《6G安全愿景白皮书》-英-21页_742kb

NGMN Alliance: 6G Trustworthiness Considerations

This document outlines the NGMN Alliance's analysis and guidance for ensuring the trustworthiness of 6G mobile networks. It defines trustworthiness as encompassing security, privacy, reliability, resilience, and safety, with the goal of embedding these aspects into the network's design to address emerging technologies and societal needs.

Key Drivers of 6G Trustworthiness

• Societal Demands: Focus on sustainable development, public safety, and data privacy, driven by UN SDGs and applications like smart cities, healthcare, and education.
• Network Evolution Demands: Involves integrating non-terrestrial networks, virtualization, and AI, requiring flexible security mechanisms to handle component splits and real-time interactions.
• Service-Driven Demands: Addresses needs from immersive XR, IoT, and digital twins, emphasizing high data rates, low latency, and fine-grained security for critical services.
• Security Technology-Driven Demands: Considers advancements like trusted computing, blockchain, and quantum computing to enhance security while mitigating risks from AI, quantum threats, and vulnerabilities.

6G Use Cases and Security Challenges

• Enhanced Human Communication: Risks include privacy breaches in biometric data and attacks on XR/Metaverse interactions.
• Enhanced Machine Communication: Focuses on securing autonomous robots and vehicles, with threats like hijacking and DoS attacks.
• Enabling Services: Covers areas such as positioning, healthcare, industrial automation, and digital twins, demanding integrity protection and secure data handling.
• Network Evolution: Highlights AI-driven security, inter-satellite communications, and the need for lightweight authentication.

Requirements for Trustworthiness

• Security: Includes lightweight authentication, cryptography enhancements for quantum robustness, and multi-factor identity management.
• Privacy: Emphasizes user consent protection, data minimality, and preventing linkability attacks.
• Reliability: Requires automated security management, lifecycle assurance, and auditability for critical services.
• Resilience: Calls for AI-aided recovery, trustworthy operations in dynamic networks, and prevention of catastrophic failures.
• Safety: Ensures protection against actions that could harm users or stakeholders.

Design Considerations

• Decentralized Trust Foundation: Utilizes distributed ledger technology for regional trust models.
• Dynamic Trust Model: Incorporates real-time behavior analysis based on AI, dynamically adjusting access controls.
• Intelligent Collaboration: Enhances risk-based security through AI and big data analytics for threat detection.
• Security as a Service: Promotes flexible, software-defined security capabilities for on-demand orchestration.
• Trust and Risk Assessment: Supports multi-dimensional network awareness with AI-driven strategies for timely risk updates.

In conclusion, the document underscores the necessity of a holistic approach to embed security and privacy in 6G networks, enabling trustworthy services and safeguarding user interests amid evolving threats.