Njengenye inkqubo yonxibelelwano ngexesha lentlekele,Iinethiwekhi zabucala ze-LTEukwamkela imigaqo-nkqubo yokhuseleko eyahlukeneyo kumanqanaba amaninzi ukukhusela abasebenzisi abangekho mthethweni ekufikeleleni okanye ekubiweni kwedatha, kunye nokukhusela ukhuseleko lokubonakaliswa komsebenzisi kunye neenkcukacha zeshishini.
Umaleko woMzimba
●Yamkela iibhendi zamaza ezinikezelweyo ukwahlula ngokwasemzimbeni ukufikelela kwisixhobo esineebhendi zamaza ezingavumelekanga.
●Abasebenzisi basebenzisaIWAVE iqhinga lte isisombululoiiselfowuni eziphathwayo kunye namakhadi e-UIM ukuthintela ukufikelela kwisixhobo esingekho mthethweni.
Ileya yeNethiwekhi
●I-algorithm ye-Milenage kunye ne-five-tuple authentication parameters isetyenziselwa ukufezekisa ukuqinisekiswa kweendlela ezimbini phakathi kwe-UE kunye nenethiwekhi.
Xa i-terminal ifikelela kuthungelwano, inethiwekhi iya kuqinisekisa i-terminal ukuthintela abasebenzisi abangekho mthethweni ukuba bafikelele.Kwangaxeshanye, i-terminal iya kuqinisekisa inethiwekhi ukunqanda ukufikelela kwinethiwekhi ye-phishing.
Umzobo 1: I-Algorithm yesiZukulwana esiPhambili
Umzobo 2: Ukuxhomekeka kwiiparamitha zokuqinisekisa
●Imiyalezo yokubonisa ujongano lomoya ixhasa ukhuseleko lwentembeko kunye nokufihlwa, kunye nedatha yomsebenzisi ikwaxhasa ukubethelwa.Ukunyaniseka kunye ne-algorithm yokukhusela i-encryption isebenzisa isitshixo sobude be-128-bit kwaye inamandla amakhulu okhuseleko.Umzobo ongezantsi wesi-3 ubonisa inkqubo yokuveliswa kweeparamitha ezinxulumene nokuqinisekiswa, apho i-HSS kunye ne-MME zimbini iimodyuli ezisebenzayo zangaphakathi zothungelwano lwe-tactical lte.
Umzobo 3: Inkqubo yokuveliswa kweeparamitha zokuqinisekisa inethiwekhi yabucala
Umzobo 4: Inkqubo yokuveliswa kweeparamitha zoqinisekiso lwetheminali
●Xa i4g lte i-terminal yedatha engenazingcingoukuzulazula, ukutshintsha okanye ukufikelela kwakhona phakathi kwe-eNodeBs, inokusebenzisa indlela yokuqinisekisa kwakhona ukuqinisekisa kunye nokuhlaziya izitshixo ukuqinisekisa ukhuseleko ngexesha lokufikelela kwiselula.
Umzobo 5: Ukuphatha okungundoqo xa utshintsha
Umzobo 6: Ukuqinisekiswa kwamaxesha ngamaxesha kweetheminali nge-eNB
●Inkqubo yokuqinisekisa umqondiso
Uqinisekiso luyafuneka xa i-UE iqalisa umnxeba, ifowunelwa, kwaye irejista.Ukufihlakala/ukukhuselwa kwemfezeko kunokwenziwa emva kokuba uqinisekiso lugqityiwe.I-UE ibala i-RES (iiparamitha zokuphendula uqinisekiso kwiSIM khadi), CK (isitshixo sofihlo) kunye ne-IK (isitshixo sokukhusela integrity) ngokusekelwe kwi-RAND ethunyelwe yi-LTE inethwekhi yabucala, kwaye ibhala i-CK entsha kunye ne-IK kwiSIM khadi.kwaye uthumele i-RES emva kwinethiwekhi yabucala ye-LTE.Ukuba inethiwekhi yangasese ye-LTE ibona ukuba i-RES ichanekile, inkqubo yokuqinisekisa iyaphela.Emva koqinisekiso oluyimpumelelo, inethiwekhi yabucala ye-LTE ithatha isigqibo sokuba iphumeze inkqubo yolawulo lokhuseleko.Ukuba ewe, iqalwa yi-LTE inethwekhi yabucala, kwaye ufihlo/ukhuseleko lokuthembeka luphunyezwe yi-eNodeB.
Umzobo 7: Inkqubo yokuqinisekisa umqondiso
Umzobo 8: Inkqubo yokubonisa imo ekhuselekileyo
Uluhlu lweSicelo
●Xa abasebenzisi befikelela, uqinisekiso lokhuseleko luphunyezwa kwinqanaba lesicelo ukuthintela ukufikelela komsebenzisi okungekho mthethweni.
●Idatha yomsebenzisi inokusebenzisa indlela ye-IPSEC yokuqinisekisa ukhuseleko lwedatha yomsebenzisi.
●Xa ingxaki ifunyenwe ngexesha lesicelo, umsebenzisi onengxaki unokunyanzeliswa ukuba ahambe ngaphandle kweintanethi ngokucwangcisa imisebenzi efana nokuqhawula uxhulumaniso kunye nokubulawa okude.
Ukhuseleko lwenethiwekhi
●Inkqubo yoshishino yenethiwekhi yangasese inokuxhuma kwinethiwekhi yangaphandle ngokusebenzisa izixhobo ze-firewall ukuqinisekisa ukuba inethiwekhi yangasese ikhuselwe ekuhlaselweni kwangaphandle.Ngelo xesha, i-topology yangaphakathi yenethiwekhi ikhuselwe kwaye ifihliwe ukukhusela ukubonakaliswa kwenethiwekhi kunye nokugcina ukhuseleko lwenethiwekhi.
Ixesha lokuposa: Apr-25-2024
