Core network element communication method, device, computer storage medium and electronic equipment

Abstract

The invention discloses a communication method, device, computer storage medium and electronic equipment of a core network element. The method includes: generating a self-signature of the network element at the sending end according to initialization parameters of the network element at the sending end obtained from a server, and first The service interaction security key; the initialization parameter of the network element at the sending end includes the root signature of the network element at the sending end; the root signature of the network element at the sending end is encrypted according to the first service interaction security key; according to the self-signature of the network element at the sending end, and The encrypted root signature of the sending-end network element generates the first authentication certificate, and sends the first authentication certificate to the receiving-end network element; receives the second authentication certificate from the receiving-end network element, and authenticates the receiving-end network element according to the second authentication certificate Perform authentication; when the sending-end network element authenticates the receiving-end network element successfully, and the receiving-end network element authenticates the sending-end network element successfully, according to the service exchange security key pair and the service exchanged between the receiving-end network element Data is transmitted encrypted.

Description

technical field [0001] The present invention relates to the technical field of mobile communication, in particular to a core network element communication method, device, computer storage medium and electronic equipment. Background technique [0002] The 5G core network defined by the 3rd Generation Partnership Project (3GPP, 3rd Generation Partnership Project) is divided into different network elements according to functions, such as access and mobility management function (AMF) network elements, authentication server function (AUSF) network elements, etc. , each network element uses a service-based interface (SBI, Servec Based Interface) to communicate, and the SBI interface is based on a hypertext transfer (HTTP) protocol. The communication messages between network elements will pass through the complex network environment, which may be unsafe. Potential attackers will peek at the content of the messages, or willfully tamper with them, threatening the security of the 5G c...

AI Technical Summary

Problems solved by technology

However, since this method needs to transmit certificates on the communication link, and requires each network element to maintain its own and other network element certificates, and also involves mechanisms such as certificate revocation, the overhead requirements for the 5G core network system are relatively large, and there are also Security risks

Images