| With the rapid development of wireless communication technologies,5G networks are needed to support differentiated services as social infrastructure.However,as the types of service applications become more and more diverse,the traditional network architecture,which meets all service requirements through only one network,can no longer effectively meet the differentiated service quality requirements of the network across industries.The key technology to solve this problem is network slicing.Network slicing can provide customized services for users according to different needs,supplemented by different communication technologies.Typical application scenarios of network slicing include edge computing scenarios and terrestrial-satellite integrated network,scenarios,which respectively provide services for users with high reliability and low latency and wide-area connection users.However,network slicing in different scenarios faces different challenges.In edge computing scenarios,network slicing faces more security threats because edge computing servers are located at the edge of the network.In addition,edge computing scenarios have more strict requirements on user access delay.In the terrestrialsatellite integrated network scenario,it is difficult to guarantee the service continuity of network slicing because of the longer communication distance and longer delay between satellite and ground.Given the above challenges,this thesis studies the following two aspects:To solve the problem of untrusted edge devices faced by network slicing deployment in edge computing scenarios,this thesis firstly proposes an improved edge computing-oriented network slicing architecture based on the existing architecture,and conducts a two-part study based on this architecture to ensure the security of slicing and the secure access of users from two parts:slicing deployment and user access,respectively.Firstly,in user access,this thesis proposes a group equipment access authentication scheme based on the improved architecture and discusses its security to achieve efficient and secure authentication.Secondly,in the case of slicing deployment,this paper establishes a trust evaluation scheme for physical resources based on the improved architecture and quantitatively analyzes its security.Based on the analysis results,an optimization problem is constructed to minimize the deployment cost,and a network slicing deployment algorithm is proposed,which is divided into two parts:node and link deployment.The simulation results show that the proposed scheme can reduce the deployment cost by 11%and improve the security benefits and deployment success rate.Aiming at the challenges of network slicing service continuity in the terrestrial-satellite integrated network scenario,this thesis firstly analyses the long-distance and high-latency challenges faced by the network slicing remapping mechanism in the specific application scenarios of satelliteterrestrial integrated network based on the network slicing remapping mechanism in the terrestrial communication network.Secondly,this thesis designs the remapping mechanism for remote areas and emergency disaster relief applications in the satellite-terrestrial integrated network.Among them,in the remote scenario,this thesis uses Dual Active Protocol Stack(DAPS)to ensure the continuity of network slicing services in response to the change of access network due to user mobility;in the emergency relief scenario,this thesis uses the paging mechanism initiated by the core network to re-establish the connection between the user and the target base station in response to the interruption of network slicing services due to the destruction of the source base station.Finally,the simulation results show that the two mechanisms can achieve the remapping of network slicing and guarantee the service continuity of network slices users within the limited communication signaling overhead and time delay. |