5G校园专网的安全接入和授权管理研究

校园网用户具有基数大、流动性强、分布广等特性，用户的可控安全接入和授权管理是5G专网落地校园的重点和难点。首先介绍5G校园专网安全接入和授权管控的必要性以及关键技术、组网方式、优点及应用框架，其次讨论5G校园专网的常见安全风险，并分析几种安全接入方案的优缺点，最后提出一种基于安全管控装置的安全接入和授权管理方案，并进一步结合零信任网关构造更为安全可靠的5G专网安全系统，从而实现5G校园专网用户的安全无感接入以及基于用户身份与应用级别细颗粒度的授权管控。

Research on security access and authorization management based on 5G campus private network

The users of campus network possesses characteristics such as a large scale, high mobility, and wide distribution. The controlled secure access and authorization management of users is a key focus and challenge in implementing 5G private networks on campus. Firstly, the necessity of secure access, authorization management and control for 5G campus private networks is introduced, along with the key technologies, network deployment methods, advantages, and application framework of 5G campus private networks. Secondly, common security risks associated with 5G campus private networks are discussed, and the advantages and disadvantages of several security access solutions are discussed. Lastly, a security access and authorization management solution based on security management and control devices is proposed. Furthermore, by integrating zero-trust gateways, a more secure and reliable zero-trust 5G private network security system is constructed, which enables secure and seamless access, with fine-grained authorization control based on user identity and application level for users of 5G campus private networks.