Satellite downlink device random access method, satellite, terminal device and electronic device

Abstract

The application provides a satellite-under device random access method, a satellite, a terminal device and an electronic device. The method comprises the following steps: the satellite respectively sends a power allocation range to at least one terminal device; the terminal device receives the power allocation range sent by the satellite; a check value is determined according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; the check value is sent to the satellite; the satellite receives the check value respectively sent by at least one terminal device; a device access table is determined according to at least one check value; the device access table is respectively sent to at least one terminal device; the terminal device receives the device access table sent by the satellite; whether the terminal device accesses the satellite is determined according to the device access table. The method can effectively prevent a malicious terminal from forging a legal identity to initiate a random access with multiple frequencies, improve the access rate of a legal terminal, and improve the security performance of satellite-under device random access.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication security, and in particular to a satellite-under device random access method, a satellite, a terminal device and an electronic device. BACKGROUND

[0002] The main advantage of satellite communication is large coverage, which can provide emergency communication in natural disasters, large-scale broadcast services, and communication services in special environments such as deserts. Therefore, in order to eliminate the digital divide and provide global universal services, satellite integration is an inevitable trend for future mobile communication evolution, and is also a key technology for realizing global coverage in wireless communication technology. Among them, random access (Random Access Channel, RACH) is a necessary process for terminal devices and network devices (such as satellites) to establish a wireless link and obtain uplink synchronization.

[0003] The existing satellite-under device random access process can include the following four steps: 1. The terminal device sends a random access preamble (Random Access Preamble, RAP) to the satellite; 2. The satellite sends a random access response (Random Access Response, RAR) to the terminal device; 3. The terminal device sends a radio resource control (Radio Resource Control, RRC) connection request to the satellite; 4. The satellite sends a radio resource control RRC connection establishment to the terminal device. This step is also a conflict resolution process.

[0004] However, the existing satellite-under device random access method only considers the process optimization problem of device random access (such as compressing four steps into two steps: random access and preamble sequence; or, detection mechanism design and backoff mechanism design), and the research on the security problems existing in the existing satellite-under device random access method is still in the blank. Therefore, how to improve the security performance of satellite-under device random access has become a problem to be solved. SUMMARY

[0005] The present application provides a satellite-under device random access method, a satellite, a terminal device and an electronic device, which realizes the use of a device access table corresponding to a check value, accurately determines the terminal device for random access, effectively prevents malicious terminals from forging a legal identity identifier to initiate multiple frequency random access, improves the access rate of legal terminals, and further effectively improves the security performance of satellite-under device random access.

[0006] In a first aspect, the present application provides a satellite-under device random access method applied to a satellite, which comprises:

[0007] transmitting, to at least one terminal device, a power allocation range respectively, the power allocation range being used by the terminal device to determine a check value;

[0008] receiving the check value respectively transmitted by the at least one terminal device;

[0009] determining, according to at least one of the check values, a device access table, the device access table including a check identification corresponding to an allowed access terminal;

[0010] transmitting, to the at least one terminal device, the device access table respectively.

[0011] According to the satellite downlink device random access method provided by the present application, the device access table is determined according to at least one of the check values, including: for any check value in the at least one check value, analyzing the check value, determining the uplink transmission power and the current access frequency corresponding to the terminal device; in the case that the terminal device is determined to be the allowed access terminal according to the uplink transmission power and the current access frequency, determining the device access table according to the check identification corresponding to the allowed access terminal.

[0012] According to the satellite downlink device random access method provided by the present application, the terminal device is determined to be the allowed access terminal according to the uplink transmission power and the current access frequency, including: in the case that the uplink transmission power is within the power allocation range and the current access frequency reaches a preset frequency threshold, the terminal device is determined to be the allowed access terminal.

[0013] In the second aspect, the present application provides a satellite downlink device random access method, applied to a terminal device, the method including:

[0014] receiving a power allocation range transmitted by a satellite;

[0015] determining a check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device;

[0016] transmitting, to the satellite, the check value, and receiving a device access table transmitted by the satellite, the check value being used by the satellite to determine the device access table, the device access table including a check identification corresponding to an allowed access terminal;

[0017] determining, according to the device access table, whether the terminal device accesses the satellite.

[0018] According to the satellite under equipment random access method provided by the application, the check value is determined according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal equipment, and the method comprises the following steps: in the case that one uplink transmission power is randomly selected from the power allocation range, a trigger instruction is generated; according to the trigger instruction, a historical access frequency is obtained; the historical access frequency is updated to obtain the current access frequency; and the check value is determined according to the uplink transmission power and the current access frequency.

[0019] According to the satellite under equipment random access method provided by the application, the check value is determined according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal equipment, and the method comprises the following steps: in the case that one uplink transmission power is randomly selected from the power allocation range, a trigger instruction is generated; according to the trigger instruction, a historical access frequency is obtained; the historical access frequency is updated to obtain the current access frequency; and the check value is determined according to the uplink transmission power and the current access frequency.

[0020] The application further provides a satellite, comprising:

[0021] The transceiver module is used for sending a power allocation range to at least one terminal equipment respectively, the power allocation range is used for the terminal equipment to determine a check value; and the transceiver module is used for receiving the check value sent by the at least one terminal equipment respectively.

[0022] The processing module is used for determining a device access table according to at least one check value, the device access table comprises a check identification corresponding to an allowed access terminal.

[0023] The transceiver module is further used for sending the device access table to the at least one terminal equipment respectively.

[0024] The application further provides a terminal equipment, comprising:

[0025] The transceiver module is used for receiving the power allocation range sent by the satellite.

[0026] The processing module is used for determining a check value according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal equipment.

[0027] The transceiver module is further used for sending the check value to the satellite and receiving the device access table sent by the satellite, the check value is used for the satellite to determine the device access table, and the device access table comprises a check identification corresponding to an allowed access terminal.

[0028] The processing module is further used for determining whether the terminal equipment accesses the satellite according to the device access table.

[0029] The application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the satellite-under device random access method according to any one of the above when executing the program.

[0030] The application further provides a non-transitory computer readable storage medium, which stores a computer program, wherein the computer program is executed by a processor to implement the satellite-under device random access method according to any one of the above.

[0031] The application further provides a computer program product, which comprises a computer program, wherein the computer program is executed by a processor to implement the satellite-under device random access method according to any one of the above.

[0032] The satellite-under device random access method, satellite, terminal device and electronic device provided by the application, the satellite sends a power allocation range to at least one terminal device respectively; the terminal device receives the power allocation range sent by the satellite; a check value is determined according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal device; the check value is sent to the satellite; the satellite receives the check value sent by at least one terminal device respectively; a device access table is determined according to at least one check value, the device access table comprises a check identification corresponding to the terminal allowed to access; the device access table is sent to at least one terminal device respectively; the terminal device receives the device access table sent by the satellite; whether the terminal device accesses the satellite is determined according to the device access table. The method uses the device access table corresponding to the check value to accurately determine the terminal device for random access, can effectively prevent malicious terminals from forging a legal identity identification to initiate random access of multiple frequencies, improves the access rate of the legal terminal, and further effectively improves the security performance of the satellite-under device random access. BRIEF DESCRIPTION OF DRAWINGS

[0033] In order to more clearly illustrate the technical solutions of the application or the prior art, the following will briefly introduce the drawings needed in the embodiments or prior art description. Obviously, the drawings in the following description are some embodiments of the application, and for those skilled in the art, other drawings can also be obtained without creative labor.

[0034] Figure 1a is a structural schematic diagram of a communication system provided by the prior art;

[0035] Figure 1b is a structural schematic diagram of a channel in a communication system provided by the prior art;

[0036] Figure 1c is a flow schematic diagram of the working principle of a communication system provided by the prior art;

[0037] Figure 1d is a flowchart of the communication system provided by the prior art under attack;

[0038] Figure 2 is one of the flowcharts of the satellite-under device random access method provided by the present application;

[0039] Figure 3 is the second flowchart of the satellite-under device random access method provided by the present application;

[0040] Figure 4 is a structural diagram of the satellite provided by the present application;

[0041] Figure 5 is a structural diagram of the terminal device provided by the present application;

[0042] Figure 6 is a structural diagram of the electronic device provided by the present application. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be described clearly and completely below in combination with the drawings in the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0044] The existing satellite-under device random access method has the following defects:

[0045] 1. The distance from the satellite to the terminal device is far, the transmission delay is large, and the interaction time is long, which results in the cost caused by the failure of the terminal to access the satellite being much larger than the cost caused by the failure of the terminal device to access the ground network (such as a ground base station).

[0046] 2. The satellite link is unstable, and the network topology changes dynamically, which results in an increase in the probability of interruption of the terminal device random access to the satellite. If the terminal device needs to re-access the satellite after the access interruption, the terminal device needs to initiate a random access request again.

[0047] 3. The coverage range of the satellite is larger than that of the ground network, which results in a large range of communication service interruption caused by malicious attacks on the satellite.

[0048] 4. The satellite capacity, computing power and processing power are limited compared with the ground network, which results in network congestion and service collapse caused by a large number of random access requests in the same time period.

[0049] In summary, if a terminal device is malicious and systematically launches attacks during the random access process of satellite devices, it could easily lead to severe communication service interruptions or even large-scale communication paralysis. Therefore, strengthening security during the random access phase of satellite communication is a crucial issue that deserves serious consideration.

[0050] A satellite is a natural celestial body that orbits a planet in a closed orbit; artificial satellites are also generally referred to as satellites. Terminal equipment refers to devices composed of electronic components such as integrated circuits, transistors, and vacuum tubes.

[0051] Optionally, terminal devices may include computers, mobile terminals, and wearable devices.

[0052] A satellite and at least one terminal device can constitute a communication system.

[0053] Optionally, in the communication system, the satellite and at least one terminal device can be connected via wireless communication technology, which may include, but is not limited to, one of the following: fourth-generation mobile communication technology (4G), 5G, and Wireless Fidelity (WiFi).

[0054] like Figure 1a The diagram shown is a structural schematic of a communication system provided by existing technology. Figure 1a In this communication system, the communication system may include terminal equipment 10 and satellite 20, and the number of terminal equipment 10 is at least one.

[0055] In the communication system, terminal device 10 can send a first message (Message1, Msg1), a third message (Message3, Msg3), and a Hybrid Automatic Repeat Request (HARQ) acknowledgment / non-acknowledgment (ACK) message to satellite 20.

[0056] The first message Msg1 may include the random access preamble (RAP).

[0057] The third message, Msg3, can include user identification (UI).

[0058] In the communication system, the satellite 20 can send the terminal device 10 system information (System Information), a second message (Message2, Msg2) and a fourth message (Message4, Msg4).

[0059] The system information can include a master information block (Master Information Block, MIB) and a system information block (System Information Block2, SIB2).

[0060] The second message Msg2 can include a random access response RAR.

[0061] The fourth message Msg4 can include contention resolution (Contention Resolution).

[0062] As Figure 1b shown is a structure diagram of a channel in a communication system provided by the prior art. From Figure 1b it can be seen that the channel corresponding to the system information is a broadcast channel (Broadcast Channel).

[0063] The channel corresponding to the first message Msg1 is a physical random access channel (Physical Random Access Channel, PRACH).

[0064] The channel corresponding to the second message Msg2 and the fourth message Msg4 is a physical downlink control channel / physical downlink shared channel (Physical Downlink Control Channel / Physical Downlink Shared Channel, PDCCH / PDSCH).

[0065] The channel corresponding to the third message Msg3 is a physical uplink shared channel (Physical Uplink Shared Channel, PUSCH).

[0066] The channel corresponding to the hybrid automatic repeat request acknowledgement / negative acknowledgement message HARQ ACK is a physical hybrid automatic repeat request indication channel (Physical Hybrid ARQ Indicator Channel, PHICH).

[0067] As Figure 1cAs shown, a flowchart of a working principle of a communication system provided by the prior art can include: S101, the satellite 20 sends system information on a broadcast channel to the terminal device 10, the system information can include a master information block MIB indicating uplink and downlink carrier frequency resources and a system information block SIB2 indicating parameters required for initial access transmission; the terminal device 10 can download the system information on the broadcast channel.

[0068] S102, the terminal device 10 adjusts the initial access system configuration of the terminal device 10 according to the master information block MIB and the system information block SIB2 in the system information, and randomly selects a random access preamble RAP in an available preamble pool to generate a first message Msg1.

[0069] S103, the terminal device 10 sends the first message Msg1 to the satellite 20 on a physical random access channel PRACH; the satellite 20 receives the first message Msg1 sent by the terminal device 10 through a preamble receiving window.

[0070] S104, the satellite 20 determines a random access response RAR according to the first message Msg1, specifically, the satellite 20 determines a power-delay profile (PDP) peak value according to the first message Msg1, detects a timing maximum time advanced (TA) value of the random access preamble RAP, and calculates a random access network temporary identifier (RA-RNTI) through the number of slots of the random access preamble RAP to obtain a second message Msg2. That is, the second message Msg2 can include the random access response RAR, and the random access response RAR can include the timing TA value and the random access network temporary identifier RA-RNTI.

[0071] S105, the satellite 20 sends the terminal device the random access response RAR, specifically, the satellite 20 sends the terminal device 10 the downlink control information (Downlink Control Information, DCI) scrambled by the random access wireless network temporary identifier RA-RNTI on the physical downlink control channel PDCCH, and sends the terminal device 10 the second message Msg2 on the physical downlink shared channel PDSCH, the second message Msg2 can include: the arrangement binary backoff index (BackoffIndex, BI), the random access preamble RAP index (Index, ID), the timing maximum time advance TA value, the uplink grant (Uplink Grant, UL Grant), the random access network temporary identifier RA-RNTI and the temporary cell radio network temporary identifier (Temporary Cell-Radio Network Temporary Identifier, TC-RNTI).

[0072] S106, the terminal device 10 listens on the physical downlink control channel PDCCH and decodes the downlink control information DCI using the random access network temporary identifier RA-RNTI of the terminal device 10 itself; if the decoding is successful, then find the random access response RAR on the physical downlink shared channel PDSCH according to the downlink control information DCI indication; then, compare the preamble index RAPID in the second message Msg2 with the preamble index RAPID in the terminal device 10, if they are the same, it is considered that the random access response RAR is selected, otherwise, it is not selected, and the random access response RAR is discarded; then, adjust according to the parameters in the random access response RAR to generate the third message Msg3, the third message Msg3 can include the temporary mobile subscriber identity (S-Temporary Mobile Subscriber Identity, S-TMSI).

[0073] S107, the terminal device 10 sends the third message Msg3 to the satellite 20 at the uplink resource indicated by the physical uplink shared channel PUSCH; the satellite 20 receives the third message Msg3 sent by the terminal device 10 in the receiving window.

[0074] S108, if satellite 20 determines that there are multiple terminal devices based on the third message Msg3, it performs contention resolution and generates a fourth message Msg4, that is, selects one terminal device 10 from the multiple terminal devices. The fourth message Msg4 is the message in the second message Msg2 scrambled with the temporary cell radio network temporary identifier TC-RNTI. The fourth message Msg4 may include: the identification information corresponding to the allowed access device, which can be called the contention resolution identifier.

[0075] S109, Satellite 20 sends a fourth message Msg4 to terminal device 10; Terminal device 10 receives the fourth message Msg4 sent by Satellite 20.

[0076] S110, Terminal device 10 uses its own TC-RNTI to decode the data in the Physical Downlink Control Channel (PDCCH) according to the fourth message Msg4, and compares the identification information in the fourth message Msg4 with the device identifier in Terminal device 10. If they are the same, it means that Terminal device 10 has successfully accessed the network and generates a Hybrid Automatic Repeat Request Acknowledgment / Rejection Message (HARQ ACK).

[0077] Furthermore, if the identification information in the fourth message Msg4 is the same as the device identifier in the terminal device 10, the terminal device 10 will also end the timer.

[0078] S111, Terminal device 10 sends the Hybrid Automatic Repeat Request Acknowledgment / Rejection Message (HARQ ACK) to satellite 20 on the Physical Hybrid Automatic Repeat Indication Channel (PHICH).

[0079] After investigation Figure 1c Analysis of the content shown reveals the following attack characteristics during random access between terminal device 10 and satellite 20 in existing communication systems:

[0080] 1. Openness of the satellite's broadcast channel: This means that all terminal devices within the satellite's coverage area can receive the satellite's broadcast messages normally.

[0081] 2. Limited number of random access preambles (RAPs): The number of random access preambles (RAPs) available within the cell corresponding to a satellite is limited (usually 64 or 53). Therefore, as the number of terminal devices accessing the satellite increases, preamble conflicts within the wide-area coverage area of ​​the satellite are inevitable.

[0082] 3. The user identity UI is easy to forge: the terminal device selecting the same random access preamble RAP cannot be distinguished by the satellite, and the identity distinguishing the terminal device in the third message Msg3 received by the satellite is actively sent by the terminal device without authentication, and the third message Msg3 is easy to forge.

[0083] 4. The malicious terminal is easy to collude: the malicious terminal cluster has communication scheduling capability and is easy to perform collusion attack.

[0084] 5. The malicious terminal is superior: the malicious terminal has superior uplink transmission power and message processing capability than the legal terminal.

[0085] 6. The discrimination adaptability of competition resolution: in the conventional satellite competition resolution process, the terminal device with stronger capability is easy to succeed in the competition.

[0086] In summary, Figure 1c The terminal device 10 in the system can include malicious terminals and legal terminals, and both the malicious terminals and the legal terminals will randomly access the satellite 20. The probability of successful access of the malicious terminal to the satellite 20 is higher than that of the legal terminal, and in the case of successful access of the malicious terminal to the satellite 20, it is easy to cause serious communication service interruption of the satellite, and even large-scale communication paralysis.

[0087] Among them, the malicious terminal refers to the terminal that will launch an attack on the satellite 20, and the legal terminal refers to the terminal that will not launch an attack on the satellite 20.

[0088] As shown in Figure 1d , it is a flowchart of an attack on a communication system provided by the prior art. In Figure 1d , step S201 is similar to step S101 shown in Figure 1c , and will not be described in detail here.

[0089] S202, the terminal device 10 adjusts the initial access system configuration of the terminal device 10 according to the master information block MIB and the system information block SIB2 in the system information, and randomly selects a random access preamble RAP in the available preamble pool to generate a first message Msg1.

[0090] It should be noted that whether the terminal device 10 is a malicious terminal or a legal terminal, the initial access system configuration of the terminal device 10 will be adjusted, and the first message Msg1 will be generated. The difference is that the malicious terminal will select the random access preamble RAP multiple times, that is, occupy most or even all of the random access preambles RAP (usually 64 or 53), so that the number of random access preambles RAP selected by the malicious terminal will be more than that of the legal terminal, so that there is a great probability that the malicious terminal will be selected subsequently.

[0091] That is, the first message Msg1 generated by the legitimate terminal includes one random access preamble RAP; the first message Msg1 generated by the malicious terminal includes multiple random access preambles RAP.

[0092] S203, the legitimate terminal sends the first message Msg1 to the satellite 20 on the physical random access channel PRACH, and the first message Msg1 includes one random access preamble RAP; the satellite 20 receives the first message Msg1 sent by the legitimate terminal through the preamble receiving window.

[0093] S203', the malicious terminal sends the first message Msg1 to the satellite 20 on the physical random access channel PRACH, and the first message Msg1 includes multiple random access preambles RAP; the satellite 20 receives the first message Msg1 sent by the malicious terminal through the preamble receiving window.

[0094] Steps S204-S205 are similar to steps S104-S105 shown in FIG. 1, and will not be described in detail here. Figure 1c Steps S104-S105 shown in FIG. 1, and will not be described in detail here.

[0095] S206, the terminal device 10 listens on the physical downlink control channel PDCCH and decodes the downlink control information DCI using the random access network temporary identifier RA-RNTI of the terminal device 10 itself; if the decoding is successful, the terminal device 10 finds the random access response RAR on the physical downlink shared channel PDSCH according to the indication of the downlink control information DCI; then, it is compared whether the preamble index RAPID in the second message Msg2 is the same as the preamble index RAPID in the terminal device 10, if the same, it is considered that the random access response RAR is selected, otherwise, it is not selected, and the random access response RAR is discarded; then, the third message Msg3 is generated according to the parameters in the random access response RAR.

[0096] It should be noted that whether the terminal device 10 is a malicious terminal or a legitimate terminal, the downlink control information DCI will be decoded. The difference is that after the malicious terminal decodes successfully, it will immediately broadcast its decoding parameters to other malicious terminals, so that all malicious terminals adjust according to the parameters in the random access response RAR, and send the third message Msg3 forged by each malicious terminal at the uplink resource indicated by the physical uplink shared channel PUSCH.

[0097] S207, the legitimate terminal sends the third message Msg3 to the satellite 20 at the uplink resource indicated by the physical uplink shared channel PUSCH; the satellite 20 receives the third message Msg3 sent by the legitimate terminal in the receiving window.

[0098] S207', the malicious terminal sends the fake third message Msg3 to the satellite 20 at an uplink resource indicated by a physical uplink shared channel (PUSCH); and the satellite 20 receives the fake third message Msg3 sent by the malicious terminal in a receiving window.

[0099] S208, the satellite 20 performs contention resolution according to the third message Msg3, and generates a fourth message Msg4 if it is determined that there are multiple terminal devices.

[0100] It should be noted that, in the process of performing contention resolution, if the contention resolution is successful, since the malicious terminal usually has higher uplink transmission power than the legal terminal, the malicious terminal has a higher probability of winning in the contention resolution; if the contention resolution fails, the legal terminal and the malicious terminal both declare the access failure, and the processing resources of the satellite 20 are occupied, at this time, the malicious terminal achieves the attack purpose.

[0101] S209, the satellite 20 sends the fourth message Msg4 to the terminal device 10; and the terminal device 10 receives the fourth message Msg4 sent by the satellite 20.

[0102] It should be noted that the terminal device 10 in step 209 has a high probability of being a malicious terminal.

[0103] S210, the terminal device 10 decodes data in a physical downlink control channel (PDCCH) using a TC-RNTI of the terminal device 10 according to the fourth message Msg4, and compares whether the identification information in the fourth message Msg4 is same as the device identification in the terminal device 10, if they are same, it indicates that the terminal device 10 succeeds in random access.

[0104] It should be noted that, if the terminal device 10 is a legal terminal, the terminal device 10 will generate a hybrid automatic repeat request acknowledgement / negative acknowledgement message (HARQ ACK); if the terminal device 10 is a malicious terminal, the terminal device 10 will not perform subsequent operations, i.e., will not generate the hybrid automatic repeat request acknowledgement / negative acknowledgement message (HARQ ACK).

[0105] S111, in the case that the terminal device 10 is a legal terminal, the terminal device 10 sends the hybrid automatic repeat request acknowledgement / negative acknowledgement message (HARQ ACK) to the satellite 20 on a physical hybrid automatic repeat indication channel (PHICH).

[0106] It should be noted that, in the case that the terminal device 10 is a malicious terminal, the terminal device 10 will not send the hybrid automatic repeat request acknowledgement / negative acknowledgement message (HARQ ACK) to the satellite 20, and re-engage in a new round of malicious attack.

[0107] To solve the security problem existing in the existing satellite device random access method, the embodiment of the present application provides a satellite device random access method based on some reasonable assumptions, which can include: sending a power allocation range to at least one terminal device through a satellite respectively; receiving the power allocation range sent by the satellite by the terminal device; determining a check value according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal device; sending the check value to the satellite; receiving the check value sent by at least one terminal device respectively by the satellite; determining a device access table according to at least one check value; sending the device access table to at least one terminal device respectively; receiving the device access table sent by the satellite by the terminal device; and determining whether the terminal device accesses the satellite according to the device access table.

[0108] Among them, the reasonable assumptions are as follows:

[0109] 1. Considering that the malicious terminal always adopts the attack strategy of overall maximum benefit: that is, the purpose of the malicious terminal is to occupy as many satellite uplink access channels as possible, and to access the satellite as much as possible to prepare for subsequent attacks, which means that the malicious terminal will perform the same random access process as the legal terminal.

[0110] 2. Considering that there are terminal devices in the satellite corresponding network that are not registered on the network side: that is, not all original S-TMSI (S-Temporary Mobile Subscriber Identity) can be accurately identified by the satellite.

[0111] 3. Considering that the terminal device has a built-in small hardware condition, and the satellite has a basic computing capability.

[0112] In addition, the satellite device random access method involved in the embodiment of the present application also needs to pay attention to the following problems:

[0113] 1. The communication distance between the satellite and the terminal device is far, and the round-trip delay is long, therefore, the satellite device random access method adopted should try to avoid increasing the additional interaction overhead.

[0114] 2. The computing and storage capacity of the satellite is still limited, therefore, the satellite device random access method adopted should try to reduce the computing overhead of the satellite and avoid new attack methods of the malicious terminal against the computing capacity.

[0115] 3. The network topology of the satellite under high-speed movement is constantly changing, and the satellite device random access method adopted should be able to update dynamically to avoid the malicious terminal adopting a replay attack on the entire satellite network.

[0116] Therefore, the satellite-under device random access method provided by the embodiments of the present application is based on the event synchronization principle of one-time password, proposes to configure only one small hardware in a terminal device, takes the counter value (i.e. the current access frequency) changed due to the event as an uncertain factor, generates a one-time password in combination with the seed value (i.e. the power allocation range) specified by the satellite, and maintains a dynamic password table (i.e. the device access table) by the satellite. The satellite-under device random access method can accurately determine the terminal device for random access by using the device access table corresponding to the check value, can effectively prevent malicious terminal devices from initiating random access with multiple frequencies by forging a legal identity, improves the access rate of the legal terminal device, and further effectively improves the security performance of the satellite-under device random access.

[0117] The satellite-under device random access method provided by the embodiments of the present application will be further introduced below.

[0118] As shown in Figure 2 , it is a flowchart of the satellite-under device random access method provided by the present application, which can include the following steps:

[0119] S301, the satellite sends a power allocation range to at least one terminal device respectively.

[0120] For any terminal device in the at least one terminal device, the terminal device receives the power allocation range sent by the satellite.

[0121] The power allocation range can be represented by Seed, and the power allocation range is composed of a first uplink transmission power threshold and a second uplink transmission power threshold, wherein the first uplink transmission power threshold is less than the second uplink transmission power threshold.

[0122] Optionally, the power allocation ranges sent by the satellite to different terminal devices can be the same or different, which is not limited here.

[0123] S302, the terminal device determines a check value according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal device.

[0124] Optionally, the check value can be a hash value.

[0125] After receiving the power allocation range sent by the satellite, the terminal device can select an uplink transmission power from the power allocation range, and then initiate a current access frequency to the satellite. Then, the terminal device determines the check value corresponding to the terminal device according to the uplink transmission power and the current access frequency, for subsequent sending to the satellite.

[0126] It should be noted that in the case of a plurality of terminal devices, the uplink transmission power selected by any two terminal devices can be the same or different, which is not limited here.

[0127] In some embodiments, the terminal device determines the check value according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal device, including: the terminal device generates a trigger instruction in the case of randomly selecting an uplink transmission power from the power allocation range; the terminal device obtains the historical access frequency according to the trigger instruction; the terminal device updates the historical access frequency to obtain the current access frequency; and the terminal device determines the check value according to the uplink transmission power and the current access frequency.

[0128] The historical access frequency refers to the number of times the terminal device has successfully accessed the satellite, and the historical access frequency is an integer greater than or equal to 0.

[0129] In the process of determining the check value, the terminal device can first randomly select an uplink transmission power from the power allocation range, at which time a trigger instruction can be generated, which is used to trigger counting; then, the terminal device obtains the historical access frequency corresponding to the terminal device according to the trigger instruction, and updates the historical access frequency to obtain the current access frequency corresponding to the terminal device; next, the terminal device calculates the randomly selected uplink transmission power and the current access frequency to obtain the check value corresponding to the terminal device.

[0130] The check values corresponding to different terminal devices can be the same or different, which is not limited here.

[0131] Optionally, in the process of obtaining the check value corresponding to the terminal device, the terminal device can first randomly select an uplink transmission power from the power allocation range, and then generate a trigger instruction, which carries the uplink transmission power to trigger counting; then, the terminal device inputs the uplink transmission power in the trigger instruction into the token of the terminal device and presses the button, so that the counter of the terminal device updates the historical access frequency, specifically, the historical access frequency is increased by 1 to obtain the current access frequency corresponding to the terminal device; next, the terminal device calculates the uplink transmission power and the current access frequency using the token to obtain the check value corresponding to the terminal device.

[0132] Optionally, before step S302, the method can further include: the satellite sends an index G (0 / 1) indicating whether the maintenance table is updated to the terminal device; and the terminal device receives the index G (0 / 1) sent by the satellite indicating whether the maintenance table is updated.

[0133] The maintenance table can be a historical device access table or a current device access table, which is not limited herein.

[0134] Optionally, the index G(0) indicates that the maintenance table is not updated, and the index G(1) indicates that the maintenance table is updated; or the index G(1) indicates that the maintenance table is not updated, and the index G(0) indicates that the maintenance table is updated, which is not limited herein.

[0135] It should be noted that the satellite records the current dynamic access maintenance table. After the terminal device selects an uplink transmission power, the terminal device automatically inputs the uplink transmission power into the token Token, and the initialization can be performed when the index G indicates that the maintenance table is updated (broadcast). That is, the malicious terminal can only select the uplink transmission power once in the time period, and cannot calculate the corresponding fake check value under different uplink transmission powers; similarly, the terminal device presses the button Button once, and the counter Counter is automatically triggered to increase by 1. The maintenance table cannot be manually initialized during the random access process of the satellite device, and can only be automatically initialized when the satellite declares that the maintenance table is updated (broadcast) to the terminal device.

[0136] S303, the terminal device sends a check value to the satellite.

[0137] The satellite receives the check value sent by at least one terminal device. That is, the satellite can receive at least one check value.

[0138] S304, the satellite determines a device access table according to the at least one check value.

[0139] The device access table can include a check identifier corresponding to an allowed access terminal, and the number of check identifiers corresponding to the allowed access terminal is at least one.

[0140] Optionally, the check identifier can be a hash identifier.

[0141] For any check value in the at least one check value, the satellite matches the check value with a preset check threshold. If the matching is successful, it indicates that a first terminal device corresponding to the check value meets the access condition, that is, the first terminal device is an allowed access terminal. At this time, the satellite can write a check identifier corresponding to the first terminal device into a historical device access table to obtain an updated device access table. If the matching fails, it indicates that a second terminal device corresponding to the check value does not meet the access condition, that is, the second terminal device is a disallowed access terminal. At this time, the satellite does not perform any operation.

[0142] The preset check threshold can include a power allocation range and a preset frequency threshold.

[0143] Optionally, the preset check threshold can be set before the satellite leaves factory, or can be customized by the user, which is not limited here.

[0144] In this way, the satellite can accurately determine whether the terminal device can access the satellite according to the check value, so as to reduce the number of malicious terminal connections, and further improve the security performance of the satellite device random access.

[0145] For example, assuming that three terminal devices send check values (such as hash values) to the satellite, the three terminal devices are terminal device A, terminal device B and terminal device C, the terminal device A corresponds to the hash a value, the terminal device B corresponds to the hash b value, and the terminal device C corresponds to the hash c value. After the satellite receives the hash values sent by the three terminal devices respectively, it can be matched with the preset check threshold one by one to determine whether the hash a value and the hash b value match the preset check threshold, and the hash c value fails to match the preset check threshold. At this time, the satellite can write the hash a value corresponding to the terminal device A and the hash b value corresponding to the terminal device B into the historical device access table to obtain the updated device access table.

[0146] Optionally, the satellite updates the device access table in a preset period.

[0147] Optionally, the preset period can be set before the satellite leaves factory, or can be customized by the user, which is not limited here.

[0148] Optionally, in the case where the number of check values is multiple, the satellite can first receive the uplink transmission power sent by multiple terminal devices respectively, and sort the uplink transmission power to obtain a target sequence. The target sequence can be a first sequence sorted from large to small power, or a second sequence sorted from small to large power, which is not limited here. Then, the satellite determines the check value corresponding to the terminal device according to the power from large to small in turn.

[0149] Since the probability that the uplink transmission power selected by the malicious terminal is greater than the uplink transmission power selected by the legitimate terminal is relatively large, that is, the malicious terminal will have higher power capability than the legitimate terminal, the satellite will more likely access the malicious terminal in the case of connecting multiple terminal devices at the same time, so that the security performance of the random access of the device under the satellite is relatively low. However, in the present fact example, since the satellite limits the access frequency of the terminal device, and the malicious terminal cannot change the corresponding access frequency without receiving an indication to update, the probability that the access frequency of the legitimate terminal is greater than the access frequency of the malicious terminal is relatively large. At this time, the satellite determines the check value corresponding to the terminal device in turn according to the power from large to small, and can determine more check values corresponding to the legitimate terminal, in order to reduce the connection quantity of the malicious terminal subsequently.

[0150] In some embodiments, the satellite determines the device access table according to the at least one check value can include that the satellite analyzes the check value, determines the uplink transmission power and the current access frequency corresponding to the terminal device for any check value in the at least one check value; and the satellite determines the device access table according to the check identifier corresponding to the allowed access terminal, in the case that the terminal device is determined to be the allowed access terminal according to the uplink transmission power and the current access frequency.

[0151] The satellite can first analyze any check value in the at least one check value to obtain the uplink transmission power and the current access frequency corresponding to the terminal device; and then the satellite determines whether the terminal device is the allowed access terminal according to the uplink transmission power and the current access frequency, and if so, writes the check identifier corresponding to the terminal device into the historical device access table to obtain the updated device access table, otherwise, does not perform any operation.

[0152] In this way, the satellite can accurately determine whether the terminal device can access the satellite according to the uplink transmission power and the current access frequency in the check value, so as to reduce the connection quantity of the malicious terminal, and further improve the security performance of the random access of the device under the satellite.

[0153] In some embodiments, the satellite determines the terminal device to be the allowed access terminal according to the uplink transmission power and the current access frequency can include that the satellite determines the terminal device to be the allowed access terminal in the case that the uplink transmission power is within the power allocation range and the current access frequency reaches the preset frequency threshold.

[0154] In the process of determining whether the terminal device is an allowed access terminal by the satellite, after obtaining the uplink transmission power corresponding to the terminal device and the current access frequency, the satellite can match the uplink transmission power with a power allocation range in a preset check threshold, and match the current access frequency with a preset frequency threshold in the preset check threshold. In the case that the uplink transmission power is within the power allocation range and the current access frequency reaches the preset frequency threshold, it means that the uplink transmission power matches the power allocation range successfully and the current access frequency matches the preset frequency threshold successfully, and at this time, the terminal device can be determined as an allowed access terminal. Otherwise, in the case that the uplink transmission power is not within the power allocation range and / or the current access frequency does not reach the preset frequency threshold, the satellite does not perform any operation.

[0155] Optionally, in the process of matching the current access frequency with the preset frequency threshold, the satellite can start matching from the current access frequency Counter' = 1, if the matching fails, start matching from the current access frequency Counter' = 2, and so on, until the last current access frequency Counter' reaches the preset frequency threshold.

[0156] S305, the satellite sends a device access table to at least one terminal device respectively.

[0157] The terminal device receives the device access table sent by the satellite.

[0158] S306, the terminal device determines whether the terminal device accesses the satellite according to the device access table.

[0159] Since the device access table can include a check identifier corresponding to at least one allowed access terminal, after obtaining the device access table sent by the satellite, the terminal device can match the device identifier carried by the terminal device with the device access table to accurately determine whether the terminal device can access the satellite.

[0160] In some embodiments, the terminal device determines whether the terminal device accesses the satellite according to the device access table can include: the terminal device determines that the terminal device accesses the satellite in the case that the device identifier corresponding to the terminal device matches the device access table; the terminal device determines that the terminal device does not access the satellite in the case that the device identifier does not match the device access table.

[0161] In the process of determining whether the terminal device accesses the satellite, the terminal device corresponds to the device identifier and the check identifier corresponding to the allowed access terminal in the device access table are matched one by one: in the case where it is determined that the same check identifier as the device identifier exists in the device access table, it is indicated that the device identifier matches the device access table, at this time, it can be determined that the terminal device can access the satellite; in the case where it is determined that the same check identifier as the device identifier does not exist in the device access table, it is indicated that the device identifier does not match the device access table, at this time, it can be determined that the terminal device cannot access the satellite.

[0162] In the embodiment of the application, the satellite device random access method uses the device access table corresponding to the check value to accurately determine the terminal device for random access, can effectively prevent malicious terminals from forging a legal identity to initiate a random access of multiple frequencies, improve the access rate of the legal terminal, and further effectively improve the security performance of the satellite device random access.

[0163] As shown in Figure 3 As shown in

[0164] Steps S402-S404 are similar to steps 402-404 shown in Figure 1c Steps S402-S404 are similar to steps 402-404 shown in

[0165] S405, the satellite 20 sends the random access response RAR to the terminal device, specifically, the satellite 20 sends the downlink control information DCI scrambled by the random access wireless network temporary identifier RA-RNTI to the terminal device 10 on the physical downlink control channel PDCCH, and sends the second message Msg2 to the terminal device 10 on the physical downlink shared channel PDSCH, the second message Msg2 can include: collation binary BI backoff index, random access preamble RAP index ID, timing maximum time advance TA value, uplink grant UL Grant, random access network temporary identifier RA-RNTI, temporary cell radio network temporary identifier TC-RNTI and power allocation range Seed.

[0166] S406, the terminal device 10 listens on a physical downlink control channel (PDCCH) and decodes downlink control information (DCI) using a random access network temporary identifier (RA-RNTI) of the terminal device 10 itself; if the decoding is successful, the terminal device 10 finds a random access response (RAR) on a physical downlink shared channel (PDSCH) according to an indication of the downlink control information (DCI); then, the terminal device 10 compares a preamble index (RAPID) in the second message (Msg2) with the preamble index (RAPID) in the terminal device 10; if the two are the same, the random access response (RAR) is considered to be selected, otherwise, the random access response (RAR) is not selected and is discarded; then, the terminal device 10 adjusts parameters in the random access response (RAR) to generate a third message (Msg3), which can include a check value and an uplink transmission power.

[0167] In the process of generating the third message (Msg3) according to the parameters in the random access response (RAR), the terminal device 10 can first randomly select an uplink transmission power from a power allocation range, and then generate a trigger instruction carrying the uplink transmission power to trigger a counter; then, the terminal device 10 analyzes the trigger instruction to obtain the uplink transmission power, and triggers the terminal device 10 to input the uplink transmission power into a token (Token) of the terminal device 10 and press a button (Button), so that a counter (Counter) of the terminal device 10 is incremented by 1 based on a historical access frequency to obtain a current access frequency corresponding to the terminal device; then, the terminal device 10 calculates the uplink transmission power and the current access frequency using the token (Token) to obtain a check value corresponding to the terminal device; finally, the terminal device 10 generates the third message (Msg3) according to the check value and the uplink transmission power.

[0168] Optionally, the terminal device 10 can broadcast an updated device access table in a preset period in system information.

[0169] Step S407 is similar to step 107 shown in FIG. 1, and will not be described in detail here. Figure 1c

[0170] S408, the satellite 20 processes the third message (Msg3) using a successive interference cancellation (SIC) technique to obtain a fourth message (Msg4), which can include a device access table.

[0171] Step S409 is similar to step S109 shown in FIG. 1, and will not be described in detail here. Figure 1c

[0172] ​​S410, the terminal device 10 decodes data in a physical downlink control channel PDCCH using a TC-RNTI of the terminal device 10 according to the fourth message Msg4, and matches a device access table in the fourth message Msg4 with a device identifier in the terminal device 10, and in the case of matching, it is indicated that the terminal device 10 succeeds in random access, at this time, a hybrid automatic repeat request acknowledgement / negative acknowledgement message HARQ ACK is generated.

[0173] Step S411 is similar to step S111 shown in the figure, and will not be described in detail here. Figure 1c As shown in step S111, no detailed description is given here.

[0174] It should be noted that, Figure 3 The satellite device random access method shown limits the frequency of access initiated by malicious terminals within a time period by giving each terminal device 10 a unique temporary identity, and dynamically maintaining a device access table by the satellite 20. Without increasing any additional interaction overhead, the number of malicious terminals is reduced, thereby improving the security performance of satellite device random access and improving the access rate of legitimate terminals

[0175] The satellite provided by the present application is described below, and the satellite described below can be correspondingly referred to with the satellite device random access method described above.

[0176] As shown in the figure, Figure 4 The structure of the satellite provided by the present application is shown in the figure, and the satellite 20 can include:

[0177] The transceiver module 501 is configured to send a power allocation range to at least one terminal device, respectively, and the power allocation range is used by the terminal device to determine a check value; and receive a check value sent by the at least one terminal device, respectively.

[0178] The processing module 502 is configured to determine a device access table according to at least one check value, and the device access table includes a check identifier corresponding to an allowed access terminal;

[0179] The transceiver module 501 is further configured to send the device access table to the at least one terminal device, respectively.

[0180] Optionally, the processing module 502 is specifically configured to parse the check value to determine the uplink transmission power and the current access frequency of the terminal device for any check value in the at least one check value; and in the case of determining that the terminal device is the allowed access terminal according to the uplink transmission power and the current access frequency, determine the device access table according to the check identifier corresponding to the allowed access terminal.

[0181] Optionally, the processing module 502 is specifically used to determine that the terminal device is the allowed access terminal when the uplink transmission power is within the power allocation range and the current access frequency reaches a preset frequency threshold.

[0182] The terminal device provided by the present invention is described below. The terminal device described below and the satellite-based random access method described above can be referred to in correspondence.

[0183] like Figure 5 The diagram shown is a structural schematic of the terminal device provided by the present invention. The terminal device 10 may include:

[0184] The transceiver module 601 is used to receive the power allocation range transmitted by the satellite;

[0185] Processing module 602 is used to determine a check value based on any uplink transmission power within the power allocation range and the current access frequency initiated by the terminal device;

[0186] The transceiver module 601 is also used to send the verification value to the satellite and receive the device access table sent by the satellite. The verification value is used by the satellite to determine the device access table, which includes a verification identifier corresponding to the allowed access terminal.

[0187] The processing module 602 is also used to determine whether the terminal device is connected to the satellite based on the device access table.

[0188] Optionally, the processing module 602 is specifically configured to generate a trigger instruction when randomly selecting the uplink transmission power from the power allocation range; obtain the historical access frequency according to the trigger instruction; update the historical access frequency to obtain the current access frequency; and determine the check value according to the uplink transmission power and the current access frequency.

[0189] Optionally, the processing module 602 is specifically used to determine that the terminal device accesses the satellite if the device identifier corresponding to the terminal device matches the device access table; and to determine that the terminal device does not access the satellite if the device identifier does not match the device access table.

[0190] like Figure 6As shown, the electronic device provided by the application includes a processor 710, a communications interface 720, a memory 730 and a communications bus 740, wherein the processor 710, the communications interface 720 and the memory 730 complete mutual communication through the communications bus 740. The processor 710 can call the logic instruction in the memory 730 to execute the satellite-under device random access method, which includes: the satellite respectively sends a power allocation range to at least one terminal device; the terminal device receives the power allocation range sent by the satellite; according to any uplink transmission power in the power allocation range and the current access frequency initiated by the terminal device, a check value is determined; the check value is sent to the satellite; the satellite receives the check value respectively sent by at least one terminal device; according to at least one check value, a device access table is determined, the device access table includes the check identification corresponding to the terminal allowed to access; the device access table is respectively sent to at least one terminal device; the terminal device receives the device access table sent by the satellite; according to the device access table, whether the terminal device accesses the satellite is determined.

[0191] In addition, the logic instruction in the memory 730 described above can be realized in the form of a software functional unit and sold or used as an independent product, and can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the application essentially or the part of the prior art that contributes or the part of the technical solutions can be embodied in the form of a software product, and the computer software product is stored in a storage medium, includes a plurality of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in various embodiments of the application. The foregoing storage medium includes a U disk, a mobile hard disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a magnetic disk or an optical disk and various program codes that can be stored in the medium.

[0192] In another aspect, the present application also provides a computer program product comprising a computer program, which can be stored on a non-transitory computer readable storage medium, and the computer program is executable by a processor to enable a computer to perform the satellite-under device random access method provided by the above-mentioned methods, which comprises: a satellite respectively sending a power allocation range to at least one terminal device; a terminal device receiving the power allocation range sent by the satellite; determining a check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; sending the check value to the satellite; the satellite receiving the check value respectively sent by at least one terminal device; determining a device access table according to at least one check value, the device access table comprising a check identification corresponding to a terminal device allowed to access; sending the device access table to at least one terminal device; a terminal device receiving the device access table sent by the satellite; and determining whether the terminal device accesses the satellite according to the device access table.

[0193] In yet another aspect, the present application also provides a non-transitory computer readable storage medium having a computer program stored thereon, which is executable by a processor to implement the satellite-under device random access method provided by the above-mentioned methods.

[0194] The device embodiments described above are only schematic, wherein the units shown as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, i.e., can be located in one place or distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the present embodiment. Those skilled in the art can understand and implement without creative labor.

[0195] From the above description of the embodiments, those skilled in the art can clearly understand that the embodiments can be implemented by means of software plus necessary general hardware platforms, and of course can also be implemented by hardware. Based on such understanding, the above technical solutions, essentially or in other words, the part that contributes to the prior art, can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as a ROM / RAM, a magnetic disk, an optical disk, etc., and includes a number of instructions to make a computer device (which can be a personal computer, a server, or a network device, etc.) execute the methods described in each embodiment or some parts of the embodiments.

[0196] It should be pointed out finally that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit the same; and although the present application has been described in detail with reference to the foregoing embodiments, it should be appreciated by those skilled in the art that the technical solutions recorded in the foregoing embodiments can be modified, or some technical features thereof can be replaced equivalently; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A satellite-under device random access method, characterized by, The method is applied to a satellite, and the method comprises: sending a power allocation range to at least one terminal device respectively, the power allocation range being used by the terminal device to determine a check value, so that the terminal device determines the check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; receiving the check value sent by the at least one terminal device respectively; determining a device access table according to the at least one check value, the device access table comprising a check identifier corresponding to an allowed access terminal, so that the terminal device determines whether the terminal device accesses the satellite according to the device access table; for any check value in the at least one check value, the satellite matches the check value with a preset check threshold, if the matching is successful, it indicates that a first terminal device corresponding to the check value meets an access condition, that is, the first terminal device is the allowed access terminal, at this time, the satellite can write a check identifier corresponding to the first terminal device into a historical device access table to obtain an updated device access table; if the matching fails, it indicates that a second terminal device corresponding to the check value does not meet the access condition, that is, the second terminal device is a disallowed access terminal, at this time, the satellite does not perform any operation; sending the device access table to the at least one terminal device respectively.

2. The method of claim 1, wherein, The determination of the device access table according to the at least one check value comprises: for any check value in the at least one check value, analyzing the check value to determine uplink transmission power and a current access frequency of the terminal device; in a case where the terminal device is determined to be the allowed access terminal according to the uplink transmission power and the current access frequency, determining the device access table according to a check identifier corresponding to the allowed access terminal.

3. The method of claim 2, wherein, The determination of the terminal device as the allowed access terminal according to the uplink transmission power and the current access frequency comprises: in a case where the uplink transmission power is in the power allocation range and the current access frequency reaches a preset frequency threshold, determining the terminal device as the allowed access terminal.

4. A satellite-under device random access method, characterized by, The method is applied to a terminal device, and the method comprises: receiving a power allocation range sent by a satellite; determining a check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; sending the check value to the satellite, and receiving a device access table sent by the satellite, the check value being used by the satellite to determine the device access table, the device access table comprising a check identifier corresponding to an allowed access terminal; The satellite matches the check value with a preset check threshold, so that for any check value in the at least one check value, if the matching is successful, it indicates that a first terminal device corresponding to the check value meets the access condition, that is, the first terminal device is an allowed access terminal, at this time, the satellite can write a check identifier corresponding to the first terminal device into a historical device access table to obtain an updated device access table; if the matching fails, it indicates that a second terminal device corresponding to the check value does not meet the access condition, that is, the second terminal device is a disallowed access terminal, at this time, the satellite does not perform any operation; According to the device access table, it is determined whether the terminal device accesses the satellite.

5. The method of claim 4, wherein, The check value is determined according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device, including: In the case of randomly selecting one of the uplink transmission powers from the power allocation range, a trigger instruction is generated; According to the trigger instruction, a historical access frequency is obtained; The historical access frequency is updated to obtain the current access frequency; The check value is determined according to the uplink transmission power and the current access frequency.

6. The method according to claim 4 or 5, characterized in that, According to the device access table, it is determined whether the terminal device accesses the satellite, including: In the case that the device identifier corresponding to the terminal device matches the device access table, it is determined that the terminal device accesses the satellite; In the case that the device identifier does not match the device access table, it is determined that the terminal device does not access the satellite.

7. A satellite, characterized by Including: The transceiver module is configured to send a power allocation range to at least one terminal device, respectively, and the power allocation range is used by the terminal device to determine a check value; The check value sent by the at least one terminal device is received, so that the terminal device determines the check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; The processing module is configured to determine a device access table according to at least one check value, the device access table including a check identifier corresponding to an allowed access terminal, so that the terminal device determines whether the terminal device accesses the satellite according to the device access table; For any check value in the at least one check value, the satellite matches the check value with a preset check threshold, so that if the matching is successful, it indicates that a first terminal device corresponding to the check value meets the access condition, that is, the first terminal device is an allowed access terminal, at this time, the satellite can write a check identifier corresponding to the first terminal device into a historical device access table to obtain an updated device access table; if the matching fails, it indicates that a second terminal device corresponding to the check value does not meet the access condition, that is, the second terminal device is a disallowed access terminal, at this time, the satellite does not perform any operation; The transceiver module is further configured to send the device access table to the at least one terminal device, respectively.

8. A terminal device, comprising: Including: The transceiver module is configured to receive a power allocation range sent by a satellite; The processing module is configured to determine a check value according to any uplink transmission power in the power allocation range and a current access frequency initiated by the terminal device; The transceiving module is further configured to send the check value to the satellite, and receive a device access list sent by the satellite, wherein the check value is used by the satellite to determine the device access list, and the device access list comprises a check identification corresponding to an allowed access terminal; So that for any check value in the at least one check value, the satellite matches the check value with a preset check threshold, if the matching is successful, it indicates that a first terminal device corresponding to the check value meets an access condition, i.e., the first terminal device is an allowed access terminal, at this time, the satellite can write a check identification corresponding to the first terminal device into a historical device access list to obtain an updated device access list; if the matching fails, it indicates that a second terminal device corresponding to the check value does not meet the access condition, i.e., the second terminal device is a disallowed access terminal, at this time, the satellite does not perform any operation. The processing module is further configured to determine whether the terminal device accesses the satellite according to the device access list.

9. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, The processor implements the satellite device random access method of any one of claims 1 to 6 when executing the program.

10. A non-transitory computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program implements the satellite device random access method of any one of claims 1 to 6 when executed by the processor.

Images