Research on Distributed 5G Core Network with Security Domain in Industrial Scenarios

As the commercialization of 5G accelerates, industrial scenarios are also beginning to consider 5G networks as the key network infrastructure for achieving digital transformation. However, existing industry-specific 5G private network solutions, such as cloud-native 5G core networks and China Mobile's partially decentralized core network functions, face certain security technology challenges. To fill this gap, this paper proposes the construction of a Cloud-edge-collaboration 5G Service architecture (Cloud5GS) with security, offering a new way of providing private network services to accelerate the application of 5G networks in industrial scenarios. In the Cloud5GS, this paper proposes a method for constructing security domains, including IPSEC-based cloud-edge link data encryption, Cloud-Edge node security mutual trust mechanism, and edge node disconnection autonomy mechanism, to encrypt configuration files, subscription data, network status, and edge node storage within Cloud5GS. Finally, this paper develops a prototype for the verification.