TETRA数字集群网安全保障体系分析

从用户的可控性、通信的保密性和服务的可用性三个方面,对TETRA数字集群网安全保障体系进行了分析。首先,从鉴权、隐藏用户识别码、允许与禁用机制三方面探讨了如何对用户进行识别、保护和管控;其次,比较了空中接口加密、端到端加密、虚拟专网三种手段如何实现通信保密;最后,分析了物理环境、系统构架、频率保护、拥堵控制等安全因素对网络服务可用性的影响。并针对国内应用现状与存在问题,就如何加强中国TETRA数字集群网安全保障体系建设提出几点建议。

Analysis on Security Architecture for TETRA Digital Trunking Network

This paper,from the three aspects of controllability,security and availability,analyzes the security architecture of TETRA digital trunking network.It first discusses how to recognize,protect and control users by applying authentication,userID concealment and enable/disable mechanism;then compares the three measures of air interface encryption,end-to-end encryption and virtual private network for communication privacy.Finally,discusses the influence of security factors on network availabity,such as physical environment,system architecture,frequency supervision and traffic control.Meanwhile,it also proposes some sugestions on how to improve the TETRA security system for at-home networks.