智能铁路5G安全技术与策略综述  

Overview of Security Technologies and Strategies for Intelligent Railway 5G

作　　者：李盼盼 吴昊[1,3] 刘佳佳 段莉 卢云龙 LI Panpan;WU Hao;LIU Jiajia;DUAN Li;LU Yunlong(State Key Laboratory of Advanced Rail Autonomous Operation,Beijing Jiaotong University,Beijing 100044,China;School of Electronics and Information Engineering,Beijing Jiaotong University,Beijing 100044,China;Frontiers Science Center for Smart High-speed Railway System,Beijing Jiaotong University,Beijing 100044,China;School of Computer and Information Technology,Beijing Jiaotong University,Beijing 100044,China)

机构地区：[1]北京交通大学先进轨道交通自主运行全国重点实验室,北京100044 [2]北京交通大学电子信息工程学院,北京100044 [3]北京交通大学智慧高铁系统前沿科学中心,北京100044 [4]北京交通大学计算机与信息技术学院,北京100044

出　　处：《计算机科学》2024年第5期1-11,共11页Computer Science

基　　金：中国国家铁路集团有限公司科技研究开发计划(K2022G018)。

摘　　要：数字技术正在重塑各行各业,这是行业发展的必经之路。5G等数字服务技术在为铁路等行业赋能的同时,也带来了一些安全风险。安全是一切服务的先决条件。为促进5G数字服务在智能铁路的创新应用,首先从基站空口、通信、数据、系统、终端和公专网融合应用几个角度,系统梳理了智能铁路5G通信网络面临的安全风险与挑战。然后针对大带宽、高可靠、低时延的新业务场景及网络切片、边缘计算等新技术和大规模异构新型终端以及面向铁路的智能新应用,全面分析了智能铁路5G服务的安全新需求,总结了密码算法、空口安全、隐私、统一认证及漫游等方面的5G安全增强新特性。在此基础上,给出智能铁路5G通信网络在安全认证、物理层安全、终端安全、切片安全、边缘计算安全方面需关注的重点。针对5G专网部署方式,给出基础设施、通信安全、安全管理数据安全、内生安全防御体系方面的建议。Digital technology is reshaping all walks of life,which is the only way for the development of the industry.While digital servitization technologies such as 5G empower industries such as railways,they also bring some security risks.Security is a prerequisite for all services.In order to promote the innovative applications of 5G in intelligent railway,this paper first systematically reviews the security risks and challenges faced by intelligent railway 5G from the perspectives of terminal,air interface,communication,data,system,and public-private network integration.In view of new service scenarios,we analyze the new technologies,new terminals and new applications for railways,and the new requirements of 5G security for smart railways.The new features of 5G security enhancement in aspects of password algorithm,air interface security,privacy,unified authentication,and roaming are also summarized.On this basis,the key points of smart railway 5G security are given,including certification,physical layer security,terminal security,slice security and edge computing security.For 5G private network deployment,recommendations are also given in terms of infrastructure,communication security,data security,and endogenous security defense system.

关 键 词：智能铁路 第5代移动通信系统(5G) 内生安全 策略综述 数字服务 

分 类 号：TN915[电子电信—通信与信息系统]