What are the new LTE security requirements and standards for 5G core network and edge computing?

1 5G Core Network

The 5G core network is the central part of the 5G system that provides the main functions and services for the network. It is composed of cloud-native and service-based components that enable high scalability, flexibility, and efficiency. However, it also exposes new attack surfaces and vulnerabilities for LTE security. Therefore, the 5G core network needs to implement new security mechanisms and protocols that can protect the network from malicious intrusions, data breaches, and denial-of-service attacks. Some of these mechanisms include network slicing, mutual authentication, encryption, integrity protection, and anomaly detection.

2 5G Edge Computing

The 5G edge computing is the concept of bringing the computing and storage resources closer to the end-users and devices at the edge of the network. It aims to reduce latency, bandwidth, and energy consumption, and to enable new applications and services that require real-time processing and low delay. However, it also poses new security challenges for LTE, as the edge nodes and devices may be more exposed to physical and cyber attacks, and may have less resources and capabilities to defend themselves. Therefore, the 5G edge computing needs to adopt new security solutions and standards that can ensure the confidentiality, integrity, and availability of the data and services at the edge. Some of these solutions include edge security gateways, distributed firewalls, end-to-end encryption, access control, and device authentication.

3 LTE Security Enhancements

To address the security requirements and challenges of 5G core networks and edge computing, LTE needs to upgrade its security features and capabilities. The 3GPP standards that define LTE security architecture, procedures, and algorithms need to be updated and extended to support the new 5G scenarios and use cases. Enhancing the subscriber authentication and key agreement (AKA) protocol for network slicing and multi-access scenarios, as well as stronger encryption and integrity algorithms for the 5G core network and edge computing are some of the proposed enhancements. Additionally, enhanced security context management is necessary for seamless handover and mobility across different network domains and access technologies, while enhanced security assurance and verification provide trustworthiness and compliance for the 5G core network and edge computing components and services.

4 LTE Security Standards

To ensure the interoperability and compatibility of the LTE security enhancements, common and harmonized security standards are necessary to define the security requirements, specifications, and best practices for the 5G core network and edge computing. The 3rd Generation Partnership Project (3GPP), the European Telecommunications Standards Institute (ETSI), and the GSM Association (GSMA) are involved in developing and maintaining these standards. 3GPP is responsible for defining the security architecture, procedures, and algorithms for LTE and 5G. ETSI is responsible for defining the security requirements, guidelines, and testing methods. Lastly, GSMA is responsible for defining the security recommendations, best practices, and certification schemes.

5 LTE Security Challenges

Despite the new security requirements and standards for the 5G core network and edge computing, there are still some security challenges and issues that need to be addressed and resolved for LTE. The complexity and diversity of the 5G network architecture and services can introduce new security risks, while the compatibility and coexistence of the LTE and 5G security mechanisms and protocols may cause conflicts or gaps in the security protection. Additionally, the scalability and performance of the LTE security solutions may not be able to cope with the high volume and velocity of data and traffic in the 5G network. Finally, the privacy and data protection of LTE users and devices could be compromised by 5G core network and edge computing applications and services.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?