eA380 Series LTE CPE
User Guide
1Overview
Issue 01 (2017-08-31)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
10
1.6 Product Security
eA380 security includes network security and application security. Application security
includes wireless security and OM security.
1.6.1 Network Security
eA380 network security uses Secure Sockets Layer (SSL) and Hypertext Transfer Protocol
Secure (HTTPS).
SSL
The SSL protocol is a security connection technology for the server and client. It provides a
confidential, trusted, and identity-authenticating connection to two application layers. SSL is
regarded as a standard security measure and has been widely applied to web services.
Identity authentication
Identity authentication checks whether a communication individual is the expected
object. SSL authenticates servers and clients based on digital certificates and
user/password. Clients and servers have their own identifiers. The identifiers are
numbered by the public key. To verify that a user is legitimate, SSL requires digital
authentication during data exchange in the SSL handshake procedure.
Connection confidentiality
Data is encrypted before transmission to prevent data from being hacked by malicious
users. SSL uses encryption algorithms to ensure the connection confidentiality.
Data integrity
Any tampering on data during transmission can be detected. SSL establishes a secure
channel between the client and the server so that all the SSL data can reach the
destination intact.
HTTPS
For the eA380, the OM TCP applications can use SSL. HTTP over SSL is generally called
HTTPS. HTTPS is used for connections between the NMS/WebUI and eA380. SSL also uses
the digital certificate mechanism.
HTTPS provides secure HTTP channels. HTTPS is HTTP to which SSL is added, and SSL
ensures the security of HTTPS.
1.6.2 Application Security
eA380 application security includes wireless security and OM security.
Wireless Security
eA380 wireless security includes authentication, air-interface data encryption, and integrity
protection.
OM Security
OM security includes user authentication, access control, OM system security, and software
digital signature.
