Method for implementing SSH service based on satellite-ground link

Abstract

The application relates to a kind of SSH service implementation methods based on star-ground link, and a ground user terminal accesses ground TT&C network server through TCP protocol, SSH port is monitored on the ground TT&C network server through socket, SSH protocol uplink data packet is intercepted, and then is sent to satellite platform computer through star-ground link, and the platform computer forwards SSH data packet to satellite high-performance computer SSH service for analysis through network port; satellite high-performance computer SSH downlink information is returned to the data packet of platform computer listening SSH service port, and after the same packet interception action, is sent to ground TT&C network server through star-ground link. Advantageous effects are that star-ground business interaction is good in flexibility, high in safety and strong in expandability.

Description

[0001] The application relates to the technical field of satellite communication, and particularly relates to an SSH service implementation method based on a satellite-ground link.

[0002] SSH (Secure Shell) is a protocol for providing security for remote login sessions and other network services.

[0003] With the rapid development of information technology and Internet of Things technology, a space-based cloud system has become an important component of future information service infrastructure and a national major strategic planning. The space-based cloud system forms a ubiquitous space network shared resource pool by configuring a public satellite-borne high-performance computing module, a large-capacity storage unit and a high-speed bus network on a satellite. The space-based cloud system provides complex information calculation, pushing and storage services for various users on the earth, the sky, the sea and the air through powerful data processing capabilities.

[0004] A traditional satellite-ground information interaction protocol is constructed in a resource-limited space embedded environment, usually adopts an independent system with one satellite and one platform, and different application services need to design different application layer protocols, and the protocol does not have networked sharing service capability and cannot use mature ground cloud and security-related technologies based on a computer system, and has been unable to meet the current increasingly complex satellite-ground business interaction requirements.

[0005] The application improves the SSH service method based on a satellite-ground link to solve the technical problems that flexibility, security and scalability of satellite-ground business interaction in a satellite-ground communication scenario of a ground network user and a satellite-borne high-performance server need to be improved.

[0006] The application aims to provide an SSH service implementation method with good flexibility, high security and strong scalability of satellite-ground business interaction in a satellite-ground communication scenario.

[0007] To achieve the above object, the application adopts a technical scheme of an SSH service implementation method based on a satellite-ground link, comprising the following steps:

[0008] S1, an SSH data packet uplink step: on a ground measurement and control network server, a socket listens to an SSH port of a ground user terminal, intercepts an SSH protocol uplink data packet sent by a user program of the ground user terminal, and then the ground measurement and control network server sends the SSH protocol uplink data packet to a satellite platform computer through a satellite-ground link, and the satellite platform computer forwards the SSH protocol uplink data packet sent by the user program of the ground user terminal to a satellite high-performance computer SSH service through a network port for analysis.

[0009] ​​​S2, SSH data packet downlink step: on the satellite platform computer, through socket listening satellite high-performance computer SSH port, intercepting satellite high-performance computer SSH service sent SSH protocol downlink data packet; then satellite platform computer satellite sends SSH protocol downlink data packet to ground TT&C network server through satellite-ground link, and the ground TT&C network server forwards satellite high-performance computer SSH service sent SSH protocol downlink data packet to ground user terminal user program through network port.

[0010] Preferably, step S1 or S2: the data packet is protocol framed by satellite-ground, and the SSH protocol uplink / downlink data packet is obtained by distinguishing from the conventional data frame through virtual channel identification.

[0011] Preferably, the above-mentioned SSH service implementation method based on satellite-ground link further comprises the following steps:

[0012] S0, deploying SSH routing mapping and network proxy service process on the ground TT&C network server and satellite platform computer;

[0013] Preferably, step S0 comprises the following sub-steps:

[0014] S01, the ground TT&C network server creates TCP socket, calls bind interface, and listens to SSH port; calls accpt interface, establishes at least one ground user terminal user program SSH connection, creates at least one ground user terminal user program SSH connection sub-process to process request, and is used for executing ground TT&C network server read data operation or ground TT&C network server write data operation;

[0015] S02, the satellite platform computer creates TCP socket, calls connect interface, establishes satellite high-performance computer SSH service connection, and is used for executing satellite platform computer read data operation or satellite platform computer write data operation.

[0016] Preferably, step S1 comprises the following sub-steps:

[0017] S11, ground TT&C network server read data operation: the ground TT&C network server calls read interface to receive ground user terminal user program SSH connection data, and forwards the ground user terminal user program SSH connection data through satellite-ground link;

[0018] S12, satellite platform computer write data operation: the satellite platform computer receives ground user terminal user program SSH connection data, calls write interface, and sends the ground user terminal user program SSH connection data to satellite high-performance computer SSH service connection.

[0019] Preferably, step S2 comprises the following sub-steps:

[0020] S21, satellite platform computer reads data operation: the satellite platform computer calls the read interface to receive satellite high-performance computer SSH service connection data, and forwards the satellite high-performance computer SSH service connection data through the satellite-ground link;

[0021] S22, ground TT&C network server writes data operation: the ground TT&C network server receives satellite high-performance computer SSH service connection data, calls the write interface, and sends the satellite high-performance computer SSH service connection data to the ground user terminal user program SSH connection.

[0022] Preferably, step S0 further comprises the following sub-steps:

[0023] S00, at least one ground user terminal accesses the ground TT&C network server through the TCP protocol.

[0024] The SSH service implementation method based on a satellite-ground link has the following beneficial effects: applied to a satellite-ground communication scenario of a ground network user and a satellite-borne high-performance server, routing mapping and network proxy service processes are deployed on a ground TT&C network server and a satellite platform computer, remote command interaction and service interworking of the ground network user with the satellite-borne high-performance server through an SSH protocol are realized, on the basis of maintaining an original satellite-ground link communication system, satellite-ground SSH protocol interworking is realized through the deployment of a proxy service, and therefore the flexibility, security and scalability of satellite-ground service interaction are improved. BRIEF DESCRIPTION OF DRAWINGS

[0025] Figure 1 is a schematic diagram of a satellite-ground link.

[0026] Figure 2 is a ground TT&C network server processing flowchart of an SSH service implementation method based on a satellite-ground link.

[0027] Figure 3 is a satellite platform computer processing flowchart of an SSH service implementation method based on a satellite-ground link.

[0028] Figure 4 is a feasibility verification link schematic diagram of an SSH service implementation method based on a satellite-ground link. DETAILED DESCRIPTION

[0029] The application will be further described below in conjunction with the embodiments and with reference to the drawings.

[0030] Embodiment

[0031] The embodiment realizes an SSH service implementation method based on a satellite-ground link.

[0032] This embodiment enables terrestrial network users to remotely command and communicate with the satellite's onboard high-performance server via the SSH protocol by deploying routing mapping and network proxy service processes on the ground control network server and the satellite platform computer.

[0033] Figure 1 This is a diagram of the satellite-to-ground link. (See attached diagram) Figure 1 As shown, in this embodiment, the ground user terminal accesses the ground telemetry and control network server via the TCP protocol. On the ground telemetry and control network server, it listens on the SSH port via a socket, intercepts uplink data packets of the SSH protocol, frames the data packets using the satellite-to-ground protocol, distinguishes them from regular data frames using a virtual channel identifier, and then sends them to the satellite platform computer via the satellite-to-ground link. The platform computer forwards the SSH data packets to the satellite high-performance computer's SSH service for parsing via a network port. Downlink SSH information from the satellite high-performance computer is received by the platform computer listening on the SSH service port, which performs the same packet interception action before sending it to the ground telemetry and control network server via the satellite-to-ground link. By deploying an SSH listening and forwarding process on both Earth and space, the SSH service relay function is implemented.

[0034] Figure 2 This is a flowchart illustrating the SSH service implementation method based on a satellite-to-ground link, used by the ground control network server. (See attached diagram.) Figure 2 As shown, the processing flow of the ground telemetry and control network server in this embodiment is as follows:

[0035] D1. Create a TCP socket;

[0036] D2. Call the bind interface to listen on the SSH port;

[0037] D3. Call the accpt interface, receive an SSH connection, create a child process to handle the request, and execute either D4 read data operation or D6 write data operation.

[0038] D4. Call the read interface to receive data from the SSH client connection;

[0039] D5. Forward the SSH client data via the satellite-to-ground link and return to execute D4;

[0040] D6. Receive data from the satellite-to-ground link SSH server;

[0041] D7. Call the write interface to send data to the SSH client connection, and return to execute D6.

[0042] Figure 3 This is a flowchart illustrating the onboard platform computer processing method for implementing SSH service based on a satellite-to-ground link. (See attached diagram.) Figure 3The on-board platform computer processing flow of the embodiment is shown as follows:

[0043] X1, creating a TCP socket;

[0044] X2, calling a connect interface to establish a connection with an SSH server, and performing X3 data reading operation or X5 data writing operation;

[0045] X3, calling a read interface to receive data of the SSH server connection;

[0046] X4, forwarding the SSH server data through a space-ground link, and returning to perform X3;

[0047] X5, receiving space-ground link SSH client data;

[0048] X6, calling a write interface to send data to the SSH server connection, and returning to perform X5.

[0049] Figure 4 A kind of based on space-ground link SSH service implementation method feasibility verification link schematic diagram. As shown in the accompanying drawings Figure 4 As shown, through the user program of two Linux computers with SSH service, simulation is carried out to verify the feasibility of the embodiment, and the conclusion is that the method of the embodiment is feasible.

[0050] The method of the embodiment is applied to the space-ground communication scenario of ground network users and satellite on-board high-performance servers, and on the basis of maintaining the original space-ground link communication system, the space-ground SSH protocol intercommunication is realized by deploying proxy service, so as to improve the flexibility, security and scalability of space-ground business interaction.

[0051] Those skilled in the art can understand that all or part of the steps of the above embodiments can be completed by hardware, or by a program to instruct related hardware, and the program can be stored in a computer readable storage medium, wherein the storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM) and the like.

[0052] The above is only the preferred embodiment of the present application, and it should be noted that those skilled in the art can make several improvements and supplements without departing from the principles of the present application, and these improvements and supplements should also be considered as the protection scope of the present application.

Claims

1. A method for implementing SSH service based on satellite-to-ground links, characterized in that... Includes the following steps: S1. SSH packet uplink steps: On the ground control network server, the SSH port of the ground user terminal is listened to via socket, and the uplink SSH protocol data packets sent by the user program of the ground user terminal are intercepted; then the ground control network server sends the uplink SSH protocol data packets to the satellite platform computer through the satellite-to-ground link, and the satellite platform computer forwards the uplink SSH protocol data packets sent by the user program of the ground user terminal to the SSH service of the satellite high-performance computer for parsing through the network port; S2, SSH packet downlink steps: On the satellite platform computer, the SSH port of the satellite high-performance computer is listened to via socket, and the downlink SSH protocol data packets sent by the SSH service of the satellite high-performance computer are intercepted; then the satellite platform computer sends the downlink SSH protocol data packets to the ground control network server through the satellite-to-ground link, and the ground control network server forwards the downlink SSH protocol data packets sent by the SSH service of the satellite high-performance computer to the ground user terminal program through the network port; Step S1 or S2: Frame the data packets using the satellite-to-ground protocol and distinguish them from regular data frames using the virtual channel identifier to obtain SSH protocol uplink / downlink data packets; It also includes the following steps: S0. Deploy SSH routing mapping and network proxy service processes on the ground control network server and satellite platform computer; Step S0 includes the following sub-steps: S01. The ground control network server creates a TCP socket, calls the bind interface, and listens on the SSH port; it calls the accpt interface to establish at least one SSH connection for the ground user terminal user program, and creates at least one ground user terminal user program SSH connection subprocess to handle requests, which are used to perform data read operations or data write operations on the ground control network server. S02. The satellite platform computer creates a TCP socket, calls the connect interface, and establishes an SSH service connection to the satellite high-performance computer, which is used to perform data read operations or data write operations on the satellite platform computer.

2. The method for implementing SSH service based on satellite-to-ground link according to claim 1, characterized in that... Step S1 includes the following sub-steps: S11. Ground control network server reads data: The ground control network server calls the read interface to receive SSH connection data from the ground user terminal user program and forwards the SSH connection data from the ground user terminal user program through the satellite-to-ground link. S12. Satellite platform computer write data operation: The satellite platform computer receives SSH connection data from the ground user terminal user program, calls the write interface, and sends the SSH connection data from the ground user terminal user program to the SSH service connection of the satellite high-performance computer.

3. The method for implementing SSH service based on satellite-to-ground link according to claim 2, characterized in that... Step S2 includes the following sub-steps: S21. Satellite platform computer read data operation: The satellite platform computer calls the read interface to receive SSH service connection data from the satellite high-performance computer, and forwards the SSH service connection data from the satellite high-performance computer through the satellite-to-ground link; S22. Ground Tracking and Control Network Server Write Data Operation: The ground tracking and control network server receives the SSH service connection data from the satellite high-performance computer, calls the write interface, and sends the SSH service connection data from the satellite high-performance computer to the ground user terminal program SSH connection.

4. The method for implementing SSH service based on satellite-to-ground link according to claim 1, characterized in that... Step S0 also includes the following sub-steps: S00. At least one ground user terminal accesses the ground telemetry and control network server via the TCP protocol.

Images