dedicated transfer keys.The architecture uses a hierarchical controller–blockchain-center structure to address SDN scalability.
3 BLOCKCHAIN-ENABLED AUTHENTICATION HANDOVER MECHANISM FOR 5G
The proposed mechanism combines blockchain and SDN to manage authentication keys across heterogeneous 5G cells, eliminating repeated handover re-authentication while protecting user privacy. It registers users centrally, distributes validation information to current and adjacent-cell controllers, and optimizes blockchain key-transfer processing.
- Architecture and handover mechanism: Blockchain and SDN coordinate authentication-key management across APs, BSs, and heterogeneous cells to eliminate repeated handover re-authentication.The BC includes a ledger, authentication-control, and security-information units, while SDN controllers manage validation across cells.
- Architecture and handover mechanism: Users initially register with BC, receive encryption material and public/private keys, and have their information sent to the SDN controller of the current and adjacent cells.The Auth Control unit identifies device properties and assigns key material; the Sec Info unit sends protected information to controllers.
- Architecture and handover mechanism: Shared user characteristics let adjacent-cell controllers validate handovers without re-authentication, reducing latency as users move among heterogeneous APs and cells.Controllers use BC-provided information to validate mobile users on APs, while BC messages adjacent cells with the relevant public-key information.
- Managing BC keys in handover: The BC key-transfer process uses transaction collection, signatures, public-key exchange, mining, and controller-key distribution to support secure handover.The described delay components include transaction collection, transmission and mining, and public-key distribution among controllers.
- Dynamic key management in handover: Dynamic transaction-collection periods are evaluated to select the minimum estimated key-transfer time across cells.The model computes transaction counts and total key-transfer time, then selects an optimized TCP according to the minimum transfer time.
BASED 5G NETWORK
The privacy-protection design combines blockchain-encrypted keys with SDN path selection and traffic control for data transmission in heterogeneous 5G cells. Authenticated users’ data can be split across paths, forwarded under controller policies, and reconstructed using the recipient’s private key.
- Privacy protection: Blockchain-encrypted keys protect records because attackers without the associated private key obtain unusable information.The paper identifies complex key agreement, mutual interaction, and third-party requirements as sources of latency and computational load in existing approaches.
- Privacy protection: SDN controllers select multiple network paths for different data-stream parts according to heterogeneous coverage, application sensitivity, and available traffic.The controller can optimize paths and the switch updates its flow table for forwarding.
- Privacy protection: The recipient decrypts and reorganizes the separately transmitted data using a private key after controller-monitored forwarding.The design allocates bandwidth and sends encrypted data sections through SDN switches and APs before reconstruction.
5 CONSENSUS ALGORITHM USED IN OUR BC
The paper uses an upgraded DPOS consensus design in which SDN controllers vote for representatives that collaboratively verify transactions and produce blockchain blocks. This addresses stated limitations of POW and original DPOS within the proposed 5G architecture.
- Consensus motivation: POW is described as problematic for 5G because its high computational power and latency can conflict with the network environment.The paper contrasts POW with lower-latency consensus alternatives used in decentralized platforms.
- Consensus motivation: The upgraded DPOS algorithm uses SDN controllers across cells and the network to address original DPOS vulnerability to centralization and limited evidence.The paper also identifies exposure to faults in real-life voting as an original DPOS limitation.
- Upgraded DPOS operation: SDN controllers vote for representative candidates responsible for verification and billing, with representatives collaboratively producing blocks and monitoring one another.Representatives may be removed or lose votes when their performance is out of line.
- Upgraded DPOS operation: In the proposed context, SDN controllers process transactions and add new blocks to the blockchain, receiving information-based rewards when they successfully mine.Each cell’s controller monitors users, supporting its role as a transaction-processing node.
- Consensus comparison: EOS completes block creation in less than one second with DPOS, compared with Bitcoin’s stated 10-minute block-creation time.The comparison motivates the paper’s use of DPOS-related consensus for the proposed architecture.
6 EVALUATION AND RESULTS
Experiments evaluate the proposed blockchain-enabled SDN approach across authentication delay, signaling overhead, energy consumption, privacy efficiency, routing delay, and consensus processing. Compared with network-based and POW-based models, it reduces authentication delay, signaling overhead, and energy consumption under the reported settings.
- Experimental setup: Experiments used OMNeT++ 5.1 with INET 3.6.4 to evaluate delay, efficiency, and comparability.The simulation included SDN switch and controller support, with blockchain consensus implemented through DPOS.
- Experimental setup: The evaluation modeled 30 heterogeneous cells, 200-meter AP spacing, and a mobile user moving at 5 KM/h with direction changes every 3 seconds.Controllers updated each cell’s flow tables using user registration parameters stored in the blockchain center.
- Signaling overhead: Signaling overhead was lower than in network-based and POW-based models because DPOS and SDN controllers manage each cell.The proposed approach directly registers users in the blockchain center, avoiding interactions with other nodes during cell joining.
- Energy consumption: Energy consumption was lower than in the compared models; network-based authentication requires three handshakes, while POW consumes additional mining energy.The comparison accounts for signaling overhead in whole-network energy consumption.
- Miner-count analysis: Increasing the miner count reduces delay because more delegates collaborate to reach consensus.The analysis treats consensus-building and information sharing for users and the blockchain center as service demand, using µ_t = 150 and σ^2 = 4.
- Privacy efficiency: The privacy-efficiency analysis compared the proposed method with SEMR-ABE and DACC, reporting no user cryptographic-operation overhead beyond decryption.The paper attributes this to applying blockchain properties in the proposed method.
- Routing efficiency: Algorithm 3 was evaluated for delay and bandwidth, and its delay was lower than the network-based method.The comparison concerns file transfer across potentially nonadjacent heterogeneous cells and multiple SDN-controller paths.
- Authentication handover: Authentication handover delay remained less than 1ms under increased users, mobility, and data transmission, unlike the other two methods.The approach avoids reauthentication because users remain valid in adjacent heterogeneous cells.
7 RELATED WORK
Prior work addresses 5G authentication handover and privacy through cryptographic, SDN/NFV, blockchain, and fog-based approaches, but leaves important challenges unresolved across heterogeneous cells.
- Research context: 5G security approaches must support high-capacity heterogeneous networks while protecting privacy and reliability against malicious attacks.Applications such as mobile banking and social networking impose particularly strong privacy requirements.
- Existing approaches: Cryptographic exchange control in existing wireless networks requires different authentication servers and protocols for different networks and channels.This creates a complex baseline for secure connections in heterogeneous 5G environments.
- Existing approaches: Hierarchical handover keys and message flows can increase delay and handover complexity when users enter different 5G cells.The cited 3GPP approach provides keys for handovers but still requires different procedures for different scenarios.
- Existing approaches: Public-key direct authentication avoids a third party but introduces computing cost and delay through three-way handshakes.The method performs mutual authentication and key agreement between the user and access point.
- Unresolved gaps: SDN/NFV privacy work considers position and identity protection but does not assure user identity, while other proposals leave authentication or heterogeneous-handover issues unresolved.Blockchain-based trusted authentication does not address heterogeneous 5G handover or privacy, and fog-based approaches do not address authentication challenges.
8 CONCLUSION
The paper combines blockchain and SDN to reduce authentication-handover latency and protect privacy across heterogeneous 5G cells. Its results indicate lower latency, overhead, and energy consumption, with DPOS supporting scalability and optimized energy use.
- Conclusion: Blockchain and SDN provide a faster authentication approach for privacy protection and intelligent control across heterogeneous 5G cells.The approach removes repeated manipulations among heterogeneous cells to obtain low latency.
- Conclusion: The upgraded DPOS consensus algorithm used with the blockchain was reported as a better fit for scalability and optimized energy consumption than POW.The conclusion specifically contrasts the lightweight blockchain design with POW.