面向移动虚拟网络运营商、支持无缝切换的强隐私保护通用可组合 AKA 协议
Strong Privacy-Preserving Universally Composable AKA Protocol with Seamless Handover Support for Mobile Virtual Network Operator
AI总结：
针对 MVNO 需向 MNO 暴露用户身份与主密钥导致的隐私泄露问题，提出支持双向认证、无缝切换、匿名与不可链接性的通用可组合 AKA 方案。
摘要：
在当前的移动通信环境中，寻求新移动套餐的消费者拥有许多选择。移动虚拟网络运营商（MVNO）近来在这些选择中获得了相当多的关注。MVNO 提供多种优势，因而成为大多数消费者的诱人选择。这些优势包括灵活性、使用尖端技术的机会、增强的覆盖范围、更优质的客户服务以及显著的成本节约。尽管 MVNO 具有若干优势，但它同时也给客户带来了一些安全和隐私问题。例如，在现有解决方案中，MVNO 需要在提供任何服务时，将包括用户身份及其客户主密钥在内的所有敏感细节移交给移动运营商（MNO），以验证客户身份。这使得 MNO 能够不受限制地访问 MVNO 用户的位置和移动数据，包括语音通话、短信和互联网数据，而 MNO 经常将这些数据出售给第三方（例如广告公司和监控机构）以获取更多利润。尽管这种隐私泄露对广大用户至关重要，但由于蜂窝网络中的注册和切换流程缺乏实用且保护隐私的解决方案，它长期以来一直被忽视。本文提出一种具有强用户隐私支持的通用可组合认证与切换方案，其中每个 MVNO 用户都可以验证移动运营商（MNO），MNO 也可以反过来验证用户，同时不会损害用户匿名性和不可链接性支持。我们预计，所提出的解决方案很可能将由 MVNO 部署，以确保为其客户提供增强的隐私保护。
英文摘要：
Consumers seeking a new mobile plan have many choices in the present mobile landscape. The Mobile Virtual Network Operator (MVNO) has recently gained considerable attention among these options. MVNOs offer various benefits, making them an appealing choice for a majority of consumers. These advantages encompass flexibility, access to cutting-edge technologies, enhanced coverage, superior customer service, and substantial cost savings. Even though MVNO offers several advantages, it also creates some security and privacy concerns for the customer simultaneously. For instance, in the existing solution, MVNO needs to hand over all the sensitive details, including the users' identities and master secret keys of their customers, to a mobile operator (MNO) to validate the customers while offering any services. This allows MNOs to have unrestricted access to the MVNO subscribers' location and mobile data, including voice calls, SMS, and Internet, which the MNOs frequently sell to third parties (e.g., advertisement companies and surveillance agencies) for more profit. Although critical for mass users, such privacy loss has been historically ignored due to the lack of practical and privacy-preserving solutions for registration and handover procedures in cellular networks. In this paper, we propose a universally composable authentication and handover scheme with strong user privacy support, where each MVNO user can validate a mobile operator (MNO) and vice-versa without compromising user anonymity and unlinkability support. Here, we anticipate that our proposed solution will most likely be deployed by the MVNO(s) to ensure enhanced privacy support to their customer(s).
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
