Sensing device and satellite safety communication method, system and device and storage medium

Abstract

A method, system and device for secure communication between a sensing device and a satellite, and a storage medium, the method comprising: monitoring various terminal data information through the sensing device, encrypting the acquired data information by using a dynamic white box encryption algorithm, and uploading the encrypted data information to an edge computing gateway; the edge computing gateway distributes the received data information to different data queues according to the data security level, and performs security verification and decryption according to a security policy; classifying the plaintext data according to security levels and distributing the plaintext data to different data queues; compressing the plaintext data in the different data queues, and encrypting the data in the different data queues according to formats and classification of security levels; and the encrypted data is sent to the communication satellite, the communication satellite sends the data to the ground management system through the gateway station, and the ground management system carries out summarization, statistics and business processing on the received data. According to the invention, the security of monitoring data transmission and the data transmission efficiency are improved.

Description

Technical Field

[0001] The present invention belongs to the field of satellite communication technology, and specifically relates to a method, system, device and storage medium for secure communication between a sensing device and a satellite. Background Art

[0002] In power monitoring systems in remote areas, due to the lack of base stations and ground networks, low-orbit satellite communications have become an important means of data transmission. However, this method also faces some significant technical challenges, mainly including the narrow bandwidth and low transmission efficiency of low-orbit satellites, as well as encryption problems caused by low power consumption and weak computing power of sensing devices.

[0003] In remote areas, due to geographical restrictions and lack of infrastructure, traditional wired and wireless communication methods often cannot meet the needs of power monitoring systems. Therefore, low-orbit satellite communication has become a feasible solution. Through low-orbit satellites, power monitoring systems can realize functions such as remote data transmission, equipment monitoring, and fault warning, thereby improving the reliability and safety of the power system. However, the bandwidth of low-orbit satellite communication is relatively narrow, which limits the rate and capacity of data transmission. In power monitoring systems in remote areas, the amount of data that needs to be transmitted may be very large, including real-time power parameters, equipment status information, and fault alarms. Due to bandwidth limitations, these data may not be transmitted to the monitoring center in a timely and complete manner, thus affecting the real-time monitoring and fault handling of the power system. In addition, the transmission efficiency of low-orbit satellite communication is relatively low. Due to the long distance between the satellite and the ground, the signal will be affected by many factors during the transmission process, such as atmospheric attenuation, multipath effect, etc. These factors will cause signal distortion and attenuation, thereby affecting the transmission efficiency.

[0004] In power monitoring systems in remote areas, sensing devices are key devices for obtaining power parameters and equipment status information. However, these devices usually have low power consumption and computing power, which limits their ability in encryption processing. Conventional encryption algorithms require high computing power and storage space to support, and low-power sensing devices often cannot meet these requirements. Therefore, these devices usually use plain text when transmitting data, which leads to data security risks. Once the data is intercepted or tampered with, it will have a serious impact on the safety and stable operation of the power system. Summary of the invention

[0005] The purpose of the present invention is to provide a method, system, device and storage medium for secure communication between a sensing device and a satellite in order to address the problems in the above-mentioned prior art, thereby ensuring the security of monitoring data transmission and improving data transmission efficiency.

[0006] In order to achieve the above object, the present invention has the following technical solutions: In a first aspect, a method for secure communication between a sensing device and a satellite is provided, which is applied to an edge computing gateway, and the method includes: Receive data information collected and encrypted by sensing devices; Distribute the received data information to different data queues according to the data security level, and perform security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policies; The decrypted plaintext data is reclassified according to security levels and distributed to different data queues; Compress the plaintext data in different data queues respectively, and encrypt the data in different data queues according to the security level classification according to the format; The encrypted data is encoded and sent to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

[0007] As a preferred solution, when the perception device encrypts data information, the perception device uses a dynamic white box encryption algorithm to encrypt the collected data information separately. The dynamic white box encryption algorithm includes an initialization process. The white box library and white box key are imported during the initialization process. When there is a security risk to the key, the security of the algorithm is restored by updating the white box key. The white box library and the white box key are separate, and different white box keys are imported for each perception device.

[0008] As a preferred solution, in the step of recovering the security of the white box key by updating the white box key when there is a security risk to the key, the white box key update process includes: Select the sensing device that needs to update the white box key from the key management system and send a key update request to the gateway; The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

[0009] As a preferred solution, in the step of distributing the received data information to different data queues according to the security level of the data, the data information received by the edge computing gateway is divided into environment information, status information, business information and monitoring information; Environmental information, including one or more of temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including one or more of device temperature, voltage, current, and power; Business information, including one or more of power consumption, peak and valley values ​​of power consumption, and power load; Monitoring information, including one or more of normal entry and illegal intrusion.

[0010] As a preferred scheme, in the step of distributing the received data information to different data queues according to the security level of the data, the security level is divided into level one, level two, level three and level four, and the corresponding security measures are plain text, ciphertext, a combination of plain text and a message authentication code MAC, and a combination of ciphertext and a message authentication code MAC, and the corresponding identifiers are 0, 1, 2, and 3 respectively.

[0011] As a preferred solution, in the steps of compressing the plaintext data in different data queues respectively, the compression strategy item values ​​are 0, 1, and 2 respectively, and the meanings of the strategy items are not compressing the data, using a unified compression method for the data, and using different compression algorithms according to the characteristics of the data items.

[0012] As a preferred solution, in the step of performing security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policy, the edge computing gateway and communication satellite transmission security policy are uniformly managed in the ground management system and sent to the edge computing gateway via the communication satellite. The policy sending includes the following steps: Select the sensing device to which the policy needs to be issued from the ground management system, and send the policy issuance request to the signal gateway; The gateway forwards the policy issuance request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request, saves and updates the local policy, returns a response message, and sends it to the gateway; The gateway forwards the response message to the ground management system; The ground management system performs subsequent processing based on the response results.

[0013] As a preferred solution, when the sensing device collects and encrypts data information, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC.

[0014] As a preferred scheme, the step of encoding the encrypted data and then sending it to the communication satellite according to the satellite communication protocol, the request message format for data compression and merging and uploading between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the data quantity and several specific data; each specific data includes the current time, device identifier, data type, data length and data value.

[0015] As a preferred scheme, the step of encoding the encrypted data and then sending it to the communication satellite according to the satellite communication protocol, the response message format of the data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the result.

[0016] In a second aspect, a sensing device and satellite secure communication system is provided, which is applied to an edge computing gateway, and the system includes: Data encryption and transmission module, used to receive data information collected and encrypted by sensing devices; The data security level classification and compression module is used for the edge computing gateway to distribute the received data information to different data queues according to the data security level, and perform security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policies; reclassify the decrypted plaintext data according to the security level and distribute it to different data queues; compress the plaintext data in different data queues respectively, and encrypt the data in different data queues according to the format according to the classification of security levels; The communication satellite transmission module is used to encode the encrypted data and send it to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

[0017] As a preferred solution, the sensing device encrypts the collected data information using a dynamic white box encryption algorithm. The dynamic white box encryption algorithm includes an initialization process. During the initialization process, a white box library and a white box key are imported. When there is a security risk to the key, the security of the algorithm is restored by updating the white box key. The white box library and the white box key are separate, and a different white box key is imported into each sensing device. When there is a security risk to the key, the white box key update process includes: Select the sensing device that needs to update the white box key from the key management system and send a key update request to the gateway; The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

[0018] As a preferred solution, the data security level classification and compression module divides the data information received by the edge computing gateway into environment information, status information, business information and monitoring information; Environmental information, including one or more of temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including one or more of device temperature, voltage, current, and power; Business information, including one or more of power consumption, peak and valley values ​​of power consumption, and power load; Monitoring information, including one or more of normal entry and illegal intrusion; The security levels are divided into level 1, level 2, level 3 and level 4. The corresponding security measures are plain text, cipher text, plain text and message authentication code MAC combination, and cipher text and message authentication code MAC combination. The corresponding identifiers are 0, 1, 2, and 3 respectively.

[0019] As a preferred solution, when the data security level classification and compression module compresses the plaintext data in different data queues respectively, the compression strategy item values ​​are set to 0, 1, and 2 respectively. The meanings of the strategy items are that the data is not compressed, the data is compressed using a unified method, and different compression algorithms are used according to the characteristics of the data items.

[0020] As a preferred solution, when the sensing device collects and encrypts data information, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC.

[0021] As a preferred solution, when the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the request message format for data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the data quantity and several specific data; each specific data includes the current time, device identifier, data type, data length and data value; When the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the response message format of the data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the result.

[0022] In a third aspect, an electronic device is provided, comprising a processor and a memory, wherein the processor is configured to execute a computer program stored in the memory to implement the method for secure communication between a sensing device and a satellite as described in the first aspect.

[0023] In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by a processor, the method for secure communication between a sensing device and a satellite as described in the first aspect is implemented.

[0024] Compared with the prior art, the first aspect of the present invention has at least the following beneficial effects: In the electric power monitoring scenario in remote areas based on satellite communication, after the deployment of low-power sensing devices, edge computing gateways, communication satellites and ground management systems, the ground management system manages the edge computing gateway through satellite communication links, performs key management, policy issuance and other control; the ground management system manages the satellite in orbit through remote sensing instructions and control instructions. The sensing device monitors various terminal data information, and the collected data information is sent to the edge computing gateway. The edge computing gateway aggregates and processes the data information and sends it to the gateway through the on-orbit communication satellite, and then transmits it to the ground management system. The ground management system aggregates, counts and further processes the reported data in different dimensions and angles. The sensing device and satellite security communication method proposed in the present invention establishes two protection nodes for data security: data transmission from the sensing device to the edge computing gateway, and air-to-ground transmission of monitoring data. The transmission efficiency is improved mainly in the air-to-ground communication stage of monitoring data. The present invention uses an improved dynamic white box encryption algorithm to ensure the data transmission security of lightweight supervision equipment in a public environment, reduce the requirements for the performance of supervision equipment, reduce hardware costs, and reduce the pressure of later operation and maintenance, and reduce labor costs. During the data transmission between the edge computing gateway and the communication satellite, the decrypted plaintext data is reclassified according to the security level and distributed to different data queues. The plaintext data in different data queues are compressed respectively, and the data in different data queues are encrypted according to the format according to the security level classification. Through data compression and data merging, the bandwidth can be used to the maximum extent and the efficiency of data transmission can be increased. Based on the data classification and security level classification strategy, data security can be flexibly and finely controlled and managed, which can meet the security needs of most scenarios.

[0025] It can be understood that the beneficial effects of the second to fourth aspects mentioned above can be found in the relevant description of the first aspect mentioned above, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0027] Figure 1 Schematic diagram of a typical topology structure of satellite Internet communication according to an embodiment of the present invention; Figure 2 Schematic diagram of satellite Internet communication data flow according to an embodiment of the present invention; Figure 3 A schematic diagram of a white box key update process according to an embodiment of the present invention; Figure 4 Schematic diagram of the internal processing logic of the edge computing gateway according to an embodiment of the present invention; Figure 5 Schematic diagram of the process of issuing security policies for edge computing gateway and communication satellite transmission according to an embodiment of the present invention; Figure 6 Schematic diagram of the message format of the encrypted data information sent by the sensing device to the edge computing gateway in an embodiment of the present invention; Figure 7 A schematic diagram of a request message format for data compression, merging and uploading between an edge computing gateway and a communication satellite according to an embodiment of the present invention; Figure 8 Schematic diagram of the response message format for data compression, merging and uploading between the edge computing gateway and the communication satellite according to an embodiment of the present invention. DETAILED DESCRIPTION

[0028] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0029] Satellite Internet is a communication technology that realizes global Internet connection by deploying communication satellites in Earth orbit. It is an Internet solution independent of ground infrastructure and has a wide range of application scenarios. Figure 1 As shown in the figure, the typical topology of satellite Internet communication can be divided into space segment and ground segment from the communication area, and can be divided into supervision end and management end from the system structure. When the whole system communicates, its data flows as follows: Figure 2 shown.

[0030] Power monitoring in remote areas based on satellite communication is a specific scenario of its application. The embodiment of the present invention proposes a method for secure communication between a sensing device and a satellite, such as Figure 2 As shown, the data in the system is divided into the management plane and the data plane.

[0031] Management plane: Before deployment, monitoring equipment, edge computing gateways, and communication satellites perform equipment registration and initialization operations in the ground management system, including equipment registration, information entry, key injection, etc.; after deployment, the ground management system manages the edge computing gateway through satellite communication links, performs key management, policy issuance, and other management and control; the ground management system manages the in-orbit satellite through remote sensing commands and control commands.

[0032] Data plane: The monitoring equipment sends the data to the edge computing gateway, which aggregates and processes the information and sends it to the gateway via the on-orbit communication satellite. The information is then transmitted to the ground management system, which aggregates and counts the reported data in different dimensions and angles, and performs further business processing.

[0033] According to the path of monitoring data from terminal collection to uploading to the remote ground management system, there are two nodes for data security protection: data transmission from monitoring equipment to edge computing gateway, and air-to-ground transmission of monitoring data. Improving transmission efficiency mainly lies in the air-to-ground communication stage of monitoring data.

[0034] The method for secure communication between a sensing device and a satellite according to an embodiment of the present invention comprises the following steps: The sensing device monitors various terminal data information, encrypts the collected data information using a dynamic white-box encryption algorithm, and sends the encrypted data information to the edge computing gateway; The edge computing gateway distributes the received data information to different data queues according to the security level of the data, and performs security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policies; the decrypted plaintext data is reclassified according to the security level and distributed to different data queues; the plaintext data in different data queues are compressed respectively, and the data in different data queues are encrypted according to the format according to the classification of security levels; The encrypted data is encoded and sent to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

[0035] The method for secure communication between a sensing device and a satellite in an embodiment of the present invention improves the security of terminal data transmission. There are a large number of sensing devices for monitoring data at the monitoring end, which are used to monitor various terminal data information. At present, a large proportion of the data collected by the sensing devices is directly transmitted in plain text, which has great security implications. The embodiment of the present invention uses an encryption algorithm to encrypt the uploaded collected data, which is an effective way to solve the security of data transmission.

[0036] Furthermore, the embodiment of the present invention adopts dynamic white-box encryption technology. Since these lightweight sensing devices have low power consumption and weak computing power, they cannot carry standard encryption and decryption algorithms. In addition, because they are exposed to the public environment, they are more vulnerable to white-box attacks, and the security of conventional algorithms based on key protection cannot be guaranteed. In order to solve the data transmission security problem of lightweight sensing devices, the embodiment of the present invention adopts an optimized white-box SM4 algorithm to meet the space and computing power requirements of lightweight sensing devices, and provides algorithm security for lightweight sensing devices in white-box attack environments. The dynamic white-box encryption algorithm of the embodiment of the present invention is compatible with different security strengths during design. When calling, the algorithm strength parameters can be input to make the algorithm have different levels of security strength to meet the security strength requirements in different scenarios.

[0037] In the step of using a dynamic white-box encryption algorithm to encrypt the collected data information by the sensing device described in the embodiment of the present invention, the dynamic white-box encryption algorithm includes an initialization process. When registering, the monitoring device or edge computing gateway imports the white-box library and the white-box key. When the white-box algorithm does not change, the white-box library does not need to be updated, and the white-box key can be updated. By updating the white-box key, the security of the algorithm can be restored by updating the white-box key when there is a security risk to the key. Because the white-box library and the white-box key of the dynamic white-box algorithm are separate, it is possible to import different keys for each device, that is, to achieve "one device, one key", so that data between devices is securely isolated, so that even if the white-box key of a device is cracked, it will not affect other devices, thereby increasing the security of the entire system.

[0038] Due to the security of white-box algorithms, in general, white-box keys do not need to be updated. Considering security and flexibility, the system supports key update functions when it is designed. Due to the security of white-box algorithms, key updates are only performed when it is confirmed that there is a security risk in the terminal white-box algorithm key. The terminal will not automatically initiate a key update request. Therefore, key updates are initiated from the key management system to meet key update requirements in special circumstances.

[0039] See also Figure 3 , the white box key update process of the embodiment of the present invention includes: The administrator selects the sensing device that needs to update the white box key from the key management system and sends a key update request to the gateway. The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

[0040] The embodiment of the present invention implements data protection by security level and data compression in the communication link between the edge computing gateway and the communication satellite, which increases the data transmission efficiency while meeting the differentiated security requirements of different data. After receiving the information sent by the monitoring terminal, the internal processing logic of the edge computing gateway is as follows: Figure 4 shown.

[0041] After various monitoring devices upload data to the edge computing gateway, the edge computing gateway distributes the data to different data queues according to the security level of the reported data; security verification and decryption are performed in different queues according to the policy, and the plaintext data is reclassified according to the security level according to the edge computing gateway and communication satellite transmission security policy, and distributed to different data queues; according to the data compression strategy, the data in different queues are processed separately, and then enter the encryption processing link; according to the classification of security levels, the data in different data queues are securely processed according to the format; the processed data is then encoded and transferred to the data sending link; the data sending component sends the data to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system, which decrypts and decompresses the data and stores the data details as the data basis for subsequent monitoring, statistics, reporting, and business processing.

[0042] In a possible implementation, the data information received by the edge computing gateway is divided into environment information, status information, business information and monitoring information. The specific information numbers are shown in Table 1.

[0043] Environmental information, including temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including device temperature, voltage, current, and power; Business information, including power consumption, peak and valley values, and power load; Monitoring information, including normal entry and illegal intrusion.

[0044] Table 1

[0045] The above is an example. The relevant data parameters are defined in relevant standards and follow the relevant standards.

[0046] Data security is classified into different levels to facilitate taking corresponding protection measures during transmission. In the embodiment of the present invention, the security levels are divided into level 1, level 2, level 3 and level 4. The corresponding security measures are plain text, cipher text, a combination of plain text and a message authentication code MAC, and a combination of cipher text and a message authentication code MAC. The corresponding identifiers are 0, 1, 2, and 3, respectively, as shown in Table 2.

[0047] Table 2

[0048] The above is an example. The relevant data parameters are defined in relevant standards and follow the relevant standards.

[0049] The data security level can be divided into different security levels according to the major types: environmental information, status, monitoring, and business data. It can also be divided into different security levels according to the strategy. It can also be refined to the information items of the installation type for classification. For example, environmental information issues can be divided into first-level security information, and geographical location can be divided into third-level security information. For specific divisions, please refer to the security strategy section. Generally speaking, data security levels can meet the security needs of most scenarios by dividing them according to data types. Based on the strategy of data classification and security level classification, data security can be flexibly and finely controlled and managed.

[0050] Furthermore, the communication from the edge computing gateway to the satellite in the embodiment of the present invention adopts a standardized satellite communication protocol, so that it has good compatibility and does not need to modify the existing system. For the transmitted information content, one of the plaintext, ciphertext, plaintext + MAC, ciphertext + MAC transmission methods is selected according to the data level classification. The algorithm for message encryption and decryption also adopts a dynamic white box algorithm. The security strength of the encryption algorithm can be adjusted according to the strategy, which is greatly enhanced compared to the security strength of the monitoring terminal. The MAC algorithm adopts the HMAC algorithm based on SM3. The specific security strategy adopted depends on the configuration in the configuration file. The default security configuration of the embodiment of the present invention is: ciphertext + MAC.

[0051] The embodiment of the present invention compresses the plaintext data in different data queues respectively. The data compression uses the default compression strategy when no compression strategy is issued. The default compression strategy specifies whether the data is compressed and the compression algorithm. This is a unified strategy for the data and does not distinguish between data types. Through the data compression strategy, data compression can be controlled in detail, and a specific data type, whether to compress, whether the compression algorithm type, etc. can be refined to achieve refined strategy management.

[0052] Data compression can be used to transmit data that originally needs to be transmitted in separate packets in one packet, or to combine the data in several packets into one packet for transmission, which can effectively increase the efficiency of data transmission and better transmit data under limited bandwidth. There are three compression strategies, and the values ​​of the strategy items are shown in the following table.

[0053] The compression strategy item values ​​of the embodiment of the present invention are 0, 1, and 2 respectively, and the meanings of the strategy items are respectively that the data is not compressed, the data is compressed using a unified method, and different compression algorithms are used according to the characteristics of the data items, as shown in Table 3.

[0054] Table 3

[0055] The above is an example. The relevant data parameters are defined in relevant standards and follow the relevant standards.

[0056] See also Figure 5 The edge computing gateway and communication satellite transmission security policy are uniformly managed in the ground management system and sent to the edge computing gateway via the communication satellite. The specific process includes: The administrator selects the device to which the policy needs to be issued from the management system and sends the policy issuance request value to the information gateway; The gateway forwards the policy issuance request to the edge computing gateway via satellite; The edge computing gateway verifies the validity of the request, saves and updates the local policy, returns a response message, and forwards it to the gateway via the satellite; The gateway forwards the response message to the ground management system; The ground management system performs subsequent processing based on the response results.

[0057] The security policy of the embodiment of the present invention is divided into two parts: data encryption and decryption policy and data compression policy.

[0058] Data encryption and decryption strategies and data compression strategies are divided into two categories, general strategies and detailed strategies. The identification item can be used to confirm which strategy is used. Data encryption strategies can be set according to data types. See Table 1 for data type classification. According to the type, environmental information, status information, monitoring information, and business information are specified as one of the first, second, third, and fourth levels in the security level classification in Table 2. Data encryption strategies can also be set in detail. The data type in the content item in Table 1 data type classification can be specified as one of the first, second, third, and fourth levels in the security level classification in Table 2.

[0059] Data compression can also be determined by identifying items to use a general compression strategy or a detailed compression strategy. The general compression strategy is that all data uses the default compression algorithm for data compression. The detailed data compression strategy can set whether a certain type of data or a certain data item under a certain type uses a compression algorithm, and what compression algorithm to use.

[0060] The default security policy is that the message transmission adopts the ciphertext + MAC mode, the digest algorithm applies the SM4 algorithm, and the encryption algorithm applies the SM4 algorithm. The default data compression policy is the general compression policy, that is, all messages use the same compression algorithm.

[0061] The strategy can be set to use a common format or an extended merge transmission method for the uploaded data, and can be used flexibly according to actual conditions.

[0062] Other conventional strategies such as real-time data transmission, reaching specified data transmission or reaching specified capacity transmission will not be described in detail here.

[0063] See also Figure 6 , the step of sending the encrypted data information to the edge computing gateway in the embodiment of the present invention, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC. Figure 6 The format of the PDU when data is sent is shown.

[0064] Device ID refers to the device ID of the terminal monitoring device; current time refers to the timestamp time when the message is sent; data type, refer to Table 1; data length refers to the length of the data content; HMAC refers to the result of HMAC calculation based on SM3 for all the previous data in the PDU field. The encryption ID is used as a separate field to indicate whether the ID is encrypted, because some lightweight monitoring devices do not have the ability to encrypt data. In this way, the edge computing gateway can distinguish whether each piece of information has been encrypted based on the message field, which is conducive to processing according to a unified logic.

[0065] See also Figure 7The request message format for data compression and merging upload between the edge computing gateway and the communication satellite in an embodiment of the present invention is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the data quantity and several specific data; each specific data includes the current time, device identifier, data type, data length and data value.

[0066] See also Figure 8 In an embodiment of the present invention, the response message format for data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the identifier of this device; the data content includes the result.

[0067] The embodiment of the present invention adopts the Beidou short message format and complies with the requirements of the "Beidou Short Message Cryptography Technology Application Specification (Draft for Comments)". The scenarios mentioned in the standard perform data communication in accordance with the format requirements therein. The following definition is an extended format to better meet the communication needs in specific scenarios. The embodiment of the present invention extends the definition of the request for merging and uploading data information, involving two parts: instruction type and PDU. In this scenario, the channel type is 0; the instruction type is customized to 0xAA; the PDU is further divided into identification, data length, data content, and check value. The check value is not a mandatory item. It is present when the transmission message uses plaintext + MAC or ciphertext + MAC, otherwise it is not present.

[0068] The identification field can be divided into: current time, which refers to the time when this message is sent; local device identification, which is used to identify the edge computing gateway that sends data to facilitate information statistics and data traceability.

[0069] The data content fields can be divided into: current time (the time when the monitoring device sends data), device ID (the ID of the monitoring device), data type, data length, and data value, defining unique data through multiple dimensions.

[0070] This extended message format can be used to combine and transmit different types of information from multiple different supervisory devices, making maximum use of satellite communication bandwidth for data transmission and increasing data transmission efficiency.

[0071] The security policy and data compression policy used for sending messages are determined according to the policy file settings of the edge computing gateway.

[0072] The embodiment of the present invention uses an improved dynamic white box algorithm to ensure the data transmission security of lightweight supervision equipment in a public environment, reduce the requirements for the performance of the supervision equipment, reduce hardware costs, reduce the pressure of later operation and maintenance, and reduce labor costs. Through data compression and data merging, the bandwidth can be used to the maximum extent to increase the efficiency of data transmission.

[0073] The embodiment of the present invention further provides a sensing device and satellite security communication system, including: Data encryption and transmission module, used to receive data information collected and encrypted by sensing devices; The data security level classification and compression module is used for the edge computing gateway to distribute the received data information to different data queues according to the data security level, and perform security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policies; reclassify the decrypted plaintext data according to the security level and distribute it to different data queues; compress the plaintext data in different data queues respectively, and encrypt the data in different data queues according to the format according to the classification of security levels; The communication satellite transmission module is used to encode the encrypted data and send it to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

[0074] In a possible implementation, the sensing device encrypts the collected data information using a dynamic white box encryption algorithm. The dynamic white box encryption algorithm includes an initialization process. During the initialization process, a white box library and a white box key are imported. When there is a security risk to the key, the security of the algorithm is restored by updating the white box key. The white box library and the white box key are separate, and a different white box key is imported into each sensing device. When there is a security risk to the key, the white box key update process includes: Select the sensing device that needs to update the white box key from the key management system and send a key update request to the gateway; The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

[0075] In a possible implementation, the data security level classification and compression module divides the data information received by the edge computing gateway into environment information, status information, business information, and monitoring information; Environmental information, including one or more of temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including one or more of device temperature, voltage, current, and power; Business information, including one or more of power consumption, peak and valley values ​​of power consumption, and power load; Monitoring information, including one or more of normal entry and illegal intrusion; The security levels are divided into level 1, level 2, level 3 and level 4. The corresponding security measures are plain text, cipher text, plain text and message authentication code MAC combination, and cipher text and message authentication code MAC combination. The corresponding identifiers are 0, 1, 2, and 3 respectively.

[0076] In a possible implementation, when the data security level classification and compression module compresses the plaintext data in different data queues respectively, the compression strategy item values ​​are set to 0, 1, and 2 respectively, and the meanings of the strategy items are respectively that the data is not compressed, the data is compressed using a unified method, and different compression algorithms are used according to the characteristics of the data items.

[0077] In a possible implementation, when the sensing device collects and encrypts data information, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC.

[0078] In a possible implementation, when the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the request message format for data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the data quantity and several specific data; each specific data includes the current time, device identifier, data type, data length and data value; When the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the response message format of the data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes an identifier, data length, data content and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the result.

[0079] The sensing device and satellite security communication system of the embodiment of the present invention can ensure the security of monitoring data transmission, adopt hierarchical security protection, and can also improve data transmission efficiency on the basis of monitoring data transmission security.

[0080] An embodiment of the present invention further provides an electronic device, including a processor and a memory, wherein the processor is used to execute a computer program stored in the memory to implement the method for secure communication between a sensing device and a satellite.

[0081] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by a processor, the method for secure communication between a sensing device and a satellite is implemented.

[0082] The computer program includes computer program code, which may be in source code form, object code form, executable file or some intermediate form. The computer-readable storage medium may include: any entity or device, medium, USB flash drive, mobile hard disk, disk, optical disk, computer memory, read-only memory, random access memory, electric carrier signal, telecommunication signal and software distribution medium, etc. that can carry the computer program code. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electric carrier signals and telecommunication signals. For ease of explanation, the above content only shows the part related to the embodiment of the present invention. For specific technical details not disclosed, please refer to the method part of the embodiment of the present invention. The computer-readable storage medium is non-temporary and can be stored in a storage device formed by various electronic devices, which can realize the execution process recorded in the method of the embodiment of the present invention.

[0083] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0084] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems) and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0085] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0086] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0087] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for secure communication between a sensing device and a satellite, characterized in that: Applied to an edge computing gateway, the method includes: Receive data information collected and encrypted by sensing devices; Distribute the received data information to different data queues according to the data security level, and perform security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policies; The decrypted plaintext data is reclassified according to security levels and distributed to different data queues; Compress the plaintext data in different data queues respectively, and encrypt the data in different data queues according to the security level classification according to the format; The encrypted data is encoded and sent to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

2. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: When the perception device encrypts data information, the perception device uses a dynamic white box encryption algorithm to encrypt the collected data information separately. The dynamic white box encryption algorithm includes an initialization process. The white box library and white box key are imported during the initialization process. When there is a security risk to the key, the security of the algorithm is restored by updating the white box key. The white box library and white box key are separate, and different white box keys are imported for each perception device.

3. The method for secure communication between a sensing device and a satellite according to claim 2, characterized in that: In the step of restoring the security of the algorithm by updating the white box key when there is a security risk to the key, the white box key update process includes: Select the sensing device that needs to update the white box key from the key management system and send a key update request to the gateway; The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

4. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: In the step of distributing the received data information to different data queues according to the security level of the data, the data information received by the edge computing gateway is divided into environment information, status information, business information and monitoring information; Environmental information, including one or more of temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including one or more of device temperature, voltage, current, and power; Business information, including one or more of power consumption, peak and valley values ​​of power consumption, and power load; Monitoring information, including one or more of normal entry and illegal intrusion.

5. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: In the step of distributing the received data information to different data queues according to the security level of the data, the security levels are divided into level one, level two, level three and level four, and the corresponding security measures are plain text, cipher text, a combination of plain text and a message authentication code MAC, and a combination of cipher text and a message authentication code MAC, and the corresponding identifiers are 0, 1, 2, and 3, respectively.

6. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: In the steps of compressing the plaintext data in different data queues respectively, the compression strategy item values ​​are 0, 1, and 2 respectively, and the strategy items mean that the data is not compressed, the data is compressed using a unified method, and different compression algorithms are used according to the characteristics of the data items.

7. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: In the step of performing security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policy, the edge computing gateway and communication satellite transmission security policy are uniformly managed in the ground management system and sent to the edge computing gateway via the communication satellite. The policy sending includes the following steps: Select the sensing device to which the policy needs to be issued from the ground management system, and send the policy issuance request to the signal gateway; The gateway forwards the policy issuance request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request, saves and updates the local policy, returns a response message, and sends it to the gateway; The gateway forwards the response message to the ground management system; The ground management system performs subsequent processing based on the response results.

8. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: When the sensing device encrypts data information, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC.

9. The method for secure communication between a sensing device and a satellite according to claim 1, characterized in that: The step of encoding the encrypted data and sending it to the communication satellite according to the satellite communication protocol, the request message format for data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; The protocol data unit PDU field includes an identifier, data length, data content, and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the amount of data and several specific data; each specific data includes the current time, device identifier, data type, data length, and data value.

10. The method for secure communication between a sensing device and a satellite according to claim 9, characterized in that: The step of encoding the encrypted data and sending it to the communication satellite according to the satellite communication protocol, the response message format of the data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; The protocol data unit PDU field includes an identifier, data length, data content, and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the result.

11. A sensing device and satellite secure communication system, characterized in that: Applied to an edge computing gateway, the system includes: Data encryption and transmission module, used to receive data information collected and encrypted by sensing devices; The data security level classification and compression module is used to distribute the received data information to different data queues according to the data security level, and perform security verification and decryption in different data queues according to the edge computing gateway and communication satellite transmission security policy; reclassify the decrypted plaintext data according to the security level and distribute it to different data queues; compress the plaintext data in different data queues respectively, and encrypt the data in different data queues according to the format according to the classification of security level; The communication satellite transmission module is used to encode the encrypted data and send it to the communication satellite according to the satellite communication protocol. The communication satellite sends the data to the ground management system through the gateway station. The ground management system summarizes, counts and processes the received data.

12. The sensing device and satellite secure communication system according to claim 11, characterized in that: The sensing device encrypts the collected data information using a dynamic white box encryption algorithm. The dynamic white box encryption algorithm includes an initialization process. The white box library and the white box key are imported during the initialization process. When there is a security risk in the key, the security of the algorithm is restored by updating the white box key. The white box library and the white box key are separate, and a different white box key is imported into each sensing device. When there is a security risk to the key, the white box key update process includes: Select the sensing device that needs to update the white box key from the key management system and send a key update request to the gateway; The gateway forwards the key update request to the edge computing gateway via the communication satellite; The edge computing gateway verifies the validity of the request and determines whether the target object is an edge computing gateway or a sensing device; if the target object is an edge computing gateway, the edge computing gateway updates the key and returns the response result to the gateway; if the target object is a sensing device, the edge computing gateway sends a key update request to the sensing device, the sensing device receives the key update request, verifies and stores it, and returns the response result. The edge computing gateway converts the protocol and sends the response result to the gateway; The gateway forwards the response message to the key management system, and the key management system performs subsequent processing based on the response result.

13. The sensing device and satellite secure communication system according to claim 11, characterized in that: The data security level classification and compression module divides the data information received by the edge computing gateway into environment information, status information, business information and monitoring information; Environmental information, including one or more of temperature, humidity, smoke, wind speed, noise, and geographic location; Status information, including one or more of device temperature, voltage, current, and power; Business information, including one or more of power consumption, peak and valley values ​​of power consumption, and power load; Monitoring information, including one or more of normal entry and illegal intrusion; The security levels are divided into level 1, level 2, level 3 and level 4. The corresponding security measures are plain text, cipher text, plain text and message authentication code MAC combination, and cipher text and message authentication code MAC combination. The corresponding identifiers are 0, 1, 2, and 3 respectively.

14. The sensing device and satellite secure communication system according to claim 11, characterized in that: When the data security level classification and compression module compresses the plaintext data in different data queues respectively, the compression strategy item values ​​are set to 0, 1, and 2 respectively. The meanings of the strategy items are no compression of data, a unified compression method for data, and different compression algorithms according to the characteristics of the data items.

15. The sensing device and satellite secure communication system according to claim 11, characterized in that: When the sensing device collects and encrypts data information, the message format is divided into version, instruction type, encryption identifier, protocol data unit PDU length and protocol data unit PDU field; the protocol data unit PDU field includes device identifier, current time, data type, data length, data content and hash-based message authentication code HMAC.

16. The sensing device and satellite secure communication system according to claim 11, characterized in that: When the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the request message format for data compression and merging upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; The PDU field of the protocol data unit includes an identifier, data length, data content, and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the data quantity and several specific data; each specific data includes the current time, device identifier, data type, data length, and data value; When the communication satellite transmission module encodes the encrypted data and sends it to the communication satellite according to the satellite communication protocol, the response message format of the data compression and upload between the edge computing gateway and the communication satellite is divided into version, channel type, instruction type, protocol data unit PDU length and protocol data unit PDU field; The protocol data unit PDU field includes an identifier, data length, data content, and a hash-based message authentication code HMAC; the identifier includes the current time and the device identifier; the data content includes the result.

17. An electronic device, characterized in that: The invention comprises a processor and a memory, wherein the processor is used to execute a computer program stored in the memory to implement the method for secure communication between a sensing device and a satellite as claimed in any one of claims 1 to 10.

18. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by the processor, the method for secure communication between a sensing device and a satellite as described in any one of claims 1 to 10 is implemented.

Images