摘要
5G+工业互联网安全以5G自身安全能力为基础,结合工业互联网的实际应用场景,参考网络安全等级保护相关指导,通过融合创新,将零信任、内生安全、微分段等前沿安全技术融入5G工业互联网场景安全方案中,以定制化的安全能力来满足工业互联网整体的安全防护需求。这些定制化的安全能力包括:差异化切片满足企业网络安全隔离需求,用户面功能(UPF)下沉+灵活以太网(FlexE)可靠地支持企业低时延业务需求,多重机制提供企业端到端数据安全保障,零信任架构增强企业自主控制接入安全策略,以及态势感知保障网络整体安全能力。
Based on the security capability of 5G network,5G+industrial Internet security is deeply combined with the actual application scenarios of the industrial Internet.At the same time,it also complies with the relevant requirements of network security level protection.Zero trust networks,endogenous security,differential segment and other cutting-edge security technologies are integrated into the 5G industrial Internet scenario security scheme.Through customized security capabilities,security researchers can meet the overall security protection needs of the industrial Internet.These customized security capabilities include:The differential slicing meets the needs of enterprise network security isolation;the user port function(UPF)sinking+flexible Ethernet(FlexE)reliably supports the enterprise low latency business requirements;the multi-mechanism provides the enterprise end-to-end data security guarantee;the zero trust architecture enhances the enterprise independent control access security strategy,and the situation perception guarantees the network overall security ability.
作者
王继刚
王庆
滕志猛
WANG Jigang;WANG Qing;TENG Zhimeng(ZTE Corporation,Shenzhen 518057,China)
出处
《中兴通讯技术》
2020年第6期14-20,共7页
ZTE Technology Journal
关键词
5G
工业互联网
可定制安全能力
零信任网络
内生安全
5G
industrial Internet
customizable security capabilities
zero trust networks
endogenous security