[Paper Review] BE-RAN: Blockchain-enabled RAN with Decentralized Identity Management and Privacy-Preserving Communication.

Hao Xu, Lei Zhang+2 more|arXiv (Cornell University)|Jan 26, 2021

Blockchain Technology Applications and Security22 references4 citations

TL;DR

This paper proposes BE-RAN, a blockchain-enabled, decentralized Radio Access Network architecture that supports user-centric identity management, mutual authentication, and privacy-preserving peer-to-peer communication. By leveraging blockchain for decentralized trust and accountability, BE-RAN reduces communication and computation overheads compared to existing protocols.

ABSTRACT

Radio Access Networks (RAN) tends to be more distributed in the 5G and beyond, in order to provide low latency and flexible on-demanding services. In this paper, Blockchain-enabled Radio Access Networks (BE-RAN) is proposed as a novel decentralized RAN architecture to facilitate enhanced security and privacy on identification and authentication. It can offer user-centric identity management for User Equipment (UE) and RAN elements, and enable mutual authentication to all entities while enabling on-demand point-to-point communication with accountable billing service add-on on public network. Also, a potential operating model with thorough decentralization of RAN is envisioned. The paper also proposed a distributed privacy-preserving P2P communication approach, as one of the core use cases for future mobile networks, is presented as an essential complement to the existing core network-based security and privacy management. The results show that BE-RAN significantly improves communication and computation overheads compared to the existing communication authentication protocols.

Motivation & Objective

• To address the growing need for decentralized, secure, and privacy-preserving identity and authentication mechanisms in distributed 5G and beyond Radio Access Networks.
• To overcome the limitations of centralized identity management in traditional RANs, which increase attack surface and reduce user autonomy.
• To enable mutual authentication among User Equipment and RAN elements while supporting on-demand, accountable billing on public networks.
• To design a privacy-preserving, peer-to-peer communication framework as a core component of future mobile networks.

Proposed method

• Integrates blockchain technology to establish a decentralized trust model for identity management in RAN, enabling user-centric control of identities.
• Employs mutual authentication protocols between User Equipment and RAN nodes using blockchain-trusted identity records.
• Designs a distributed, privacy-preserving P2P communication mechanism that operates independently of the core network.
• Uses cryptographic primitives to ensure data confidentiality and user anonymity during P2P exchanges.
• Embeds accountable billing mechanisms via immutable blockchain logs to track usage and enforce fair usage.
• Architects a fully decentralized RAN operating model where control and signaling functions are distributed across nodes.

Experimental results

Research questions

• RQ1 How can decentralized identity management be effectively integrated into a distributed RAN architecture to enhance security and user autonomy?
• RQ2 What is the performance impact of blockchain-based mutual authentication on communication and computation overhead in RAN?
• RQ3 How can privacy-preserving peer-to-peer communication be achieved without relying on centralized core network functions?
• RQ4 What role does blockchain play in enabling accountable and auditable billing in a decentralized RAN environment?
• RQ5 How does the proposed BE-RAN architecture compare to existing RAN protocols in terms of scalability and resilience?

Key findings

• BE-RAN significantly reduces communication and computation overheads compared to conventional communication authentication protocols.
• The integration of blockchain enables robust, decentralized identity management that enhances trust and reduces reliance on centralized authorities.
• The proposed privacy-preserving P2P communication mechanism ensures confidentiality and anonymity without compromising network accountability.
• The architecture supports mutual authentication among all RAN entities, including User Equipment and base stations, improving overall system security.
• The decentralized RAN model enables scalable, on-demand services with built-in billing accountability through immutable blockchain logs.
• The system demonstrates feasibility for deployment in public networks, supporting secure, user-centric, and privacy-preserving mobile services.