A negotiation method and device for a satellite networking session key

Abstract

The invention discloses a method and device for negotiating session keys of satellite networking, belonging to the field of satellite networking. Method: the first node sends a key agreement request to the second node, the request includes the current key version identifier and the previous key version identifier of the first node, the authentication parameters generated by the first node and the identifier of the first node; The key agreement response sent by the two nodes, the key agreement response is that the second node determines the shared key between the first node and the second node based on the identity of the first node and the symmetric key base of the second node, and generates the first session sent after the parameters; based on the current key version identifier and the previous key version identifier of the second node, determine the symmetric key base of the first node, determine the shared key, and use the shared key to pair the encrypted authentication parameters and the first The session parameter is decrypted, and when the decrypted authentication parameter is consistent with the authentication parameter generated by the first node, a second session parameter is generated, and authentication passing information is sent to the second node.

Description

technical field [0001] The invention relates to the field of satellite networking, in particular to a negotiation method and device for a satellite networking session key. Background technique [0002] With the rapid increase in the types of satellite systems and the increasingly perfect functions, the space communication system has gradually developed from a high-orbit single-satellite model to a satellite network model. The satellite network is composed of a large number of satellites in the same orbit (low-orbit multi-satellite constellation) or multiple types of satellites in different orbits (including high-orbit satellites and low-orbit satellites), and ground stations to form a space-ground integrated network. [0003] In order to ensure the security of the entire space communication network, it is necessary to establish an end-to-end space security transmission channel between the space-based and ground-based network nodes participating in the satellite network, whic...

AI Technical Summary

Problems solved by technology

[0004] In the process of realizing the present invention, the inventor finds that the prior art has at least the following problems: if this method is used in a large-scale satellite network with hundreds or thousands of satellites, the following problems will be brought about: Problem 1, because each satellite Each node needs to configure the preset shared key between the node and other network nodes, so it will take up a lot of on-star storage resources; problem 2, adding or adjusting any node in the network requires all on-board Keys are updated, making satellite network expansion and upgrades difficult

Images