Design And Implementation Of GSM Exchange Network Element Security Access

With the development of the mobile communications technology, the emergences of new technology, new equipment, and new business make the preservation and management of GSM mobile communication network more complicated. Initiated by xxx Group last year, six experimental projects aims for security construction to raise security level of mobile network, with defensibility against internet attack, virus invasion, and information stealing to prevent the spread of vicious information and ensure the safe operation of mobile network. Meanwhile along with the evolution of GSM mobile communication network system, the core network equipment gradually evolves from electro-circuit exchange from IP exchange. Most of the exchange equipment adopts the Windows NT as the basic operation system, and the TCP/IP protocol as the internet transmission protocol. Due to the defects of the Windows NT platform and the fragility of the TCP/IP protocol itself, the network element equipment of the GSM mobile communication network can be easily attacked by virus, which will consequently lead to the system breakdown. So far five of Ericsson's network elements have once been infected.The invention of the exchange equipment of TCP/IP protocol intensifies the security problems of the existing GSM mobile communication network. To keep up with the ever changing and developing need for security management of the GSM mobile communication network as well as to raise the level and quality of service, xxx Group has decided to start the security access of exchange network elements project.Based on the real situation of GSM mobile communication network, this paper researches into aspects like the construction of platform for GSM exchange network elements security access, the security enforcement of the GSM mobile communication network, and the integration of various security technologies. At the same time, it elaborates on the design and implementation of the platform for GSM exchange network elements security access, while exploring into the framework, the requirements for design, the functional system, and the integration plan of the platform. Mainly it focuses on the following aspects:(1) The research on the key technologies and development trend of mobile exchange internet elements security access;(2) The research on the feasibility and the demand analysis of the construction of mobile exchange internet elements security access; (3) The systematic design for the mobile exchange internet elements security access, including the design of systematic structure, security measures, and the selection among many types of equipment and software.With"advanced, real-time, security, stability, flexible, practical"as the guidelines for the general goal, this paper technically adopts a systematic structure of"Distributed applications and centralized collection and processing"and an efficient and expandable conception for program designing. That is, the utilization of this system of every city network is distributive while the data collection, data processing, and functional provision are centralized. The currently popular object-oriented methodology is adopted during the process of designing to developing, putting in advanced technologies like the design pattern of distributive system and object-oriented methodology throughout the entire process of analyzing, designing, and applying of the system so as to keep up with internal advanced technological standards. This system integrates functions like the flexible model data-processing mechanism, the fast alarm real-time monitor, the convenient centralized operational preservation of customer business processing, the complete functional management, and the all-round security mechanism, contributing to the telecommunication network a functionally strong security access platform of comprehensive network management.The construction of platform for GSM exchange network elements security access is a process of effectively raising the security defensibility and monitoring competence of the mobile communication network, as well as a process of transformation from traditional informationalizaion to modern informationalization, which is well worth utilization and promotion.