QUICUP: Secure User Plane Tunneling for Cellular Networks
Key: WRG+25
Author: Lisa Wernet, Sebastian Rust, Silas Gerock, Tobias Meuser, Björn Scheuermann
Date: October 2025
Kind: In proceedings
Book title: Proceedings of the 50th Annual IEEE Conference on Local Computer Networks (LCN)
Abstract: Integrating new services and applications like edge computing in current and future generations of cellular networks leads to new challenges regarding the security and privacy of user plane traffic. The GPRS Tunneling Protocol in the user plane (GTP- U) was first introduced within 2G networks and is still used in 5G and beyond cellular networks. This protocol lacks integrated security mechanisms such as tunnel endpoint authentication or integrity validation of encapsulated user data and depends on deployment of IPSec and implementation-specific validation proce- dures to attain baseline security guarantees. Furthermore, GTP-U provides limited extensibility, hindering advanced transport layer optimizations necessary for modern network demands. In this paper, we propose QUICUP, a novel tunneling solution for GTP-U traffic based on QUIC. QUIC enhances web communica- tion through integrated application-layer encryption which enables strong binding to user sessions and significantly reduces the attack surface on shared network infrastructure. Our research presents a mapping between GTP-U and QUICUP, and the prototypical implementation within a 5G core network demonstrates QUIC’s capability to effectively replace GTP-U as a tunneling protocol in mobile networks. Ultimately, the proposed transition aligns with ongoing industry movements toward protocol modernization and to better accommodate security and privacy within mobile networks.
View Full paper (PDF) | Download Full paper (PDF)

The documents distributed by this server have been provided by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, not withstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.