5G工业互联网边缘节点安全接入密码应用技术方案  

A Technical Solution for 5G Industrial Internet Edge Node Secure Access Cryptographic Application

作　　者：鲁华伟 张雪松 LU Huawei;ZHANG Xuesong(China Unicom Digital Tech Co.,Ltd.,Beijing 100084,China)

机构地区：[1]联通数字科技有限公司,北京100084

出　　处：《信息安全与通信保密》2024年第12期47-56,共10页Information Security and Communications Privacy

摘　　要：随着5G、物联网等技术的兴起,企业业务应用架构和网络环境发生了重大的变化,工业互联网、远程接入、大量智能设备接入和使用,使传统的基于边界防护的网络安全方案难以抵御一些高级持续性威胁攻击,工业互联网正在面临严峻的安全挑战。通过分析工业互联网的安全需求、风险与挑战,提出了5G工业互联网边缘节点安全接入密码应用设计方案,包括工业互联网安全接入服务器设计和边缘节点安全接入终端设计,为工业设备接入5G工业互联网提供了基于密码技术的设备身份认证、数据传输加密、数据完整性保护、抗篡改攻击等安全保护能力。With the rise of technologies such as 5G and IoT(Internet of Things),significant changes occurr in enterprise business application architectures and network environments.Due to the industrial Internet,remote access,and the extensive connection and use of intelligent devices,the conventional boundary-based cyber security solutions are inadequate in defending against APT(Advanced Persistent Threat),the industrial Internet is facing severe security challenges.This paper analyzes the security requirements,risks and challenges of industrial Internet,and presents a design scheme for the secure access of edge nodes in 5G industrial Internet using cryptographic applications,including industrial Internet security access server design and edge node secure access terminal design,providing industrial devices with security protection capabilities such as cryptography-based device identity authentication,data transmission encryption,data integrity protection,and resistance to tampering attacks when accessing the 5G industrial Internet.

关 键 词：工业互联网 边缘节点 密码应用 安全接入终端 安全接入服务器 超级SIM卡 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]