增强的七号信令安全网关及信令防护技术研究  

Enhanced Signaling System No.7 Security Gateway and Signaling Protection Technology Resarch

作　　者：朱可云[1] 俞定玖[1] 汤红波[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002

出　　处：《信息工程大学学报》2010年第5期513-516,共4页Journal of Information Engineering University

基　　金：国家863计划资助项目(2008AA011003)

摘　　要：3GPP针对移动信令网安全威胁提出了七号信令安全网关来保证七号信令TCAP用户层协议传递中的机密性和完整性。但七号信令安全网关除加密之外不对TCAP用户层协议做任何处理,使得移动核心网仍存在着安全威胁。文章提出了一种增强的七号信令网关,增加了应用层安全防护层,阻止应用层信令的非法访问,增加信令路由隐藏等功能,提高了移动核心网信令防护能力。3GPP has proposed Signaling System No.7 Security Gateway to ensure security and integrity of TCAP user layer protocol transfer,to eliminate the security threats to SS7.But Signaling System No.7 Security Gateway does not process its TCAP user layer protocol message,security threats to core network are still there.This paper presents an enhanced Signaling System No.7 Security Gateway with a user layer protocol protection module added,which is able to prevent user layer from visiting network entity illegally and promote the signaling protection ability in mobile core network.

关 键 词：通用移动通信系统 七号信令 七号信令安全网关 事务处理能力应用部分 事务处理能力应用部分安全 防护 

分 类 号：TN918.91[电子电信—通信与信息系统]