5G network service data end-to-end encryption method and system based on IPSEC technology

The invention discloses a 5G network service data end-to-end encryption method and system based on an IPSEC technology. The method mainly comprises the steps of 5G main authentication enhancement, network layer IPSEC establishment, service encryption establishment, service data encryption, network layer encryption, network layer decryption, service data decryption and the like. The system can further enhance the security and confidentiality of service data on the basis of commercial 5G network layer communication security protection capability provided by IPSEC. 一种基于IPSEC技术的5G网络业务数据端到端加密方法及系统，主要包括：5G主认证增强、网络层IPSEC建立、业务加密建立、业务数据加密、网络层加密、网络层解密以及业务数据解密等步骤。该系统能够在IPSEC提供的商用5G网络层通信安全防护能力的基础上，进一步增强业务数据的安全保密性。