A management system, method and apparatus for network security

Abstract

The embodiment of the invention discloses a management system, method and apparatus for network security. The system includes UE, an AN, a network function selection module and at least two authentication modules. The UE is used to send a first service request to the network function selection module, wherein the first service request carries authentication protocol information. The network function selection module is used to select a target authentication module according to the authentication protocol information and send a second service request to the target authentication module; and thetarget authentication module is used to perform mutual authentication with the UE; and the target authentication module is further used to determine first security configuration according to a specified security policy and send the first security configuration to the AN. The AN is used to determine second security configuration according to the first security configuration or the specified security policy and send the second security configuration to the UE. The technical solution provided by the invention can meet the security requirements of differentiated authentication protocols and security policies of the network so as to improve network security.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a network security management system, method and device. Background technique [0002] In a 4G network, in order to support services with different requirements, network leasing, network sharing, etc., multiple dedicated core networks can share the access network. Each dedicated core network is optimized in terms of function and performance for specific services to meet differentiated requirements for service functions and performance. Such as figure 1 , figure 1 It is a schematic diagram of the 4G dedicated core network architecture. The access network can be connected to multiple operators, each operator can have a dedicated core network (English: Dedicated Core Network, DCN), and multiple DNCs share the access network. User equipment (English: User Equipment, UE) is connected to the access network, and realizes interaction with business services of dedicated...

AI Technical Summary

Problems solved by technology

The existing technology does not consider information such as the authentication protocol or algorithm supported by the UE when selecting the AU, lacks relevant design, and cannot better guarantee network security

Images