Mobile Telephony 5G - II - SUCI/SUPI Identifier Security
Introduction The development of mobile networks has been intrinsically linked to the evolution of user security. In previous generation architectures (2G, 3G, and 4G), subscriber identity management relied on the transmission of the IMSI (International Mobile Subscriber Identity) in plain text during certain phases of the registration protocol. This design, while functional for network interconnection, created a cryptographic vulnerability of a physical nature. The exposure of the IMSI allows the execution of passive capture attacks, commonly known as IMSI catchers. These devices operate as fake base stations, whose objective is not to decrypt encrypted traffic, but simply to intercept the identity in clear text, which enables tracking and data correlation over time and space. ...