# Retrofitting mutual authentication to GSM using RAND hijacking

**Authors:** Mohammed Shafiul Alam Khan, Chris J Mitchell  
**arXiv:** [1607.00729](https://arxiv.org/abs/1607.00729)  
**Date:** 2016-07-04  
**Summary page:** https://www.summarizepaper.com/en/paper/1607.00729v2/

## Key points

- Authors Mohammed Shafiul Alam Khan and Chris J Mitchell address the vulnerability in GSM due to unilateral authentication
- The need for enhanced security measures in GSM networks is highlighted
- Implementation of mutual authentication would significantly improve system security
- Proposed modification redefines the relationship between SIM cards and home networks
- Modifications focus on updating authentication centers and SIM cards without altering existing infrastructure
- The proposed enhancement offers a practical way to enhance security without extensive changes
- Research by Khan and Mitchell introduces a promising avenue for enhancing GSM security through mutual authentication

## Summary

In their paper titled "Retrofitting mutual authentication to GSM using RAND hijacking," authors Mohammed Shafiul Alam Khan and Chris J Mitchell address the inherent vulnerability in the GSM mobile telephony system due to its unilateral authentication process. This limitation exposes the network to a range of potential attacks, highlighting the need for enhanced security measures. The implementation of mutual authentication would significantly improve the system's security; however, altering existing GSM serving networks is impractical. To overcome this challenge, Khan and Mitchell propose a groundbreaking modification that redefines the relationship between a Subscriber Identity Module (SIM) and its home network. This innovative approach allows for mutual authentication without requiring any changes to the current mobile infrastructure, including phones. The key modifications focus on updating authentication centers and SIM cards, ensuring a seamless integration process that does not disrupt existing operations. The proposed enhancement not only addresses critical vulnerabilities within GSM but also distinguishes itself as the first solution to enhance GSM authentication with unparalleled transparency properties. By enabling a piecemeal deployment strategy, this novel approach offers a practical and efficient way to bolster security measures without necessitating extensive infrastructure changes. Overall, Khan and Mitchell's research presents a promising avenue for enhancing GSM security through mutual authentication while maintaining operational continuity and transparency in mobile networks.