Novel 5G cellular network channel security system and security realization method

The invention discloses a novel 5G cellular network channel security system and a security realization method. Three new entities, including a security entity (SE), a distributed security gateway (SGW) and a local security agent (LSA) are added on a 5G heterogeneous cellular network architecture, an...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: SONG XIANGMEI, YIN XING, ZHAO HUI, WANG LIANGMIN, YAO JIAYING, HAN ZHIGENG, CHEN XIANGYI
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses a novel 5G cellular network channel security system and a security realization method. Three new entities, including a security entity (SE), a distributed security gateway (SGW) and a local security agent (LSA) are added on a 5G heterogeneous cellular network architecture, an HIP-based control tunnel is established between an SGW and an LSA, and a HIP-based data tunnel is established between the LSAs. In this way, various security functions are provided, including confidentiality, anti-replay service and the like, so that the security of the communication channel is ensured by using the SDN technology, and the communication channel of the proposed architecture is protected from IP-based attack under the condition that the network performance influence is relativelysmall. 本发明公开种新型的5G蜂窝网信道安全系统及安全实现方法,在5G异构蜂窝网络架构上增加安全实体(SE)、分布式安全网关(SGW)和本地安全代理(LSA)三个新实体,通过在SGW和LSA之间建立基于HIP的控制隧道,在LSA之间建立基于HIP的数据隧道,提供多种安全功能,包括保密性、抗重播服务等,从而利用SDN技术保障了通信信道安全,并在网络性能影响较小的情况下,保证了所提出架构的通信信道免受基于IP的攻击。