Distributed user authentication system and authentication method suitable for low earth orbit satellite network

A low-orbit satellite, user authentication technology, applied in the field of satellite communications, to reduce complexity, reduce communication delay, and improve the efficiency of inter-satellite communication

Pending Publication Date: 2022-05-10
CHINA ACADEMY OF ELECTRONICS & INFORMATION TECH OF CETC
View PDF13 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to solve the problems of the current centralized network design in terms of security and no

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Distributed user authentication system and authentication method suitable for low earth orbit satellite network
  • Distributed user authentication system and authentication method suitable for low earth orbit satellite network
  • Distributed user authentication system and authentication method suitable for low earth orbit satellite network

Examples

Experimental program
Comparison scheme
Effect test

example 1

[0094] Example 1, user registration (non-mobile scenario):

[0095] Design topology such as figure 1 , figure 2 As shown, and take 12 LEO orbital planes, each orbital plane 10 satellites deployment. An illegal user sends a message to a certain GN on the ground figure 2 The S6 satellite in the middle orbital plane 2 initiates a registration request, and the SN in the certification area to which the satellite belongs is the S5 satellite in the orbital plane 2. The user registration process is as follows:

[0096] 1. The user brings his ID card and organization certificate to the GN on the ground to apply for registration, and the GN will manually verify the validity of his certificate (valid by default). Fill in the certificate information in the registration module of the GN registration machine. The built-in algorithm of the registration module automatically generates digital certificates and AIDs. The AID generated this time is shown in Table 1.

[0097] Table 1: AID...

example 2

[0113] Example 2, user registration (mobile scenario):

[0114] Design topology such as figure 1 , figure 2 As shown, the deployment method adopted is the same as that of Example 1. An illegal user sends a message to a certain GN on the ground figure 2 The S6 satellite in the middle orbital plane 2 initiates a registration request, and the SN in the certification area to which the satellite belongs is the S5 satellite in the orbital plane 2. The user registration process is as follows:

[0115] 1. The user brings his ID card and organization certificate to the GN on the ground to apply for registration, and the GN will manually verify the validity of his certificate (valid here by default). Fill in the certificate information in the registration module of the GN registration machine. The built-in algorithm of the registration module automatically generates digital certificates and AIDs. The AID generated this time is shown in Table 6.

[0116] Table 6: AID example

...

example 3

[0136] Example 3, user login:

[0137] The network topology design is the same as that of Example 1. Take the legal user UE (AID=0000:0000:0000:0000:0000:0000:0000:0081) to initiate a login request to the S6 satellite on orbital plane 2 on any user computer with an authentication client installed:

[0138] 1. The user inserts the Ukey into the computer and opens the authentication client program. The program automatically recognizes the Ukey and reads the AID information in it.

[0139] 2. The authentication client program sends a login request to the S6 satellite on orbital plane 2, and the request includes the user's AID information, as shown in Table 12.

[0140] Table 12: Sample Login Request Message

[0141] type 3 (3 means login request message) AID 0000:0000:0000:0000:0000:0000:0000:0081 Timestamp T2

[0142] 3. The S6 satellite on the orbital plane 2 forwards the login request message to the S5 satellite on the orbital plane 2 (the SN of ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a distributed user authentication system suitable for a low-orbit satellite network, an authentication method and an authentication system, the system comprises a space-based subsystem and a ground subsystem, the space-based subsystem comprises a plurality of low-orbit satellites, the plurality of low-orbit satellites are distributed on a plurality of orbit planes, each orbit plane is provided with a plurality of low-orbit satellites, and the plurality of low-orbit satellites are distributed on the ground subsystem. The adjacent satellites on the same orbit and the adjacent low-orbit satellites on the adjacent orbit surfaces are in communication connection through inter-satellite links; the ground subsystem is in communication connection with the space-based subsystem, the ground subsystem comprises a user machine, an operation store and a data center, and the user machine is provided with an authentication client program for a user to log in; the operation store is used for providing registration service; the data center is used for storing legal user information; wherein a plurality of low-orbit satellites in the space-based subsystem are divided into a plurality of authentication areas which are not overlapped with one another according to a preset arrangement mode, and each authentication area is provided with a satellite authentication node used for user registration and login for authentication.

Description

technical field [0001] The invention relates to the technical field of satellite communication, in particular to a distributed user authentication system and authentication method suitable for low-orbit satellite networks. Background technique [0002] In traditional terrestrial networks, user authentication and login are usually performed uniformly using a fixed, centralized terrestrial authentication server. The user needs to submit the login information, which is sent to the authentication server through the network, and the authentication server extracts the login information and compares it with the relevant user information in the local database, so as to give the authentication conclusion. The encryption method usually relies on inputting passwords, passphrases and other methods. This scheme provides a fast ground authentication method to a certain extent, and provides convenience and a certain sense of security guarantee for legitimate users to access the network. ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04W12/069H04W84/06H04B7/185
CPCH04W12/069H04W84/06H04B7/18521
Inventor 王嘉熙付磊文国莉严晓云陈菲菲张云峰关涛臧肖李承延冯旭关建峰
Owner CHINA ACADEMY OF ELECTRONICS & INFORMATION TECH OF CETC
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products