5G网络能力开放安全架构和流程研究

Research on Security Architecture and Procedure of 5G Network Capability Exposure

5G网络能力开放的业务需求随着5G网络的规模商用正不断涌现,对网络能力开放的安全保障也逐渐成为运营商重点关注的问题,基于此,对5G网络能力开放的安全架构和流程进行了研究。首先,介绍了3GPP定义的网络能力开放框架CAPIF的相关功能实体和架构;其次,分析了CAPIF安全架构中各个接口的安全策略和流程,并对运营商针对各个接口的安全策略进行了建议;最后,对CAPIF安全架构的发展进行了展望。

The business requirements of 5G network capability exposure are emerging with the scale commercialization of 5G networks,and the security of network capability exposure is becoming a key concern for operators.Based on this,the security architecture and procedure of 5G network capability exposure is studied.Firstly,the relevant functional entities and architecture of CAPIF which is a network capability exposure framework defined by 3GPP are introduced.Secondly,the security policies and procedures of interfaces in the CAPIF security architecture are analyzed,and the security policies of operators for interfaces are suggested.Finally,the development of the CAPIF security architecture is prospected.