Method for enhancing cross-network access security, device thereof and system

Abstract

The embodiment of the invention provides a method for enhancing cross-network access security, a device thereof and a system. In a scenario in which a UE accesses a second network through a first network, according to the embodiment of the invention, the security event (such as the authentication condition) of the UE is recorded in the second network, and the decision result is determined for thesubsequent behavior of the UE; and the first network of the decision result is notified, so that the first network performs security processing on subsequent behaviors of the UE for the second network, and security linkage of the first network and the second network is realized. The malicious UE is managed near the first network, the communication load of the first network and the second network is reduced, and the network security of the second network is guaranteed.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to a method, device and system for enhancing cross-network access security. Background technique [0002] In order to meet the communication needs of vertical industries, 5G communication technology supports Non-Public Networks (NPN). Only authorized users can access the non-public network, and authorized users can access both the NPN network and the public land mobile network (PLMN) network. 5G communication technology supports features such as roaming, mobility, and service continuity of UEs between NPN and PLMN networks. For example, UEs can access non-public networks through PLMN networks, or access PLMN networks through non-public networks. [0003] In the existing mechanism, the NPN network is deployed based on the 5G system architecture. For the scenario where an authorized user can access both the NPN network and the PLMN network, credentials of the NP...

AI Technical Summary

Problems solved by technology

If a malicious UE continues to initiate an authentication request to the second network through the first network even though it cannot pass the authentication of the second network, it will cause a great burden on the networks of the first network and the second network

If a large number of UEs are captured and at the same time frequently initiate authentication requests to the second network, it is easy to cause distributed denial of service (distributed denial of service, DDoS) attack

Images