Enhancing Security and Privacy in 3GPP E-UTRAN Radio Interface

We focus the security and privacy threats in radio interface between evolved node B (eNB, "base station") and user equipment (UE). We identify new threats including several user tracking attacks by various information in MAC and RRC signalling messages, and an active attack with false buffer status reports. Finally, we propose a solution including confidentiality of RRC layer messages, periodic C-RNTI reallocation on one cell; discontinuous sequence number in RRC message, and one time access token for MAC buffer status report.