铁路5G-R网络安全技术研究  

Research on Railway 5G-R Network Security Technology

作　　者：章松 王玮[1,2] 田之继 马俊[1] 孙斌[2,3] ZHANG Song;WANG Wei;TIAN Zhiji;MA Jun;SUN Bin(Wireless Product Business Department,ZTE Corporation,Xi'an Shaanxi 710114,China;Key Laboratory of Railway Industry of Broadband Mobile Information Communication,Beijing 100044,China;School of Electronics and Information Engineering,Beijing Jiaotong University,Beijing 100044,China)

机构地区：[1]中兴通讯股份有限公司无线产品经营部,陕西西安710114 [2]宽带移动信息通信铁路行业重点实验室,北京100044 [3]北京交通大学电子信息工程学院,北京100044

出　　处：《中国铁路》2024年第8期62-68,共7页China Railway

基　　金：中兴产学研合作项目(IA 20231204002)。

摘　　要：5G-R网络即将进入建设阶段,且铁路专网涉及行车安全,对网络安全要求极高,亟须对5G-R网络安全开展研究。为全面提升5G-R端到端安全防护水平,通过总结GSM-R网络的安全要求,分析5G-R网络面临的安全风险和安全需求,提出5G-R网络安全体系架构;从5G-R基础设施安全、终端接入安全、组网安全、运维安全、数据安全和网络边界安全等方面阐述安全技术方案,并提出通过5G-R安全态势感知系统,实现从5G-R系统基础安全技术到系统内生安全能力全面提升的方案。The 5G-R network is on the verge of entering the construction stage.Given that the private network for railways is closely linked to train operation safety,there are extremely high requirements for network security.As a result,there is an urgent need to conduct research on 5G-R network security.To comprehensively enhance the end-to-end security protection of the 5G-R network,this study summarized the security requirements of the GSM-R network,analyzed the security risks and requirements faced by the 5G-R network,and proposed an overall 5G-R network security architecture.The security technical schemes were detailed from various aspects:5G-R infrastructure security,terminal access security,networking security,operation and maintenance security,data security,and network boundary security.Additionally,the study proposed leveraging the 5G-R security situational awareness system to achieve a comprehensive upgrade from basic security technologies to endogenous security capabilities within the 5G-R system.

关 键 词：5G-R 网络安全 安全风险 内生安全 态势感知 

分 类 号：TN929.5[电子电信—通信与信息系统] U285.2[电子电信—信息与通信工程]