Satellite Internet terminal access control method, device, equipment and medium

Abstract

The present invention provides a satellite Internet terminal access control method, device, equipment and medium, including: when a low-orbit communication satellite passes through a current sub-area, broadcast information is sent to the satellite Internet terminal located in the current sub-area; if a terminal access request based on the broadcast information feedback from the satellite Internet terminal is received, based on the regional legal terminal list and the terminal access request, it is determined whether the satellite Internet terminal matches the low-orbit communication satellite; if so, the satellite Internet terminal is accessed to provide communication services for the satellite Internet terminal. The present invention can better alleviate the problem of satellite Internet terminal access quantity control, and try to avoid the possible resource exhaustion attack on the low-orbit communication satellite by illegal satellite Internet terminal access.

Description

Technical Field

[0001] The present invention relates to the field of satellite Internet information security technology, and in particular to a satellite Internet terminal access control method, device, equipment and medium. Background Art

[0002] Satellite Internet is an advanced communication technology that achieves broadband communication worldwide through a large number of low-orbit communication satellite networks, especially in remote areas, which are often difficult to cover by base station-based mobile communications.

[0003] Since satellite Internet communications are related to various important fields, there will be a large number of uncertain security factors that will threaten the normal operation of satellite Internet, especially detection, monitoring, and even infiltration behaviors initiated in space, which will greatly affect the safe operation of satellite Internet.

[0004] In addition, since the processing resources of a satellite for ground terminals are limited, especially the satellite communication digital payloads, the onboard power supply and processing power are far from enough compared to the ground equipment, especially the digital communication satellite payloads, such as base station payloads, NTN (Non Terrestrial Network) business payloads for mobile phones directly connected to satellites, etc., if a large number of pseudo-satellite terminals initiate connections to a satellite, the satellite resources will be exhausted and unable to work normally, which is similar to a network DDOS (Distributed Denial of Service) attack.

[0005] Therefore, providing a reasonable and scientific legal terminal and an effective terminal quantity control method is a prerequisite for the normal operation of satellite Internet. Summary of the invention

[0006] In view of this, the purpose of the present invention is to provide a satellite Internet terminal access control method, device, equipment and medium, which can better alleviate the problem of satellite Internet terminal access quantity control and try to avoid illegal satellite Internet terminal access and possible resource exhaustion attacks on low-orbit communication satellites.

[0007] In a first aspect, an embodiment of the present invention provides a satellite Internet terminal access control method, wherein a low-orbit communication satellite star chain includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the star chain coverage area, and the number of terminal identifiers included in the regional legal terminal list is related to the number of accommodable terminals corresponding to the low-orbit communication satellite. The method is applied to the low-orbit communication satellite, and the method includes:

[0008] When the low-orbit communication satellite passes through the current sub-area, broadcast information is sent to the satellite Internet terminals located in the current sub-area;

[0009] If a terminal access request based on broadcast information feedback is received from a satellite Internet terminal, then judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request;

[0010] If yes, the satellite Internet terminal is accessed to provide communication services for the satellite Internet terminal.

[0011] In one implementation, judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request includes:

[0012] Determine whether the satellite Internet terminal meets the target communication scenario; wherein the target communication scenario is that the satellite Internet terminal successfully accesses the previous low-orbit communication satellite in the low-orbit communication satellite star chain, and the communication service provided by the previous low-orbit communication satellite to the satellite Internet terminal has not ended;

[0013] If yes, it is directly determined that the satellite Internet terminal matches the low-orbit communication satellite;

[0014] If not, based on the regional legal terminal list and the terminal access request, determine whether the satellite Internet terminal matches the low-orbit communication satellite.

[0015] In one implementation, the low-orbit communication satellite is further configured with a current session terminal list, the current session terminal list includes terminal identifiers of satellite Internet terminals that have successfully accessed the previous low-orbit communication satellite and whose communication services have not been terminated, and the terminal access request carries the terminal identifier of the satellite Internet terminal; judging whether the satellite Internet terminal meets the target communication scenario includes:

[0016] If the terminal identifier of the satellite Internet terminal exists in the current session terminal list, it is determined that the satellite Internet terminal meets the target communication scenario;

[0017] If the terminal identifier of the satellite Internet terminal does not exist in the current session terminal list, it is determined that the satellite Internet terminal does not meet the target communication scenario.

[0018] In one implementation, if not, judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request includes:

[0019] In the case where the satellite Internet terminal does not meet the target communication scenario, continue to determine whether there is a terminal identifier of the satellite Internet terminal in the regional legal terminal list;

[0020] If the terminal identification of the satellite Internet terminal exists in the regional legal terminal list, it is determined that the satellite Internet terminal matches the low-orbit communication satellite; if the terminal identification of the satellite Internet terminal does not exist in the regional legal terminal list, it is determined that the satellite Internet terminal does not match the low-orbit communication satellite.

[0021] In one embodiment, if the terminal identifier of the satellite Internet terminal exists in the regional legal terminal list, after determining that the satellite Internet terminal matches the low-orbit communication satellite, the method further includes:

[0022] Update the terminal identification of the satellite Internet terminal to the current session terminal list;

[0023] The updated current session terminal list is synchronized to the next level low-orbit communication satellite in the low-orbit communication satellite star chain through the inter-satellite link.

[0024] In one embodiment, the method further comprises:

[0025] If the communication service provided by the low-orbit communication satellite to the satellite Internet terminal ends, the terminal identifier of the satellite Internet terminal will be removed from the current session terminal list corresponding to each low-orbit communication satellite.

[0026] In one embodiment, the method further comprises:

[0027] If the satellite Internet terminal does not match the low-orbit communication satellite, access to the satellite Internet terminal will be denied.

[0028] In a second aspect, an embodiment of the present invention further provides a satellite Internet terminal access control device, wherein a low-orbit communication satellite star chain includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the star chain coverage area, and the number of terminal identifiers included in the regional legal terminal list is related to the number of accommodable terminals corresponding to the low-orbit communication satellite. The device is applied to the low-orbit communication satellite, and the device includes:

[0029] A broadcast sending module, used for sending broadcast information to satellite Internet terminals located in the current sub-area when a low-orbit communication satellite passes through the current sub-area;

[0030] A judgment module, for judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request if a terminal access request based on broadcast information feedback is received from the satellite Internet terminal;

[0031] The terminal access module is used to access the satellite Internet terminal when the judgment result of the judgment module is yes, so as to provide communication services for the satellite Internet terminal.

[0032] In a third aspect, an embodiment of the present invention further provides an electronic device, comprising a processor and a memory, wherein the memory stores computer-executable instructions that can be executed by the processor, and the processor executes the computer-executable instructions to implement any one of the methods provided in the first aspect.

[0033] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, which stores computer-executable instructions. When the computer-executable instructions are called and executed by a processor, the computer-executable instructions prompt the processor to implement any one of the methods provided in the first aspect.

[0034] An embodiment of the present invention provides a method, device, equipment and medium for satellite Internet terminal access control, wherein a low-orbit communication satellite star chain includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the star chain coverage area, and the number of terminal identifiers included in the regional legal terminal list is related to the number of terminals that can be accommodated corresponding to the low-orbit communication satellite. The above is applied to the low-orbit communication satellite, first, when the low-orbit communication satellite passes through the current sub-area, broadcast information is sent to the satellite Internet terminal located in the current sub-area; if a terminal access request based on the broadcast information feedback is received from the satellite Internet terminal, then based on the regional legal terminal list and the terminal access request, it is determined whether the satellite Internet terminal matches the low-orbit communication satellite; if the judgment result is yes, the satellite Internet terminal is accessed to provide communication services to the satellite Internet terminal. In the above method, when a satellite Internet terminal requests to access a low-orbit communication satellite, the matching relationship between the satellite Internet terminal and the low-orbit communication satellite is judged by the regional legal terminal list corresponding to the low-orbit communication satellite and the terminal access request. Since the number of terminal identifiers contained in the regional legal terminal list is related to the number of terminals that can be accommodated corresponding to the low-orbit communication satellite, the number of satellite Internet terminals accessing the low-orbit communication satellite can be better controlled, thereby achieving controllable number of satellite access terminals, effectively minimizing the risk of resource exhaustion, and thus avoiding possible resource exhaustion attacks on low-orbit communication satellites caused by illegal satellite Internet terminal access.

[0035] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description, claims and drawings.

[0036] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1 A schematic diagram of a flow chart of a satellite Internet terminal access control method provided by an embodiment of the present invention;

[0039] Figure 2 A schematic diagram of a satellite Internet terminal accessing a low-orbit communication satellite provided by an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of a low-orbit communication satellite Starlink coverage area provided by an embodiment of the present invention;

[0041] Figure 4 A schematic diagram of another low-orbit communication satellite Starlink coverage area provided by an embodiment of the present invention;

[0042] Figure 5 A timing diagram of a satellite Internet terminal access control method provided by an embodiment of the present invention;

[0043] Figure 6 A schematic structural diagram of a satellite Internet terminal access control device provided by an embodiment of the present invention;

[0044] Figure 7 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described in combination with the embodiments below. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0046] At present, the related technology has the problem of satellite resource exhaustion caused by the uncontrollable number of satellite access terminals. Based on this, the present invention implements a satellite Internet terminal access control method, device, equipment and medium, which can better alleviate the problem of satellite Internet terminal access number control and try to avoid illegal satellite Internet terminal access and possible resource exhaustion attacks on low-orbit communication satellites.

[0047] To facilitate understanding of this embodiment, a satellite Internet terminal access control method disclosed in an embodiment of the present invention is first described in detail. The low-orbit communication satellite Starlink includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the Starlink coverage area. Specifically: the Starlink coverage area is the ground area covered by the low-orbit communication satellite Starlink; the sub-area is the area obtained by dividing the ground area. The satellite coverage area used by the satellite Internet terminal can be set when the satellite Internet terminal accesses the network, and the satellite coverage area is the aforementioned sub-area; the number of terminal identifiers contained in the regional legal terminal list is related to the number of terminals that can be accommodated corresponding to the low-orbit communication satellite, that is, the number of terminals that can be accommodated corresponding to the low-orbit communication satellite and the sub-area used by the satellite Internet terminal set when accessing the network are combined to generate a regional legal terminal list corresponding to the sub-area of ​​the low-orbit communication satellite.

[0048] This method is applied to low-orbit communication satellites, see Figure 1 The flowchart of a satellite Internet terminal access control method shown in FIG. 1 mainly includes the following steps S102 to S106:

[0049] Step S102, when the low-orbit communication satellite passes through the current sub-area, broadcast information is sent to the satellite Internet terminals located in the current sub-area.

[0050] Among them, the satellite Internet terminal can also be called a satellite terminal or a ground terminal. In one example, the relative position relationship between each low-orbit communication satellite in the low-orbit communication satellite star chain and each sub-area in the star chain coverage area is dynamically changing. When the previous low-orbit communication satellite moves out of the current sub-area, the current low-orbit communication satellite enters the current sub-area. At this time, the current low-orbit communication satellite will send broadcast information to the satellite Internet terminal located in the current sub-area.

[0051] Step S104: If a terminal access request based on broadcast information feedback is received from the satellite Internet terminal, it is determined whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request.

[0052] In one case, the satellite Internet terminal successfully accesses the previous level low-orbit communication satellite, and the communication service provided by the previous level low-orbit communication satellite has not yet ended. At this time, the terminal identifier corresponding to the satellite Internet terminal exists in the current session terminal list configured by the current low-orbit communication satellite, and it can be directly determined that the satellite Internet terminal matches the current low-orbit communication satellite.

[0053] In another case, the satellite Internet terminal requests to access the current low-orbit communication satellite for the first time. At this time, the terminal identifier corresponding to the satellite Internet terminal does not exist in the current session terminal list configured by the current low-orbit communication satellite. It is necessary to use the regional legal terminal list corresponding to the current low-orbit communication satellite and the terminal representation carried in the terminal access request to determine whether the satellite Internet terminal matches the current low-orbit communication satellite.

[0054] Step S106: if yes, access the satellite Internet terminal to provide communication services for the satellite Internet terminal.

[0055] In one embodiment, if the satellite Internet terminal matches the current low-orbit communication satellite, the low-orbit communication satellite may send a preliminary connection establishment success message to the satellite Internet terminal to provide communication services for the satellite Internet terminal; conversely, if the satellite Internet terminal does not match the current low-orbit communication satellite, access to the satellite Internet terminal is denied, thereby controlling the number of terminals accessing.

[0056] The satellite Internet terminal access control method provided by an embodiment of the present invention determines the matching relationship between the satellite Internet terminal and the low-orbit communication satellite based on the regional legal terminal list corresponding to the low-orbit communication satellite and the terminal access request when the satellite Internet terminal requests access to the low-orbit communication satellite. Since the number of terminal identifiers included in the regional legal terminal list is related to the number of terminals that can be accommodated corresponding to the low-orbit communication satellite, the number of satellite Internet terminals accessing the low-orbit communication satellite can be better controlled, thereby achieving controllable number of satellite access terminals, effectively minimizing the risk of resource exhaustion, and thus avoiding possible resource exhaustion attacks on low-orbit communication satellites caused by illegal satellite Internet terminal access.

[0057] To facilitate understanding of the foregoing embodiments, the embodiments of the present invention provide Figure 2 The schematic diagram of a satellite Internet terminal accessing a low-orbit communication satellite is shown in the figure. Specifically, the low-orbit communication satellite covers the ground area through beams, and ensures that the satellite Internet terminal on the ground can access the low-orbit communication satellite at any time. The satellite Internet terminal connects to the low-orbit communication satellite in the beam coverage area, accesses the low-orbit communication satellite, and establishes a two-way link. The low-orbit communication satellite receives the signal of the legitimate user, and transmits the signal to the ground gateway station according to the routing search rules, and the satellite signal is transmitted to the backbone communication network.

[0058] Based on this, an embodiment of the present invention provides a specific implementation method of a satellite Internet terminal access control method to ensure that the number of terminals accessing a specific satellite is controllable, thereby avoiding the malicious use of a large number of satellite terminals to connect to a satellite, causing the satellite's service resources to be exhausted, thereby causing satellite denial of service.

[0059] The method is divided into two steps: one is the satellite Internet terminal registration management mechanism, and the other is the satellite Internet terminal access satellite control mechanism.

[0060] 1. Satellite Internet Terminal Registration and Management Mechanism:

[0061] The principle of the satellite Internet registration management mechanism is to divide the earth into equal areas according to the overall area covered by satellites. The size of each area is planned according to the number and processing capacity of networking satellites. Registered satellite terminals will correspond to a usage area, such as Figure 3 A schematic diagram of the Starlink coverage area of ​​a low-orbit communication satellite is shown.

[0062] For example, Figure 4 Another schematic diagram of the Starlink coverage area of ​​low-orbit communication satellites is shown. Areas 1, 9, 17, 25, 5, 13, 21, and 29 correspond to Starlink 1, and the legal terminals in these areas should be submitted to all satellites of Starlink 1; similarly, areas 2, 10, 18, 26, 7, 15, 23, and 31 correspond to Starlink 2; and areas 4, 12, 20, 28, 8, 16, 24, and 32 correspond to Starlink 3.

[0063] Each satellite Internet terminal is set with an ID number based on the system hardware identification (the aforementioned identification) when it is produced. This ID corresponds to a unique Internet terminal, which is specified for a certain usage area. Users purchase satellite terminals in the corresponding area according to their daily Internet access area. The ID is submitted to the satellite operating agency, and the table formed by these IDs is uploaded to the corresponding Starlink by the ground operation and control station, such as the terminal IDs registered in areas 1, 9, 17, 25, 5, 13, 21, and 29, which are submitted to all satellites in Starlink 1.

[0064] The registration authority plans the optimal legal number of satellite Internet terminals in a region based on the maximum number of terminals that low-orbit communication satellites can accommodate and local demand conditions (for example, cities and peri-urban areas have good fiber optic and mobile coverage and do not require too much satellite communications), and then generates a regional legal terminal list.

[0065] (II) The satellite Internet terminal access satellite control mechanism mainly includes the aforementioned steps S102 to S106:

[0066] For the aforementioned step S104, the embodiment of the present invention provides a specific method for determining whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request, see the following steps 1 to 3:

[0067] Step 1: Determine whether the satellite Internet terminal meets the target communication scenario.

[0068] Among them, the target communication scenario is that the satellite Internet terminal successfully accesses the previous level low-orbit communication satellite in the low-orbit communication satellite Starlink, and the communication service provided by the previous level low-orbit communication satellite to the satellite Internet terminal has not ended.

[0069] In a specific implementation, the low-orbit communication satellite is also configured with a current session terminal list, which contains the terminal identifiers of satellite Internet terminals that have successfully accessed the previous low-orbit communication satellite and whose communication services have not ended, and the terminal access request carries the terminal identifier of the satellite Internet terminal. Based on this, when executing the step of determining whether the satellite Internet terminal meets the target communication scenario, you can refer to the following steps 1.1 to 1.2:

[0070] Step 1.1, if the terminal identifier of the satellite Internet terminal exists in the current session terminal list, it is determined that the satellite Internet terminal meets the target communication scenario;

[0071] Step 1.2: If the terminal identifier of the satellite Internet terminal does not exist in the current session terminal list, it is determined that the satellite Internet terminal does not meet the target communication scenario.

[0072] Step 2: If yes, directly determine whether the satellite Internet terminal matches the low-orbit communication satellite.

[0073] Step 3: If not, based on the regional legal terminal list and the terminal access request, determine whether the satellite Internet terminal matches the low-orbit communication satellite. In the specific implementation, please refer to the following steps 3.1 to 3.2:

[0074] Step 3.1, when the satellite Internet terminal does not meet the target communication scenario, continue to determine whether there is a terminal identifier of the satellite Internet terminal in the regional legal terminal list;

[0075] Step 3.2, if the terminal identifier of the satellite Internet terminal exists in the regional legal terminal list, it is determined that the satellite Internet terminal matches the low-orbit communication satellite; if the terminal identifier of the satellite Internet terminal does not exist in the regional legal terminal list, it is determined that the satellite Internet terminal does not match the low-orbit communication satellite.

[0076] Furthermore, after determining that the satellite Internet terminal matches the low-orbit communication satellite, it is necessary to update the terminal identifier of the satellite Internet terminal to the current session terminal list, and synchronize the updated current session terminal list to the next-level low-orbit communication satellite in the low-orbit communication satellite chain through the inter-satellite link. Even if the current low-orbit communication satellite moves out of the sub-area where the satellite Internet terminal is located, there will be a next-level low-orbit communication satellite in the same chain to provide call services for the satellite Internet terminal.

[0077] Furthermore, if the communication service provided by the low-orbit communication satellite to the satellite Internet terminal is terminated, the terminal identifier of the satellite Internet terminal is removed from the current session terminal list corresponding to each low-orbit communication satellite.

[0078] Further, if the satellite Internet terminal does not match the low-orbit communication satellite, access to the satellite Internet terminal is denied.

[0079] When a satellite is connected to the network, it is necessary to check the satellite usage area. For ease of understanding, the present invention takes the mobile phone directly connected to the satellite NTN as an example. Figure 5 A timing diagram of a satellite Internet terminal access control method shown includes:

[0080] (1) Low-orbit communication satellites send broadcast information to satellite Internet terminals, and the information can be received in the area covered by the beam.

[0081] (2) The satellite Internet terminal adjusts the antenna to aim at the low-orbit communication satellite and sends a preamble sequence to the low-orbit communication satellite. The preamble sequence is based on the PUSCH coding format of the DCI, and the preamble sequence includes the C-RNTI, which at least includes the terminal ID.

[0082] (3) The low-orbit communication satellite receives the terminal ID and checks whether it is in the current session terminal list. If it is, it starts the satellite communication service. If not, it checks whether it is in the regional legal terminal list of the current area.

[0083] (4) If the terminal ID is a legitimate user terminal in the region, the low-orbit communication satellite sends a preliminary connection establishment success message to the satellite Internet terminal.

[0084] (5) Notify the next-level low-orbit communication satellite in the same chain that the terminal ID is a verified legitimate terminal, so that the next-level low-orbit communication satellite in the same chain will add the terminal ID to its own current session terminal list. Even if the current low-orbit communication satellite moves out of the area where the satellite Internet terminal is located, there will be a next-level low-orbit communication satellite in the same chain to provide call services for the terminal ID.

[0085] (6) If the terminal ID is an illegal user terminal in the region, the low-orbit communication satellite sends a preliminary connection establishment failure message to the satellite Internet terminal and terminates the session.

[0086] (7) When the call ends, the terminal ID is removed from the current conversation terminal list in all low-orbit communication satellites.

[0087] In summary, the satellite Internet terminal access electronic fence control technology in the embodiment of the present invention can effectively control the number of satellite Internet terminals in the legal use area and ensure the legal and compliant use of satellite Internet terminal access. In addition, by setting the satellite coverage area used by the terminal when it accesses the network, when the satellite Internet terminal is in use, the low-orbit communication satellite verifies the longitude and latitude used by it when it accesses the low-orbit communication satellite. If the area registered by the satellite Internet terminal is the area currently served by the low-orbit communication satellite, the access is successful; if the satellite Internet terminal registration service area does not match the current low-orbit communication satellite service area, the satellite Internet terminal is denied access. This ensures that the number of terminals accessing the low-orbit communication satellite in a specific area is controllable, effectively minimizing the risk of resource exhaustion.

[0088] On the basis of the foregoing embodiments, an embodiment of the present invention provides a satellite Internet terminal access control device, wherein the low-orbit communication satellite star chain includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-region in the star chain coverage area, and the number of terminal identifiers included in the regional legal terminal list is related to the number of accommodable terminals corresponding to the low-orbit communication satellite. The device is applied to the low-orbit communication satellite, see Figure 6 The structure diagram of a satellite Internet terminal access control device shown in FIG. 1 mainly includes the following parts:

[0089] The broadcast sending module 602 is used to send broadcast information to the satellite Internet terminals located in the current sub-area when the low-orbit communication satellite passes through the current sub-area;

[0090] The judgment module 604 is used to judge whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request if a terminal access request based on the broadcast information feedback is received from the satellite Internet terminal;

[0091] The terminal access module 606 is used to access the satellite Internet terminal to provide communication services for the satellite Internet terminal when the judgment result of the judgment module is yes.

[0092] The satellite Internet terminal access control device provided by the embodiment of the present invention determines the matching relationship between the satellite Internet terminal and the low-orbit communication satellite based on the regional legal terminal list corresponding to the low-orbit communication satellite and the terminal access request when the satellite Internet terminal requests access to the low-orbit communication satellite. Since the number of terminal identifiers contained in the regional legal terminal list is related to the number of terminals that can be accommodated corresponding to the low-orbit communication satellite, the number of satellite Internet terminals accessing the low-orbit communication satellite can be better controlled, thereby achieving controllable number of satellite access terminals, effectively minimizing the risk of resource exhaustion, and thus avoiding possible resource exhaustion attacks on low-orbit communication satellites caused by illegal satellite Internet terminal access.

[0093] In one implementation, the determination module 604 is specifically configured to:

[0094] Determine whether the satellite Internet terminal meets the target communication scenario; wherein the target communication scenario is that the satellite Internet terminal successfully accesses the previous low-orbit communication satellite in the low-orbit communication satellite star chain, and the communication service provided by the previous low-orbit communication satellite to the satellite Internet terminal has not ended;

[0095] If yes, it is directly determined that the satellite Internet terminal matches the low-orbit communication satellite;

[0096] If not, based on the regional legal terminal list and the terminal access request, determine whether the satellite Internet terminal matches the low-orbit communication satellite.

[0097] In one implementation, the low-orbit communication satellite is further configured with a current session terminal list, the current session terminal list includes terminal identifiers of satellite Internet terminals that have successfully accessed the previous low-orbit communication satellite and whose communication services have not ended, and the terminal access request carries the terminal identifier of the satellite Internet terminal; the judgment module 604 is specifically used to:

[0098] If the terminal identifier of the satellite Internet terminal exists in the current session terminal list, it is determined that the satellite Internet terminal meets the target communication scenario;

[0099] If the terminal identifier of the satellite Internet terminal does not exist in the current session terminal list, it is determined that the satellite Internet terminal does not meet the target communication scenario.

[0100] In one implementation, the determination module 604 is specifically configured to:

[0101] In the case where the satellite Internet terminal does not meet the target communication scenario, continue to determine whether there is a terminal identifier of the satellite Internet terminal in the regional legal terminal list;

[0102] If the terminal identification of the satellite Internet terminal exists in the regional legal terminal list, it is determined that the satellite Internet terminal matches the low-orbit communication satellite; if the terminal identification of the satellite Internet terminal does not exist in the regional legal terminal list, it is determined that the satellite Internet terminal does not match the low-orbit communication satellite.

[0103] In one embodiment, a list updating module is further included, which is used to:

[0104] Update the terminal identification of the satellite Internet terminal to the current session terminal list;

[0105] The updated current session terminal list is synchronized to the next level low-orbit communication satellite in the low-orbit communication satellite star chain through the inter-satellite link.

[0106] In one embodiment, a marking and rejection module is further included, which is used to:

[0107] If the communication service provided by the low-orbit communication satellite to the satellite Internet terminal ends, the terminal identifier of the satellite Internet terminal will be removed from the current session terminal list corresponding to each low-orbit communication satellite.

[0108] In one embodiment, the system further includes an access rejection module, which is used to:

[0109] If the satellite Internet terminal does not match the low-orbit communication satellite, access to the satellite Internet terminal will be denied.

[0110] The device provided in the embodiment of the present invention has the same implementation principle and technical effects as those of the aforementioned method embodiment. For the sake of brief description, for matters not mentioned in the device embodiment, reference may be made to the corresponding contents in the aforementioned method embodiment.

[0111] An embodiment of the present invention provides an electronic device. Specifically, the electronic device includes a processor and a storage device. The storage device stores a computer program, and when the computer program is executed by the processor, it executes the method described in any one of the above-mentioned implementation methods.

[0112] Figure 7 A structural diagram of an electronic device provided in an embodiment of the present invention, the electronic device 100 includes: a processor 70, a memory 71, a bus 72 and a communication interface 73, wherein the processor 70, the communication interface 73 and the memory 71 are connected via the bus 72; the processor 70 is used to execute an executable module stored in the memory 71, such as a computer program.

[0113] The memory 71 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 73 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0114] The bus 72 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 7 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0115] Among them, the memory 71 is used to store programs, and the processor 70 executes the program after receiving the execution instruction. The method executed by the device for flow process definition disclosed in any embodiment of the above-mentioned embodiment of the present invention can be applied to the processor 70 or implemented by the processor 70.

[0116] The processor 70 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 70. The above processor 70 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to execute, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 71, and the processor 70 reads the information in the memory 71 and completes the steps of the above method in combination with its hardware.

[0117] The computer program product of the readable storage medium provided in the embodiment of the present invention includes a computer-readable storage medium storing program code, and the instructions included in the program code can be used to execute the methods described in the previous method embodiments. The specific implementation can be referred to the previous method embodiments, which will not be repeated here.

[0118] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0119] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A satellite Internet terminal access control method, characterized in that: The low-orbit communication satellite star chain includes multiple low-orbit communication satellites, and the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the star chain coverage area, and the number of terminal identifiers included in the regional legal terminal list is related to the number of accommodable terminals corresponding to the low-orbit communication satellite. The method is applied to the low-orbit communication satellite, and the method includes: When the low-orbit communication satellite passes through the current sub-area, sending broadcast information to the satellite Internet terminals located in the current sub-area; If a terminal access request from the satellite Internet terminal based on the broadcast information feedback is received, judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request; If yes, access the satellite Internet terminal to provide communication services for the satellite Internet terminal.

2. The satellite Internet terminal access control method according to claim 1, characterized in that: Based on the regional legal terminal list and the terminal access request, determining whether the satellite Internet terminal matches the low-orbit communication satellite includes: Determine whether the satellite Internet terminal meets the target communication scenario; wherein the target communication scenario is that the satellite Internet terminal successfully accesses the previous level of the low-orbit communication satellite in the low-orbit communication satellite star chain, and the communication service provided by the previous level of the low-orbit communication satellite to the satellite Internet terminal has not ended; If yes, directly determining that the satellite Internet terminal matches the low-orbit communication satellite; If not, based on the regional legal terminal list and the terminal access request, it is determined whether the satellite Internet terminal matches the low-orbit communication satellite.

3. The satellite Internet terminal access control method according to claim 2, characterized in that: The low-orbit communication satellite is also configured with a current session terminal list, the current session terminal list includes terminal identifiers of the satellite Internet terminals that have successfully accessed the previous level of the low-orbit communication satellite and whose communication services have not ended, and the terminal access request carries the terminal identifier of the satellite Internet terminal; Determining whether the satellite Internet terminal meets the target communication scenario includes: If the terminal identifier of the satellite Internet terminal exists in the current session terminal list, determining that the satellite Internet terminal meets the target communication scenario; If the terminal identifier of the satellite Internet terminal does not exist in the current session terminal list, it is determined that the satellite Internet terminal does not meet the target communication scenario.

4. The satellite Internet terminal access control method according to claim 3, characterized in that: If not, judging whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request, including: In the case where the satellite Internet terminal does not meet the target communication scenario, continue to determine whether the terminal identifier of the satellite Internet terminal exists in the regional legal terminal list; If the terminal identifier of the satellite Internet terminal exists in the list of legal terminals in the area, it is determined that the satellite Internet terminal matches the low-orbit communication satellite; if the terminal identifier of the satellite Internet terminal does not exist in the list of legal terminals in the area, it is determined that the satellite Internet terminal does not match the low-orbit communication satellite.

5. The satellite Internet terminal access control method according to claim 4, characterized in that: If the terminal identifier of the satellite Internet terminal exists in the regional legal terminal list, after determining that the satellite Internet terminal matches the low-orbit communication satellite, the method further includes: updating the terminal identification of the satellite Internet terminal to the current session terminal list; The updated current session terminal list is synchronized to the next level of low-orbit communication satellite in the low-orbit communication satellite star chain through an inter-satellite link.

6. The satellite Internet terminal access control method according to claim 3, characterized in that: The method further comprises: If the communication service provided by the low-orbit communication satellite to the satellite Internet terminal ends, the terminal identifier of the satellite Internet terminal is removed from the current session terminal list corresponding to each of the low-orbit communication satellites.

7. The satellite Internet terminal access control method according to claim 1, characterized in that: The method further comprises: If the satellite Internet terminal does not match the low-orbit communication satellite, access to the satellite Internet terminal is denied.

8. A satellite Internet terminal access control device, characterized in that: The low-orbit communication satellite star chain includes a plurality of low-orbit communication satellites, the low-orbit communication satellite is configured with a regional legal terminal list corresponding to each sub-area in the star chain coverage area, the number of terminal identifiers included in the regional legal terminal list is related to the number of accommodable terminals corresponding to the low-orbit communication satellite, the device is applied to the low-orbit communication satellite, and the device includes: A broadcast sending module, configured to send broadcast information to satellite Internet terminals located in the current sub-area when the low-orbit communication satellite passes through the current sub-area; A judgment module, configured to judge whether the satellite Internet terminal matches the low-orbit communication satellite based on the regional legal terminal list and the terminal access request if a terminal access request from the satellite Internet terminal based on the broadcast information feedback is received; The terminal access module is used to access the satellite Internet terminal to provide communication services for the satellite Internet terminal when the judgment result of the judgment module is yes.

9. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are called and executed by a processor, the computer-executable instructions prompt the processor to implement the method according to any one of claims 1 to 7.

Images