Intersatellite identity authentication method and system based on zero trust

Abstract

The invention discloses a zero-trust-based inter-satellite identity authentication method, which comprises the following steps of: uploading future state information of other related satellites in a satellite network to satellites in the satellite network through the ground, and calculating summary information of the state information by the satellites receiving the information through a summary algorithm; when identity authentication is needed between satellites, summary information of timestamp information and state information is mutually provided to ensure mutual identity credibility and complete authentication. The transmission data volume of the data for verification is controlled at a determined value by verifying the summary information instead of the original state information, so that reliable identity authentication with low data volume is realized. The invention provides a complete authentication process, and has high security and practical application value.

Description

Technical Field

[0001] The present invention relates to the field of satellite network security, and in particular to a zero-trust-based satellite inter-satellite identity authentication method and system. Background Art

[0002] As users' functional demands for satellite data timeliness and inter-satellite coordination continue to increase, satellites have begun to develop from single satellites to constellations and even across constellations. Intra-constellation coordination and inter-constellation coordination will inevitably involve information exchange between satellites. Usually, the status of each satellite in orbit is mastered by the ground measurement and control station. This status control enables each satellite in orbit to have "implicit trust" from the control station. Implicit trust makes it difficult for satellites and ground control stations to detect malicious operations when the actual status of the satellite in orbit is inconsistent with the status mastered by the ground (for example, autonomously performing unconventional operations in non-measurement and control segments or reasonable operations that are not generated through planned task execution sequences such as mission planning).

[0003] "Zero Trust" is a network security paradigm centered on resource protection. Its premise is that trust is never implicitly granted, but must be continuously evaluated. Therefore, for satellites, as the satellite network inherently carries "implicit trust", the probability of network security risks caused by "implicit trust" will increase as its scale continues to expand. It is necessary to introduce identity authentication based on "zero trust" to minimize the probability of risk.

[0004] At present, zero-trust identity authentication for satellites at home and abroad mainly applies the zero-trust authentication model of ground networks to satellite networks, but there are the following prominent problems: on the one hand, some information in the zero-trust authentication model of ground networks cannot be provided by satellite nodes and cannot be used for satellite identity authentication; on the other hand, since the authentication and authenticated objects in the ground network are visible for a long time, authentication requests can be initiated to the terminal in real time, while satellites are affected by limited communication resources and intermittent visibility between satellites. Therefore, the "zero trust" solution adopted by the ground network cannot be fully applicable to satellite networks. Summary of the invention

[0005] The technical problem solved by the present invention is: to overcome the shortcomings of the prior art and provide a satellite inter-satellite identity authentication method and system based on zero trust, by which the future status information of other satellites in the satellite network is injected into the satellites in the satellite network from the ground, summary information is generated for mutual authentication, and the hazards brought by "implicit trust" are avoided, while not being affected by the limited satellite communication resources and intermittent visibility between satellites.

[0006] The technical solution of the present invention is: a satellite inter-satellite identity authentication method based on zero trust, comprising:

[0007] The ground terminal sends the verification satellite's future state information to the requesting satellite, and sends the requesting satellite's future state information to the verification satellite;

[0008] The requesting satellite uses the future state information of the verifying satellite to generate the verification satellite comparison verification information and stores it; the verifying satellite uses the future state information of the requesting satellite to generate the requesting satellite comparison verification information and stores it;

[0009] The requesting satellite sends an authentication request message to the verifying satellite according to current needs;

[0010] The verification satellite compares the authentication request information with the stored verification information of the requesting satellite; if the comparison is successful, the verification satellite returns the authentication verification information to the requesting satellite;

[0011] The requesting satellite compares the authentication verification information with the stored verification satellite verification information; if the comparison is successful, the requesting satellite establishes a link with the verification satellite.

[0012] Further, the requesting satellite utilizes the future state information of the verification satellite to generate verification satellite comparison verification information, and the specific method is as follows:

[0013] Requesting the satellite to extract the timestamp in the future state information of the satellite for verification, generating summary information of the future state information of the satellite for verification through a summary algorithm, and storing the timestamp and summary information of the future state information of the satellite for verification as a key-value pair;

[0014] The verification satellite uses the future status information of the requesting satellite to generate the comparison verification information of the requesting satellite. The specific method is as follows:

[0015] The verification satellite extracts the timestamp in the future state information of the requested satellite, generates summary information of the future state information of the requested satellite through a summary algorithm, and stores the timestamp and summary information of the future state information of the requested satellite as a key-value pair.

[0016] Furthermore, the authentication request information includes a current timestamp and summary information of the current status information of the requesting satellite; after receiving the authentication request information, the verification satellite compares the current timestamp and the summary information of the current status information of the requesting satellite to see whether they exist in the stored requesting satellite comparison verification information. If so, the comparison is passed; if not, the comparison fails.

[0017] Furthermore, the authentication verification information includes a current timestamp and summary information of the current status information of the verification satellite; after receiving the authentication verification information, the requesting satellite compares whether the current timestamp and the summary information of the current status information of the verification satellite exist in the stored verification satellite comparison verification information. If so, the comparison is passed; if not, the comparison fails.

[0018] Furthermore, the future status information and current status information of the satellite are requested or verified in the same form, including: timestamp, satellite ID, payload working status and orbital elements.

[0019] The present invention also provides a zero-trust-based satellite inter-satellite identity authentication system, which is deployed on the ground terminal, the requesting satellite and the verifying satellite;

[0020] The ground side includes:

[0021] A ground sending module is used to send the future state information of the verification satellite to the requesting satellite, and send the future state information of the requesting satellite to the verification satellite;

[0022] Request satellites, including:

[0023] The first information receiving module is used to receive the future state information of the verification satellite sent by the ground terminal; receive the authentication verification information sent by the verification satellite;

[0024] A first verification information generation module is used to generate verification satellite comparison verification information using the verification satellite future state information;

[0025] A first verification information storage module is used to store verification satellite comparison verification information;

[0026] A first comparison and verification module is used to compare the authentication verification information with the stored verification satellite comparison and verification information to obtain a verification comparison result;

[0027] A first information sending module, used for sending authentication request information to the verification satellite;

[0028] Validation satellites, including:

[0029] The second information receiving module is used to receive the future state information of the requesting satellite sent by the ground terminal; and receive the authentication request information sent by the requesting satellite;

[0030] A second verification information generating module is used to generate the requested satellite comparison verification information by using the requested satellite future state information;

[0031] A second verification information storage module is used to store the requested satellite comparison verification information;

[0032] A second comparison and verification module is used to compare the authentication request information with the stored requested satellite comparison and verification information to obtain a request comparison result;

[0033] The second information sending module is used to send authentication verification information to the verification satellite.

[0034] Further, the first verification information generating module generates the verification satellite comparison verification information in a specific manner: extracting the timestamp in the verification satellite future state information, generating summary information of the verification satellite future state information by using a summary algorithm, and sending the timestamp and summary information of the verification satellite future state information as a key-value pair to the first verification information storage module;

[0035] The second verification information generation module generates the requested satellite comparison verification information in the following specific manner: extracting the timestamp in the requested satellite future state information, generating summary information of the requested satellite future state information through a summary algorithm, and sending the timestamp and summary information of the requested satellite future state information as a key-value pair to the second verification information storage module.

[0036] Further, the authentication request information includes a current timestamp and summary information of the requested satellite's current status information; the second comparison and verification module obtains the request comparison result in the following specific manner: after receiving the authentication request information, compare the current timestamp and summary information of the requested satellite's current status information in the requested satellite comparison and verification information of the second verification information storage module to see whether they exist; if so, the comparison passes; if not, the comparison fails.

[0037] Further, the authentication verification information includes a current timestamp and summary information of the current status information of the verification satellite; the first comparison verification module obtains the verification comparison result in the following specific manner: after receiving the authentication verification information, compare whether the current timestamp and the summary information of the current status information of the verification satellite exist in the verification satellite comparison verification information of the first verification information storage module; if so, the comparison passes; if not, the comparison fails.

[0038] Furthermore, the future status information and current status information of the satellite are requested or verified in the same form, including: timestamp, satellite ID, payload working status and orbital elements.

[0039] The advantages of the present invention compared with the prior art are:

[0040] (1) Compared with the traditional one-time authentication such as user name and password or direct connection instruction without authentication through ground injection, the present invention proposes a satellite network inter-satellite identity authentication method based on "zero trust" for the "implicit trust" existing in satellite authentication in satellite networks, and optimizes the design for the limited communication resources in satellite network links: the future status information of other related satellites in the satellite network is injected to the satellites in the satellite network from the ground, and the satellites that receive the information calculate the summary information of the status information through the summary algorithm. When identity authentication is required between satellites, the timestamp information and the summary information of the status information are provided to each other to ensure that the identities of each other are credible and complete the authentication.

[0041] (2) The method proposed in the present invention ensures that the current satellite status is consistent with the previously planned satellite status and is credible by verifying the on-board telemetry information; the transmission data volume of the verification data is controlled to a certain value by verifying the summary information rather than the original status information, thereby achieving low-data-volume and reliable identity authentication.

[0042] (2) The present invention includes a complete authentication process and has high security and practical application value. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 A schematic diagram of the authorization architecture of the authentication method of the present invention;

[0044] Figure 2 is a flow chart of an authentication method in an embodiment of the present invention;

[0045] Figure 3 Schematic diagram of state information composition in an embodiment of the present invention. DETAILED DESCRIPTION

[0046] In order to better understand the technical solution of the present invention, the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0047] The authorization architecture diagram of the authentication method proposed by the present invention is as follows: Figure 1 As shown, the objects involve ground systems, requestor satellites, and verifier satellites.

[0048] The ground system is responsible for sending the status information of the verifier satellite in the future to the requester satellite participating in the identity authentication link in the satellite network, and sending the status information of the requester satellite in the future to the verifier satellite. The requester satellite refers to the satellite that initiates the identity authentication request; the verifier satellite refers to the satellite that verifies the identity authentication request initiated by the requester satellite.

[0049] The method steps given in this embodiment can be referred to Figure 2 ,include:

[0050] (1) The ground system sends the future status information of the verifier satellite and the future status information of the requester satellite to the two satellites based on their identity positioning.

[0051] (2) The requester satellite and the verification satellite extract the timestamp in the future state information, generate summary information of the corresponding future state information through a pre-agreed summary algorithm, and store the timestamp and summary information of the future state information as a key-value pair in the internal database of each satellite.

[0052] (3) The requester satellite sends an authentication request message to the verifier satellite based on current needs.

[0053] The authentication request information includes the current timestamp and the summary information of the current status information of the requester satellite. The current status information of the requester satellite is obtained by reading its own telemetry. The summary information of the current status information is generated by a pre-agreed summary algorithm.

[0054] (4) After receiving the authentication request information, the verifier satellite compares it with the timestamp and summary information of the requester satellite's future status information stored in its own database to determine whether the authentication request information exists.

[0055] If it exists, the authentication verification information is returned to the requester satellite. The authentication verification information includes the current timestamp and the summary information of the current status information of the verifier satellite. The current status information of the verifier satellite is obtained by reading its own telemetry. The summary information of the current status information is generated by the summary algorithm. If it does not exist, no response is made to the requester satellite.

[0056] (5) After receiving the authentication verification information, the requester satellite compares it with the timestamp and summary information of the future status of the verifier satellite stored in its own database to determine whether the authentication verification information exists.

[0057] If it exists, a connection is established with the validator satellite. If it does not exist, no operation is performed.

[0058] In a possible implementation, whether the future state information or the current state information of the requester satellite or the verifier satellite is Figure 3 As shown, the formats include timestamp, satellite ID, payload working status, and six orbit numbers.

[0059] Load working state: used to describe the specific working state of the load, such as power on, power off, rotation, etc. The working state of the load can be a single state or a collection of multiple states (such as rotation and signal transmission).

[0060] Six orbital numbers: used to describe the current orbital position of the satellite. The six orbital numbers can be expressed in any form.

[0061] In a possible implementation, the digest algorithm uses the SHA256 algorithm.

[0062] The present invention also provides an authentication system, which is deployed on a ground terminal, a requesting satellite, and a verifying satellite;

[0063] The ground side includes:

[0064] A ground sending module is used to send the future state information of the verification satellite to the requesting satellite, and send the future state information of the requesting satellite to the verification satellite;

[0065] Request satellites, including:

[0066] The first information receiving module is used to receive the future state information of the verification satellite sent by the ground terminal; receive the authentication verification information sent by the verification satellite;

[0067] A first verification information generation module is used to generate verification satellite comparison verification information using the verification satellite future state information;

[0068] A first verification information storage module is used to store verification satellite comparison verification information;

[0069] A first comparison and verification module is used to compare the authentication verification information with the stored verification satellite comparison and verification information to obtain a verification comparison result;

[0070] A first information sending module, used for sending authentication request information to the verification satellite;

[0071] Validation satellites, including:

[0072] The second information receiving module is used to receive the future state information of the requesting satellite sent by the ground terminal; and receive the authentication request information sent by the requesting satellite;

[0073] A second verification information generating module is used to generate the requested satellite comparison verification information by using the requested satellite future state information;

[0074] A second verification information storage module is used to store the requested satellite comparison verification information;

[0075] A second comparison and verification module is used to compare the authentication request information with the stored requested satellite comparison and verification information to obtain a request comparison result;

[0076] The second information sending module is used to send authentication verification information to the verification satellite.

[0077] The functions of each module are implemented according to the above method.

[0078] It is to be understood that the present invention is described by way of embodiments, and it is known to those skilled in the art that various changes or equivalent substitutions may be made to these features and embodiments without departing from the spirit and scope of the present invention. In addition, under the teachings of the present invention, these features and embodiments may be modified to adapt to specific circumstances without departing from the spirit and scope of the present invention. Therefore, the present invention is not limited by the specific embodiments disclosed herein, and embodiments that can fall within the scope of the claims of this application all fall within the scope protected by the present invention.

[0079] The contents not described in detail in the specification of the present invention belong to the common knowledge of those skilled in the art.

Claims

1. A satellite inter-satellite identity authentication method based on zero trust, characterized in that: include: The ground terminal sends the verification satellite's future state information to the requesting satellite, and sends the requesting satellite's future state information to the verification satellite; The requesting satellite utilizes the future state information of the verification satellite to generate verification satellite comparison verification information and store it; The verification satellite uses the future state information of the requesting satellite to generate and store the comparison verification information of the requesting satellite; The requesting satellite sends an authentication request message to the verifying satellite according to current needs; The verification satellite compares the authentication request information with the stored verification information of the requesting satellite; if the comparison is successful, the verification satellite returns the authentication verification information to the requesting satellite; The requesting satellite compares the authentication verification information with the stored verification satellite verification information; if the comparison is successful, the requesting satellite establishes a link with the verification satellite.

2. The zero-trust satellite inter-satellite identity authentication method according to claim 1, characterized in that: The requesting satellite uses the future status information of the verification satellite to generate verification satellite comparison verification information. The specific method is as follows: Requesting the satellite to extract the timestamp in the future state information of the satellite for verification, generating summary information of the future state information of the satellite for verification through a summary algorithm, and storing the timestamp and summary information of the future state information of the satellite for verification as a key-value pair; The verification satellite uses the future status information of the requesting satellite to generate the comparison verification information of the requesting satellite. The specific method is as follows: The verification satellite extracts the timestamp in the future state information of the requested satellite, generates summary information of the future state information of the requested satellite through a summary algorithm, and stores the timestamp and summary information of the future state information of the requested satellite as a key-value pair.

3. The zero-trust based satellite inter-satellite identity authentication method according to claim 2, characterized in that: The authentication request information includes a current timestamp and summary information of the current status information of the requested satellite; After receiving the authentication request information, the verification satellite compares the current timestamp and the summary information of the requesting satellite's current status information to see whether it exists in the stored requesting satellite comparison verification information. If it exists, the comparison passes; if not, the comparison fails.

4. The zero-trust based satellite inter-satellite identity authentication method according to claim 2, characterized in that: The authentication verification information includes a current timestamp and summary information of the current state information of the verification satellite; After receiving the authentication verification information, the requesting satellite compares the current timestamp and the summary information of the verification satellite's current status information to see if it exists in the stored verification satellite comparison verification information. If it exists, the comparison passes; if not, the comparison fails.

5. The zero-trust based satellite inter-satellite identity authentication method according to any one of claims 1 to 4, characterized in that: The future status information and current status information of the satellite are requested or verified in the same format, including: timestamp, satellite ID, payload working status and orbital elements.

6. A zero-trust satellite inter-satellite identity authentication system, characterized in that: Deployed on the ground side, requesting satellites and verifying satellites; The ground side includes: A ground sending module is used to send the future state information of the verification satellite to the requesting satellite, and send the future state information of the requesting satellite to the verification satellite; Request satellites, including: The first information receiving module is used to receive the future state information of the verification satellite sent by the ground terminal; receive the authentication verification information sent by the verification satellite; A first verification information generation module is used to generate verification satellite comparison verification information using the verification satellite future state information; A first verification information storage module is used to store verification satellite comparison verification information; A first comparison and verification module is used to compare the authentication verification information with the stored verification satellite comparison and verification information to obtain a verification comparison result; A first information sending module, used for sending authentication request information to the verification satellite; Validation satellites, including: The second information receiving module is used to receive the future state information of the requesting satellite sent by the ground terminal; and receive the authentication request information sent by the requesting satellite; A second verification information generating module is used to generate the requested satellite comparison verification information by using the requested satellite future state information; A second verification information storage module is used to store the requested satellite comparison verification information; A second comparison and verification module is used to compare the authentication request information with the stored requested satellite comparison and verification information to obtain a request comparison result; The second information sending module is used to send authentication verification information to the verification satellite.

7. The zero-trust based satellite inter-satellite identity authentication system according to claim 6, characterized in that: The first verification information generation module generates the verification satellite comparison verification information in the following specific manner: extracting the timestamp in the verification satellite future state information, generating summary information of the verification satellite future state information by using a summary algorithm, and sending the timestamp and summary information of the verification satellite future state information as a key-value pair to the first verification information storage module; The second verification information generation module generates the requested satellite comparison verification information in the following specific manner: extracting the timestamp in the requested satellite future state information, generating summary information of the requested satellite future state information through a summary algorithm, and sending the timestamp and summary information of the requested satellite future state information as a key-value pair to the second verification information storage module.

8. The zero-trust based satellite inter-satellite identity authentication system according to claim 6, characterized in that: The authentication request information includes a current timestamp and summary information of the current status information of the requested satellite; The second comparison and verification module obtains the request comparison result in the following specific manner: after receiving the authentication request information, compare the current timestamp and the summary information of the requested satellite current status information to see whether it exists in the requested satellite comparison and verification information of the second verification information storage module. If it exists, the comparison is passed; if not, the comparison fails.

9. The zero-trust based satellite inter-satellite identity authentication system according to claim 6, characterized in that: The authentication verification information includes a current timestamp and summary information of the current state information of the verification satellite; The first comparison and verification module obtains the verification and comparison result in the following specific manner: after receiving the authentication verification information, compare the current timestamp and the summary information of the verification satellite's current status information to see whether it exists in the verification satellite comparison and verification information of the first verification information storage module. If so, the comparison passes; if not, the comparison fails.

10. The zero-trust satellite inter-satellite identity authentication system according to any one of claims 6 to 9, characterized in that: The future status information and current status information of the satellite are requested or verified in the same format, including: timestamp, satellite ID, payload working status and orbital elements.

Images