Satellite communication-based trusted timestamp service system, method, device and storage medium

Abstract

The application provides a satellite communication-based trusted timestamp service system, method, device and storage medium. A satellite NTP server is used for receiving timing time of a satellite signal, starting an NTP service and providing network timing service. A terminal trusted timestamp server is used for starting an NTP synchronization service and acquiring timing time. The terminal trusted timestamp server is used for providing a trusted timestamp signing service to at least one terminal device in the same local area network and generating a trusted timestamp credential through a trusted timestamp interface. The stability and service efficiency of the trusted timestamp service system are improved based on satellite communication. The problem that trusted timestamp service cannot be obtained in places without internet access or with poor network environment when a trusted timestamp service center provides services for external programs or operators through the internet is solved.

Description

Technical Field

[0001] This application belongs to the field of communication technology, specifically relating to trusted timestamp technology based on satellite communication, and particularly to a trusted timestamp service system, method, device and storage medium based on satellite communication. Background Technology

[0002] With the development of the Internet, electronic data has become an important form of data transmission and dissemination. A trusted timestamp certificate is an electronic certificate issued by a trusted timestamp service center. It can prove the existence and integrity of electronic data without obtaining the content of the electronic data. It is widely used in the fields of electronic evidence, electronic contracts, electronic documents, and intellectual property.

[0003] However, due to various reasons, network signals and broadband are unstable or even disconnected, causing some products and services to be unable to obtain trusted timestamp services or provide online verification on the Internet when obtaining trusted timestamp credentials. Summary of the Invention

[0004] The present invention proposes a trusted timestamp service system, method, device and storage medium based on satellite communication, which improves the stability and service efficiency of the trusted timestamp service system based on satellite communication.

[0005] According to a first aspect of the embodiments of this application, a trusted timestamp service system based on satellite communication is provided, including a satellite NTP server and a terminal trusted timestamp server connected to each other;

[0006] The satellite NTP server is used to receive satellite signals for time synchronization, enable NTP service, and provide network time synchronization service;

[0007] The terminal trusted timestamp server is used to start the NTP synchronization service and obtain the time synchronization; the terminal trusted timestamp server is used to provide trusted timestamp endorsement services to at least one terminal device in the same local area network, and generate trusted timestamp credentials through the trusted timestamp interface.

[0008] In some embodiments of this application, the system further includes a satellite communication terminal and a cloud-based trusted timestamp server;

[0009] Satellite communication terminals are used to access the Internet via satellite communication;

[0010] The terminal trusted timestamp server is used to connect to the cloud trusted timestamp server via satellite communication terminal and transmit trusted timestamp credentials and signature logs;

[0011] The cloud-based trusted timestamp server is used to store trusted timestamp credentials and signature logs, and to provide trusted timestamp credentials query and verification services to at least one Internet user, and to generate query and verification results through the query interface.

[0012] In some embodiments of this application, the system further includes a cloud-based NTP server; the cloud-based NTP server is connected to a cloud-based trusted timestamp server to enable NTP service and provide network time synchronization service.

[0013] In some embodiments of this application, the trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server based on HTTPS, and the trusted timestamp interface conforms to the GB / T 36631-2018 specification.

[0014] According to a second aspect of the embodiments of this application, a reliable timestamp service method based on satellite communication is provided, comprising:

[0015] Receive satellite signal time synchronization through a satellite NTP server, enable NTP service, and provide network time synchronization service;

[0016] The system initiates NTP synchronization service and obtains the time synchronization information through the terminal trusted timestamp server; it also provides trusted timestamp endorsement service to at least one terminal device located in the same local area network as the terminal trusted timestamp server, and generates trusted timestamp credentials through the trusted timestamp interface.

[0017] In some embodiments of this application, a trusted timestamp endorsement service is provided to at least one terminal device located on the same local area network as the trusted timestamp server, and a trusted timestamp credential is generated through a trusted timestamp interface, including:

[0018] Receive trusted timestamp credential requests from terminal devices, verify and confirm that the data structure of the trusted timestamp credential requests conforms to the specifications;

[0019] Verify and confirm that the terminal's trusted timestamp server has completed time synchronization with the satellite NTP server;

[0020] Generate a trusted timestamp credential response and save the trusted timestamp credential and endorsement log.

[0021] According to a third aspect of the embodiments of this application, a method for providing a trusted timestamp service based on satellite communication is provided, comprising:

[0022] The terminal trusted timestamp server connects to the cloud trusted timestamp server via a satellite communication terminal and transmits trusted timestamp credentials and signature logs.

[0023] By storing trusted timestamp credentials and endorsement logs on a cloud-based trusted timestamp server, the system provides a query and verification service for trusted timestamp credentials to at least one internet user and generates query and verification results through a query interface.

[0024] In some embodiments of this application, data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on an HTTPS REST interface, and the data content is a JSON data packet.

[0025] According to a fourth aspect of the embodiments of this application, a trusted timestamp service device based on satellite communication is provided, comprising: a memory for storing executable instructions; and a processor for connecting to the memory to execute the executable instructions to complete the trusted timestamp service method.

[0026] According to a fifth aspect of the embodiments of this application, a computer-readable storage medium is provided having a computer program stored thereon; the computer program is executed by a processor to implement a trusted timestamp service method based on satellite communication.

[0027] The trusted timestamp service system, method, device, and storage medium based on satellite communication of this application utilize a satellite NTP server to receive satellite signal time synchronization, enable NTP service, and provide network time synchronization service; a terminal trusted timestamp server is used to initiate NTP synchronization service and obtain time synchronization; the terminal trusted timestamp server provides trusted timestamp endorsement service to at least one terminal device in the same local area network and generates trusted timestamp credentials through a trusted timestamp interface. Satellite communication improves the stability and service efficiency of the trusted timestamp service system. It solves the problem that when a trusted timestamp service center provides services to external programs or operators via the Internet, trusted timestamp services cannot be obtained in areas without Internet access or with poor network conditions.

[0028] Furthermore, by using a satellite communication terminal and a cloud-based trusted timestamp server, timestamp credentials and logs are synchronized to the cloud, enabling the query and verification of trusted timestamp credentials to be provided to at least one internet user. This solves the problem of not being able to provide online verification when the terminal's trusted timestamp server is offline. Attached Figure Description

[0029] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0030] Figure 1 The diagram shows a schematic representation of a trusted timestamp service system based on satellite communication according to an embodiment of this application.

[0031] Figure 2 The diagram shows another structural schematic of a satellite communication-based trusted timestamp service system according to an embodiment of this application;

[0032] Figure 3 The diagram shows a schematic representation of the principle structure of a trusted timestamp service system based on satellite communication according to an embodiment of this application.

[0033] Figure 4 The diagram illustrates the steps of a trusted timestamp service method based on satellite communication according to an embodiment of this application.

[0034] Figure 5 The diagram illustrates the steps of a trusted timestamp service method based on satellite communication according to an embodiment of this application.

[0035] Figure 6 The diagram shows a time calibration flowchart based on satellite timing according to an embodiment of this application;

[0036] Figure 7 The diagram shows a flowchart of trusted timestamp endorsement and verification based on satellite communication according to an embodiment of this application;

[0037] Figure 8 The diagram shows a structural schematic of a trusted timestamp service device based on satellite communication according to an embodiment of this application. Detailed Implementation

[0038] Regarding this application, with the development of the Internet, electronic data has become an important form of data transmission and dissemination. A trusted timestamp certificate is an electronic certificate issued by a trusted timestamp service center. It can prove the existence and integrity of electronic data without obtaining the content of the electronic data. It is widely used in the fields of electronic evidence, electronic contracts, electronic documents, and intellectual property.

[0039] However, currently, products and services face the following two problems in obtaining trusted timestamp credentials:

[0040] First, trusted timestamp service centers provide services to external programs / operators via the Internet. In places where the Internet is unavailable or where the network environment is poor, trusted timestamp services cannot be obtained.

[0041] Secondly, offline trusted timestamp servers cannot provide online verification over the internet.

[0042] Based on this, this application discloses a trusted timestamp service system and operation method based on satellite communication, particularly involving a satellite-based NTP server, a trusted timestamp service method based on satellite networks, and a method for data synchronization in unstable networks, to solve the above problems to varying degrees.

[0043] Specifically, regarding issue one: in areas where the Internet cannot reach, this application provides a terminal trusted timestamp server, based on local Ethernet, to provide trusted timestamp services for the terminal device's program / operator; and adopts an NTP server based on satellite time synchronization to provide a trusted time source for the trusted timestamp server.

[0044] On the other hand, regarding question two: On the terminal's trusted timestamp server, the synchronization program monitors trusted timestamp credentials and logs, uploading them to the cloud timestamp server via satellite network. The synchronization program employs an asynchronous upload mechanism, adaptively adjusting the upload speed based on the satellite network's data communication quality, pausing uploads in areas without network access. On the cloud-based trusted timestamp server, the synchronized timestamp credentials and logs are stored in a database, and external query services are provided.

[0045] In summary, the trusted timestamp service system based on satellite communication proposed in this application consists of five parts in principle: a satellite communication terminal, a satellite NTP server (BeiDou time synchronization), a terminal trusted timestamp server, a cloud-based NTP server, and a cloud-based trusted timestamp server.

[0046] Among them, the Network Time Protocol (NTP) is a protocol used to synchronize computer time. It allows computers to synchronize with their servers or clock sources (such as quartz clocks, GPS, etc.). It can provide high-precision time correction and can prevent malicious protocol attacks through encrypted authentication.

[0047] The operation principle of the trusted timestamp service based on satellite communication consists of two processes:

[0048] The first is a time calibration process based on satellite time synchronization. The satellite NTP server receives satellite signals to obtain accurate time synchronization, and then starts the NTP service to provide network time synchronization service via Ethernet. The terminal trusted timestamp server connects to the satellite NTP server via Ethernet, starts the NTP synchronization service, and obtains accurate time synchronization.

[0049] Second, the trusted timestamp endorsement and verification flowchart based on satellite communication: After receiving a trusted timestamp credential request, the trusted timestamp server verifies that the data structure of the trusted timestamp credential request conforms to the specification, then verifies the requesting username and password, and confirms that the local time has been synchronized with the NTP server, generates a trusted timestamp credential response, and saves it locally; the background synchronization program monitors the timestamp credential and logs in real time, and synchronizes the timestamp credential and logs to the cloud server according to the satellite communication status; the cloud server saves the timestamp credential and logs to the database and provides credential query services.

[0050] In summary, the method of the trusted timestamp service system based on satellite communication of this application includes the following steps:

[0051] 1. Provide a satellite NTP server as the time source for the terminal's trusted timestamp server;

[0052] 2. The terminal trusted timestamp server provides trusted timestamp services and stores trusted timestamp credentials and logs;

[0053] 3. The synchronization program in the terminal's trusted timestamp server synchronizes timestamp credentials and logs to the cloud timestamp server via satellite network;

[0054] 4. The cloud-based timestamp server stores credentials and logs in the database and provides timestamp credential query services to the public.

[0055] Specifically, the satellite communication-based trusted timestamp service system, method, device, and storage medium of this application utilize a satellite NTP server to receive satellite signal time synchronization, activate NTP service, and provide network time synchronization service; a terminal trusted timestamp server is used to initiate NTP synchronization service and obtain time synchronization; the terminal trusted timestamp server provides trusted timestamp endorsement service to at least one terminal device in the same local area network and generates trusted timestamp credentials through a trusted timestamp interface. Satellite communication improves the stability and service efficiency of the trusted timestamp service system. It solves the problem of not being able to obtain trusted timestamp service in areas without internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the internet.

[0056] Furthermore, by using a satellite communication terminal and a cloud-based trusted timestamp server, timestamp credentials and logs are synchronized to the cloud, enabling the query and verification of trusted timestamp credentials to be provided to at least one internet user. This solves the problem of not being able to provide online verification when the terminal's trusted timestamp server is offline.

[0057] To make the technical solutions and advantages of the embodiments of this application clearer, the exemplary embodiments of this application will be described in further detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not an exhaustive list of all embodiments. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of this application can be combined with each other.

[0058] Example 1

[0059] Figure 1 The diagram shows a schematic representation of a trusted timestamp service system based on satellite communication according to an embodiment of this application.

[0060] like Figure 1 As shown, the satellite communication-based trusted timestamp service system of this application embodiment includes a satellite NTP server 101 and a terminal trusted timestamp server 102 connected to each other.

[0061] The satellite NTP server 101 is used to receive the time synchronization of satellite signals, enable NTP service, and provide network time synchronization service; the terminal trusted timestamp server 102 is used to start NTP synchronization service and obtain time synchronization; the terminal trusted timestamp server 102 is used to provide trusted timestamp endorsement service to at least one terminal device in the same local area network, and generate trusted timestamp credentials through the trusted timestamp interface.

[0062] Among them, the satellite NTP server 101 is a satellite-based NTP server that obtains high-precision time synchronization through the Beidou time synchronization satellite 201 and provides NTP services to the outside world through Ethernet.

[0063] In this embodiment, the timing satellite 201 is used to transmit satellite signals with accurate time synchronization. The timing satellite 201 is a satellite that provides time synchronization. Satellite time synchronization is the process of using a satellite as a time reference source or relay medium to recover the original time locally by receiving satellite signals and performing time delay compensation.

[0064] Furthermore, satellite communication can improve the stability and service efficiency of the trusted timestamp service system. This solves the problem of unavailable trusted timestamp services in areas without internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the internet.

[0065] Figure 2 The diagram shows another structural schematic of a trusted timestamp service system based on satellite communication according to an embodiment of this application.

[0066] like Figure 2As shown, in some embodiments of this application, the system also includes a satellite communication terminal 103 and a cloud-based trusted timestamp server 301.

[0067] Specifically, the satellite communication terminal 103 is used to access the Internet via satellite communication; the terminal trusted timestamp server 102 is used to connect to the cloud trusted timestamp server 301 through the satellite communication terminal 103 and transmit trusted timestamp credentials and signature logs; the cloud trusted timestamp server 301 is used to store trusted timestamp credentials and signature logs, and to provide trusted timestamp credentials query and verification services to at least one Internet user, and to generate query and verification results through the query interface.

[0068] Here, the satellite communication terminal connects to the communication satellite and accesses the Internet based on satellite communication; the function of the communication satellite is to use the satellite as a relay for wireless signal transmission to provide Internet access for ground terminals.

[0069] Therefore, timestamp credentials and logs can be synchronized to the cloud via satellite communication terminal 103 and cloud-based trusted timestamp server 301, providing trusted timestamp credential query and verification services to at least one internet user. This solves the problem that the terminal trusted timestamp server 102 cannot provide online verification on the internet when it is offline.

[0070] In some embodiments of this application, the system further includes a cloud-based NTP server; the cloud-based NTP server is connected to a cloud-based trusted timestamp server 301 to enable NTP service and provide network time synchronization service.

[0071] In this embodiment, the cloud-based NTP server is a hardware server that provides NTP services, typically through satellite time synchronization, fiber optic time synchronization, or upstream NTP time synchronization.

[0072] In other implementations, the trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server 102 based on HTTPS, and the trusted timestamp interface follows the GB / T 36631-2018 specification.

[0073] Figure 3 The diagram shows a schematic diagram of the principle structure of a trusted timestamp service system based on satellite communication according to an embodiment of this application.

[0074] To further explain the principle of the trusted timestamp service system based on satellite communication in the embodiments of this application, such as... Figure 3The schematic diagram of the trusted timestamp system structure in a specific application scenario shown includes an NTP server 101, a terminal trusted timestamp server 102, a satellite communication terminal 103, a trusted timestamp interface 104, a timing satellite 201, a communication satellite 202, a cloud trusted timestamp server 301, a cloud NTP server 302, a query interface 303, a public / supervisor 401, and a program / operator 402.

[0075] Among them, satellite NTP server 101: an NTP server based on satellite time synchronization, which obtains high-precision time synchronization through Beidou time synchronization satellites and provides NTP services to the outside world through Ethernet.

[0076] Terminal Trusted Timestamp Server 102: Deployed on the terminal, the trusted timestamp server can use two Ethernet networks: one provides trusted timestamp endorsement services for devices in the terminal's local area network, and the terminal devices use an HTTPS-based REST interface to generate trusted timestamp credentials; the other connects to the Internet via a satellite communication terminal to synchronize the endorsed trusted timestamp credentials and logs to the cloud trusted timestamp server, providing the public / regulators with verification services for trusted timestamp credentials.

[0077] Satellite communication terminal 103: An Internet access terminal device that uses satellite communication technology to provide Internet access in areas without basic Internet coverage. Its disadvantages are large transmission delay and unstable data connection.

[0078] Trusted timestamp interface 104: Provides services externally via Ethernet, and the service interface complies with GB / T36631-2018.

[0079] Time Service Satellite 201: A satellite that provides time service. Satellite time service is the process of using a satellite as a time reference source or relay medium to recover the original time locally by receiving satellite signals and compensating for time delays.

[0080] Communication Satellite 202: Utilizes satellites as relays for wireless signals to provide internet access for ground terminals.

[0081] Cloud-based Trusted Timestamp Server 301: A trusted timestamp server deployed on the Internet, providing an HTTPS-based REST interface to receive data from terminal trusted timestamp servers and save it to a database; it provides a page for the public / regulators to query and verify trusted timestamp credentials, and authorized members of the public and regulators can query relevant information about trusted timestamp credentials online through a browser.

[0082] Cloud NTP Server 302: A hardware server that provides NTP services, typically using satellite time synchronization, fiber optic time synchronization, or upstream NTP time synchronization.

[0083] Query Interface 303: Provides a browser-based query interface, allowing the public / regulators to query relevant information about corresponding trusted timestamp credentials based on their granted permissions, including but not limited to endorsement time, endorsement device, digital fingerprint, etc.

[0084] Public / Regulator 401: Authorized members of the public and regulators, after logging in with the corresponding login account and password, can query and verify timestamp credentials.

[0085] Program / Operator 402: A program or operator that requires trusted timestamps. Programs are typically standalone hardware devices that automatically add trusted timestamps to target data during operation. Operators refer to users who manually add trusted timestamps to specified PDF documents.

[0086] In summary, the satellite communication-based trusted timestamp service system of this application uses a satellite NTP server to receive satellite signal time synchronization, enable NTP service, and provide network time synchronization service; a terminal trusted timestamp server is used to start NTP synchronization service and obtain time synchronization; and a terminal trusted timestamp server is used to provide trusted timestamp endorsement service to at least one terminal device in the same local area network and generate trusted timestamp credentials through a trusted timestamp interface.

[0087] This application's embodiments improve the stability and service efficiency of the trusted timestamp service system based on satellite communication. It solves the problem that trusted timestamp services are unavailable in areas without internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the internet. Furthermore, by using a satellite communication terminal and a cloud-based trusted timestamp server, it achieves synchronization of timestamp credentials and logs to the cloud, enabling the provision of trusted timestamp credential query and verification services to at least one internet user. It also solves the problem that online verification cannot be provided when the terminal's trusted timestamp server is offline.

[0088] Example 2

[0089] This embodiment provides a trusted timestamp service method based on satellite communication. For details not disclosed in the trusted timestamp service method of this embodiment, please refer to the specific implementation content of the trusted timestamp service system in other embodiments.

[0090] Figure 4 The diagram illustrates the steps of a trusted timestamp service method based on satellite communication according to an embodiment of this application.

[0091] like Figure 4 As shown, the trusted timestamp service method based on satellite communication includes:

[0092] S1: Receives satellite signal time synchronization via a satellite NTP server, enables NTP service, and provides network time synchronization service.

[0093] S2: Start the NTP synchronization service and obtain the time synchronization through the terminal trusted timestamp server; and provide trusted timestamp endorsement service to at least one terminal device in the same local area network as the terminal trusted timestamp server, and generate trusted timestamp credentials through the trusted timestamp interface.

[0094] Specifically, when providing trusted timestamp endorsement services to at least one terminal device located on the same local area network as the trusted timestamp server, and generating trusted timestamp credentials through the trusted timestamp interface, the specific implementation includes: first, receiving a trusted timestamp credential request from the terminal device, verifying and confirming that the data structure of the trusted timestamp credential request conforms to the specification; second, verifying and confirming that the terminal trusted timestamp server has completed time synchronization with the satellite NTP server; and then, generating a trusted timestamp credential response and saving the trusted timestamp credential and endorsement log.

[0095] Figure 5 The diagram illustrates the steps of a trusted timestamp service method based on satellite communication according to an embodiment of this application.

[0096] like Figure 5 As shown, another embodiment of this application also provides a trusted timestamp service method based on satellite communication, including:

[0097] S3: The terminal trusted timestamp server connects to the cloud trusted timestamp server through a satellite communication terminal and transmits trusted timestamp credentials and signature logs;

[0098] S4: Store trusted timestamp credentials and endorsement logs through a cloud-based trusted timestamp server, provide trusted timestamp credential query and verification services to at least one Internet user, and generate query and verification results through a query interface.

[0099] In practice, data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on an HTTPS REST interface, and the data content is a JSON data packet.

[0100] To further explain the principle of the trusted timestamp service method based on satellite communication in the embodiments of this application, the following is combined with... Figure 3 The system architecture diagram is described in detail through specific application scenarios.

[0101] Figure 6 The diagram shows a time calibration flowchart based on satellite timing according to an embodiment of this application; Figure 7 The diagram illustrates a trusted timestamp endorsement and verification process based on satellite communication according to an embodiment of this application.

[0102] The trusted timestamp service system based on satellite communication according to the embodiments of this application mainly includes two processes: 1. ... Figure 6 The time calibration process based on satellite timing is shown below; II. As shown Figure 7 The diagram illustrates the trusted timestamp endorsement and verification process based on satellite communication.

[0103] like Figure 6 As shown, precise time is transmitted to a trusted timestamp server via satellite time synchronization, and the trusted timestamp server provides trusted timestamp services to the outside world, including the following process steps:

[0104] 1) On the "Satellite NTP Server", receive / parse satellite signals to obtain accurate time synchronization, which is used as the server's system time.

[0105] 2) On the "Satellite NTP Server", start the NTP service program and use the standard NTP synchronization protocol (RFC 5905) to provide time synchronization services to external users on the Internet.

[0106] 3) On the "Terminal Trusted Timestamp Server", start the NTP client, synchronize the time with the "Satellite NTP Server", and record the synchronization log and results.

[0107] 4) On the "Trusted Timestamp Server for Terminal", wait for NTP synchronization to complete and for the time offset to be within the set range (generally less than 20ms). Then start the trusted timestamp service and provide a REST interface to the outside world based on HTTPS.

[0108] like Figure 7 As shown, in the trusted timestamp endorsement and verification process based on satellite communication, the "terminal trusted timestamp server" provides trusted timestamp endorsement services and data synchronization services. It uploads the issued trusted timestamp credentials and logs to the "cloud trusted timestamp server" via satellite communication. On the "cloud trusted timestamp server", it provides trusted timestamp credential query and verification services.

[0109] The specific process is as follows:

[0110] 5) On the “Terminal Trusted Timestamp Server”, the trusted timestamp endorsement service is specifically started, and the service interface follows the GB / T 36631-2018 specification.

[0111] 6) On the “Terminal Trusted Timestamp Server”, the Trusted Timestamp Annotation Service saves the annotation log and trusted timestamp credentials to the local server.

[0112] 7) On the "Terminal Trusted Timestamp Server", in the data synchronization service, monitor the trusted timestamp credentials and logs, find the trusted timestamp credentials and logs that need to be synchronized, check whether the satellite network communication is normal, and wait for the network to be normal.

[0113] 8) On the "Terminal Trusted Timestamp Server", after the satellite network is normal, the trusted timestamp credentials and logs that need to be synchronized are sent to the cloud server. The data transmission is based on the HTTPS REST interface and the content is a JSON data packet.

[0114] JSON (JavaScript Object Notation) is a lightweight data-interchange format that uses a text format that is completely independent of programming languages ​​to store and represent data.

[0115] During the data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server, the interface request data format of the terminal trusted timestamp server is shown in Table 1.

[0116]

[0117] Table 1

[0118] The interface response data format of the cloud-based trusted timestamp server is shown in Table 2.

[0119]

[0120] Table 2

[0121] 9) On the "Cloud Trusted Timestamp Server," timestamp credentials and logs are stored in the database, and query / verification services are provided. The query / verification service is provided by a browser-based webpage, allowing authorized members of the public and regulators to query relevant information about trusted timestamp credentials online through a browser.

[0122] In summary, the satellite communication-based trusted timestamp service method of this application uses a satellite NTP server to receive satellite signal timing, enable NTP service, and provide network timing service; a terminal trusted timestamp server to start NTP synchronization service and obtain timing; and a terminal trusted timestamp server to provide trusted timestamp endorsement service to at least one terminal device in the same local area network and generate trusted timestamp credentials through a trusted timestamp interface.

[0123] This application's embodiments improve the stability and service efficiency of the trusted timestamp service system based on satellite communication. It solves the problem that trusted timestamp services cannot be obtained in areas without internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the internet.

[0124] Furthermore, by using a satellite communication terminal and a cloud-based trusted timestamp server, timestamp credentials and logs are synchronized to the cloud, enabling the query and verification of trusted timestamp credentials to be provided to at least one internet user. This solves the problem of not being able to provide online verification when the terminal's trusted timestamp server is offline.

[0125] Example 3

[0126] This embodiment provides a trusted timestamp service device based on satellite communication. For details not disclosed in the trusted timestamp service device based on satellite communication in this embodiment, please refer to the specific implementation of the trusted timestamp service method or system based on satellite communication in other embodiments.

[0127] Figure 8 The diagram shows a structural schematic of a satellite communication-based trusted timestamp service device 400 or an image recognition device according to an embodiment of this application.

[0128] like Figure 8 As shown, the trusted timestamp service device 400 based on satellite communication or the image recognition device includes:

[0129] Memory 402: Used to store executable instructions; and

[0130] Processor 401: Connected to memory 402 to execute executable instructions to complete a trusted timestamp service method or an image recognition method based on satellite communication.

[0131] Those skilled in the art will understand that the illustration Figure 8 This is merely an example of a trusted timestamp service device 400 or an image recognition device based on satellite communication, and does not constitute a limitation on the trusted timestamp service device 400 or the image recognition device based on satellite communication. It may include more or fewer components than illustrated, or combine certain components, or different components. For example, the trusted timestamp service device 400 based on satellite communication may also include input / output devices, network access devices, buses, etc.

[0132] The processor 401 (Central Processing Unit, CPU) can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor, or processor 401 can be any conventional processor. Processor 401 is the control center of the satellite communication-based trusted timestamp service device 400, connecting all parts of the satellite communication-based trusted timestamp service device 400 through various interfaces and lines.

[0133] The memory 402 can be used to store computer-readable instructions. The processor 401 implements various functions of the satellite communication-based trusted timestamp service device 400 by running or executing the computer-readable instructions or modules stored in the memory 402 and by calling the data stored in the memory 402. The memory 402 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, application programs required for at least one function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the satellite communication-based trusted timestamp service device 400, etc. In addition, the memory 402 may include a hard disk, memory, plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, at least one disk storage device, flash memory device, read-only memory (ROM), random access memory (RAM), or other non-volatile / volatile storage devices.

[0134] If the modules integrated in the satellite communication-based trusted timestamp service device 400 are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments of the present invention can also be implemented by instructing related hardware through computer-readable instructions. These computer-readable instructions can be stored in a computer-readable storage medium, and when executed by a processor, they can implement the steps of the various method embodiments described above.

[0135] Example 5

[0136] This embodiment provides a computer-readable storage medium having a computer program stored thereon; the computer program is executed by a processor to implement a trusted timestamp service method based on satellite communication as described in other embodiments.

[0137] The satellite communication-based trusted timestamp service device and storage medium of this application embodiment are used to receive satellite signal time synchronization, enable NTP service and provide network time synchronization service through a satellite NTP server; a terminal trusted timestamp server is used to start NTP synchronization service and obtain time synchronization; the terminal trusted timestamp server is used to provide trusted timestamp endorsement service to at least one terminal device in the same local area network and generate trusted timestamp credentials through trusted timestamp interface.

[0138] This application's embodiments improve the stability and service efficiency of the trusted timestamp service system based on satellite communication. It solves the problem that trusted timestamp services cannot be obtained in areas without internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the internet.

[0139] Furthermore, by using a satellite communication terminal and a cloud-based trusted timestamp server, timestamp credentials and logs are synchronized to the cloud, enabling the query and verification of trusted timestamp credentials to be provided to at least one internet user. This solves the problem of not being able to provide online verification when the terminal's trusted timestamp server is offline.

[0140] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0141] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0142] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0143] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0144] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular forms “a,” “the,” and “the” used in this invention and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any or all possible combinations of one or more of the associated listed items.

[0145] It should be understood that although the terms first, second, third, etc., may be used in this invention to describe various information, this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, first information may also be referred to as second information without departing from the scope of this invention, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to a determination."

[0146] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0147] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. A trusted timestamp service system based on satellite communication, characterized in that, This includes the connected satellite NTP server and the terminal trusted timestamp server; The satellite NTP server is used to receive satellite signal time synchronization, enable NTP service, and provide network time synchronization service; The terminal trusted timestamp server is used to start the NTP synchronization service and obtain the time synchronization; The terminal trusted timestamp server is used to provide trusted timestamp endorsement services to at least one terminal device in the same local area network, and to generate trusted timestamp credentials through the trusted timestamp interface; The system also includes a satellite communication terminal and a cloud-based trusted timestamp server. The satellite communication terminal is used to access the Internet via satellite communication; The terminal trusted timestamp server is used to connect to the cloud trusted timestamp server via a satellite communication terminal and transmit trusted timestamp credentials and signature logs. The cloud-based trusted timestamp server is used to store the trusted timestamp credentials and endorsement logs, and to provide trusted timestamp credentials query and verification services to at least one Internet user, and to generate query and verification results through the query interface.

2. The trusted timestamp service system according to claim 1, characterized in that, The system also includes a cloud-based NTP server; the cloud-based NTP server is connected to the cloud-based trusted timestamp server and is used to enable NTP service and provide network time synchronization service.

3. The trusted timestamp service system according to any one of claims 1-2, characterized in that, The trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server based on HTTPS, and the trusted timestamp interface conforms to the GB / T36631-2018 standard.

4. A trusted timestamp service method based on satellite communication, characterized in that, include: Receive satellite signal time synchronization through a satellite NTP server, enable NTP service, and provide network time synchronization service; Start the NTP synchronization service and obtain the time synchronization through the terminal's trusted timestamp server; It provides trusted timestamp endorsement services to at least one terminal device that is in the same local area network as the trusted timestamp server of the terminal, and generates trusted timestamp credentials through the trusted timestamp interface; The terminal trusted timestamp server connects to the cloud trusted timestamp server via a satellite communication terminal and transmits trusted timestamp credentials and signature logs. The trusted timestamp credentials and endorsement logs are stored on a cloud-based trusted timestamp server, providing a query and verification service for trusted timestamp credentials to at least one Internet user, and generating query and verification results through a query interface.

5. The trusted timestamp service method according to claim 4, characterized in that, The provision of trusted timestamp endorsement services to at least one terminal device located on the same local area network as the trusted timestamp server, and the generation of trusted timestamp credentials through the trusted timestamp interface, includes: Receive a trusted timestamp credential request from a terminal device, verify and confirm that the data structure of the trusted timestamp credential request conforms to the specification; Verify and confirm that the terminal's trusted timestamp server has completed time synchronization with the satellite NTP server; Generate a trusted timestamp credential response and save the trusted timestamp credential and endorsement log.

6. A trusted timestamp service method based on satellite communication, characterized in that, include: The terminal trusted timestamp server connects to the cloud trusted timestamp server via a satellite communication terminal and transmits trusted timestamp credentials and signature logs. The trusted timestamp credentials and endorsement logs are stored on a cloud-based trusted timestamp server, providing a query and verification service for trusted timestamp credentials to at least one Internet user, and generating query and verification results through a query interface.

7. The trusted timestamp service method according to claim 6, characterized in that, The data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on an HTTPS REST interface, and the data content is a JSON data packet.

8. A trusted timestamp service device based on satellite communication, characterized in that, include: Memory, used to store executable instructions; as well as A processor, configured to be connected to memory to execute executable instructions to perform the trusted timestamp service method as described in any one of claims 4-7.

9. A computer-readable storage medium, characterized in that, It stores a computer program; the computer program is executed by a processor to implement the trusted timestamp service method based on satellite communication as described in any one of claims 4-7.

Images