Satellite parameter updating system and method

Abstract

The present application provides a satellite parameter update system and method, the system comprising: a whole machine control unit, used to obtain a first key and a second key from a key library, and send the obtained first key and second key to an algorithm processing unit. The algorithm processing unit is used to receive the first key and the second key sent by the whole machine control unit, use the first key and the second key to double encrypt the current frame satellite parameters to obtain the final satellite parameter encrypted data, and send the final satellite parameter encrypted data to a communication unit; the communication unit is used to receive the final satellite parameter encrypted data sent by the algorithm processing unit, and send the final satellite parameter encrypted data to a target satellite terminal, so that the target satellite terminal uses the decrypted satellite parameters to update the parameters. By adopting the above satellite parameter update system and method, the problem of low data transmission security when the algorithm parameters are updated is solved.

Description

Technical Field

[0001] The present application relates to the field of satellite communication technology, and in particular to a satellite parameter updating system and method. Background Art

[0002] With the rapid development of satellite communication technology, various enterprises and institutions have launched a large number of communication satellites and detection satellites. Satellites need to update algorithm parameters after a certain period of time. In order to update algorithm parameters stably, the algorithm parameters need to be integrity protected and encrypted before being distributed.

[0003] At present, when distributing algorithm parameters, the algorithm parameter set is usually packaged, and then the packaged algorithm parameter set is encrypted once and transmitted to the satellite terminal. The transmission process is easy to be cracked, resulting in low data transmission security when the algorithm parameters are updated. Summary of the invention

[0004] In view of this, the purpose of the present application is to provide a satellite parameter update system and method to solve the problem of low data transmission security when algorithm parameters are updated.

[0005] In a first aspect, an embodiment of the present application provides a satellite parameter updating system, the system comprising:

[0006] The whole machine control unit is used to obtain the first key and the second key from the key library, and send the obtained first key and the second key to the algorithm processing unit.

[0007] an algorithm processing unit, configured to receive a first key and a second key sent by the whole machine control unit, double-encrypt the satellite parameters of the current frame using the first key and the second key to obtain final satellite parameter encrypted data, and send the final satellite parameter encrypted data to the communication unit;

[0008] The communication unit is used to receive the final satellite parameter encrypted data sent by the algorithm processing unit, and send the final satellite parameter encrypted data to the target satellite terminal, so that the target satellite terminal uses the decrypted satellite parameters to update the parameters.

[0009] Optionally, the algorithm processing unit performs double encrypting on the current frame satellite parameters through the following processing: obtaining the current first system time and the first key, and using the current first system time and the first key to encrypt the current frame satellite parameters to obtain initial satellite parameter encrypted data; obtaining the latest current second system time and the second key, and using the latest current second system time and the second key to perform secondary encrypting on the initial satellite parameter encrypted data to obtain final satellite parameter encrypted data.

[0010] Optionally, the algorithm processing unit encrypts the current frame satellite parameters using the current first system time and the first key through the following processing: determining the current first operation vector based on the current first system time and the initial operation vector; and encrypting the current frame satellite parameters using the current first operation vector and the first key.

[0011] Optionally, the algorithm processing unit performs secondary encryption on the initial satellite parameter encryption data using the latest current second system time and the second key through the following processing: determining the latest current second operation vector based on the latest current second system time and the current first operation vector; and encrypting the current frame satellite parameters using the current second operation vector and the second key.

[0012] Optionally, the whole machine control unit also performs the following processing: receiving a response frame returned by the data receiving unit of the target satellite terminal after receiving the final satellite parameter encrypted data; verifying the response frame to send the next frame of final satellite parameter encrypted data after the verification passes.

[0013] Optionally, the algorithm processing unit determines the current first operation vector by the following processing: performing an XOR operation on the initial operation vector and the current first system time, so as to determine the current first operation vector according to a result of the XOR operation.

[0014] Optionally, the algorithm processing unit determines the latest current second operation vector by the following processing: performing an XOR operation on the current first operation vector and the current second system time, so as to determine the current second operation vector according to a result of the XOR operation.

[0015] Optionally, the whole machine control unit verifies the response frame through the following processing: obtaining the frame sequence number and receiving time in the response frame; and verifying the response frame using the frame sequence number and receiving time.

[0016] Optionally, the satellite parameter update system also includes a control unit; the control unit is used to obtain initial satellite parameter encrypted data from the algorithm processing unit, perform format verification on the initial satellite parameter encrypted data, and send the satellite parameter encrypted data after format verification to the algorithm processing unit.

[0017] In a second aspect, an embodiment of the present application further provides a satellite parameter updating method, the method comprising:

[0018] Acquire the current first system time and the first key, and encrypt the current frame satellite parameters using the current first system time and the first key to obtain initial satellite parameter encryption data;

[0019] The latest current second system time and the second key are obtained, and the initial satellite parameter encrypted data is re-encrypted using the latest current second system time and the second key to obtain the final satellite parameter encrypted data.

[0020] The embodiments of the present application bring the following beneficial effects:

[0021] A satellite parameter updating system and method provided in an embodiment of the present application can obtain a first key and a second key from a key library, and use the first key and the second key to double encrypt the satellite parameters of the current frame, and also perform multi-dimensional data verification on the encrypted data. The security and stability of algorithm parameter transmission are improved through the double encryption mechanism and multi-dimensional data verification. Compared with the satellite parameter updating method in the prior art, the problem of low data transmission security when the algorithm parameters are updated is solved.

[0022] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0024] Figure 1 The structure diagram of the satellite parameter updating system provided in the embodiment of the present application is shown;

[0025] Figure 2 A flowchart of a satellite parameter updating method provided in an embodiment of the present application is shown;

[0026] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0027] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The components of the embodiments of the present application usually described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, each other embodiment obtained by those skilled in the art without making creative work belongs to the scope of protection of the present application.

[0028] It is worth noting that before the present application was filed, with the rapid development of satellite communication technology, various enterprises and institutions launched a large number of communication satellites and detection satellites, and the satellites needed to update the algorithm parameters after a certain period of time. In order to stably update the algorithm parameters, it is necessary to first protect the integrity of the algorithm parameters and encrypt them before distributing the algorithm parameters. At present, when distributing algorithm parameters, the algorithm parameter set is usually packaged, and then the packaged algorithm parameter set is encrypted once and transmitted to the satellite terminal. The transmission process is easy to be cracked, resulting in low data transmission security when the algorithm parameters are updated.

[0029] Based on this, an embodiment of the present application provides a satellite parameter updating method to improve the security and stability of data transmission when algorithm parameters are updated.

[0030] See also Figure 1 , Figure 1 This is a structural diagram of a satellite parameter update system provided in an embodiment of the present application. Figure 1 As shown, the satellite parameter updating system 10 provided in the embodiment of the present application includes:

[0031] The whole machine control unit 100 is used to obtain the first key and the second key from the key library, and send the obtained first key and the second key to the algorithm processing unit.

[0032] The algorithm processing unit 200 is used to receive the first key and the second key sent by the whole machine control unit, use the first key and the second key to double encrypt the satellite parameters of the current frame to obtain final satellite parameter encrypted data, and send the final satellite parameter encrypted data to the communication unit;

[0033] The communication unit 300 is used to receive the final satellite parameter encrypted data sent by the algorithm processing unit, and send the final satellite parameter encrypted data to the target satellite terminal, so that the target satellite terminal uses the decrypted satellite parameters to update parameters.

[0034] The first key may refer to a key used when performing a first encryption on the satellite parameters of the current frame, and the second key may refer to a key used when performing a second encryption on the satellite parameters of the current frame.

[0035] The key library is used to store multiple groups of keys, and the multiple groups of keys stored in the key library include a first key and a second key.

[0036] In the embodiment of the present application, the satellite parameter update system can be applied to a ground satellite control center or a relay satellite. The satellite parameters to be updated include multiple frames of satellite parameter data, and each frame of satellite parameter data needs to be double encrypted before the encrypted data is sent to the target satellite terminal.

[0037] The following takes a single-frame satellite parameter as an example to explain in detail the encryption and upload process of the single-frame satellite parameter. At this time, the single-frame satellite parameter is the current frame satellite parameter.

[0038] The whole machine control unit transmits the current frame satellite parameters as plain text data to the algorithm processing unit, and randomly extracts a key from the key library as the first key, records the group number of the first key, and sends the extracted first key to the algorithm processing unit, which receives the first key and obtains the current first system time. The current first system time may refer to the system time at the current moment obtained during the first encryption, and the group number of the first key is the unique identifier of the first key. Then, the current frame satellite parameters are encrypted using the current first system time and the first key to obtain the initial satellite parameter encrypted data. In addition, the whole machine control unit is also used to record the running status of each step, that is, to record which step is currently running and the running results of each step.

[0039] When the algorithm processing unit performs the first re-encryption on the current frame satellite parameters, it first determines the current first operation vector according to the current first system time and the initial operation vector. Then, the current frame satellite parameters are encrypted by AES using the current first operation vector and the first key. Among them, the current first operation vector may refer to the operation vector used for the first re-encryption, and the initial operation vector may refer to the initialization vector (IV) used when determining the current first operation vector, and the initial operation vector is stored in the algorithm unit. Exemplarily, the initial vector used may be in the form of 0x00, 0x01, 0x02, 0x03, ..., 0x0F, and the initial operation vector is the same when encrypting satellite parameters of different frames. When determining the current first operation vector, it is necessary to perform an XOR operation on the initial operation vector and the current first system time, and then determine the current first operation vector according to the result of the XOR operation. At this time, the first 80 bits of data in the initial operation vector may be selected to perform an XOR operation with the current first timestamp corresponding to the current first system time, and the result of the XOR operation is directly used as the current first operation vector, and the current first operation vector is sent to the algorithm processing unit. Among them, the number of bits of the initial operation vector participating in the XOR operation is determined by the length of the current first timestamp. The current first timestamp includes year, month, day, hour, minute, second, millisecond, and microsecond. The current first timestamp is 10 bytes of data. Therefore, the first 80 bits of data in the initial operation vector are selected for XOR operation with the current first timestamp.

[0040] After the initial satellite parameter encrypted data is obtained through the first encryption, it is also necessary to perform format verification on the obtained initial satellite parameter encrypted data.

[0041] In one example, the satellite parameter update system further includes a control unit. The control unit is used to obtain the encrypted initial satellite parameter encrypted data from the algorithm processing unit after the algorithm processing unit calculates the initial satellite parameter encrypted data, and perform format verification on the initial satellite parameter encrypted data to determine whether the initial satellite parameter encrypted data passes the format verification. If the format verification is passed, the initial satellite parameter encrypted data that passes the format verification is sent to the algorithm processing unit. If the format verification is not passed, the step of transferring the current frame satellite parameters to the algorithm processing unit is returned to re-perform the first encryption process.

[0042] Then, the latest current second system time and the second key are obtained, and the initial satellite parameter encryption data is re-encrypted using the latest current second system time and the second key to obtain the final satellite parameter encryption data. When performing the second encryption, the whole machine control unit randomly extracts a key from the key library as the second key, records the group number of the second key, and sends the extracted second key to the algorithm processing unit, which receives the second key and obtains the current second system time. Among them, the current second system time may refer to the system time at the current moment obtained during the second encryption, and the group number of the second key is the unique identifier of the second key. Then, the current frame satellite parameters are encrypted for the second time using the current second system time and the second key to obtain the final satellite parameter encryption data.

[0043] When the algorithm processing unit performs the second encryption on the current frame satellite parameters, it first determines the latest current second operation vector according to the latest current second system time and the current first operation vector. The current second operation vector may refer to the operation vector used for the second encryption. Then, the current frame satellite parameters are encrypted using the current second operation vector and the second key. When determining the latest current second operation vector, the current first operation vector and the current second system time may be subjected to an XOR operation to determine the current second operation vector according to the result of the XOR operation. At this time, the first 80 bits of data in the current first operation vector may be selected to perform an XOR operation with the current second timestamp corresponding to the current second system time, and the result of the XOR operation may be directly used as the current second operation vector, and the current second operation vector may be sent to the algorithm processing unit. The number of bits of the current first operation vector participating in the XOR operation is determined by the length of the current second timestamp. The current second timestamp includes year, month, day, hour, minute, second, millisecond, and microsecond. The current second timestamp is 10 bytes of data. Therefore, the first 80 bits of data in the current first operation vector are selected to perform an XOR operation with the current second timestamp.

[0044] In one example, the control unit obtains the final satellite parameter encrypted data after double encryption from the algorithm processing unit, and performs format verification on the final satellite parameter encrypted data to determine whether the final satellite parameter encrypted data passes the format verification. If the format verification passes, the final satellite parameter encrypted data after the format verification is sent to the algorithm processing unit. If the format verification fails, the step of obtaining the latest current second system time and the second key is returned to re-perform the second encryption process.

[0045] After the algorithm processing unit generates the final satellite parameter encrypted data, it sends the final satellite parameter encrypted data to the communication unit, which receives the final satellite parameter encrypted data and sends it to the target satellite terminal. The data receiving unit of the target satellite terminal returns a response frame after receiving the final satellite parameter encrypted data.

[0046] The whole machine control unit receives the response frame returned by the data receiving unit, and verifies the received response frame to determine whether the response frame meets the security requirements. After the verification is passed, the algorithm processing unit generates the final satellite parameter encrypted data of the next frame, and the communication unit sends the final satellite parameter encrypted data of the next frame to the target satellite terminal.

[0047] In one example, when the whole machine control unit verifies the response frame, it can obtain the frame sequence number and receiving time in the response frame, and use the frame sequence number and receiving time to verify the response frame. Here, the response frame includes the frame sequence number of the final satellite parameter encrypted data received by the target satellite terminal and the current frame receiving time. It is necessary to determine whether the current frame receiving time is after the previous frame receiving time. If it is after the previous frame receiving time, it is determined that the receiving time meets the time security requirements. If it is before the previous frame receiving time, it is determined that it does not meet the time security requirements. At the same time, it is also necessary to verify the frame sequence number to determine whether the received frame sequence number matches the frame sequence number of the sent final satellite parameter encrypted data. If it matches, it is determined that the sequence number security requirements are met. If it does not match, it is determined that the sequence number security requirements are not met. When both the current time security requirements and the sequence number security requirements are met, it is determined that the response frame passes the verification, so the plaintext data corresponding to the next frame of satellite parameters is sent to the algorithm processing unit, so that the algorithm processing unit is used to generate and transmit the next frame of final satellite parameter encrypted data.

[0048] By analogy, double encryption and corresponding verification processes are performed for each frame of satellite parameter data to be updated until the transmission of all frames of satellite parameter data is completed.

[0049] Compared with the satellite parameter updating method in the prior art, the present application can obtain the first key and the second key from the key library, and use the first key and the second key to double encrypt the current frame satellite parameters, and also perform multi-dimensional data verification on the encrypted data. The double encryption mechanism and multi-dimensional data verification are used to improve the security and stability of algorithm parameter transmission. Compared with the satellite parameter updating method in the prior art, the present application solves the problem of low data transmission security when the algorithm parameters are updated.

[0050] Based on the same inventive concept, a satellite parameter update method corresponding to the satellite parameter update system is also provided in the embodiment of the present application. Since the principle of solving the problem by the method in the embodiment of the present application is similar to the above-mentioned satellite parameter update system in the embodiment of the present application, the implementation of the method can refer to the implementation of the system, and the repeated parts will not be repeated.

[0051] See also Figure 2 , Figure 2 This is a flow chart of a satellite parameter updating method provided in an embodiment of the present application. Figure 2 As shown in , the satellite parameter updating method includes:

[0052] Step S201, obtaining the current first system time and the first key, and encrypting the current frame satellite parameters using the current first system time and the first key to obtain initial satellite parameter encryption data;

[0053] Step S202, obtaining the latest current second system time and the second key, and using the latest current second system time and the second key to perform secondary encryption on the initial satellite parameter encrypted data to obtain final satellite parameter encrypted data.

[0054] See also Figure 3 , Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 3 As shown in , the electronic device 400 includes a processor 410 , a memory 420 and a bus 430 .

[0055] The memory 420 stores machine-readable instructions executable by the processor 410. When the electronic device 400 is running, the processor 410 communicates with the memory 420 via the bus 430. When the machine-readable instructions are executed by the processor 410, the above-mentioned Figure 2 The specific implementation of the steps of the satellite parameter updating method in the method embodiment shown can be found in the method embodiment, which will not be described in detail here.

[0056] The present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the computer program can execute the above-mentioned Figure 2 The specific implementation of the steps of the satellite parameter updating method in the method embodiment shown can be found in the method embodiment, which will not be described in detail here.

[0057] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0058] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0059] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0060] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0061] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present application can essentially be embodied in the form of a software product, or in other words, the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0062] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-mentioned embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-mentioned embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A satellite parameter updating system, It is characterized in that The system includes: The whole machine control unit is used to obtain the first key and the second key from the key library, and send the obtained first key and the second key to the algorithm processing unit; an algorithm processing unit, configured to receive a first key and a second key sent by the whole machine control unit, double-encrypt the satellite parameters of the current frame using the first key and the second key to obtain final satellite parameter encrypted data, and send the final satellite parameter encrypted data to the communication unit; a communication unit, configured to receive the final satellite parameter encrypted data sent by the algorithm processing unit, and send the final satellite parameter encrypted data to a target satellite terminal, so that the target satellite terminal updates parameters using the decrypted satellite parameters; The algorithm processing unit performs double encryption on the satellite parameters of the current frame by the following processing: Acquire a current first system time and a first key, and use the current first system time and the first key to encrypt the current frame satellite parameters to obtain initial satellite parameter encryption data; Acquire the latest current second system time and the second key, and use the latest current second system time and the second key to perform secondary encryption on the initial satellite parameter encrypted data to obtain final satellite parameter encrypted data; The algorithm processing unit encrypts the current frame satellite parameters using the current first system time and the first key through the following processing: Determine a current first operation vector according to the current first system time and the initial operation vector; Encrypting the current frame satellite parameters using the current first operation vector and the first key; The algorithm processing unit performs secondary encryption on the initial satellite parameter encrypted data using the latest current second system time and the second key through the following processing: Determine the latest current second operation vector according to the latest current second system time and the current first operation vector; Encrypting the current frame satellite parameters using the current second operation vector and the second key; The algorithm processing unit determines the current first operation vector by the following processing: Performing an XOR operation on the initial operation vector and the current first system time to determine a current first operation vector according to a result of the XOR operation; The algorithm processing unit determines the latest current second operation vector by the following processing: An exclusive OR operation is performed on the current first operation vector and the current second system time to determine a current second operation vector according to a result of the exclusive OR operation.

2. The system according to claim 1, It is characterized in that The whole machine control unit also performs the following processing: Receiving a response frame returned by the data receiving unit of the target satellite terminal after receiving the final satellite parameter encrypted data; The response frame is verified to send the final satellite parameter encryption data of the next frame after the verification is passed.

3. The system according to claim 2, It is characterized in that The whole machine control unit verifies the response frame by the following processing: Obtaining the frame sequence number and receiving time in the response frame; The response frame is verified using the frame sequence number and the receiving time.

4. The system according to claim 1, It is characterized in that The satellite parameter updating system also includes a control unit; The control unit is used to obtain the initial satellite parameter encrypted data from the algorithm processing unit, perform format verification on the initial satellite parameter encrypted data, and send the satellite parameter encrypted data after format verification to the algorithm processing unit.

5. A satellite parameter updating method, It is characterized in that An algorithm processing unit applied to a satellite parameter updating system according to any one of claims 1 to 4, the method comprising: Acquire a current first system time and a first key, and use the current first system time and the first key to encrypt the current frame satellite parameters to obtain initial satellite parameter encryption data; Acquire the latest current second system time and the second key, and use the latest current second system time and the second key to perform secondary encryption on the initial satellite parameter encrypted data to obtain final satellite parameter encrypted data; The step of encrypting the current frame satellite parameters by using the current first system time and the first key includes: Determine a current first operation vector according to the current first system time and the initial operation vector; Encrypting the current frame satellite parameters using the current first operation vector and the first key; The second step of performing secondary encryption on the initial satellite parameter encrypted data by using the latest current second system time and the second key comprises: Determine the latest current second operation vector according to the latest current second system time and the current first operation vector; Encrypting the current frame satellite parameters using the current second operation vector and the second key; The determining of the current first operation vector comprises: Performing an XOR operation on the initial operation vector and the current first system time to determine a current first operation vector according to a result of the XOR operation; The determining of the latest current second operation vector comprises: An exclusive OR operation is performed on the current first operation vector and the current second system time to determine a current second operation vector according to a result of the exclusive OR operation.

Images