增强的七号信令安全网关及信令防护技术研究

Enhanced Signaling System No.7 Security Gateway and Signaling Protection Technology Resarch

3GPP针对移动信令网安全威胁提出了七号信令安全网关来保证七号信令TCAP用户层协议传递中的机密性和完整性。但七号信令安全网关除加密之外不对TCAP用户层协议做任何处理,使得移动核心网仍存在着安全威胁。文章提出了一种增强的七号信令网关,增加了应用层安全防护层,阻止应用层信令的非法访问,增加信令路由隐藏等功能,提高了移动核心网信令防护能力。

3GPP has proposed Signaling System No.7 Security Gateway to ensure security and integrity of TCAP user layer protocol transfer,to eliminate the security threats to SS7.But Signaling System No.7 Security Gateway does not process its TCAP user layer protocol message,security threats to core network are still there.This paper presents an enhanced Signaling System No.7 Security Gateway with a user layer protocol protection module added,which is able to prevent user layer from visiting network entity illegally and promote the signaling protection ability in mobile core network.