Methods, systems, and computer readable media for validating subscriber entities against spoofing attacks in a communications network

Abstract

Methods, systems, and computer readable media for validating subscriber entities against spoofing attacks in a communications network are disclosed. One method includes receiving, by a proxy element, a subscriber authentication request message that is sent from an access and mobility management function (AMF) and is directed to a unified data management (UDM) function in a home network, creating, by the proxy element, a record entry including a subscriber identifier and a public land mobile network (PLMN) identifier contained in the subscriber authentication request message, wherein the record entry is stored in an authentication registry database prior to forwarding the subscriber authentication request message to the UDM function. The method further includes receiving, by the proxy element, a subsequent update context request message from the AMF, updating the record entry to include an AMF identifier if the subscriber identifier and the PLMN identifier in the subsequent update context request message respectively match the subscriber identifier and the PLMN identifier in the record entry, and rejecting the subsequent update context request message if the subscriber identifier and the PLMN identifier in the subsequent update context request message fail to match the subscriber identifier and PLMN identifier in the record entry.