Improvement of EAP-TLS Protocol based on Pseudonym Mechanism

With the development of mobile communication technology, we have now entered the 5G era. While 5G brings us more diversified services, it also brings greater challenges to our privacy protection. Aiming at the problem of identity information leakage caused by the use of the 5G secondary authentication protocol EAP-TLS in an insecure network environment, this paper introduces a pseudonym mechanism and proposes a solution based on user grouping. Users are grouped in advance and assigned corresponding group ID. In the identity authentication phase, the group ID and identity authentication code are used to replace the unique identity of the user and sent to the authentication server. The authentication server determines the user’s group based on the group ID, and uses the identity authentication code to preliminarily determine the user’s identity, so as to achieve the purpose of protecting the privacy of the user’s identity. Finally, the authentication protocol is designed on the existing 5G mobile communication architecture, and the security analysis proves that the protocol can guarantee the security and anonymity of user identity privacy.