Search papers, labs, and topics across Lattice.
This paper introduces Di5Guise, a novel privacy-enhancing architecture that addresses the privacy vulnerabilities inherent in traditional SIM cards by decoupling device identity from subscriber identity through the use of a virtualized SIM card (vSIM). By implementing this architecture, the authors demonstrate a significant reduction in user re-identification accuracy from 93% to 49% when combined with traffic obfuscation techniques. The findings highlight the potential of Di5Guise to fundamentally enhance user privacy in 5G networks, making it a critical advancement in cellular security.
User re-identification accuracy plummets from 93% to 49% with Di5Guise, revolutionizing privacy in 5G communications.
SIM cards have been the key building block of user authenticationand security in cellular networks. While they are meant to serve as privacy protecting elements in cellular communications, they can be the root cause of privacy loss. Current eSIMs come with a fixed device profile--comprising a secret key, a certificate, and a unique eUICC identifier--that permanently binds every subscriber profile provisioned on the device to that device profile. This binding enables an attacker with the vantage point of a cellular operator to correlate subscriber identities back to a single device, piecing together a complete pattern of life--online activities, movement patterns, and real-world identity--even when users rotate subscriber identities or employ traffic obfuscation techniques. To mitigate this concern, we introduce Di5Guise, a privacy-enhancing architecture that breaks this correlation at its root by decoupling the device identity from the subscriber identity. Central to Di5Guise is vSIM, a virtualized SIM card that enables dynamic device profile provisioning, allowing each subscriber profile to be associated with a distinct, unlinkable device profile. Di5Guise establishes trust with the operator by ensuring that vSIM is running on secure hardware in a trustworthy state. We prototype Di5Guise on a Field Programmable Gate Array (FPGA) board and integrate it with srsRAN to demonstrate full compatibility with existing 5G infrastructure. Using a complex user correlation model, we show that Di5Guise reduces user re-identification accuracy from 93% to 49% when combined with obfuscation.
