Core network element communication method and device, computer storage medium and electronic equipment

Abstract

The invention discloses a core network element communication method and device, a computer storage medium and electronic equipment, and the method comprises the steps: generating a sending end networkelement self-signature and a first business interaction safety secret key according to a sending end network element initialization parameter obtained from a server end, wherein the sending end network element initialization parameter comprises a sending end network element root signature; encrypting the sending end network element root signature according to the first service interaction security key; generating a first authentication certificate according to the sending end network element self-signature and the encrypted sending end network element root signature, and sending the first authentication certificate to the receiving end network element; receiving a second authentication certificate from the receiving end network element, and authenticating the receiving end network elementaccording to the second authentication certificate; and when the sending end network element successfully authenticates the receiving end network element and the receiving end network element successfully authenticates the sending end network element, performing encryption transmission on the service data interacted with the receiving end network element according to the service interaction security key.

Description

Technical field [0001] The present invention relates to the field of mobile communication technology, and in particular to a core network element communication method, device, computer storage medium and electronic equipment. Background technique [0002] The 5G core network defined by the 3rd Generation Partnership Project (3GPP) is divided into different network elements according to functions, such as access and mobility management function (AMF) network elements, authentication server function (AUSF) network elements, etc. , Each network element uses a service-based interface (SBI, Servec Based Interface) to communicate, and the SBI interface is based on the Hypertext Transfer (HTTP) protocol. Communication messages between network elements will traverse the complex network environment and may be insecure. Potential attackers may peek at the content of the message or tamper with it arbitrarily, threatening the security of the 5G core network system. [0003] In order to ensure...

AI Technical Summary

Problems solved by technology

However, since this method needs to transmit certificates on the communication link, and requires each network element to maintain its own and other network element certificates, and also involves mechanisms such as certificate revocation, the overhead requirements for the 5G core network system are relatively large, and there are also Security risks

Images