铁路5G公专网应用安全方案研究

Study on Security Scheme for Railway 5G Public-private Network Application

为保证5G公网能高效、安全地服务于铁路各应用业务,规避铁路5G专网无线频谱资源的限制,充分发挥5G技术的先进性,助力智能铁路发展,对5G公网专用网络的安全方案进行研究。首先,对比3种铁路5G公网专用方案,分析铁路5G切片逻辑专网方案面临的安全风险;然后,调研并归纳总结适宜使用5G公网承载的铁路应用业务及其在业务连续性、丢包率等方面的安全需求,梳理5G公网专用网络在用户设备、运营与支撑系统、云平台等设备及外部边界、切片等方面的安全要求;最后,围绕铁路5G切片逻辑专网需解决的安全问题,设计切片网络的安全方案。该方案针对铁路5G切片逻辑专网从切片端到端隔离、切片接入安全、切片管理安全等方面提出了建议,可为未来铁路5G公网专用网络建设提供参考。

In order to ensure that 5G public network can efficiently and safely serve the railway application services,avoid the limitation of wireless spectrum resources of railway 5G private network,give full play to the advancement of 5G technology,and assist the development of intelligent railway,this paper studies the security scheme of 5G public-private network.Firstly,this paper compares three schemes of railway 5G public-private network and analyzes the security risks faced by the railway 5G slicing logic private network.Secondly,it investigates and summarizes the railway application services suitable for 5G public networks and their security requirements in terms of business continuity,packet loss rate,etc.,and sorts out the security requirements of 5G publicprivate network in terms of user equipment,operation and support system,cloud platform and other equipment,as well as external boundaries,slicing,etc..Finally,it designs a security scheme for the railway 5G slicing logic private network to address the security issues and puts forward suggestions on end-to-end isolation,access security,and management security of railway 5G slicing logic private network,which can provide reference for the future construction of railway 5G publicprivate network.