Shipborne communication system and method capable of saving bandwidth of ship-end satellite

Abstract

The invention relates to a shipborne communication system and method capable of saving the bandwidth of a ship-side satellite, a user login interface is integrated on a ship-side VSAT controller, and when a user terminal and a third-party APP on the user terminal access the Internet, a local authentication module sends the user login interface to the user terminal and the third-party APP on the user terminal; a network operator is prevented from occupying a satellite bandwidth to send and obtain a user login interface, so that the satellite bandwidth pressure is reduced, and invalid traffic is prevented from being generated; after the user terminal inputs an account and a password and triggers an authentication function, the account and the password are authenticated through the authentication and authorization module, so that the equipment cost and the management cost of the ship-end VSAT controller are reduced; and the authentication control module is adopted to control the network access authority of the user terminal based on the authentication result, so that the user terminal which does not pass the authentication is prevented from occupying the satellite bandwidth to access the Internet, the pressure of the satellite bandwidth and the generation of invalid traffic are further reduced, and the Internet surfing experience of the ship-end user is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of ship communication operation, and in particular to a shipborne communication system and method for saving ship-side satellite bandwidth. Background Art

[0002] Users on ships connect to the main station on land through VSAT controllers and satellites to access the national or global broadband network. Satellite bandwidth operators access from the main station and send a login authentication interface to users at the ship terminal. Users enter their username and password for authentication through the login authentication interface. After authentication, users can access the Internet, and satellite bandwidth operators charge the traffic consumption of the ship terminal in real time. However, for users who fail to pass the authentication, various APP software on their mobile phones will occupy the VSAT antenna bandwidth and the satellite's irregular frequency to access the Internet until the satellite bandwidth operator fails to pass the authentication and cannot access the Internet. However, the whole process will generate invalid traffic, and users who have not passed the authentication will also occupy the satellite bandwidth, resulting in a waste of bandwidth; in particular, most satellite bandwidth operators have an uplink limit on the bandwidth of each ship, and the occupation of invalid bandwidth will affect the user experience of authenticated users. Summary of the invention

[0003] The technical problem to be solved by the present invention is how to reduce the occupation of invalid bandwidth and the generation of invalid traffic.

[0004] The present invention provides a shipboard communication system for saving ship-side satellite bandwidth, comprising the Internet, a satellite network operator, a ground communication master station, a satellite, a plurality of VSAT terminal stations and a ship-side VSAT controller which are sequentially connected in communication, wherein the ship-side VSAT controller comprises a local authentication module, an authentication control module and a flow monitoring module, and the satellite network operator comprises an authentication authorization module and a service billing module. The local authentication module is used to send a user login interface to the user terminal on board that needs to access the network; and after the user triggers the authentication, the account and password filled in by the user are sent to the authentication and authorization module through the ship-side VSAT controller, VSAT terminal station, satellite, and ground communication master station; The authentication control module is used to control the network access rights of the user terminal according to the authentication result of the authentication authorization module; if the authentication authorization module passes the authentication, the authentication control module allows the user terminal to occupy the satellite broadband link through the ship-side VSAT controller to access the network; if the authentication authorization module fails the authentication, the authentication control module prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller, and when a third-party APP on the user terminal that fails the authentication accesses the network, the local authentication module sends a user login interface; The traffic monitoring module is used to monitor and count the traffic of each authenticated user terminal in real time, and send the monitored and counted traffic to the service billing module; The authentication and authorization module is used to authenticate the account and password transmitted by the user terminal, and to authorize the opening of a network access link for the user terminal to access the Internet; The service billing module is used to receive and save the traffic usage records sent by the traffic monitoring modules on all ship ends, and to perform traffic statistics based on the traffic usage records of each user terminal.

[0005] Compared with the prior art, the system of the present invention has the following advantages: a user login interface is integrated on a ship-side VSAT controller, and when a user terminal and a third-party APP on the user terminal access the Internet, a local authentication module on the ship-side VSAT controller sends the user login interface to the user terminal and the third-party APP on the user terminal; it avoids network operators occupying satellite bandwidth to send and obtain the user login interface, which not only reduces the pressure on satellite bandwidth, but also avoids the generation of invalid traffic; when the user terminal inputs an account and a password and triggers an authentication function, the account and the password are authenticated by an authentication authorization module, so as to reduce the equipment cost and management cost of the ship-side VSAT controller; at the same time, an authentication control module is used to control the network access rights of the user terminal based on the authentication result, so as to avoid the user terminal that fails the authentication occupying the satellite bandwidth to access the Internet, further reducing the pressure on the satellite bandwidth and the generation of invalid traffic, and improving the Internet access experience of the ship-side user.

[0006] In a possible implementation manner, the satellite network operator further includes a registration and activation module for activating an authorized account, and the registration and activation module stores the account and password for activating the authorization in an account database; The authentication and authorization module authenticates the account and password sent by the local authentication module based on the account database.

[0007] In a possible implementation manner, the ship-side VSAT controller further includes a traffic prompt module, which is used to display the user's current traffic balance in real time, and the ship-side VSAT controller is communicatively connected with the service billing module.

[0008] In a possible implementation, the satellite network operator also includes a network management module and a behavior management module, and the network management module, authentication and authorization module, and behavior management module are connected in sequence between the ground communication main station and the Internet; the network management module is used to manage the network exchange and routing management between various network systems in the satellite network operation room; the behavior management module is used to review traffic behavior to ensure that the content of the access behavior is legal.

[0009] Compared with the existing technology, the above technical solution can filter the risks of network access behaviors and then release them, ensuring that the Internet behavior of user terminals is safe.

[0010] In a possible implementation, the network management module includes an access router, a firewall and a core switch connected in sequence, the access router provides an access function, and the core switch is respectively connected to a Radius server, a database server, a DNS server, an SNMP server, an antivirus server, an AD server, a WWW server, an FTP server and a MAIL server.

[0011] In a possible implementation manner, the ship-side VSAT controller is integrated with a wired network connection and access AP for wireless network coverage.

[0012] A communication method of the shipborne communication system for saving the bandwidth of the ship-side satellite comprises: Step 1: The user terminal on the ship sends an access request to the ship-side VSAT controller through a wired network connection or a wireless network connection AP; Step 2, the local authentication module sends a user login interface to the user terminal. After the account and password are entered in the user login interface and the authentication is triggered, the ship-side VSAT controller sends it to the authentication authorization module through the VSAT terminal station, satellite, and ground communication master station for authentication; Step 3, the authentication and authorization module authenticates the account and password based on the account database; if the authentication is successful, the authentication and authorization module opens a network access link for the account; if the authentication is not successful, the authentication and authorization module does not open a broadband link for the account; at the same time, the authentication and authorization module sends the authentication result to the authentication control module through the ground communication master station, satellite, and VSAT terminal station; Step 4, the authentication control module controls the network access rights of the corresponding user terminal according to the authentication result; if the authentication authorization module passes the authentication, the authentication control module allows the user terminal to occupy the satellite broadband link through the ship-side VSAT controller to access the network; if the authentication authorization module fails the authentication, the authentication control module prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller, and when a third-party APP on the user terminal that fails the authentication accesses the network, the local authentication module sends a login authentication interface; Step 5, the traffic monitoring module records the traffic usage records of each user terminal in real time; and sends them to the service billing module through the VSAT terminal station, satellite, and ground communication master station according to the preset frequency; Step 6: The service billing module collects statistics and stores the traffic usage records of each user terminal.

[0013] Compared with the prior art, the method of the present invention has the following advantages: when the user terminal and the third-party APP on the user terminal need to access the Internet, the local authentication module first sends the user login interface, and only when the user enters the account and password and triggers the authentication, the ship-side VSAT controller will occupy the satellite bandwidth link and send the entered account and password to the land-based satellite network operator for authentication; the user login interface is set at the ship-side VSAT controller to avoid the user terminal and its third-party APP occupying the satellite bandwidth link to access the Internet multiple times without authentication authorization, thereby greatly reducing the invalid traffic generated by the user when logging in to access the Internet and the satellite bandwidth pressure caused; then, the satellite network operator sends the authentication result to the ship-side VSAT controller. The data is sent to the ship-side VSAT controller by occupying the satellite bandwidth link, and the decision on whether to open Internet access rights is based on the authentication result. The authentication control module controls the network access rights of the user terminal according to the authentication result. Only the user terminal that has passed the authentication can occupy the satellite bandwidth link to access the Internet through the ship-side VSAT controller. User terminals that have not passed the authentication and their third-party apps cannot obtain the network access rights of the ship-side VSAT controller, thereby reducing the pressure on the satellite bandwidth. In addition, setting the authentication of users and passwords at the satellite network operator can greatly reduce the equipment cost and management cost of the ship-side VSAT controller. At the same time, the satellite network operator can also control the user terminals on the ship in batches and in an individualized manner.

[0014] In a possible implementation, the content of the traffic usage record includes the user IP of the user terminal, the device MAC address, the current total upstream traffic, and the current total downstream traffic. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 FIG. 4 is a system structure diagram of the shipborne communication system of the present invention.

[0016] Description of reference numerals: 1. Satellite; 2. Ground communication main station; 3. VSAT terminal station; 4. Ship-side VSAT controller; 4.1. Local authentication module; 4.2. Authentication control module; 4.3. Traffic monitoring module; 4.4. Traffic prompt module; 5. Satellite network operator; 5.1. Authentication and authorization module; 5.2. Network management module; 5.3. Behavior management module; 5.4. Service billing module; 5.5. Account database; 5.6. Registration and activation module. DETAILED DESCRIPTION

[0017] First, those skilled in the art should understand that these implementations are only used to explain the technical principles of the embodiments of the present application, and are not intended to limit the protection scope of the embodiments of the present application. Those skilled in the art can make adjustments to them as needed to adapt to specific application scenarios.

[0018] In the description of the embodiments of the present application, it should be noted that, unless otherwise clearly specified and limited, the terms "connected" and "connection" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms in the embodiments of the present application can be understood according to specific circumstances.

[0019] In the embodiments of the present application, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0020] The present application is further described in detail below with reference to the accompanying drawings and specific embodiments. Example 1

[0021] In the prior art, when the user terminal on the ship sends a request to access the Internet, the satellite network operator 5 sends the user login interface to the user terminal via the satellite bandwidth link, and the account and password entered by the user terminal are then sent to the satellite network operator 5 via the satellite bandwidth link for authentication; when the third-party APP on the user terminal sends Internet access requests at an irregular frequency, the satellite network operator 5 needs to continuously occupy the satellite bandwidth link and consume traffic to send the user login interface; this process not only creates bandwidth pressure on the satellite, but also generates a lot of invalid traffic.

[0022] See also Figure 1As shown, the embodiment of the present application discloses a shipborne communication system for saving ship-side satellite bandwidth, including a satellite network operator 5, a ground communication main station 2, a satellite 1, a plurality of VSAT terminals 3 (Very Small Aperture Terminal), and a ship-side VSAT controller 4. In this specific embodiment, the ship-side is defined as the front end, and the satellite network operator 5 on land is defined as the back end; in order to enable users on the ship to access the Internet through user terminals, each ship is provided with a ship-side VSAT controller 4, and the ship-side VSAT controller 4 is communicatively connected with the VSAT terminal 3, and the VSAT terminal 3 is communicatively connected with the ground communication main station 2 through the satellite 1, and the ground communication main station 2 accesses the Internet through the satellite network operator 5; the satellite communication network composed of the communication system of the present invention can support a wide range of one-way or two-way data, voice, image and other telecommunications and information services, therefore, the user terminal in this specific embodiment includes fax, telephone, microcomputer, monitor, camera, etc.; this specific embodiment focuses on the user's mobile phone as an example; wherein: To this end, the ship-side VSAT controller 4 of this specific embodiment integrates a local authentication module 4.1, an authentication control module 4.2 and a traffic monitoring module 4.3, and the satellite network operator 5 includes an authentication authorization module 5.1 and a service billing module 5.4; wherein: The local authentication module 4.1 is integrated with a user login interface. When a user terminal on the ship sends a network access request, the local authentication module 4.1 sends the user login interface to the user terminal; after the crew enters the account and password in the user login interface and triggers the authentication operation, the ship-side VSAT controller 4 sends the acquired account and password to the back-end authentication and authorization module 5.1 through the satellite broadband link for authentication; The authentication control module 4.2 is used to control the network access rights of the user terminal according to the authentication result of the authentication authorization module 5.1; if the authentication authorization module 5.1 passes the authentication, the authentication control module 4.2 allows the user terminal to occupy the satellite broadband link through the ship-side VSAT controller 4, and at the same time, the authentication authorization module 5.1 opens the network access link to allow the authenticated user terminal to access the network; if the authentication authorization module 5.1 fails the authentication, the authentication control module 4.2 prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller 4, and at the same time, when the third-party APP on the user terminal that fails the authentication accesses the network at an irregular frequency, the local authentication module 4.1 sends a user login interface, and if the account and password are not entered and the authentication operation is not triggered, the third-party APP on the user terminal cannot occupy the satellite bandwidth link through the authentication control module 4.2, thereby greatly reducing the pressure on the satellite bandwidth; thus, the user terminal that has not passed the authentication cannot occupy the satellite bandwidth link Go to the back end to access the Internet; put the user login interface in front of the ship end, which can largely avoid the invalid traffic generated by the user in the process of logging in to access the Internet; this specific embodiment adopts the authentication control module 4.2 to intercept the network access behavior of the user terminal that fails the authentication, and directly discards the invalid data connection at the ship end VSAT controller 4 to avoid invalid traffic, and at the same time, it cannot occupy the satellite bandwidth; and the network access request of the user terminal that passes the authentication is released, so as to efficiently utilize the satellite bandwidth, and save the satellite bandwidth of the VSAT terminal station 3 while ensuring the normal network access of the authenticated user terminal, thereby improving the user's Internet experience; in this specific embodiment, regarding the user terminal that fails the authentication by entering the account and password through the login authentication interface or logs out after logging in, the ship end VSAT controller 4 intercepts all network access requests of the user terminal, and the network access request of the third-party APP software in the user terminal will also be intercepted by the ship end VSAT controller 4; The flow monitoring module 4.3 is used to monitor and record the flow usage records of the authenticated user terminals on board in real time, and send the flow usage records to the service billing module 5.4 in real time; this specific embodiment adopts a timed reporting strategy to send the flow usage records to the service billing module 5.4; The authentication and authorization module 5.1 is used to authenticate the account and password transmitted by the user terminal, and to authorize the opening of a network access link for the user terminal to access the Internet; The service charging module 5.4 is used to receive and save the traffic usage records sent by the traffic monitoring modules 4.3 on all ship ends, and to perform traffic statistics based on the traffic usage records of each user terminal.

[0023] In addition, the satellite network operator 5 further comprises a registration and activation module 5.6 for activating an authorized account, and the registration and activation module 5.6 stores the account and password for activating the authorization in the account database 5.5; The authentication and authorization module 5.1 authenticates the account and password sent by the local authentication module 4.1 based on the account database 5.5.

[0024] In order to let the user fully understand the current remaining amount of traffic, the ship-side VSAT controller 4 also includes a traffic prompt module 4.4, which is used to display the user's current traffic balance in real time. The traffic prompt module 4.4 is connected to the front-end service billing module 5.4 and the account database 5.5 respectively. The remaining amount of traffic is obtained according to the difference between the total traffic usage of the corresponding user terminal counted by the service billing module 5.4 and the traffic amount of the corresponding user terminal in the account database 5.5; the traffic amount of the corresponding user terminal in the account database 5.5 is updated by the user's recharge purchase.

[0025] The satellite network operator 5 also includes a network management module 5.2 and a behavior management module 5.3. The network management module 5.2, the authentication and authorization module 5.1, and the behavior management module 5.3 are connected in sequence between the ground communication main station 2 and the Internet; the network management module 5.2 is used to manage the network exchange and routing management between various network systems in the satellite network operation room; the behavior management module 5.3 is used to audit traffic behavior to ensure that the content of the access behavior is legal.

[0026] The network management module 5.2 is used to manage the network exchange and routing management between various network systems in the satellite network operation room; the network management module 5.2 includes an access router, a firewall and a core switch connected in sequence, the access router provides an access function, and the core switch is respectively connected to a Radius server, a database server, a DNS server, an SNMP server, an antivirus server, an AD server, a WWW server, an FTP server and a MAIL server; The behavior management module 5.3 is used to review the traffic behavior, ensure the legality of the access behavior content, filter the network access behavior for risks and then release it, and ensure that the Internet behavior of the user terminal is safe.

[0027] The present invention can save invalid traffic generated by sending the user login interface from the back end when the user terminal and the third-party APP on the user terminal want to access the Internet at irregular frequencies by pre-placing the user login interface to the ship end; there is no need to occupy the satellite bandwidth link to send the user login interface, thereby reducing the bandwidth pressure of the satellite 1; further, by setting the authentication control module 4.2 to control the network access rights of the user terminal according to the authentication result of the account and password on the back end, it is avoided that the user terminal that fails the authentication and the third-party APP on the user terminal occupy the satellite bandwidth link at irregular frequencies to access the Internet, which greatly reduces the bandwidth pressure of the satellite 1 and improves the Internet experience of the ship end users; in addition, setting the account and password authentication of the user terminal at the back end can greatly reduce the equipment cost and management cost of the ship end VSAT controller 4, and at the same time, it is also convenient for the back end to batch and personalize the control of the user terminals on each ship end. Example 2

[0028] This specific embodiment discloses a communication method of a shipborne communication system for saving ship-side satellite bandwidth based on specific embodiment 1, comprising: Step 1: The user terminal on the ship sends an access request to the ship-side VSAT controller 4 through a wired network connection or a wireless network connection AP; the ship-side VSAT controller 4 presets an IP address for the user terminal; Step 2, the local authentication module 4.1 sends a user login interface to the user terminal. After entering the account and password in the user login interface and triggering authentication, the local authentication module 4.1 binds the preset IP address with the input account and password, and the ship-side VSAT controller 4 sends it to the authentication authorization module 5.1 through the VSAT terminal station 3, satellite 1, and ground communication master station 2 for authentication; Step 3, the authentication and authorization module 5.1 authenticates the account and password based on the account database 5.5; if the authentication is successful, the authentication and authorization module 5.1 opens a network access link for the account; if the authentication is not successful, the authentication and authorization module 5.1 does not open a broadband link for the account; at the same time, the authentication and authorization module 5.1 sends the authentication result to the authentication control module 4.2 through the ground communication main station 2, the satellite 1, and the VSAT terminal station 3; Step 4, the authentication control module 4.2 controls the network access rights of the user terminal according to the authentication result; if the authentication authorization module 5.1 passes the authentication, the authentication control module 4.2 allows the user terminal to occupy the satellite broadband link through the ship-side VSAT controller 4 to access the network; if the authentication authorization module 5.1 fails the authentication, the authentication control module 4.2 prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller 4, and when the third-party APP on the user terminal that fails the authentication accesses the network, the local authentication module 4.1 sends a login authentication interface; Step 5, the traffic monitoring module 4.3 records the traffic usage records of each user terminal in real time; and sends them to the service billing module 5.4 through the VSAT terminal station 3, the satellite 1, and the ground communication main station 2 according to the preset frequency; Step 6, the service billing module 5.4 collects statistics and stores the traffic usage records of each user terminal, and the content of the traffic usage records includes the user IP, device MAC address, current uplink traffic total and current downlink traffic total of the user terminal.

[0029] The method of the present invention uses a front-end user login interface and an authentication control module 4.2 set at the front end to release the network access behavior of the user terminal that has passed the authentication, and intercepts the network access behavior of the user terminal that has failed the authentication and the third-party APP on the user terminal, so as to avoid the user terminal that has failed the authentication from occupying the satellite bandwidth link and avoiding the generation of invalid access traffic, thereby greatly reducing the bandwidth pressure of the satellite 1 and improving the user experience.

[0030] In the description of the embodiments of the present application, it should be noted that in the description of the present application, terms such as "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is only for the convenience of description, and does not indicate or imply that the device or component must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present application.

[0031] In the description of the present application, the description with reference to the terms "one embodiment", "some embodiments", "in the present embodiment", "specific example", or "some examples" etc. means that the specific features, mechanisms, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, mechanisms, materials or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0032] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A shipboard communication system for saving ship-side satellite bandwidth, characterized in that: The invention comprises the Internet, a satellite network operator (5), a ground communication master station (2), a satellite (1), a plurality of VSAT terminal stations (3) and a ship-side VSAT controller (4) which are sequentially connected in communication, wherein the ship-side VSAT controller (4) comprises a local authentication module (4.1), an authentication control module (4.2) and a flow monitoring module (4.3), and the satellite network operator (5) comprises an authentication authorization module (5.1) and a service billing module (5.4); The local authentication module (4.1) is used to send a user login interface to a user terminal on board that needs to access the network; and after the user triggers authentication, the account and password filled in by the user are sent to the authentication and authorization module (5.1) through the ship-side VSAT controller (4), the VSAT terminal station (3), the satellite (1), and the ground communication master station (2); The authentication control module (4.2) is used to control the network access rights of the user terminal according to the authentication result of the authentication authorization module (5.1); If the authentication authorization module (5.1) passes the authentication, the authentication control module (4.2) allows the user terminal to occupy the satellite broadband link to access the network through the ship-side VSAT controller (4); If the authentication authorization module (5.1) fails the authentication, the authentication control module (4.2) prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller (4); when a third-party APP on the user terminal that fails the authentication accesses the network, the local authentication module (4.1) sends a user login interface; The flow monitoring module (4.3) is used to monitor and record the flow usage records of all authenticated user terminals on the ship in real time, and send the flow usage records to the service billing module (5.4); The authentication and authorization module (5.1) is used to authenticate the account and password transmitted by the user terminal, and to authorize the opening of a network access link for the user terminal to access the Internet; The service billing module (5.4) is used to receive and store the flow usage records sent by the flow monitoring modules (4.3) at all ship ends, and to perform flow statistics on the flow usage records based on each user terminal.

2. The shipborne communication system for saving ship-side satellite bandwidth according to claim 1, characterized in that: The satellite network operator (5) further comprises a registration and activation module (5.6) for activating an authorized account, wherein the registration and activation module (5.6) stores the account and password for activating the authorization in the account database (5.5); The authentication and authorization module (5.1) authenticates the account and password sent by the local authentication module (4.1) based on the account database (5.5).

3. The shipborne communication system for saving ship-side satellite bandwidth according to claim 1, characterized in that: The ship-side VSAT controller (4) further comprises a flow prompt module (4.4), the flow prompt module (4.4) being used to display the current flow balance of the user terminal in real time, and the flow prompt module (4.4) being communicatively connected to the service billing module (5.4).

4. The shipborne communication system for saving ship-side satellite bandwidth according to claim 1, characterized in that: The satellite network operator (5) further comprises a network management module (5.2) and a behavior management module (5.3), wherein the network management module (5.2), the authentication and authorization module (5.1), and the behavior management module (5.3) are sequentially connected between the ground communication main station (2) and the Internet; the network management module (5.2) is used to manage network switching and routing management between various network systems in the satellite network operation room; and the behavior management module (5.3) is used to audit traffic behavior to ensure that the content of the access behavior is legal.

5. The shipborne communication system for saving ship-side satellite bandwidth according to claim 4, characterized in that: The network management module (5.2) comprises an access router, a firewall and a core switch which are connected in sequence. The access router provides an access function, and the core switch is respectively connected to a Radius server, a database server, a DNS server, an SNMP server, an antivirus server, an AD server, a WWW server, an FTP server and a MAIL server.

6. The shipborne communication system for saving ship-side satellite bandwidth according to claim 1, characterized in that: The ship-side VSAT controller (4) is integrated with a wired network connection and access AP for wireless network coverage.

7. A communication method of a shipborne communication system for saving ship-side satellite bandwidth based on any one of claims 1 to 6, characterized in that: include: Step 1, the user terminal on the ship sends an Internet access request to the ship-side VSAT controller (4) through a wired network connection or a wireless network connection AP; Step 2, the local authentication module (4.1) sends a user login interface to the user terminal. After the account and password are input in the user login interface and authentication is triggered, the ship-side VSAT controller (4) sends the authentication authorization module (5.1) through the VSAT terminal station (3), the satellite (1), and the ground communication main station (2) for authentication; Step 3, the authentication and authorization module (5.1) authenticates the account and password based on the account database (5.5); If the authentication is successful, the authentication and authorization module (5.1) opens a network access link for the account; If the authentication fails, the authentication and authorization module (5.1) does not open a broadband link for the account; at the same time, the authentication and authorization module (5.1) sends the authentication result to the authentication control module (4.2) via the ground communication main station (2), the satellite (1), and the VSAT terminal station (3); Step 4, the authentication control module (4.2) controls the network access rights of the corresponding user terminal according to the authentication result; If the authentication authorization module (5.1) passes the authentication, the authentication control module (4.2) allows the user terminal to occupy the satellite broadband link to access the network through the ship-side VSAT controller (4); If the authentication authorization module (5.1) fails the authentication, the authentication control module (4.2) prohibits the user terminal from occupying the satellite broadband link through the ship-side VSAT controller (4); when a third-party APP on the user terminal that fails the authentication accesses the network, the local authentication module (4.1) sends a login authentication interface; Step 5, the traffic monitoring module (4.3) records the traffic usage records of each user terminal in real time; and sends the traffic usage records to the service billing module (5.4) through the VSAT terminal station (3), the satellite (1), and the ground communication main station (2) according to a preset frequency; Step 6: the service billing module (5.4) performs traffic statistics and stores the traffic usage records of each user terminal.

8. The communication method according to claim 7, characterized in that: The content of the traffic usage record includes the user IP of the user terminal, the device MAC address, the current total upstream traffic and the current total downstream traffic.

Images