The fifth-generation mobile network (5G) integrates various application services in a heterogeneous network environment. Compared to the traditional networks, 5G is not just an extension of the 4th generation, which contains three important properties, enhanced mobile broadband (eMBB), massive machine type communications (mMTC), and ultra-reliable and low latency communications (URLLC). 5G applies the functionalities of Network Function Virtualization and Software-Defined Networking to support multiple services and proposes a new concept called Network Slicing. Users can access different services quickly in the 5G network supported by network slicing. In a traditional network like 4G, if a user wants to access different services, it will be necessary to perform different authentication procedures that cause additional burden and operation cost in the user’s device. However, the 5G network inherits the previous network architecture. Hence, the user’s device still needs to be authenticated by the core network. Besides, providing a guarantee of connecting to a correct network slice is one of the prime concerns. The paper presents an authentication scheme tailored for the 5G network. In the proposed scheme, the authentication is decentralized to the edge clouds to achieve low latency. Moreover, the authentication flow is no longer attached to the operator all the time to reduce time latency. The proposed scheme is secure against the attackers who aim to impersonate users, network operators, or even network slices, and it also provides secure session key exchange. Empirical performance assessment in terms of its functionalities gains better acceptability of the proposed scheme than other existing ones.

中文翻译：

---

5的跨网络切片身份验证方案^日 一代移动通信系统

第五代移动网络（5G）在异构网络环境中集成了各种应用程序服务。与传统网络相比，5G不仅仅是第四代产品的扩展，它具有三个重要特性：增强型移动宽带（eMBB），大规模机器类型通信（mMTC）以及超可靠和低延迟通信（URLLC）。5G应用了网络功能虚拟化和软件定义网络的功能来支持多种服务，并提出了一种称为网络切片的新概念。用户可以在网络切片支持的5G网络中快速访问不同的服务。在4G之类的传统网络中，如果用户想要访问其他服务，有必要执行不同的身份验证过程，这会给用户设备带来额外的负担和运营成本。但是，5G网络继承了以前的网络架构。因此，用户的设备仍然需要核心网络进行身份验证。此外，提供连接到正确的网络切片的保证是主要问题之一。本文提出了针对5G网络量身定制的身份验证方案。在所提出的方案中，认证被分散到边缘云以实现低等待时间。此外，身份验证流程不再一直都附加在操作员上，以减少时间延迟。拟议的方案对于旨在冒充用户，网络运营商甚至网络切片的攻击者而言是安全的，并且还提供了安全的会话密钥交换。