基于图数据库的5G数据流转安全防护机制

doi:10.11959/j.issn.1000-0801.2021058

Abstract

Abstract:

As the 5G mobile network is closely integrated with government, medical, financial and other industries related to national economy and people’s livelihood, the security of the data carried by 5G network is crucial.5G data and flow scenarios were firstly analyzed, then 5G data was classified.Combining with the protection requirements of the life cycle of data, an innovative 5G data security labeling model based on graph database was proposed, which could meet the protection requirements of static classification and dynamic flow simultaneously.Based on this model, 5G data security protection mechanism was constructed from three aspects of node security, data flow monitoring and data security risk disposal, realizing life-cycle protection of 5G data.

Key words: 5G security, data security, data flow, data category, security model

CLC Number:

TP399

Li SU, Li LU, Xing ZHANG, Chang LIU. Graph database based security protection mechanism of 5G network data flow[J]. Telecommunications Science, 2021, 37(4): 28-36.

Figures/Tables 7

References 23

[1]	ITU-R. IMT vision–framework and overall objectives of the future development of IMT for 2020 and beyond:M.2083-0[S]. 2015.
[2]	黄宇红, 王晓云, 刘光毅 . 5G 移动通信系统概述[J]. 电子技术应用, 2017,43(8): 3-7.
	HUANG Y H , WANG X Y , LIU G Y . Overview of 5G mobile communication system[J]. Application of Electronic Technique, 2017,43(8): 3-7.
[3]	张鉴, 唐洪玉, 刘文韬 ,等. 面向云网融合的电信网安全防护体系参考架构[J]. 电信科学, 2020,36(5): 10-15.
	ZHANG J , TANG H Y , LIU W T ,et al. Reference architecture of the telecom network security protection system for cloud network convergence[J]. Telecommunications Science, 2020,36(5): 10-15.
[4]	方琰崴 . 5G核心网安全解决方案[J]. 移动通信, 2019,43(10): 19-25.
	FANG Y W . 5G core network security solution[J]. Mobile Communications, 2019,43(10): 19-25.
[5]	王全, 方琰崴 . 5G电信云网络安全解决方案[J]. 邮电设计技术, 2018,513(11): 63-68.
	WANG Q , FANG Y W . Security solution in 5G cloud core network[J]. Designing Techniques of Posts and Telecommunications, 2018,513(11): 63-68.
[6]	HASNAT M A , RURNEE S T A , RAZZAQUE M A ,et al. Security study of 5G heterogeneous network:current solutions,limitations ＆ future direction[C]// Proceedings of 2019 International Conference on Electrical,Computer and Communication Engineering (ECCE).[S.l.:s.n.], 2019.
[7]	SINGH K P , RISHIWAL V , KUMAR P . Classification of data to enhance data security in cloud computing[C]// Proceedings of 2018 3rd International Conference On Internet of Things:Smart Innovation and Usages (IoT-SIU).[S.l.:s.n.], 2018.
[8]	AHMAD I , SHAHABUDDIN S , KUMAR T ,et al. Security for 5G and beyond[J]. IEEE Communications Surveys ＆ Tutorials, 2019,21(4): 3682-3722.
[9]	冯登国, 徐静, 兰晓 . 5G 移动通信网络安全研究[J]. 软件学报, 2018,29(6): 1813-1825.
	FENG D G , XU J , LAN X . Study on 5G mobile communication network security[J]. Journal of Software, 2018,29(6): 1813-1825.
[10]	ITU-T 805. Securityarchitectureforsystemsprovidingend-to- end communications[S]. 2003.
[11]	3GPP. System architecture evolution (SAE); security architecture:TS33.501 V16.0.0[S]. 2019.
[12]	3GPP. System architecture for the 5G system (5GS):TS23.501 V15.7.0[S]. 2019.
[13]	3GPP. Procedures for the 5G system (5GS):TS23.502V16.2.0[S]. 2019.
[14]	3GPP. NG general aspects and principles:TS38.410 V16.1.0[S]. 2020.
[15]	3GPP. Technical specification radio access network; NG-RAN;NG layer 1:TS38.411 V15.0.0[S]. 2018.
[16]	3GPP. NG-RAN; NG application protocol (NGAP):TS38.413 V16.1.0[S]. 2020.
[17]	3GPP. Study on management and orchestration architecture of next generation networks and services:TR28.800 V15.0.0[R]. 2018.
[18]	3GPP. Study on management and orchestration of network slicing for next generation network:TR28.801 V15.1.0[R]. 2018.
[19]	3GPP. Study on management aspects of next generation network architecture and features:TR28.802 V15.0.0[R]. 2018.
[20]	3GPP. Study on management aspects of edge computing:TR28.803 V16.0.1[R]. 2019.
[21]	全国信息安全标准化技术委员会. 信息安全技术大数据安全管理指南:GB/T 37973-2019[S]. 2019.
	National Information Security Sandardization Technical Committee. Information security technology—big data security management guide:GB/T 37973-2019[S]. 2019.
[22]	全国信息安全标准化技术委员会. 数据安全能力成熟度模型:GB/T 37988-2019[S]. 2019.
	National Information Security Sandardization Technical Committee. Information security technology—data security capability maturity model:GB/T 37988-2019[S]. 2019.
[23]	赵文, 田永春, 曾浩洋 . 5G安全架构分析[J]. 电讯技术, 2020,60(8): 876-882.
	ZHAO W , TIAN Y C , ZENG H Y . Analysis of 5G security architecture[J]. Telecommunication Engineering, 2020,60(8): 876-882.

Metrics

Recommended 0

No Suggested Reading articles found!

数据平面	数据种类
控制平面	用户标识、鉴权数据、计费数据、签约数据、UE上下文、位置信息、切片信息、会话管理数据、策略数据、NF配置数据等
管理平面	日志、网管接口认证数据、网元状态监控数据、与VNF相关信息、与MANO相关信息、NFV管理编排信息、与切片相关信息、与切片管理系统相关信息、切片管理编排信息等
用户平面	互联网应用数据（即时通信内容、用户上网访问内容等）、电信服务数据（语音、短消息等）、切片业务数据、边缘计算业务数据等

等级	子类及范围	控制平面	用户平面	管理平面
第4级	网络设备及IT系统密码及关联信息	√		√
	用户密码及关联信息	√
	核心网络设备及IT系统资源类数据	√		√
第3级	服务记录和日志信息	√		√
	服务内容和资料数据		√
	位置数据	√	√
	用户网络身份标识数据	√
第2级	终端设备标识和资料	√
	消费信息和账单	√	√
第1级	业务订购关系	√

安全防护等级	数据采集	数据传输	数据存储	数据处理	数据销毁
第4级	错误、问题数据识别	完整性检测恢复机制	完整性检测恢复机制及访问控制机制强度粒度增强	细粒度权限控制；实时监测告警；数据关联、挖掘风险分析	彻底销毁不可恢复
第3级	接入鉴权；认证鉴权	完整性机制	更细粒度的访问控制和完整性机制	更严格的认证及行为监测
第2级	异常行为记录告警	机密性、可靠性	机密性及访问控制	认证、异常行为记录和告警
第1级	—	—	访问控制	—	—

Graph database based security protection mechanism of 5G network data flow

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 23

Related Articles 15

Metrics

Recommended 0

[1]	Yatian LIU, Bowen HU, Maofei CHEN, Dongxin LIU. Study on the 5GC security situational awareness system [J]. Telecommunications Science, 2022, 38(11): 73-85.
[2]	Zhiyong LIU, Zhongjiang HE, Yilong RUAN, Junfeng SHAN, Chao ZHANG. Big data security features and operation practices [J]. Telecommunications Science, 2021, 37(5): 160-169.
[3]	Xiaojun LIU,Juan WU,Xiaoqing XU. Big data architecture analysis and data security fusion technology [J]. Telecommunications Science, 2020, 36(7): 146-155.
[4]	Daoyuan LIU,Keda SUN,Junliang ZHOU,Haidong FAN. Application of fuzzy comprehensive evaluation method in network information security assessment of electric power enterprises [J]. Telecommunications Science, 2020, 36(3): 34-41.
[5]	Zhiqiang YANG,Li SU,Minpeng QI,Bo YANG. Overview and prospect of 5G security [J]. Telecommunications Science, 2020, 36(12): 1-19.
[6]	Hongbin ZHU,Long AN,Mingchen YANG. Research and practice on power big data security governance system [J]. Telecommunications Science, 2019, 35(11): 140-145.
[7]	Boxuan LV,Jingwen LIU,Wei XU,Dan WANG,Wenying NIE,Ming HE. Mobile office system oriented to intelligent terminal [J]. Telecommunications Science, 2018, 34(2): 115-121.
[8]	Shengli ZHOU,Bin CHEN,Lifa WU. Data security protection schema of telecom operators under the environment of big data [J]. Telecommunications Science, 2017, 33(5): 119-125.
[9]	Shuzhen CHEN,Minwei YANG,Yao HE. Research and implementation of data security for mobile terminal based on TEE [J]. Telecommunications Science, 2017, 33(3): 126-133.
[10]	Xiaosong LIU,Yi’an MA. Research and implementation of mobile DPI association algorithm with big data technology [J]. Telecommunications Science, 2017, 33(12): 121-126.
[11]	Xiaojian ZHANG,Yu ZHENG. Multilevel tree optical switching network technology in smart substation [J]. Telecommunications Science, 2015, 31(Z1): 191-196.
[12]	Jiaren Jiang. Virtualization Security, Key Issues of Public Cloud Computing Security [J]. Telecommunications Science, 2015, 31(12): 121-124.
[13]	Jie Chen,Jianwei Liu,Mengmeng Wang,Shuangyu He,Jian Mao. Security Substrate Based Security Management and Control Mecbanism of Reconfigurable Network [J]. Telecommunications Science, 2014, 30(7): 19-25.
[14]	Kun Hu,Di Liu,Minghui Liu. Research on Security Connotation and Response Strategies for Big Data [J]. Telecommunications Science, 2014, 30(2): 112-117.
[15]	Hao Wu,Jiulun Fan,Jianhua Liu,Junsheng Zhang. Cloud Storage Data Protection Mechanism Based on a Fingerprint Cube Algorithm [J]. Telecommunications Science, 2014, 30(11): 110-115.