基于5G的智慧机场网络安全方案设计与安全性分析

邢馨心; 左青雅; 刘建伟

doi:10.11959/j.issn.2096-109x.2023075

您当前的位置：

首页 >

文章列表页 >

基于5G的智慧机场网络安全方案设计与安全性分析

学术论文 | 更新时间：2024-06-03

- 基于5G的智慧机场网络安全方案设计与安全性分析
- 5G-based smart airport network security scheme design and security analysis
- 网络与信息安全学报 2023年9卷第5期页码：116-126
- 作者机构：
  
  1. 北京航空航天大学网络空间安全学院，北京 100083
  2. 北京邮电大学国际学院，北京 100876
- 作者简介：
  
  [ "邢馨心（1999− ），女，河北秦皇岛人，北京航空航天大学硕士生，主要研究方向为密码学、区块链与信息安全" ]
  [ "左青雅（2001− ），女，河北遵化人，主要研究方向为信息安全与电子商务" ]
  [ "刘建伟（1964− ），男，山东莱州人，博士，北京航空航天大学教授、博士生导师，主要研究方向为密码学与网络安全" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(U21B2021);国家自然科学基金;The Natural Science Foundation of China(61972018);国家自然科学基金;The Natural Science Foundation of China(61932014);国家重点研发计划;The National Key R＆D Program of China(2021YFB2700200)
- DOI：10.11959/j.issn.2096-109x.2023075
  中图分类号： TP393
- 网络首发：2023-10，
  
  纸质出版：2023-10-25
- 稿件说明：
移动端阅览
邢馨心, 左青雅, 刘建伟. 基于5G的智慧机场网络安全方案设计与安全性分析[J]. 网络与信息安全学报, 2023,9(5):116-126.

Xinxin XING, Qingya ZUO, Jianwei LIU. 5G-based smart airport network security scheme design and security analysis[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 116-126.
邢馨心, 左青雅, 刘建伟. 基于5G的智慧机场网络安全方案设计与安全性分析[J]. 网络与信息安全学报, 2023,9(5):116-126. DOI： 10.11959/j.issn.2096-109x.2023075.

Xinxin XING, Qingya ZUO, Jianwei LIU. 5G-based smart airport network security scheme design and security analysis[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 116-126. DOI： 10.11959/j.issn.2096-109x.2023075.

摘要

面向智慧机场网络安全方案的实际应用需求，提出了一种基于5G的智慧机场网络安全方案。该方案分析了智慧机场5G场景的安全特点及安全需求，从统一安全管控、网络切片安全、安全监测预警、边缘计算安全、物联网感知节点安全5方面总结了当前场景下存在的安全需求痛点，并设计了基于5G的智慧机场网络安全方案，其功能组成包括面向泛在网络的 5G 网络统一安全管控功能、轻量化的 5G 网络身份认证鉴权功能、面向多业务需求的 5G 网络切片安全防护、基于大数据分析的 5G 网络安全监测预警、基于边缘计算的一体化安全防护功能、基于设备行为分析的感知节点安全防护功能，构建了集业务加密、网络安全、终端可信、身份可信、安全管控于一体的安全平台。此外，分析了现有 5G 认证与密钥协商（AKA， authentication and key agreement）协议中潜在的伪造基站攻击。由于缺少对SN转发的消息的真实性验证，攻击者可以冒充真实的服务网络与用户设备和归属网络进行通信，从而进行基站伪装攻击。这种攻击可能会导致智慧机场网络数据泄露，并遭遇敌手的篡改、欺骗等问题。针对智慧机场网络安全需求和5G认证与密钥协商协议的安全问题，设计了抗攻击的改进5G认证与密钥协商协议，并通过形式化安全模型、安全目标定义与形式化的安全性分析证明了所提方案的抗攻击能力。

Abstract

To meet the security requirements of smart airports

a 5G-based smart airport network security solution was proposed.The security characteristics and security requirements of the 5G scenario in smart airport were analyzed

and the pain points of security requirements in the current scenario were summarized in five aspects:unified security management and control

network slicing security

security monitoring and early warning

edge computing security

and IoT-aware node security.And then a 5G network security system was designed for smart airports.The functional components of this system included 5G network unified security management and control functions for ubiquitous networks

lightweight 5G network identity authentication and authentication functions

5G network slice security protection for multi-service requirements

5G network security monitoring and early warning based on big data analysis

integrated security protection function based on edge computing

and sensory node security protection function based on device behavior analysis.This comprehensive approach built an all-in-one security platform covering business encryption

network security

terminal trustworthiness

identity trustworthiness

and security management and control.Additionally

the potential counterfeit base station attacks in the existing 5G authentication and key agreement (AKA) were analyzed.Due to the lack of authenticity verification of the messages forwarded by the SN

the attacker can pretend to be the real SN to communicate with the UE and the HN

thus carrying out the base station masquerading attack.This kind of attack may lead to the leakage of smart airport network data

and encounter problems such as tampering and deception by opponents.Aiming at the network security requirements of smart airports and the security issues of 5G authentication and key agreement protocol

an improved 5G authentication and key agreement protocol was designed.Formal security models

security goal definitions

and analysis were performed to ensure the robustness and effectiveness of the protocol against attacks.

关键词

Keywords

references

HERRERA J G , BOTERO J F . Resource allocation in NFV:a comprehensive survey [J ] . IEEE Transactions on Network and Service Management , 2016 , 13 ( 3 ): 518 - 532 .

YAN Q , YU F R , GONG Q , et al . Software-defined networking (SDN) and distributed denial of service (DDoS) attacks in cloud computing environments:a survey,some research issues,and challenges [J ] . IEEE Communications Surveys ＆ Tutorials , 2015 , 18 ( 1 ): 602 - 622 .

ZHANG S . An overview of network slicing for 5G [J ] . IEEE Wireless Communications , 2019 , 26 ( 3 ): 111 - 117 .

KEKKI S , FEATHERSTONE W , FANG Y , et al . MEC in 5G networks [J ] . ETSI White Paper , 2018 , 28 ( 2018 ): 1 - 28 .

IMT-2020(5G)推进组 . 5G网络架构设计白皮书 [EB ] .

IMT-2020 (5G) Promotion Group . 5G Network architecture design white paper [EB ] .

IMT-2020(5G)推进组 . 5G网络安全需求与架构白皮书 [EB ] .

IMT-2020 (5G) Promotion Group . 5G network security requirements and architecture white Paper [EB ] .

HUMAYUN M , HAMID B , JHANJHI N Z , et al . 5G network security issues,challenges,opportunities and future directions:a survey [J ] . Journal of Physics:Conference Series.IOP Publishing , 2021 , 1979 ( 1 ): 12 - 37 .

AHMAD I , KUMAR T , LIYANAGE M , et al . Overview of 5G security challenges and solutions [J ] . IEEE Communications Standards Magazine , 2018 , 2 ( 1 ): 36 - 43 .

BEHRAD S , BERTIN E , CRESPI N . A survey on authentication and access control for mobile networks:from 4G to 5G [J ] . Annals of Telecommunications , 2019 , 74 : 593 - 603 .

NGMN . 5G security-network slicing version 1.0,5G security recommendations package# 2:network slicing [S ] . 2016 .

OLIMID R F , NENCIONI G . 5G network slicing:a security overview [J ] . IEEE Access , 2020 , 8 : 99999 - 100009 .

JI X , HUANG K , JIN L , et al . Overview of 5G security technology [J ] . Science China Information Sciences , 2018 , 61 ( 8 ): 081301 .

FAN C , XIONG H , ZHANG H , et al . Analysis of network security and risks prevention strategies of hongqiao airport west terminal [J ] . Comput Inf Sci , 2009 , 2 ( 3 ): 46 - 52 .

PATEL K J . Successful implementation of emerging communication technologies in a mobile-intense organization:a case study of sydney airport [M ] // Handbook of Research in Mobile Business : Technical,Methodological,and Social Perspectives . 2006 : 728 - 739 .

BARTOLI G , FANTACCI R , MARABISSI D . AeroMACS:a new perspective for mobile airport communications and services [J ] . IEEE Wireless Communications , 2013 , 20 ( 6 ): 44 - 50 .

CASADO-VARA R , MARTIN-DEL REY A , AFFES S , et al . IoT network slicing on virtual layers of homogeneous data for improved algorithm operation in smart buildings [J ] . Future Generation Computer Systems , 2020 , 102 : 965 - 977 .

BHATT P R , BHATT R R . Managing change at muhibbah engineering (M) Bhd [J ] . South Asian Journal of Business and Management Cases , 2017 , 6 ( 1 ): 12 - 25 .

STROBEL D . IMSI catcher [J ] . Chair for Communication Security,Ruhr-Universität Bochum , 2007 ,14.

MOROCHO-CAYAMCELA M E , LEE H , LIM W . Machine learning for 5G/B5G mobile and wireless communications:Potential,limitations,and future directions [J ] . IEEE Access , 2019 , 7 : 137184 - 137206 .

MOYSEN J , GIUPPONI L . From 4G to 5G:self-organized network management meets machine learning [J ] . Computer Communications , 2018 , 129 : 248 - 268 .

LI S , DA XU L , ZHAO S . 5G internet of things:a survey [J ] . Journal of Industrial Information Integration , 2018 , 10 : 1 - 9 .

SHAFIQUE K , KHAWAJA B A , SABIR F , et al . Internet of things (IoT) for next-generation smart systems:a review of current challenges,future trends and prospects for emerging 5G-IoT scenarios [J ] . IEEE Access , 2020 , 8 : 23022 - 23040 .

CHETTRI L , BERA R . A comprehensive survey on internet of things (IoT) toward 5G wireless systems [J ] . IEEE Internet of Things Journal , 2019 , 7 ( 1 ): 16 - 32 .

CREMERS C , DEHNEL-WILD M . Component-based formal analysis of 5G-AKA:channel assumptions and session confusion [R ] . 2019 .

BORGAONKAR R , HIRSHI L , PARK S , et al . New adventures in spying 3G ＆ 4G users:locate,track,monitor [C ] // Blackhat . 2017 .

BORGAONKAR R , HIRSCHI L , PARK S , et al . New privacy threat on 3G,4G,and upcoming 5G AKA protocols [J ] . Cryptology ePrint Archive , 2018 .

HE D , ZHANG Y , WANG D , et al . Secure and efficient two-party signing protocol for the identity-based signature scheme in the IEEE P1363 standard for public key cryptography [J ] . IEEE Transactions on Dependable and Secure Computing , 2018 , 17 ( 5 ): 1124 - 1132 .

FERRAG M A , MAGLARAS L , ARGYRIOU A , et al . Security for 4G and 5G cellular networks:a survey of existing authentication and privacy-preserving schemes [J ] . Journal of Network and Computer Applications , 2018 , 101 : 55 - 82 .

HAN C K , CHOI H K . Security analysis of handover key management in 4G LTE/SAE networks [J ] . IEEE Transactions on Mobile Computing , 2012 , 13 ( 2 ): 457 - 468 .

CHEN K , NATARAJAN B B , SHATTIL S . Secret key generation rate with power allocation in relay-based LTE-A networks [J ] . IEEE Transactions on Information Forensics and Security , 2015 , 10 ( 11 ): 2424 - 2434 .

BASIN D , DREIER J , HIRSCHI L , et al . A formal analysis of 5G authentication [C ] // Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . 2018 : 1383 - 1396 .

REMERS C , DEHNEL-WILD M . Component-based formal analysis of 5G-AKA:Channel assumptions and session confusion [C ] // Network and Distributed System Security Symposium (NDSS) . 2019 .

WANG Y , ZHANG Z , XIE Y . Privacy-preserving and standard-compatible AKA protocol for 5G [C ] // USENIX Security Symposium . 2021 : 3595 - 3612 .

MUNILLA J , BURMESTER M , BARCO R . An enhanced symmetric-key based 5G-AKA protocol [J ] . Computer Networks , 2021 ,198:108373.

BRAEKEN A . Symmetric key based 5G AKA authentication protocol satisfying anonymity and unlinkability [J ] . Computer Networks , 2020 ,181:107424.

浏览量

232

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

IKEChecker：语法引导的IKE协议有状态模糊测试

基于区块链的5G物联网数据共享方案

智能合约安全综述

基于粒子群优化算法的5G网络切片功能迁移机制

密文长度可变的Simple Matrix加密方案