超越证书：面向 6G 的基于去中心化标识符和可验证凭证的服务化架构访问控制
Beyond Certificates: 6G-ready Access Control for the Service-Based Architecture with Decentralized Identifiers and Verifiable Credentials
AI总结：
本文提出一种面向6G的5G服务化架构访问控制原型，利用去中心化标识符和可验证凭证替代传统证书与令牌，解决了多利益相关者网络跨域安全认证与授权问题，降低了单点故障风险。
摘要：
下一代移动网络准备从由单一移动网络运营商拥有和运营的单体架构，转型为由多方提供基础设施、资源和服务的多利益相关者网络。然而，网络和服务的联合带来了一个关键挑战：确保不同管理域的网络实体之间实现安全可信的访问控制。本文提出了一种新颖的技术概念和原型，概述并实现了一种 5G Service-Based Architecture，该架构利用 Decentralized Identifiers 和 Verifiable Credentials 替代传统的 X.509 证书和 OAuth2.0 访问令牌，以在跨管理域的网络功能之间进行认证和授权。这种针对网络功能的去中心化身份与权限管理方法，降低了与集中式公钥基础设施相关的单点故障风险。它统一了访问控制机制，并为 6G 多方 Service-Based Architecture 中高度协作的网络功能奠定了更简单、更可信的跨域密钥管理基础。
英文摘要：
Next generation mobile networks are poised to transition from monolithic structures owned and operated by single mobile network operators into multi-stakeholder networks where various parties contribute with infrastructure, resources, and services. However, a federation of networks and services brings along a crucial challenge: Guaranteeing secure and trustworthy access control among network entities of different administrative domains. This paper introduces a novel technical concept and a prototype, outlining and implementing a 5G Service-Based Architecture that utilizes Decentralized Identifiers and Verifiable Credentials instead of traditional X.509 certificates and OAuth2.0 access tokens to authenticate and authorize network functions among each other across administrative domains. This decentralized approach to identity and permission management for network functions reduces the risk of single points of failure associated with centralized public key infrastructures. It unifies access control mechanisms and lays the groundwork for lesser complex and more trustful cross-domain key management for highly collaborative network functions in a multi-party Service-Based Architecture of 6G.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
