七号信令系统的安全性设计

在Internet和电信网络攻击事件日益频繁的情况下,由于七号信令(SS7)协议是完全公开的,SS7的各层消息也是完全透明的,因而需要考虑信令网的安全性设计问题。介绍了SS7底层的安全脆弱性,提出基于消息传递单元(MSU),采用类似于Internet中IKE与IPSec的信令密钥交换及信令安全封装协议,以解决SS7的安全性问题。

Design of Security in Signalling System 7

The attack events in Internet and telecommunication networks happen frequently. Because the protocol of SS7 is completely open and the message in SS7 is plain to public, it is necessary to consider the security designs in SS7.In this paper, the weakness of SS7 will be described firstly, and then a signalling system key exchange protocol(SSKE) and a signalling security(SSec) are proposed to solve the security in SS7. The scheme is based on the Message Signalling Unit(MSU) and analogous to IKE and IPSec in Internet.