Kumar, Liyanage, Ahmad, Braeken, and Ylianttila
268
aware services, augmented reality, and concepts of anything as a service and user personalization will be a major vital force behind the massive adoption of 5G technology.
5G is also the main driver for Internet of Things (IoTs)‐based applications, where things
are connected through this technology and services will be delivered by more efficient
and faster means. This means that 5G requires special consideration on privacy requirements from various perspectives of technologies and services [14,15].
Moreover, due to recent advancements in sensing and communication technologies
such as smartphones and wearables, the general awareness of privacy in current society
has increased, and thus this encourages higher protection of user’s metadata and communications. With the kind of capabilities 5G would possess, it is expected that novel
use cases and applications will come into the real‐time actions. Service‐oriented privacy mechanism would be a more preferable way to protect the privacy. Also, in the
case of 5G, security‐ and privacy‐based solutions need to be focused from scratch.
Therefore, it must add the security and privacy features built in to the system design
from the start.
The continuous improvements in mobile communication technologies also require
enhancement in identity management techniques. 5G technology will bring an enormous number of users and devices together and they will be connected in a ubiquitously
manner, therefore it is crucial to protect the identities of subscribers as well as of
devices. It is important to make sure that no any adversary or third party can steal the
subscriber’s real identity without his/her consent. Similar kinds of secure approaches
are needed for building and maintaining the strong trust relationship among subscribers and various stakeholders, such as service provider, enterprises, etc.
This chapter mainly highlights the potential privacy, identity and trust challenges for
future 5G technology from the user’s point of view. Section 12.2 gives some background
knowledge regarding security and privacy issues about previous generations. Section 12.3
elaborates on the user’s perspective on privacy, which is further expanded into three
sub‐parts, that are; data, location and identity privacy. Identity management mechanism
and its related challenges are explained in Sections 12.4, and Section 12.5 presents the
trust issues and elements required for developing the business models in the 5G system.
Finally, we discuss the overall aspects in Section 12.6 and conclude in Section 12.7.
12.2 Background
Over the last two decades, smart devices such as smartphones and tablets have provided more ubiquitous and persuasive types of services to consumers. The initiation of
mobile communication systems, starting from the second‐generation Global System for
Mobile Communications (2G/GSM) and heading towards the third‐generation
Universal Mobile Telecommunication Systems (3G/UMTS), has expanded widely into
all parts of the world. The next major transition is this evolution was the latest generation, “Long Term Evolution” (4G/LTE) systems, which are being broadly deployed.
Right from the start, there have been numerous threats faced by 2G systems, such as
no mutual authentication mechanisms available between mobile phone users and the
networks. It means that with these limited resources, it was easy for an attacker to launch
a fake base station and assure the mobile devices that it is a valid base station and that it
can connect to it. Fake base stations can also act as International Mobile Subscriber
268
aware services, augmented reality, and concepts of anything as a service and user personalization will be a major vital force behind the massive adoption of 5G technology.
5G is also the main driver for Internet of Things (IoTs)‐based applications, where things
are connected through this technology and services will be delivered by more efficient
and faster means. This means that 5G requires special consideration on privacy requirements from various perspectives of technologies and services [14,15].
Moreover, due to recent advancements in sensing and communication technologies
such as smartphones and wearables, the general awareness of privacy in current society
has increased, and thus this encourages higher protection of user’s metadata and communications. With the kind of capabilities 5G would possess, it is expected that novel
use cases and applications will come into the real‐time actions. Service‐oriented privacy mechanism would be a more preferable way to protect the privacy. Also, in the
case of 5G, security‐ and privacy‐based solutions need to be focused from scratch.
Therefore, it must add the security and privacy features built in to the system design
from the start.
The continuous improvements in mobile communication technologies also require
enhancement in identity management techniques. 5G technology will bring an enormous number of users and devices together and they will be connected in a ubiquitously
manner, therefore it is crucial to protect the identities of subscribers as well as of
devices. It is important to make sure that no any adversary or third party can steal the
subscriber’s real identity without his/her consent. Similar kinds of secure approaches
are needed for building and maintaining the strong trust relationship among subscribers and various stakeholders, such as service provider, enterprises, etc.
This chapter mainly highlights the potential privacy, identity and trust challenges for
future 5G technology from the user’s point of view. Section 12.2 gives some background
knowledge regarding security and privacy issues about previous generations. Section 12.3
elaborates on the user’s perspective on privacy, which is further expanded into three
sub‐parts, that are; data, location and identity privacy. Identity management mechanism
and its related challenges are explained in Sections 12.4, and Section 12.5 presents the
trust issues and elements required for developing the business models in the 5G system.
Finally, we discuss the overall aspects in Section 12.6 and conclude in Section 12.7.
12.2 Background
Over the last two decades, smart devices such as smartphones and tablets have provided more ubiquitous and persuasive types of services to consumers. The initiation of
mobile communication systems, starting from the second‐generation Global System for
Mobile Communications (2G/GSM) and heading towards the third‐generation
Universal Mobile Telecommunication Systems (3G/UMTS), has expanded widely into
all parts of the world. The next major transition is this evolution was the latest generation, “Long Term Evolution” (4G/LTE) systems, which are being broadly deployed.
Right from the start, there have been numerous threats faced by 2G systems, such as
no mutual authentication mechanisms available between mobile phone users and the
networks. It means that with these limited resources, it was easy for an attacker to launch
a fake base station and assure the mobile devices that it is a valid base station and that it
can connect to it. Fake base stations can also act as International Mobile Subscriber