5G network slice instance dynamic switching method and function

Abstract

The invention provides a 5G network slice instance dynamic switching method and function. The method comprises the following steps: collecting network state information of a to-be-protected network, wherein the network state information comprises security threat information and connection state information between user equipment and an access network slice instance; judging whether the user equipment meets a set network slice instance switching condition or not according to the security threat information and the connection state information; if yes, initiating a network slice instance switching request to a network slice selection function, wherein the request comprises user equipment information, original network slice instance information and a new network slice instance selection standard; and forwarding the received response message to the network management function, so that the network management function notifies the original network slice instance and the new network slice instance to switch the network slice instance. The dynamic switching function comprises a network state information collection module, a security perception module, a timer module and a switching requestmodule. According to the invention, active defense can be realized, and the communication security of the UE is ensured.

Description

technical field [0001] The present invention relates to the technical field of mobile communication network security protection, in particular to a method and function for dynamic switching of 5G network slice instances. Background technique [0002] Facing 2020 and the future, the fifth-generation mobile communication network (5G) will meet a variety of application scenarios, and the current single network architecture is difficult to meet differentiated performance indicators. Network slicing (Network Slicing, NS), as a new network technology, can provide customized virtual networks for different application requirements. It can not only provide users with quality-guaranteed network services, but also improve resource utilization efficiency by sharing resources. ,cut costs. The implementation of network slicing is based on Network Function Virtualization (NFV). NFV can realize the separation of software and hardware of traditional network element devices, and run network ...

AI Technical Summary

Problems solved by technology

[0006] DOS attack: The attacker exhausts the resources of the device by sending a communication message with reasonable parameter configuration, causing the paralysis of the single-point network device, and the network cannot provide services normally

[0007] ETSI and other related organizations have designed corresponding protection measures for the above attack methods, but so far, the single static protection method is not ideal enough

Images