5G • Security

SUCI

Subscription Concealed Identifier

Asymmetrically encrypted identity token transmitted over the air to prevent identity tracking and eavesdropping.

Technical Explanation

When attaching to the network, the USIM encrypts the SUPI using the operator's public key (stored in the SIM) and an ephemeral Diffie-Hellman key pair, producing a fresh SUCI every time. Even if intercepted over the air, the SUCI cannot be decrypted or linked to previous sessions by rogue IMSI-catchers.

Key Functions

  • Asymmetrically encrypted temporary identity concealing the true SUPI
  • Generated using operator's public key and ECIES elliptic curve cryptography
  • Changes dynamically on every transmission, rendering identity tracking impossible
Specifications
3GPP TS 33.501
Interfaces
UuN1

Related 5G Concepts

Want to memorize 5G concepts like this one?
Study it with SuperMemo SM-2 spaced repetition flashcards.
Practice 5G Flashcards