一种分布式移动核心网安全架构的设计与研究

Design and Research on Distributed Mobile Core Network Security Protection Architectrue

分析了移动通信核心网的安全现状,在不改变当前核心网协议体系的前提下,提出了一种基于现有通信网络的分布式核心网安全防护架构。该架构通过在核心网中引入网络安全控制、设备访问控制、媒体信令检测等前置功能模块,并对核心网数据库内部的存储结构进行优化,增强了移动通信核心网的安全防护能力,并有利于各功能实体的独立演进。此外还归纳总结了安全防护模块中需要研究的关键技术。

With not change on the current protocols system of mobile core network, a distributed core network security protection architecture is proposed. By introducing some anterior-set function modules, such as network security control, access control, media and signaling detection into the core network and optimizing the the store structure of the core database, the security protection architecture could enhance security protection capability of the core network. Each function module could facilitate independent advancement. Finally, this paper sums up the key technologies in different security protection module that need to be researched.