5G网络切片技术在密码系统中的应用研究  

The Application of 5G Virtual Slicing Technology in Cryptosystem

作　　者：王俊[1] 蒋涛[1] 肖飞[1] 严大媛 WANG Jun;JIANG Tao;XIAO Fei;YAN Dayuan(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《信息安全与通信保密》2023年第2期1-16,共16页Information Security and Communications Privacy

基　　金：国家科技重大专项“新一代宽带无线通信网”(No.2017ZX03001018);四川省科技重大专项(No.2017GZDZX0001)。

摘　　要：随着ICT融合趋势愈演愈烈,传统的密码应用模式已经适应不了当前信息技术的发展,以5G网络为代表的新型信息系统对密码应用的要求与密码对外提供服务能力之间的矛盾日益显著,迫切需要在密码对外提供服务的模式上进行革新,以满足当前和未来的应用需求。作为5G关键技术之一的网络切片技术的出现和应用,正好为解决这一矛盾带来了契机。通过对网络切片技术的理解和应用,提出密码系统虚拟化切片概念,并给出相应的应用场景解决方案,最后给出了在密码系统虚拟化切片间的安全隔离、控制面差异化安全防护、用户面差异化安全防护以及管理面差异化安全管理等方面各种试验验证的结果,证明了方案的优势,为5G网络切片技术在密码系统中的应用提供了理论支撑。With the increasing trend of ICT convergence,the conventional cryptographic application model can no longer adapt to the current development of information technology.The contradiction between the requirements of new information systems for cryptographic applications represented by 5G networks and the ability of cryptographic external service provision is becoming increasingly prominent,and there is an urgent need to innovate in the mode of cryptographic external service provision to meet the current and future application requirements.As the key technology of 5G,the emergence and application of network slicing technology brings an opportunity to solve this contradiction.By abstracting and applying the essence of network slicing technology,the concept of cryptosystem virtualization slicing is put forward,and the corresponding solution for application scenario is given.Finally,the results of various experimental verifications on security isolation between virtual slices of cryptosystem,differential security protection of control plane,differential security protection of user plane and differential security management of management plane are presented,which prove the advantages of the scheme and provide theoretical support for the application of 5G network slicing technology in cryptosystem.

关 键 词：5G 网络切片 虚拟化切片 密码系统 密码系统切片 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]