基于5G超级SIM的高效“端云”安全体系

5G环境下的端云融合是新型信息基础设施的底座。由于传统SIM卡的安全能力有限，现有针对端、云的安全防护机制未能构成一体化的防御体系，无法提供全方位安全防护。本项目将以超级SIM卡为核心，构建云、端、卡协同运作安全体系，为5G+业务安全赋能。（1）研究基于超级SIM卡的鉴权认证机制，构建高效的区块链系统，为5G场景下访问控制和身份认证需求提供高安全低时延的解决方案；（2）研究用户隐私数据保护机制，结合超级SIM卡的可信存储，提出密钥管理机制、数据加密方法和数据安全共享与隐私保护方案，为5G场景下用户数据提供全生命周期的安全保护；（3）研究终端应用安全保障体系，提出安全评测、防御、合规检查和质量监测等技术，提供可信的机卡接口；（4）在上述研究基础上，设计云端卡一体化安全系统，并进行仿真验证。该项目将助力超级SIM整套能力体系成为国家信息基础设施，对推动构建数字中国关键基础设施具备重要意义。

The terminal-cloud integration in the 5G environment is the foundation of the new information infrastructure, which is also the foundation that empowers digital transformation. Limited by the insufficient security capabilities of traditional SIM cards, the existing security protection mechanisms for terminals and clouds have failed to form an integrated defense system and cannot provide all-around security protection that meets the needs of 5G services. This project will take the high-performance national cryptographic Super SIM card as the core, build a "cloud, terminal, card" collaborative operation security system, and empower 5G+ business security. Firstly, it studies the secure, highly efficient, and scalable authentication mechanisms based on the Super SIM card. It builds an efficient and scalable blockchain system based on the Super SIM card. It then provides high-security and low-latency solutions for terminal access control and identity authentication requirements in the 5G scenario. Secondly, it studies the privacy protection mechanism for users' data in the 5G scenario, by leveraging the trusted storage provided by the Super SIM card. It presents a high-secure key management mechanism, a high-performance data encryption scheme, and flexible data security sharing and privacy protection solutions. These give a full life cycle security protection for user data in cloud, terminal, and card integrated systems. Thirdly, it studies the terminal application security system. Concretely, it proposes application security evaluation technology, defense technology, compliance inspection technology and quality monitoring technology, to provide a highly reliable machine card interface for the Super SIM card. Finally, based on the various security mechanisms proposed, an integrated security system of cloud, terminal, and card is designed, and the design is formally proved and verified by simulation experiments. The project will help develop a complete capability system of Super SIM as a national information infrastructure, which is of great significance for promoting the construction of key infrastructure for Digital China.