政府零信任架構說明文件

政府零信任架構說明文件

政府零信任架構說明_V2.0_1120616.pdfSHA256: 649ad923af9ec0cfdb536ce7c0406cfdf7c557a3932905e17d617d35f2d1015f

產品功能符合性驗證流程

政府零信任架構功能符合性驗證流程_V1.0_1121124.pdfSHA256: d2cf959b242b9c8a9fc88ee01ff056f9feac5d9f22290e37b52d38aab2edff5a

產品功能符合性驗證申請表單

政府零信任架構身分鑑別功能符合性驗證申請表_V0.4_1120606.docxSHA256: 5e3979f14160055c772b2edc353b876a00a3f96cdee7b2a718f0c4dd19e52276

政府零信任架構身分與設備鑑別功能符合性驗證申請表_V0.2_1120606.docxSHA256: bfbb3ee360634a9b2bd76223d87727cb1705a46facad22bf1b4473cd16c1c6bc

產品功能符合性驗證檢核表

政府零信任架構身分鑑別功能符合性驗證檢核表_V1.4_1120717.docxSHA256: cf34133af2ea99963c9ef25b613e86d94927b68acabf9c424fe1fcaa8f75bd56

政府零信任架構設備鑑別功能符合性驗證檢核表_V1.2_1120828.docxSHA256: 6c9402ba055045e1412a5546e5ea8a251280870741958549881df2e33d256ba5

通過功能符合性驗證廠商清

政府零信任架構身分鑑別功能符合性驗證通過廠商清單_V0.14_1121227.pdfSHA256: 77300c9b50731774600118a5c9521b25ecf1eaa64081dfb7fb4b945555f7b589

政府零信任架構身分與設備鑑別功能符合性驗證通過廠商清單_V0.3_1121215.pdfSHA256: f413368edeedd5abc10fd3006bcaacfae69deb9291266853aa1b14e0314add32

政府零信任架構機制導入建

政府零信任架構身分鑑別機制導入建議_V1.2.pdfSHA256: 21d2ee9c888fbf49ca9b6e0166a0c85b9a82fe25acf0c0539d28da73273a3493

政府零信任架構身分鑑別與設備鑑別機制導入建議_V1.0_1121227.pdfSHA256: a30c2c2c27023b76d7f8e87d9256c9f5a3580ce905fe2582479b5d1548fbc019

5G 用戶面信令

The image you provided displays the User Plane communication protocol stack in the 5G architecture, which is primarily concerned with the conveyance of user data, such as voice or data traffic. The abbreviations in the image represent the following:

  1. UE: User Equipment – The device used by the end-user for communication with the network, such as a smartphone or tablet.
  2. gNB: Next Generation NodeB – The base station in 5G networks that manages communication with the User Equipment (UE).
  3. NGC: Next Generation Core – Part of the core network in the 5G architecture responsible for handling user data services.

The layers of the User Plane protocol stack are as follows:

  1. PDU: Protocol Data Unit – This is a general term used to describe blocks of information exchanged at a particular layer of a protocol stack.
  2. SDAP: Service Data Adaptation Protocol – A new layer in 5G that is responsible for QoS flow mapping and ensuring correct delivery of data packets.
  3. PDCP: Packet Data Convergence Protocol – Handles the transmission of user data and control information and performs header compression and encryption.
  4. RLC: Radio Link Control – Responsible for data segmentation and reassembly and ensures reliable data transmission through the Automatic Repeat reQuest (ARQ) mechanism.
  5. MAC: Medium Access Control – Handles the multiplexing of data into the physical layer and channel access mechanisms that can be competitive or non-competitive.
  6. PHY: Physical layer – Deals with the actual radio transmission, including modulation and demodulation of the signal.

Protocols between gNB and NGC:

  1. GTP-U: GPRS Tunneling Protocol User Plane – Used to carry user plane IP traffic through the core network.
  2. UDP: User Datagram Protocol – A simple transport layer protocol that offers a connectionless mode of packet exchange.
  3. IP: Internet Protocol – Responsible for the delivery and routing of IP packets.
  4. L2: Layer 2 – Refers to the data link layer in the OSI model, responsible for data transfer between network nodes.
  5. L1: Layer 1 – Refers to the physical layer in the OSI model, involving the physical transmission of data.

The diagram illustrates how different protocol layers interact with each other in the User Plane of 5G networks to support the transport of data.

這張圖片展示的是5G架構中用戶面(User Plane)的通訊協議棧,用戶面主要用於承載用戶數據(例如,語音或數據流量)。圖中的縮寫代表如下:

  1. UE: 用戶設備 – 最終用戶使用的設備,用於與網絡進行通訊。
  2. gNB: 下一代節點B – 5G網絡中的基站,負責管理與用戶設備(UE)的通訊。
  3. NGC: 下一代核心網絡 – 5G架構中的核心網絡部分,負責處理用戶數據服務。

用戶面協議棧中的各層如下:

  1. PDU: 協議數據單元 – 這是一種通用術語,用於描述在特定的協議層交換的信息塊。
  2. SDAP: 服務數據適配協議 – 這是5G中的一個新協議層,用於映射QoS流和確保數據包的正確傳輸。
  3. PDCP: 封包數據匯聚協議 – 負責用戶數據和控制信息的傳輸,以及對數據進行頭部壓縮和加密處理。
  4. RLC: 無線鏈路控制 – 負責數據的分段和重組,並通過自動重複請求(ARQ)機制確保數據傳輸的可靠性。
  5. MAC: 媒介存取控制 – 負責數據的多路復用進入物理層,以及基於競爭的或非競爭的頻道存取機制。
  6. PHY: 物理層 – 負責實際的無線電傳輸,包括信號的調製和解調。

在gNB與NGC間的協議:

  1. GTP-U: GPRS隧道協議用戶面 – 用於承載用戶面的IP流量通過核心網絡。
  2. UDP: 用戶數據報協議 – 一個簡單的傳輸層協議,提供了一種不需要建立連接的數據包交換方式。
  3. IP: 網際網路協議 – 負責IP數據包的傳輸和路由。
  4. L2: 第二層 – 在OSI模型中指資料鏈路層,負責網絡節點間的數據傳輸。
  5. L1: 第一層 – 在OSI模型中指物理層,涉及數據的物理傳輸過程。

這張圖顯示了5G網絡中用戶面協議棧的結構,說明了不同的協議層如何相互作用以支援數據的傳輸。

5G 控制面信令

The image you’ve uploaded appears to be a diagram of the Control Plane in a 5G architecture, showing various layers of protocols used between the User Equipment (UE), the gNB (next generation NodeB, or the 5G base station), and the NGC (Next Generation Core). Here’s what the abbreviations stand for:

  1. UE: User Equipment – The device used by the end user to communicate with the network, such as a smartphone or tablet.
  2. gNB: Next Generation NodeB – The base station in 5G networks that manages communication with UE.
  3. NGC: Next Generation Core – The core network in 5G architecture, which provides high-speed, low-latency network access and facilitates the connection to the internet or other services.

Now, for the protocol layers:

  1. NAS: Non-Access Stratum – A protocol layer that facilitates data exchange between the UE and the core network for signaling and traffic not related to the access stratum.
  2. RRC: Radio Resource Control – A protocol that manages the control plane signaling between the UE and gNB, including the setup, configuration, and release of radio bearers.
  3. PDCP: Packet Data Convergence Protocol – It is responsible for the transmission of user data and control information between the UE and the gNB. It also performs header compression and encryption.
  4. RLC: Radio Link Control – This layer assures the correct transfer of data from the source to the destination, providing error correction through ARQ (Automatic Repeat reQuest).
  5. MAC: Medium Access Control – Responsible for mapping logical channels to transport channels and multiplexing/demultiplexing of RLC PDUs onto/from transport blocks.
  6. PHY: Physical – The physical layer that defines the electrical and physical specifications for the radio interface, including modulation, demodulation, and error correction codes.

In the context of the 5G Core (NGC):

  1. NGAP: Next Generation Application Protocol – It is used for signaling between the gNB and the 5G core network (NGC).
  2. SCTP: Stream Control Transmission Protocol – A transport layer protocol used for carrying signaling messages in the control plane, known for its robustness and support of multi-homing.
  3. IP: Internet Protocol – The network layer protocol that facilitates routing of data packets across the network.
  4. L2: Layer 2 – This generally refers to the data link layer in the OSI model and is responsible for data transfer between adjacent network nodes.
  5. L1: Layer 1 – This is the physical layer in the OSI model, referring to the physical transmission of data.

This diagram essentially shows how different layers of the network protocol stack interact with each other in the control plane of 5G networks.

您上傳的圖片看起來是5G架構中控制面的示意圖,展示了用戶設備(UE)、下一代基站(gNB),以及下一代核心網路(NGC)之間使用的各層協議。這些縮寫的意思如下:

  1. UE: 用戶設備 – 終端用戶用以與網路通訊的設備,如智慧型手機或平板電腦。
  2. gNB: 下一代節點B – 在5G網路中的基站,管理與UE的通訊。
  3. NGC: 下一代核心 – 5G架構中的核心網路,提供高速、低延遲的網路接入,並促進連接到互聯網或其他服務。

至於協議層級:

  1. NAS: 非接入層 – 一個協議層,促成UE與核心網路之間的數據交換,用於信令和與接入層無關的流量。
  2. RRC: 無線資源控制 – 一種協議,管理UE與gNB之間的控制面信令,包括無線載波的建立、配置和釋放。
  3. PDCP: 封包資料匯聚協議 – 負責UE和gNB之間用戶數據和控制信息的傳輸。它還執行頭部壓縮和加密。
  4. RLC: 無線鏈路控制 – 這一層確保數據從源頭正確傳輸到目的地,通過ARQ(自動重複請求)提供錯誤更正。
  5. MAC: 媒體存取控制 – 負責邏輯通道到傳輸通道的映射,以及RLC PDU到/從傳輸塊的多工/解多工。
  6. PHY: 物理層 – 定義無線介面的電氣和物理規範,包括調製、解調和錯誤更正代碼。

在5G核心(NGC)的上下文中:

  1. NGAP: 下一代應用協議 – 它用於gNB和5G核心網路(NGC)之間的信令。
  2. SCTP: 流控傳輸協議 – 用於在控制面攜帶信令消息的傳輸層協議,以其堅固性和支援多點傳送而聞名。
  3. IP: 網際網路協議 – 促進網路數據包路由的網路層協議。
  4. L2: 第二層 – 通常指OSI模型中的資料鏈路層,負責相鄰網絡節點之間的數據傳輸。
  5. L1: 第一層 – OSI模型中的物理層,指的是數據的物理傳輸。

這張圖本質上顯示了5G網絡控制面中不同的網絡協議棧層如何相互作用。