Femto 的传输安全说明书翻译-中英对照
16.2.4.1. Femto和Femto网关之间的传输安全
Femto 基站和 Femto 安全网关之间须采用 IPSec 技术为数据提供机密性和完整性保护。
16.2.4.2. Femto和Femto网管之间的传输安全
Femto 基站和 Femto 网管之间须采用 IPSec 技术为数据提供机密性和完整性保护。
16.3.设备安全性
符合 YD/T 965-1998 《电信终端设备的安全要求和试验方法》中的相关规定。
16.4.过电压过电流
应满足 YD/T1082-2000《接入网设备过电压过电流防护及基本环境适应性技术条件》规 定的要求。
16.5.电磁兼容性
应满足 YD/T1082-2000《接入网设备过电压过电流防护及基本环境适应性技术条件》规 定的要求。
16.6.3C 认证
用户端设备应经过有关检测机构的“3C”认证，用户端设备上应具有“3C”认证的相关标 识。
中国联通家庭网关技术规范分册——Femto 家庭网关
附录 A 文档编制历史
完稿时间 版本说明 修改说明
2009年1月16日 初稿
2009年1月23日 修订稿 1、格式修改
2、第2章，删除文中没有引用 的规范
3、增加缩略词
4、4.2节，修改架构图以及描 述
5、5.10.1.8节，协议引用错误
6、5.10.6.1 描述错误,已修改
7、5.10.6.3 描述错误,已修改
8、7.2节，删除引用的协议
9、10.6.1.5.2.1节，编辑错误， 补充一个描述
10、10.6.3.2 删除多径环境2-4
11、11.3.1 流程第一步描述
12、11.4.1 流程描述
13、13章带宽表格和QoS描述
14、15.4指示灯要求—Femto
状态指示
15、15.8整机功耗改为30W
16、16章，增加可选操作系统
17、17.2.4.1节，修改编辑错 误
中国联通家庭网关技术规范分册——Femto 家庭网关
18、融合网关改为家庭网关
19、1章改为家庭网关系列规 范
20、5.10.7 增加一种指示方式
2009年2月11日 第二次修订 1、统一网关名称为Femto家庭 网关
2、修改图4-1内容和图4-2表 示
3、加入批注，相关具体技术 问题待测试后规定
2009年2月16日 第三次修订 1、加入远程管理部分内容（包 括正文和附录部分内容）
2、设备形态加入Femto按钮要 求
3、硬件能力要求做修正
4、WCDMA系统内切换加注 释（参数待讨论）
5、上电时间做修正
附录 B PPPoE 代理实现流程
B.1 业务场景
对于家庭用户来说，家庭的所有成员可能会被分组，对不同的分组有不同的上网限制。比 如成年人和未成年人的上网限制是不一样的。通过为这些不同的分组分配帐号来实现不同的上 网限制。对于一个有两个成年人和两个未成年人的家庭来说可能的上网情况如下：
中国联通家庭网关技术规范分册——Femto 家庭网关
未 成年甲
PC2
家庭网关
帐号 2
未 成年乙
PC3
帐号 2
B.2 PPPoE 功能描述
PPPoE 完成以下功能处理：
（1）网关能够监控来自 LAN/WLAN 侧的 PPPoE 呼叫；
（2）网关能够为 LAN/WLAN 侧的呼叫分配 session 连接；
（3）网关需要管理同一个帐号在 LAN/WLAN 侧的多个 session 和 WAN 侧一个 session 的 对应关系。该对应关系包括：会话建立，会话拆除、双向路由；
（4）网关需要管理 LAN 侧拨号请求的地址分配，使用的地址池和 DHCP Server 是同一个 地址池，以防止 PPPoE 代理功能和 DHCP Server 功能同时启用的时候产生地址冲突。
16.2.4. The transmission safety of Femto
16.2.4.1. The transmission safety between Femto and Femto gateway
Between the Femto base station and Femto gateways safety, it is required to adopt IPSec technology to provide confidentiality and integrality protection for data.
16.2.4.2. The transmission safety between Femto and Femto network management
Between Femto base station and Femto network management, it is required to adopt IPSec technology to provide confidentiality and integrality protection for data.
16.3. Equipment security
In accordance with the relevant regulation of YD/T 965-1998 of “the security requirements for telecommunication terminal device and test method”;
16.4. Over-voltage and over-current
In accordance with the relevant regulation of YD/T 1082-2000 of “Technical requirements for the prttection against overvoltages and voercurrents and he suitability in basic environmetn on access network equipment”;
16.5. Electromagnetic compatibility
In accordance with the relevant regulation of YD/T 1082-2000 of “Technical requirements for the prttection against overvoltages and voercurrents and he suitability in basic environmetn on access network equipment”;
16.6.3 C authentication
Customer Premise Equipment shall subject to the“3C”authorization of relevant organization; customer Premise Equipment shall have relevant mark of“3C”authorization.
17. Appendix
Appendix A: Record of documentation
Date for accomplishment Edition statement Revised comment
January 16, 2009 First draft
January 23, 2009 Revised draft
1. Reformatting
2. Chapter 2, delete the unquoted regulations in the article;
3.Increase abbreviations;
4. Chapter 4.2, revise architecture diagrams and description;
5. Chapter 5.10. and 1.8, misquotation of agreement;
6. Chapter 5.10. and 6.1 Error Description; modified;
7. Chapter 5.10. and 6.3 Error Description; modified;
8. Chapter 7.2, delete the quoted agreement;
9. Chapter 10.6.1. and 5.2.1, edit error; add a supplementary description;
10. Chapter 10.6. and 3.2, delete multipath environment 2-4;
11. Chapter 11.3.1, description of the first step of procedure;
12. Chapter 11.4.1, procedure description;
13. Chapter 13, form of bandwidth and QoS description;
14. Chapter 15.4, indicator requirements – Femto status indication;
15. Chapter 15.8, overall power consumption changes into 30W;
16. Chapter16, increase the available operating system;
17. Chapter 17.2.4.1, edit error of editor;
18. Merging gateway changed into home gateway
19. Chapter 1 changes into regulation of home gateway relationship;
20. Chapter 5.10.7 adds one instruction pattern;
February 11, 2009 Second edition 1. Unify the name of gateway as Femto Home Gateway;
2. Revise content of Fig 4-1. and Fig. 4-2;
3. Add annotations and the relevant concrete technology problems shall be stipulated after testing;
February 16, 2009 Third edition 1. Add the content of long-range administration ( including text and contents of appendix)
2. The form of the equipment adds Femto button
3. The capacity of the hardware shall be available for revising;
4. Switch over the explanatory note in WCDMA system (parameter needs further discusses)
5. Revise the power on time;
Appendix B Realization procedure of PPPoE agent
B.1 Business scenario
To family user, all members of the family may be divided into groups; therefore, it is limited that there is different Net surfing for the different grouping. For example Net surfing limit of the adult and minor is different. Through assigning the account number to realize that different limit of Net surfing for these different groups. To the family with two adults and two minors, the possible Net surfing situation is as follows:
B.2 PPPoE function description
PPPoE shall finish the following function processes:
(1) The gateway may control the calling of PPPoE from LAN/WLAN;
(2) The gateway may distribute session connection for the calling of LAN/WLAN;
(3) The gateway needs to manage the several sessions in LAN/WLAN with one account number and shall be corresponding with one session of WAN. This corresponding relation includes: conversation set up, conversation removing and the two-side route;
(4) The gateway needs to manage the address assignment of the dial requirements of LAN; the used address pool and DHCP Server shall be the same address pool, so as to prevent the conflict of the address while launching at the same time of PPPoE agent and DHCP Server function.
2013.1.20