# Educational 5G Edge Computing: Framework and Experimental Study
## 3 5G Smart Campus System Architecture
### Dedicated Cloud Architecture for Smart Education
#### 3.3.1 Universal Access Gateway  
The universal access gateway capability is a core capability on the education edge cloud. It is an industry-specific network infrastructure based on universal hardware capabilities, supporting 4G, 5G, WiFi, and other full scenarios. This infrastructure meets the operational and security requirements, and opens up local distribution of enterprise user data and network capability. It can also enable the unified access management capabilities of multi-standard networks in educational institutions, the wide-area interconnection capabilities between institutions, the choreographed decentralized access capabilities, the ubiquitous network capabilities, the service orchestration and open capabilities, the network security management, control capabilities, and the eMEC. Furthermore, it meets the collaborative needs of 5G cloud-network integration while ensuring that the core data for education do not leave the campus and are safely transmitted.  
1. Multi-tenant management: support for the configuration management of multi-tenant information, including adding, modifying, deleting, and querying functions;
2. Access authentication: authenticating the edge cloud platform;
3. Authorization management: supporting the service authorization management of the edge cloud platform, supporting the addition, deletion, and modification of authorization information, and enabling the edge cloud platform to actively query the authorization information;
4. Multi-access network management: supporting unified management of multi-access networks, including binding physical ports for access networks, naming (renaming), and flow control;
5. Shunt switch: supporting the on/off control of the shunt of the edge cloud platform;
6. Edge cloud platform status monitoring: heartbeat detection--iMEP heartbeat monitoring, enabling edge cloud platform nodes to enable offloading when they go online and disable automatic control of offloading when they go offline; status query--supporting querying edge cloud platform online/offline status;
7. Data security transmission: tunnel encryption configuration, supporting IPSec (Internet Protocol Security) tunnel encryption and configuration (supporting ESP protocol, realizing data source verification, data integrity verification, anti-packet replay attack, and encryption functions; supporting IKE automatic negotiation to establish tunnel; supporting DES, AES, and SM4 common encryption algorithms; supporting SHA256/384/512 and SM3 common digest algorithms);
8. Access control management: supporting the configuration and execution of access control rules based on IP quintuple;
9. Wide-area interconnection management: supporting the wide-area interconnection of multiple campuses, supporting functions such as static routing and NAT configuration.  
To summarize, the universal access gateway (UGW) plays a key role in network management, providing nine main functionalities: multi-tenant management, campus multi-standard network unified access authentication management, wide-area interconnection management, authorization management, a multi-access network, a shunt switch, edge cloud platform status monitoring, data security transmission, and access control management. Among them, the first three modules are uniquely proposed and not supported by the existing works. The reason is that it requires the interplay between the authentications of the campus network and the carrier backbone network. By bridging this authority gap, we can support the three modules simultaneously in UGW.