Satellite terminal key distribution method, device and system

Abstract

The present invention discloses a satellite terminal key distribution method, device and system, including: obtaining a key negotiation request submitted by a calling terminal through a satellite channel; sending a key negotiation request to a key management platform, so that the key management platform generates a session key based on the key negotiation request, encrypts the session key with a protection key, and obtains a key ciphertext, wherein the protection key is composed of a key injected in a pre-made key library of each of the communicating parties; receiving the key ciphertext and the corresponding encryption key serial number returned by the key management platform; sending the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext. The present invention uses the key management platform to generate a session key actually used for work in real time, and uses the key injected in advance in the pre-made key library of each of the calling parties as the protection key to encrypt the session key, generates a key ciphertext and sends it to the calling parties, and ensures that the key is sent safely and reliably.

Description

Technical Field

[0001] The present invention relates to the technical field of network security communication, and in particular to a satellite terminal key distribution method, device and system. Background Art

[0002] Satellite mobile communications complement terrestrial communication systems with their wide coverage and unaffected by geographical conditions, and are widely used in areas where terrestrial communication systems are difficult to cover or where construction costs are too high. The current satellite communication field has achieved satellite mobile network voice, SMS, and low data transmission rate functions, and can achieve low-rate call quality such as satellite voice speed of 2.4kbps.

[0003] Most satellite terminals do not have the function of encrypting voice data. To achieve voice encryption, the most efficient way is to use a symmetric cryptographic system. Although satellites currently have data terminal products, there are still a large number of handheld terminals that do not have dedicated data channels or data channel coding formats are diverse. In key negotiation, there are problems such as mismatch between satellite channels and key management platform channels and unstable channels. These existing problems affect the popularization of satellite terminal encryption technology.

[0004] At present, satellite communications generally use the symmetric cryptographic system AE S standard used in traditional ground links for encryption. Some also use the elliptic curve cryptographic algorithm of the asymmetric cryptographic system for encryption. However, such encryption makes the security of the satellite communication system largely depend on the security of the key. As a key expansion algorithm of the symmetric cryptographic system, the expanded key of AE S is not truly random, which brings certain security risks. In the asymmetric cryptographic system, its public key and private key are subject to the problem of factoring large numbers. With the development of supercomputers, especially quantum computers, the possibility of cracking asymmetric cryptographic systems based on large number factorization has greatly increased.

[0005] In the related art, a Chinese invention patent application document with publication number CN111431717A records an encryption method for a satellite mobile communication system, the implementation steps of which include: (1) receiving data through a service channel of the satellite mobile communication system, wherein the data includes a user identification number IDi and a random number Ri of an initiator; (2) generating a random number Rr and selecting a secret key shared by both parties from a preset password resource library according to the user identification number IDi; and (3) performing encryption calculation on the random number Ri, the random number Rr and the user identification number IDr according to the secret key shared by both parties to obtain responder verification data, and then sending the random number Rr, the user identification number IDr and the responder verification data through the service channel, wherein i is the initiator and r is the responder.

[0006] However, this solution uses a key shared by both parties as the data encryption key, which requires both parties to pre-prepare a shared key library in advance. During the negotiation process, the upper-layer application determines the key to be used this time and sends the corresponding key identifier to both parties. In actual applications, it is difficult to promote large-scale use because a shared key library needs to be pre-prepared. Moreover, pre-preparing a shared key library for all users also brings key security issues, which does not comply with the principles and specifications for password use.

[0007] Furthermore, this solution does not take into account the diversity of satellite terminal types and satellite channels. The channel protocols and channel coding between each terminal and the satellite are different. During the key negotiation process, there is a mismatch between the satellite channel coding and the protocol supported by the traditional key management platform. Summary of the invention

[0008] The technical problem to be solved by the present invention is how to achieve secure and reliable issuance of keys during encrypted communication.

[0009] The present invention solves the above technical problems through the following technical means:

[0010] The present invention proposes a satellite terminal key distribution method, wherein the two communicating parties include a calling terminal and a called terminal, and the method comprises:

[0011] Acquire a key negotiation request submitted by a calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication;

[0012] Sending the key negotiation request to a key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties;

[0013] Receiving the key ciphertext and the corresponding encryption key serial number returned by the key management platform;

[0014] The key ciphertext and the corresponding encryption key serial number are sent to the communicating parties so that the communicating parties can decrypt the key ciphertext and synchronize key acquisition information.

[0015] The present invention utilizes a key management platform to generate session keys actually used for work in real time, and utilizes keys pre-filled in pre-made key libraries of both parties of a call as protection keys to encrypt the session keys, generates key ciphertexts and sends them to both parties of a call. Compared with the method of directly using a pre-made shared key library, the present invention improves security, solves the problem of repeated use of keys of satellite handheld terminals, and realizes the function of one-time key negotiation and one-time key.

[0016] Furthermore, before acquiring the key negotiation request submitted by the calling terminal through the satellite channel, the method further includes:

[0017] The calling terminal initiates a communication request to the called terminal to establish a communication connection;

[0018] After establishing the communication connection, generating the session identifier of this communication;

[0019] The calling terminal initiates the key negotiation request based on the session identifier.

[0020] Furthermore, both parties of the communication are integrated with chips, and the method further includes:

[0021] The key management platform writes a charging key into the chips of the two communicating parties as the protection key to construct the prefabricated key library;

[0022] Based on the calling terminal identifier and the called terminal identifier, the key management platform is associated with the injection keys in the chips of the two communicating parties.

[0023] Furthermore, before sending the key agreement request to the key management platform, the method further includes:

[0024] Verify the user life cycle and current status of the two communicating parties;

[0025] If the verification is successful, sending the key negotiation request to the key management platform;

[0026] If the verification fails, the verification result is fed back to the communicating parties via the satellite channel.

[0027] Furthermore, the key ciphertext is (MA, MB), the corresponding encryption key serial number is (ZA, ZB), and the communicating parties decrypt the key ciphertext and synchronize key acquisition information, including:

[0028] The calling terminal obtains the designated key A' from the chip integrated in the calling terminal according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M, which is generated by the key management platform;

[0029] The called terminal obtains the designated key B' from the chip integrated in itself according to the key serial number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M;

[0030] The calling terminal and the called terminal synchronize the acquisition information of the encryption key, start the key acquisition state negotiation, and encrypt the current communication after completing the negotiation.

[0031] Furthermore, before obtaining the key negotiation request submitted by the calling terminal through the satellite channel, the method further includes:

[0032] Obtaining the network access application token submitted by the communicating parties through the satellite channel, wherein the network access application token is encrypted by the communicating parties according to the key information obtained from their respective chips, wherein the key information includes the protection key Z, the key identifier C and the chip ID;

[0033] Sending the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C, and obtains the personal information and random number of the communicating parties;

[0034] Receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

[0035] In addition, the present invention also proposes a satellite terminal key distribution device, the communication parties include a calling terminal and a called terminal, and the device includes:

[0036] A key negotiation request acquisition module, used to acquire a key negotiation request submitted by a calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication;

[0037] A key negotiation request sending module, configured to send the key negotiation request to a key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties;

[0038] A ciphertext receiving module, used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform;

[0039] The ciphertext sending module is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize the key acquisition information.

[0040] Furthermore, the device also includes:

[0041] A verification module, used to verify the user life cycle and current status of the two communicating parties;

[0042] The key agreement request sending module is used to send the key agreement request to the key management platform when the result output by the verification module is that the verification is passed;

[0043] The key agreement request sending module is used to feed back the verification result to the communicating parties through the satellite channel when the result output by the verification module is that the verification fails.

[0044] Furthermore, the device also includes:

[0045] A user management module, used to obtain the network access application token submitted by the communicating parties through the satellite channel, wherein the network access application token is encrypted by the communicating parties according to the key information obtained from their respective chips, wherein the key information includes the protection key Z, the key identifier C and the chip ID;

[0046] The proxy authentication module is used to send the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C to obtain the personal information and random number of the communicating parties;

[0047] The service activation module is used to receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

[0048] In addition, the present invention also proposes a satellite terminal key distribution system, the system includes: a calling terminal, a called terminal, a key management platform and an agent authentication platform, the calling terminal and the called terminal are both integrated with a chip, the chip is pre-filled with a filling key, the calling terminal, the called terminal and the agent authentication platform are connected via a satellite channel, the agent authentication platform is connected to the key management platform, wherein the agent authentication platform includes:

[0049] A key negotiation request acquisition module, used to acquire a key negotiation request submitted by the calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication;

[0050] A key negotiation request sending module, configured to send the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in each chip of the communicating parties;

[0051] A ciphertext receiving module, used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform;

[0052] The ciphertext sending module is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize the key acquisition information.

[0053] The advantages of the present invention are:

[0054] (1) The present invention utilizes a key management platform to generate session keys actually used for work in real time, and utilizes the keys pre-filled in the pre-made key libraries of the two parties to the call as protection keys to encrypt the session keys, and generates key ciphertexts that are sent to the two parties to the call. Compared with the method of directly using a pre-made shared key library, the present invention improves security, solves the problem of repeated use of satellite handheld terminal keys, and realizes the function of one-time key negotiation and one-time key negotiation.

[0055] (2) The present invention solves the problem of low key issuance success rate by first completing a normal connection between the two communicating parties and then performing a key negotiation.

[0056] (3) Through the proxy authentication platform, the problem of mismatch between satellite channel coding and the protocol supported by the traditional key management platform during the key negotiation process is solved.

[0057] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 It is a schematic flow chart of a satellite terminal key distribution method in a first embodiment of the present invention;

[0059] Figure 2 It is a schematic diagram of the overall process of the satellite terminal key distribution method in the first embodiment of the present invention;

[0060] Figure 3 is a schematic structural diagram of a satellite terminal key distribution device in a second embodiment of the present invention;

[0061] Figure 4 is a schematic structural diagram of a satellite terminal key distribution system in a third embodiment of the present invention;

[0062] Figure 5 It is a schematic diagram of the flow of the satellite terminal key distribution system in the third embodiment of the present invention. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described in combination with the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0064] like Figure 1 As shown, the first embodiment of the present invention proposes a satellite terminal key distribution method, the communicating parties include a calling terminal and a called terminal, and the method is applied to a proxy authentication platform, including the following steps:

[0065] S10. Acquire a key negotiation request submitted by a calling terminal through a satellite channel, where the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication.

[0066] It should be noted that the key negotiation request includes the calling terminal identifier AID, the called terminal identifier BID and the session identifier S of this communication, wherein the terminal identifier is the unique identity identifier of the terminal in the key management platform, through which the association between the key management platform and the terminal's own pre-charged key can be completed.

[0067] S20. Send the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties.

[0068] It should be noted that after the key management platform receives the key negotiation request, it starts the key negotiation based on the communicating parties' own identification (AID, BID) and the session identification S of this session, generates an encryption key M in real time and associates it with the (AID, BID, S) of this negotiation request to generate a session key.

[0069] The key management platform selects a charging key from the pre-made key libraries of both parties according to the identifications of the communicating parties to form a protection key (A', B'), and uses the protection key to encrypt the session key to generate the key ciphertext (MA, MB) after key encryption, and sends the key ciphertext (MA, MB) and the corresponding encryption key serial number (ZA, ZB).

[0070] S30. Receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform.

[0071] S40: Send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize key acquisition information.

[0072] This embodiment uses the key management platform to generate session keys actually used for work in real time, and uses the keys pre-filled in the pre-made key libraries of the two parties to the call as protection keys to encrypt the session keys, and generates key ciphertext and sends it to the two parties to the call. Compared with the direct use of the pre-made shared key library, it improves security, solves the problem of repeated use of keys of satellite handheld terminals, and realizes the one-time key negotiation and one-time key function.

[0073] Moreover, the use of quantum symmetric keys cannot be cracked by large factorization, which can prevent the public key cryptography algorithm based on the large factorization problem from being cracked; the use of quantum secure cryptography for encrypted transmission is theoretically completely safe and reliable, and can prevent the security threats posed by future quantum computers.

[0074] In one embodiment, if Figure 2 As shown, before obtaining the key negotiation request submitted by the calling terminal through the satellite channel, the method further includes:

[0075] The calling terminal initiates a communication request to the called terminal to establish a communication connection;

[0076] After establishing the communication connection, generating the session identifier of this communication;

[0077] The calling terminal initiates the key negotiation request based on the session identifier.

[0078] This embodiment first completes the common connection between the two communicating parties and then performs key negotiation, thereby solving the problem of low success rate of key distribution in satellite channels.

[0079] In one embodiment, both communicating parties are integrated with a security chip, and the method further includes:

[0080] The key management platform writes a charging key into the chips of the two communicating parties as the protection key to construct the prefabricated key library;

[0081] Based on the calling terminal identifier and the called terminal identifier, the key management platform is associated with the injection keys in the chips of the two communicating parties.

[0082] It should be noted that this embodiment uses the key management platform to pre-fill keys into the security chips integrated by the communicating parties. Each security chip uses the filled keys to build a prefabricated key library. During key negotiation, the key management platform generates session keys in real time, and uses the keys filled in the prefabricated key library as protection keys to encrypt the session keys. The built-in keys of the quantum security chip are used to implement key negotiation and distribution based on the symmetric key system, so that one key is used for each communication. This solves the impact of the increasingly severe environment of network attacks on the security of satellite calls, and solves the problem of replacing keys from satellite handheld terminals to key management platforms.

[0083] Moreover, security chips are feasible and existing technologies, and security authentication based on quantum symmetric keys is also feasible. The security chip integration technology used in satellite handheld terminals is mature and highly secure. There is no modification to the satellite platform itself. It is mainly achieved through the proxy authentication platform to connect with the satellite channel and convert the key negotiation protocol of the key management platform. It can adapt to a variety of satellite channel communication methods, with strong versatility and good scalability.

[0084] In one embodiment, if Figure 2 As shown, before sending the key negotiation request to the key management platform, the method further includes:

[0085] Verify the user life cycle and current status of the two communicating parties;

[0086] If the verification is successful, sending the key negotiation request to the key management platform;

[0087] If the verification fails, the verification result is fed back to the communicating parties via the satellite channel.

[0088] It should be noted that before sending the key negotiation request to the key management platform, this embodiment first verifies the user life cycle and current status of the communicating parties. If the verification fails, the communication parties are sent a message that the key cannot be established, and wait for the next normal connection.

[0089] In one embodiment, in step S40, the communicating parties decrypt the key ciphertext and synchronize key acquisition information, including the following steps:

[0090] The calling terminal obtains the designated key A' from the chip integrated in the calling terminal according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M, which is generated by the key management platform;

[0091] The called terminal obtains the designated key B' from the chip integrated in itself according to the key serial number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M;

[0092] The calling terminal and the called terminal synchronize the acquisition information of the encryption key, start the key acquisition state negotiation, and encrypt the current communication after completing the negotiation.

[0093] In one embodiment, before obtaining the key negotiation request submitted by the calling terminal through the satellite channel, the method further includes performing satellite terminal entity authentication, which specifically includes the following steps:

[0094] Obtaining the network access application token submitted by the communicating parties through the satellite channel, wherein the network access application token is encrypted by the communicating parties according to the key information obtained from their respective chips, wherein the key information includes the protection key Z, the key identifier C and the chip ID;

[0095] Sending the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C, and obtains the personal information and random number of the communicating parties;

[0096] Receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

[0097] This embodiment uses a proxy authentication platform to solve the problem of mismatch between satellite channel coding and the protocol supported by the traditional key management platform during the authentication process.

[0098] In addition, if Figure 3 As shown, the second embodiment of the present invention proposes a satellite terminal key distribution device, the communicating parties include a calling terminal and a called terminal, and the device includes:

[0099] The key negotiation request acquisition module 10 is used to acquire the key negotiation request submitted by the calling terminal through the satellite channel, wherein the key negotiation request includes the calling terminal identifier, the called terminal identifier and the session identifier of this communication;

[0100] The key negotiation request sending module 20 is used to send the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties;

[0101] The ciphertext receiving module 30 is used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform;

[0102] The ciphertext sending module 40 is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize key acquisition information.

[0103] This embodiment uses the key management platform to generate session keys actually used for work in real time, and uses the keys pre-filled in the pre-made key libraries of the two parties to the call as protection keys to encrypt the session keys, and generates key ciphertext and sends it to the two parties to the call. Compared with the direct use of the pre-made shared key library, it improves security, solves the problem of repeated use of keys of satellite handheld terminals, and realizes the one-time key negotiation and one-time key function.

[0104] In one embodiment, the device further comprises:

[0105] A verification module, used to verify the user life cycle and current status of the two communicating parties;

[0106] The key agreement request sending module is used to send the key agreement request to the key management platform when the result output by the verification module is that the verification is passed;

[0107] The key agreement request sending module is used to feed back the verification result to the communicating parties through the satellite channel when the result output by the verification module is that the verification fails.

[0108] In one embodiment, the device further comprises:

[0109] A user management module, used to obtain the network access application token submitted by the communicating parties through the satellite channel, wherein the network access application token is encrypted by the communicating parties according to the key information obtained from their respective chips, wherein the key information includes the protection key Z, the key identifier C and the chip ID;

[0110] The proxy authentication module is used to send the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C to obtain the personal information and random number of the communicating parties;

[0111] The service activation module is used to receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

[0112] It should be noted that other embodiments or implementation methods of the satellite terminal key distribution device of the present invention can refer to the above-mentioned method embodiments, which will not be repeated here.

[0113] In addition, if Figure 4 As shown, the third embodiment of the present invention further proposes a satellite terminal key distribution system, the system comprising: a calling terminal 1, a called terminal 2, a key management platform 3 and an agent authentication platform 4, the calling terminal 1 and the called terminal 2 are both integrated with a chip, the chip is pre-filled with a filling key, the calling terminal 1, the called terminal 2 and the agent authentication platform 4 are connected via a satellite channel, the agent authentication platform 4 is connected to the key management platform 3, wherein the agent authentication platform 4 comprises:

[0114] A key negotiation request acquisition module, used to acquire a key negotiation request submitted by the calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication;

[0115] A key negotiation request sending module, configured to send the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in each chip of the communicating parties;

[0116] A ciphertext receiving module, used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform;

[0117] The ciphertext sending module is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize the key acquisition information.

[0118] This embodiment uses the key management platform to generate the actual session key for work in real time, and uses the key pre-filled in the pre-made key library of each of the two parties as the protection key to encrypt the session key, and generates a key ciphertext and sends it to the two parties. Compared with the direct use of the pre-made shared key library, it improves security, solves the problem of repeated use of satellite handheld terminal keys, and realizes the one-time key negotiation function. And through the proxy authentication platform, the problem of satellite channel coding and the protocol supported by the traditional key management platform in the key negotiation process is solved.

[0119] In one embodiment, the calling terminal is used to initiate a communication request to the called terminal to establish a communication connection; after the communication connection is established, the session identifier of this communication is generated;

[0120] The calling terminal is used to send a key negotiation request to the proxy authentication platform based on the session identifier.

[0121] In one embodiment, the key management platform is used to write a charging key into each chip of the communicating parties as the protection key to construct the prefabricated key library.

[0122] In one embodiment, the key management platform includes:

[0123] The session key generation module is used to start key negotiation based on the communication parties' own identifications (AID, BID) and the session identification S of this session, generate an encryption key M in real time and associate it with the (AID, BID, S) of this negotiation request to generate a session key.

[0124] The encryption module is used to select a charging key from the pre-made key library of each party according to the identification of the two communicating parties to form a protection key (A', B'), and use the protection key to encrypt the session key, generate the key ciphertext (MA, MB) after key encryption, and issue the key ciphertext (MA, MB) and the corresponding encryption key serial number (ZA, ZB).

[0125] In one embodiment, the proxy authentication platform further includes:

[0126] A verification module, used to verify the user life cycle and current status of the two communicating parties;

[0127] The key agreement request sending module is used to send the key agreement request to the key management platform when the result output by the verification module is that the verification is passed;

[0128] The key agreement request sending module is used to feed back the verification result to the communicating parties through the satellite channel when the result output by the verification module is that the verification fails.

[0129] In one embodiment, the calling terminal is used to obtain a designated key A' from the chip integrated in the calling terminal according to the key serial number ZA, and decrypt the key ciphertext MA based on the designated key A' to obtain an encryption key M, where the encryption key M is generated by the key management platform;

[0130] The called terminal is used to obtain a designated key B' from the chip integrated in the called terminal according to the key serial number ZB, and decrypt the key ciphertext MB based on the designated key B' to obtain an encryption key M;

[0131] The calling terminal and the called terminal are used to synchronize the acquisition information of the encryption key, start the key acquisition state negotiation, and encrypt the current communication after completing the negotiation.

[0132] like Figure 5 As shown, the workflow of the satellite terminal key distribution system proposed in this embodiment is as follows:

[0133] (1) The calling terminal and the called terminal establish a satellite ordinary call and generate a session identifier;

[0134] (2) The calling terminal sends a key negotiation request to the proxy authentication platform, where the key negotiation request includes the calling terminal identifier, the called terminal identifier, and the session identifier;

[0135] (3) The proxy authentication platform determines whether encryption conditions are met, that is, it determines the user life cycle and current status of both parties in communication;

[0136] (4) When the encryption conditions are met, the proxy authentication platform sends a key negotiation request to the key management platform. When the encryption conditions are not met, the proxy authentication platform sends a verification failure result to both communicating parties.

[0137] (5) The key management platform starts key negotiation based on the key negotiation request, the identifiers of the communicating parties (AID, BID) and the session identifier S of this session, generates an encryption key M in real time and associates it with the (AID, BID, S) of this negotiation request to generate a session key;

[0138] According to the identification of both parties, a charging key is selected from the pre-made key library of both parties to form a protection key (A', B'), and the protection key is used to encrypt the session key to generate the key ciphertext (MA, MB) after key encryption, and the key ciphertext (MA, MB) and the corresponding encryption key serial number (ZA, ZB) are sent to the proxy authentication platform;

[0139] (6) The proxy authentication platform sends the key ciphertext and the corresponding encryption key serial number returned by the key management platform to both parties of the communication;

[0140] (7) The calling terminal obtains the designated key A' from the chip integrated in itself according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M;

[0141] The called terminal obtains the designated key B' from the chip integrated in itself according to the key serial number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M;

[0142] (8) The calling terminal and the called terminal synchronize the acquisition information of the encryption key, start the key acquisition status negotiation, and encrypt the communication after completing the negotiation; if the key negotiation fails, the call is switched to clear talk.

[0143] It should be noted that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection portion with one or more wirings (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0144] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0145] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0146] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0147] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A satellite terminal key distribution method, characterized in that: The communicating parties include a calling terminal and a called terminal, and the method includes: Obtaining a key negotiation request submitted by a calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier for this communication. Before obtaining the key negotiation request submitted by the calling terminal through a satellite channel, the method further includes: obtaining a network access application token submitted by the communicating parties through the satellite channel, wherein the network access application token is encrypted by the communicating parties according to key information obtained from their respective chips, wherein the key information includes a protection key Z, a key identifier C, and a chip ID; sending the network access application token, the chip ID, and the key identifier C to a key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C, and obtains personal information and random numbers of the communicating parties; receiving the personal information and random numbers of the communicating parties returned by the key management platform, and recording the corresponding relationship between the personal information of the communicating parties and the chip ID, and opening service permissions; Sending the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties; Receiving the key ciphertext and the corresponding encryption key serial number returned by the key management platform; Sending the key ciphertext and the corresponding encryption key serial number to the communicating parties so that the communicating parties decrypt the key ciphertext and synchronize key acquisition information, wherein the key ciphertext is (MA, MB) and the corresponding encryption key serial number is (ZA, ZB), the communicating parties decrypt the key ciphertext and synchronize key acquisition information, including: The calling terminal obtains the designated key A' from its own integrated chip according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M, which is generated by the key management platform; The called terminal obtains the designated key B' from its own integrated chip according to the key sequence number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M; The calling terminal and the called terminal synchronize the acquisition information of the encryption key, start the key acquisition state negotiation, and encrypt the current communication after completing the negotiation.

2. The satellite terminal key distribution method according to claim 1, characterized in that: Before acquiring the key negotiation request submitted by the calling terminal through the satellite channel, the method further includes: The calling terminal initiates a communication request to the called terminal to establish a communication connection; After establishing the communication connection, generating the session identifier of this communication; The calling terminal initiates the key negotiation request based on the session identifier.

3. The satellite terminal key distribution method according to claim 1, characterized in that: The communicating parties are both integrated with chips, and the method further comprises: The key management platform writes a charging key into the chips of the two communicating parties as the protection key to construct the prefabricated key library; Based on the calling terminal identifier and the called terminal identifier, the key management platform is associated with the injection keys in the chips of the two communicating parties.

4. The satellite terminal key distribution method according to claim 1, characterized in that: Before sending the key negotiation request to the key management platform, the method further includes: Verify the user life cycle and current status of the two communicating parties; If the verification is successful, sending the key negotiation request to the key management platform; If the verification fails, the verification result is fed back to the communicating parties via the satellite channel.

5. A satellite terminal key distribution device, characterized in that: The communicating parties include a calling terminal and a called terminal, and the device includes: A key negotiation request acquisition module, used to acquire a key negotiation request submitted by a calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication; A key negotiation request sending module, configured to send the key negotiation request to a key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in a pre-made key library of each of the communicating parties; A ciphertext receiving module, used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform; The ciphertext sending module is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize the key acquisition information, wherein the key ciphertext is (MA, MB), and the corresponding encryption key serial number is (ZA, ZB). The communicating parties decrypt the key ciphertext and synchronize the key acquisition information, including: the calling terminal obtains the designated key A' from its own integrated chip according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M, and the encryption key M is generated by the key management platform; the called terminal obtains the designated key B' from its own integrated chip according to the key serial number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M; the calling terminal and the called terminal synchronize the encryption key acquisition information, start the key acquisition status negotiation, and encrypt the current communication after the negotiation is completed; The device further comprises: a user management module, configured to obtain a network access application token submitted by the two communicating parties through the satellite channel, wherein the network access application token is encrypted by the two communicating parties according to key information obtained from their respective chips, wherein the key information comprises a protection key Z, a key identifier C and a chip ID; The proxy authentication module is used to send the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C to obtain the personal information and random number of the communicating parties; The service activation module is used to receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

6. The satellite terminal key distribution device according to claim 5, characterized in that: The device also includes: A verification module, used to verify the user life cycle and current status of the two communicating parties; The key agreement request sending module is used to send the key agreement request to the key management platform when the result output by the verification module is that the verification is passed; The key agreement request sending module is used to feed back the verification result to the communicating parties through the satellite channel when the result output by the verification module is that the verification fails.

7. A satellite terminal key distribution system, characterized in that: The system comprises: a calling terminal, a called terminal, a key management platform and a proxy authentication platform, wherein the calling terminal and the called terminal are both integrated with a chip, wherein the chip is pre-filled with a filling key, the calling terminal, the called terminal and the proxy authentication platform are connected via a satellite channel, and the proxy authentication platform is connected to the key management platform, wherein the proxy authentication platform comprises: A key negotiation request acquisition module, used to acquire a key negotiation request submitted by the calling terminal through a satellite channel, wherein the key negotiation request includes a calling terminal identifier, a called terminal identifier, and a session identifier of this communication; A key negotiation request sending module, configured to send the key negotiation request to the key management platform, so that the key management platform generates a session key based on the key negotiation request, and encrypts the session key with a protection key to obtain a key ciphertext, wherein the protection key is composed of a charge key in each chip of the communicating parties; A ciphertext receiving module, used to receive the key ciphertext and the corresponding encryption key serial number returned by the key management platform; The ciphertext sending module is used to send the key ciphertext and the corresponding encryption key serial number to the communicating parties, so that the communicating parties can decrypt the key ciphertext and synchronize the key acquisition information, wherein the key ciphertext is (MA, MB), and the corresponding encryption key serial number is (ZA, ZB). The communicating parties decrypt the key ciphertext and synchronize the key acquisition information, including: the calling terminal obtains the designated key A' from its own integrated chip according to the key serial number ZA, and decrypts the key ciphertext MA based on the designated key A' to obtain the encryption key M, and the encryption key M is generated by the key management platform; the called terminal obtains the designated key B' from its own integrated chip according to the key serial number ZB, and decrypts the key ciphertext MB based on the designated key B' to obtain the encryption key M; the calling terminal and the called terminal synchronize the encryption key acquisition information, start the key acquisition status negotiation, and encrypt the current communication after the negotiation is completed; The proxy authentication platform further includes: a user management module, which is used to obtain the network access application token submitted by the two communicating parties through the satellite channel, wherein the network access application token is encrypted by the two communicating parties according to the key information obtained from their respective chips, and the key information includes a protection key Z, a key identifier C and a chip ID; The proxy authentication module is used to send the network access application token, the chip ID and the key identifier C to the key management platform, so that the key management platform decrypts the network access application token according to the chip ID and the key identifier C to obtain the personal information and random number of the communicating parties; The service activation module is used to receive the personal information and random number of the communicating parties returned by the key management platform, record the corresponding relationship between the personal information of the communicating parties and the chip ID, and activate the service authority.

Images