Satellite-ground and inter-satellite networking authentication method and system fused with double-layer satellite network and application
A double-layer satellite network and inter-satellite networking technology, applied in the field of satellite communication information security, can solve problems such as security and performance defects, increase authentication delay, complex scenarios, etc., to ensure safe and reliable transmission, reduce authentication overhead, and satisfy The effect of safety requirements
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0128] The embodiment of the present invention describes a high-orbit satellite registration process.
[0129] (1.1) High-orbit satellite A initiates a registration request to the ground registration domain.
[0130] (1.2) The high-orbit satellite A generates the satellite identification ID according to the batch and other information in the ground registration domain A , get the timestamp T s , and then generate the long-term key MainKey according to the registered domain private key m secA =KDF m (ID A , T s ).
[0131] (1.3) The registration domain will register information (ID A , MainKey secA , MsgKey g0 ) is written to the high-orbit satellite, and correspondingly stored in the ground control center (ID A , MainKey secA , MsgKey g0 ) for authentication.
Embodiment 2
[0133] The embodiment of the present invention describes the satellite-to-ground authentication of a high-orbit satellite, where the high-orbit satellite A has completed satellite registration.
[0134] (2.1) High-orbit satellites generate random number r and obtain timestamp T max , respectively generate message verification codes according to the preset long-term shared key Expected authentication response value and the star-ground session key Then store the authentication vector AV=XRES||K secA ||Token, Token=r||MAC.
[0135] Finally, add the timestamp T msg ,send request to the ground control center.
[0136] (2.2) The ground control center verifies the freshness of the message and verifies the identity of the high-orbit satellite.
[0137] ①The authentication center of the ground control center decrypts the received request, obtains the identity information and timestamp, and detects the ID A Whether it conforms to the naming rules and T msg the validity of ,...
Embodiment 3
[0142] The embodiment of the present invention describes the satellite-to-ground and inter-satellite authentication phases of the high-orbit satellite, wherein the high-orbit satellite A has completed the satellite-to-ground authentication and key negotiation, and the high-orbit satellite B is to be authenticated.
[0143] (3.1) The high-orbit satellite generates an authentication message verification code and sends an authentication request.
[0144] ①High-orbit satellite B according to the key MainKey secB , random number r and timestamp T mac Generate message verification code expected response value Star-ground and inter-satellite session keys Store the authentication vector AV=XRES||K secB ||K AB ||Token. Among them, Token=r||MAC.
[0145] ②High-orbit satellite B obtains timestamp T msg , send an authentication request to the ground control center SSID A It is the broadcast logo of high-orbit satellite A.
[0146] (3.2) The ground control center verifies th...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 


