Authentication method, device and equipment for satellite communication, medium and product
By setting up satellite communication service switches in the Internet of Things card of terminal devices, detecting and rejecting signal reception of unactivated services, the problem of resource waste in low-orbit satellite communication is solved, and efficient utilization of satellite resources is achieved.
Patent Information
- Application Number
- CN202411192952.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-28
- Publication Date
- 2024-12-24
AI Technical Summary
In low-orbit satellite communication, when the terminal equipment detects a satellite signal, it is necessary to send an authentication request to the core network, resulting in wasting of core network resources, especially in satellite environments with limited resources.
Set up a satellite communication service switch in the Internet of Things card of the terminal device, obtain the switch status when the satellite signal is detected, and refuse to receive the signal when the switch status is off, avoiding invalid authentication requests.
It saves authentication and computing resources for satellite communications, avoids waste of satellite resources, and improves communication efficiency.
Smart Images
Figure CN119182441A_ABST
Abstract
Description
Technical Field
[0001] The present application belongs to the field of satellite communication technology, and specifically relates to an authentication method, device, equipment, medium and product for satellite communication. Background Art
[0002] As satellite launch technology matures, low-orbit satellites are gradually becoming new IoT communication facilities. Large low-orbit satellite communication networks have a large number of satellites and operate in low orbits, which can provide higher bandwidth and lower latency, and can bring a better satellite communication experience.
[0003] Generally, when a terminal device detects a satellite communication signal, it needs to send the card identification number of the IoT card in the terminal device to the core network deployed on the satellite, and the core network will authenticate whether the IoT card has signed a satellite communication service. During the authentication process, the core network needs to complete a large amount of data calculation and storage. However, since satellite resources are limited, such an authentication method will result in a waste of satellite resources. Summary of the invention
[0004] In view of the above problems, the present disclosure is proposed. The present disclosure provides a satellite communication authentication method, device, equipment, medium and product, which can reduce the waste of satellite resources.
[0005] According to one aspect of the present disclosure, there is provided a satellite communication authentication method, which is applied to a terminal device, and the method comprises:
[0006] When a satellite communication signal is detected, obtaining a switch state of a satellite communication service switch set in the Internet of Things card of the terminal device, wherein the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card;
[0007] When the switch is in the off state, reception of the satellite communication signal is rejected.
[0008] Optionally, the obtaining a switch state of a satellite communication service switch set in an Internet of Things card of the terminal device includes:
[0009] Sending a service status change request for opening the satellite communication service to the operator network access device, wherein the service status change request carries the device parameters of the terminal device;
[0010] Receiving a service status change instruction returned by the operator network access device based on the device parameters;
[0011] The service status change instruction is parsed to obtain the switch status of the satellite communication service switch.
[0012] Optionally, parsing the service status change instruction to obtain the switch status of the satellite communication service switch includes:
[0013] In the case where the service status change instruction is a ciphertext, decrypting the service status change instruction to obtain a service status change plaintext instruction;
[0014] The service status change plain text instruction is parsed to obtain the switch status of the satellite communication service switch.
[0015] Optionally, the obtaining a switch state of a satellite communication service switch set in an Internet of Things card of the terminal device includes:
[0016] Obtain the switch status of the satellite communication service switch from the sub-security domain of the Internet of Things card.
[0017] According to another aspect of the present disclosure, there is provided an authentication system for satellite communication, comprising:
[0018] Terminal equipment and operator network access equipment;
[0019] The terminal device is used to perform any one of the above-mentioned satellite communication authentication methods;
[0020] The operator network access device is used to return a service status change instruction to the terminal device based on the device parameters carried in the service status change request when receiving the service status change request for opening a satellite communication service.
[0021] Optionally, the system further comprises:
[0022] Core network equipment;
[0023] The operator network access device is also used for:
[0024] When it is determined that the terminal device has activated the satellite communication service, sending a parameter indicating activation of the satellite communication service to the core network device;
[0025] The core network device is also used for:
[0026] When the terminal device is disconnected from the ground network and it is determined based on the parameters that the activation duration of the satellite communication service exceeds the preset duration, the switch state of the satellite communication service switch is controlled to be kept on until the terminal device is reconnected to the ground network, and a shutdown instruction for shutting down the satellite communication service switch is sent to the operator network access device.
[0027] According to another aspect of the present disclosure, there is provided an authentication device for satellite communication, comprising:
[0028] An acquisition module, used to acquire the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device when a satellite communication signal is detected, wherein the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card;
[0029] The receiving module is used to refuse to receive the satellite communication signal when the switch is in the off state.
[0030] According to another aspect of the present disclosure, an electronic device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the above-mentioned satellite communication authentication method.
[0031] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored, and the program is executed by a processor to implement the above-mentioned satellite communication authentication method.
[0032] According to another aspect of the present disclosure, a computer program product is provided, including a computer-readable code, or a non-volatile computer-readable storage medium carrying the computer-readable code. When the computer-readable code runs in a processor of an electronic device, the processor in the electronic device executes the above-mentioned authentication method for satellite communication.
[0033] In the present disclosure, when a satellite communication signal is detected, the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device is obtained. Among them, the switch state is used to characterize whether the Internet of Things card currently has satellite communication services enabled. When the switch state is in the off state, satellite communication signals are rejected. By setting a satellite communication service switch in the Internet of Things card, it is possible to use the satellite communication service switch to perform authentication judgment on satellite communication before the terminal device initiates authentication to the core network. In this way, terminal devices that have the ability to receive satellite communication signals but have not activated satellite communication services can be intercepted from initiating authentication operations to the core network, saving satellite authentication and computing resources. Therefore, waste of satellite resources can be avoided.
[0034] It is to be understood that both the foregoing general description and the following detailed description are exemplary, and are intended to provide further explanation of the technology as claimed. BRIEF DESCRIPTION OF THE DRAWINGS
[0035] The above and other purposes, features and advantages of the present disclosure will become more apparent by describing the embodiments of the present disclosure in more detail in conjunction with the accompanying drawings. The accompanying drawings are used to provide a further understanding of the embodiments of the present disclosure and constitute a part of the specification. Together with the embodiments of the present disclosure, they are used to explain the present disclosure and do not constitute a limitation of the present disclosure. In the accompanying drawings, the same reference numerals generally represent the same components or steps.
[0036] Figure 1 A flow chart of a satellite communication authentication method provided by the present disclosure.
[0037] Figure 2 A timing diagram of obtaining a switch state in a satellite communication authentication method provided by the present disclosure.
[0038] Figure 3 Another flow chart of a satellite communication authentication method provided by the present disclosure.
[0039] Figure 4 A flowchart of satellite communication authentication in an Internet of Things card of a satellite communication authentication method provided in the present invention.
[0040] Figure 5 A flowchart of satellite communication authentication in a core network of a satellite communication authentication method provided by the present invention.
[0041] Figure 6 A timing diagram of a satellite communication authentication method provided by the present disclosure.
[0042] Figure 7 A schematic diagram of the structure of a satellite communication authentication system provided by the present invention.
[0043] Figure 8 A schematic diagram of the structure of an authentication device for satellite communications provided by the present invention.
[0044] Fig. 9 A hardware block diagram of an electronic device provided by the present disclosure.
[0045] Fig.10 A schematic diagram of a computer program product provided by the present disclosure. DETAILED DESCRIPTION
[0046] In order to enable those skilled in the art to more clearly understand the technical solution of the present application, the application scenario of the solution of the present application is first described below.
[0047] Usually, due to environmental constraints, there are uninhabited or sparsely populated areas such as forests, oceans, and deserts. It is currently estimated that more than 80% of land areas and more than 95% of ocean areas are not covered by network services. Due to the poor flexibility, susceptibility to geographical influences, and high deployment costs of ground communication networks, it is difficult to provide effective ground communication means for remote scenarios. In contrast, satellite communications can communicate between radio communication stations using satellites as relays. Satellite communications have the characteristics of a large communication range, not being easily affected by land disasters, and being able to economically realize broadcasting and multiple access communications. Large low-orbit satellite communication networks can provide higher bandwidth and lower latency due to the large number of satellites and low orbits.
[0048] At present, when a terminal device receives a satellite communication signal, it needs to send the card identification number of the IoT card in the terminal device to the core network deployed on the satellite. The core network will authenticate whether the IoT card has signed a satellite communication service. During the authentication process, the core network needs to complete a large amount of data calculation and storage. However, compared with ground base stations, satellites have small capacity; they are powered by solar arrays, and the energy supply is limited; it is difficult to modify and upgrade hardware after launch; the global maximum capacity of near-Earth space does not exceed 70,000, and the number is limited, so the resources available to low-orbit satellites are limited. Such an authentication method will cause a waste of satellite resources.
[0049] In order to solve the above problems, the present disclosure provides a satellite communication authentication method, device, equipment, medium and product. In the present disclosure, when a satellite communication signal is detected, the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device is obtained. Among them, the switch state is used to characterize whether the Internet of Things card currently has satellite communication services enabled. When the switch state is in the off state, satellite communication signals are rejected. By setting a satellite communication service switch in the Internet of Things card, it is possible to use the satellite communication service switch to perform authentication judgment on satellite communication before the terminal device initiates authentication to the core network. In this way, terminal devices that have the ability to receive satellite communication signals but have not activated satellite communication services can be intercepted from initiating authentication operations to the core network, saving satellite authentication and computing resources. Therefore, waste of satellite resources can be avoided.
[0050] In order to make the purpose, technical solution and advantages of the present disclosure more obvious, the exemplary embodiments according to the present disclosure will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure, and it should be understood that the present disclosure is not limited to the exemplary embodiments described here.
[0051] Figure 1 A flow chart of a satellite communication authentication method provided by the present disclosure. Figure 1 As shown, the method includes:
[0052] S101: When a satellite communication signal is detected, the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device is obtained.
[0053] Specifically, a satellite communication service switch is pre-set in the IoT card, wherein the switch state is used to indicate whether the IoT card currently has satellite communication service enabled. The IoT card with the satellite communication service switch is built into a terminal device. When the terminal device detects a satellite communication signal, the terminal device obtains the current switch state of the satellite communication service switch, and determines whether the current IoT card has satellite communication service enabled based on the switch state, that is, whether the terminal device with the built-in IoT card can receive satellite communication signals.
[0054] S102: When the switch is in the off state, the reception of satellite communication signals is rejected.
[0055] Specifically, when the switch is in the off state, it means that the IoT card has not opened the satellite communication service. At this time, the terminal device cannot receive satellite communication signals and needs to refuse to receive satellite communication signals. In this way, the satellite communication service switch can play an interception role to prevent a large number of ground terminal devices from initiating invalid authentication requests to the core network deployed on the satellite, causing the on-board computing resources and authentication resources to be seriously overloaded, affecting the normal communication of the satellite. Authenticating whether the terminal device can perform satellite communication services on the IoT card side can save satellite authentication and computing resources.
[0056] In the present disclosure, when a satellite communication signal is detected, the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device is obtained. Among them, the switch state is used to characterize whether the Internet of Things card currently has satellite communication services enabled. When the switch state is in the off state, satellite communication signals are rejected. By setting a satellite communication service switch in the Internet of Things card, it is possible to use the satellite communication service switch to perform authentication judgment on satellite communication before the terminal device initiates authentication to the core network. In this way, terminal devices that have the ability to receive satellite communication signals but have not activated satellite communication services can be intercepted from initiating authentication operations to the core network, saving satellite authentication and computing resources. Therefore, waste of satellite resources can be avoided.
[0057] In a possible embodiment, an exemplary method for obtaining the switch state of a satellite communication service switch set in an Internet of Things card of a terminal device includes:
[0058] Send a service status change request to the operator's network access device to activate satellite communication services.
[0059] Specifically, when the user of the terminal device is traveling in an uninhabited area, hiking in the mountains, or working in the ocean, satellite communication may be required. At this time, the terminal device needs to send an application to the operator's network access device to open a satellite communication service, that is, a service status change request, requesting the operator's network access device to open a satellite communication service. The service status change request carries the device parameters of the terminal device.
[0060] Afterwards, a service status change instruction returned by the operator's network access device based on the device parameters is received.
[0061] Specifically, after receiving the service status change request, the operator network access device can generate a service status change instruction according to the device parameters carried in the request and return it to the terminal device. In other words, the terminal device can receive the service status change instruction returned by the operator network access device.
[0062] Among them, when the service status change instruction represents the activation of the satellite communication service, the instruction generated by the operator's network access device according to the device parameters is an instruction to change the switch state to the on state. Similarly, if the service status change instruction represents the closure of the satellite communication service, the switch state is changed to the off state.
[0063] Afterwards, the service status change instruction is parsed to obtain the switch status of the satellite communication service switch.
[0064] Example methods include:
[0065] In the case where the service status change instruction is a ciphertext, the service status change instruction is decrypted to obtain the service status change plaintext instruction.
[0066] Specifically, in order to ensure the security, legality and integrity of the service status change instruction during the communication transmission process, the service status change instruction may be encrypted so that the service status change instruction is communicated and transmitted in the form of ciphertext.
[0067] In this embodiment, the service status change instruction can be encrypted using an asymmetric key. When the operator network access device generates a plain text service status change instruction, the plain text service status change instruction can be encrypted using the public key corresponding to the IoT card stored in the operator network access device. Afterwards, the encrypted plain text service status change instruction is signed using the private key of the operator network access device to obtain the service status change instruction.
[0068] The service status change instruction can be transmitted from the operator's network access device to the corresponding terminal device through the ground network OTA (Over-The-Air) method.
[0069] After the terminal device obtains the service status change instruction, it verifies the signature of the service status change instruction according to the public key corresponding to the operator's network access device stored in the terminal device. If the signature verification is correct, the service status change instruction encrypted by the public key of the IoT card can be obtained. Verifying the signature of the service status change instruction can ensure the legitimacy and integrity of the instruction, proving that it has not been tampered with by the outside world during the transmission process.
[0070] The private key of the built-in IoT card stored in the terminal device is used to decrypt the business status change instruction after the signature verification to obtain the plain text instruction of the business status change. If the decryption is correct, it is determined that the instruction is transmitted correctly and is transmitted to other terminal devices without error.
[0071] Afterwards, the service status change plain text instruction is parsed to obtain the switch status of the satellite communication service switch.
[0072] Specifically, the service status change plain text instruction is parsed to obtain the switch status of the satellite communication service switch. If the parsed switch status is an open state, the terminal device can execute the instruction to turn on the satellite communication service switch.
[0073] In addition, after executing the instruction, the device in the terminal can generate an execution result and return the execution result to the operator's network access device. The execution result can also be encrypted in the same way as the service status change instruction to ensure the legitimacy and integrity of information transmission.
[0074] Furthermore, after the operator network access device receives the execution result, the service status change data can also be synchronized to the core network system and the service support system. It is understandable that during the data synchronization process, encryption can be performed in the same manner as the service status change instruction encryption to ensure the legitimacy and integrity of information transmission.
[0075] In a possible embodiment, an exemplary method for obtaining the switch state of a satellite communication service switch set in an Internet of Things card of a terminal device includes:
[0076] Get the switch status of the satellite communication service switch from the sub-security domain of the IoT card.
[0077] Specifically, a sub-security domain can be added under the main security domain in the IoT card, and the sub-security domain is used to store and manage the switches on the satellite communication card and satellite communication-related business information. Among them, the main security domain is the highest-level security domain in the IoT card, which has the authority to manage the entire IoT card and stores the keys and algorithms related to the IoT card; the sub-security domain is an independent security area under the main security domain, which can have independent keys and algorithms to protect specific applications or services.
[0078] In this embodiment, the satellite communication service switch is stored in the newly created satellite communication sub-security domain, which protects the security of the satellite communication service switch management on the card. When obtaining the switch status of the satellite communication service switch, it can be read from the above sub-security domain.
[0079] Furthermore, a satellite communication key pair can be pre-set in the sub-security domain for data protection of satellite communication service switches and related service management. In this embodiment, the satellite communication key can be encrypted using an asymmetric key, and the private key of the IoT card and the public key of the operator network access device are pre-set on the IoT card side. Similarly, the operator network access device needs to store the device's own private key, the card identification numbers of all IoT cards, and the public keys corresponding to the card identification numbers.
[0080] It is understandable that the satellite communication key may also adopt an asymmetric encryption algorithm such as RSA, ECC, ElGamal, or a symmetric encryption algorithm such as SM4, DES, 3DES, AES, etc., and the present disclosure does not make specific limitations on this.
[0081] In addition, the sub-security domain can be written into the IoT card by pre-burning, or written into the IoT card by OTA over the ground network. The specific method of adding can be determined according to the type of IoT card, and the present disclosure does not make specific limitations here.
[0082] In a possible embodiment, a terminal device wake-up alarm may be preset in the sub-security domain according to the satellite ephemeris.
[0083] Specifically, when the terminal device is not frequently used, the terminal device can be awakened by a preset alarm clock so that the terminal device can maintain satellite communication.
[0084] Figure 2 The timing diagram for obtaining the switch state provided by the present disclosure. Figure 2 As shown, the method includes:
[0085] S201: The terminal device sends a service status change request to the satellite communication management system.
[0086] In this embodiment, the operator network access device may be a satellite communication management system. Specifically, the terminal device may log in to the satellite communication management system autonomously to change the satellite communication service switch and activate the satellite communication service, or may change the satellite communication service switch through a service counter to activate the satellite communication service.
[0087] After the satellite communication service is activated, when the user has a service change requirement, he can send a service status change request to the satellite communication management system through the terminal device. The service status change request carries the device parameters of the terminal device, such as the card identification number of the IoT card built into the terminal device.
[0088] S202: The satellite communication management system returns a service status change instruction.
[0089] After receiving the service status change request, the Internet of Things card is queried whether the satellite communication service is activated according to the card identification number in the device parameters, and a service status change instruction is generated. In this embodiment, taking the service change requirement of activating the satellite communication service as an example, if the satellite communication management system inquires that the Internet of Things card has not activated the satellite communication service, the generated service status change instruction corresponds to changing the switch state to the on state.
[0090] The generated service status change instruction is returned to the terminal device that sent the service status change request.
[0091] S203: The terminal device parses and executes the service status change instruction.
[0092] Specifically, after receiving the service status change instruction, the terminal device parses the service status change instruction to obtain the switch status of the satellite communication service switch. Continuing the above example, the switch status obtained at this time is the on state, and the terminal device executes the instruction to turn on the satellite communication service switch.
[0093] S204: The terminal device returns the execution result to the satellite communication management system.
[0094] After executing the service status change instruction, the terminal device will generate an execution result, which will be returned to the satellite communication management system for data storage.
[0095] S205: The satellite communication management system synchronizes the execution result to the core network.
[0096] Figure 3 Another flow chart of a satellite communication authentication method provided by the present disclosure. Figure 3 As shown, the method includes:
[0097] S301: Add a new sub-security domain in the IoT card.
[0098] A sub-security domain is added to the main security domain of the IoT card to store and manage the satellite communication service switch and satellite communication related service information. The newly added sub-security domain includes a satellite communication service switch, wherein the switch state of the satellite communication service switch can indicate whether the IoT card currently has satellite communication service enabled, and the satellite communication service switch is in the off state by default.
[0099] S302: Turn on the satellite communication service switch in the IoT card.
[0100] When a user of a terminal device needs to perform satellite communication, a service state change request for turning on a satellite communication service switch can be sent to the operator's network access device.
[0101] After receiving the service status change request, the operator network access device queries the satellite communication service contract status of the IoT card stored in the operator network access device according to the device parameters carried in the request, that is, the card identification number of the IoT card. If the IoT card has not signed a satellite communication service, a service status change instruction is generated and sent to the corresponding terminal device.
[0102] The terminal device executes the service status change instruction and turns on the satellite communication service switch in the built-in Internet of Things card.
[0103] S303: When the terminal device detects a satellite communication signal, the terminal device obtains the switch status of the satellite communication service switch and authenticates the satellite communication service on the Internet of Things card side.
[0104] like Figure 4 As shown, Figure 4 Flowchart for IoT card authentication for satellite communications.
[0105] S41: When the terminal device detects a satellite communication signal broadcast by a low-orbit satellite, the terminal device obtains the switch status of the satellite communication service switch in the built-in Internet of Things card.
[0106] S42: When the switch state is on, it is considered that the IoT card has enabled the satellite communication service, and the IoT card side authentication is successful, and S304 can be executed, that is, the satellite communication authentication process in the core network.
[0107] S43: When the switch state is off, it is considered that the Internet of Things card has not activated the satellite communication service, and the terminal device does not need to respond to the broadcast satellite communication signal and can remain silent.
[0108] In this way, before the terminal device initiates satellite communication authentication to the core network, the terminal device that has not activated the satellite communication service can be filtered and intercepted, so as to avoid the terminal device that has satellite communication service capability but has not activated the satellite communication service from initiating invalid authentication to the core network and wasting satellite resources.
[0109] S304: When the terminal device obtains the switch state as the on state, the satellite communication service is authenticated on the core network side.
[0110] like Figure 5 As shown, Figure 5 Flowchart for satellite communication authentication in the core network.
[0111] S51: The terminal device obtains the card identification number of the built-in Internet of Things card.
[0112] After confirming that the satellite communication service switch on the IoT card is turned on, the terminal device reads the card identification number of the IoT card and sends the card identification number to the target satellite. The target satellite queries the core network's home location register network element through the inter-satellite link or satellite-to-ground link, and verifies whether the current card identification number has opened the satellite communication service on the core network side.
[0113] S52: If the core network is displayed as unactivated, the current access authentication fails.
[0114] S53: If the core network shows that the current card identification number has activated the satellite communication service, the core network generates a set of random numbers and sends them to the terminal device via the satellite.
[0115] S54: The terminal device receives the random number corresponding to the current card identification number, calculates and obtains a first authentication response, and returns it to the target satellite.
[0116] The terminal device receives the random number for the current card identification number and passes it to the Internet of Things card; the Internet of Things card calculates the first authentication response through the key (KI) stored on the card, and sends the card identification number and the first authentication response to the terminal device; the terminal device sends the card identification number and the first authentication response to the target satellite.
[0117] S55: The satellite receives the first authentication response sent by the terminal device, sends the card identification number and the first authentication response to the core network, the core network finds the key corresponding to the card identification number, and calculates the second authentication response with the same random number, and compares the first authentication response uploaded by the Internet of Things card with the second authentication response calculated by the core network.
[0118] If the first authentication response is equal to the second authentication response, the satellite communication authentication is successful, the terminal device can access the satellite communication signal, and the terminal device starts to communicate using the satellite network; if the first authentication response is not equal to the second authentication response, the satellite communication authentication fails, and the terminal device cannot access the satellite communication signal.
[0119] Figure 6 The following is a timing diagram of a satellite communication authentication method provided by the present disclosure. Figure 6 As shown, the method includes:
[0120] S601: The target satellite broadcasts a satellite communication signal to the terminal device.
[0121] S602: The terminal device obtains the switch status of the satellite communication service switch set in the Internet of Things card.
[0122] If the switch state of the satellite communication service switch is on, the terminal device can initiate satellite communication authentication to the core network.
[0123] S603: The terminal device requests the card identification number from the IoT card.
[0124] S604: The terminal device sends the card identification number to the target satellite.
[0125] S605: The target satellite queries the core network for the activation status of the satellite communication service corresponding to the card identification number.
[0126] The target satellite queries the core network's home location register network element through an inter-satellite link or a satellite-to-ground link, and verifies for the second time whether the current card identification number has activated the satellite communication service on the core network side.
[0127] S606: If the core network shows that the current card identification number has activated the satellite communication service, the core network generates a set of random numbers and sends them to the terminal device via the satellite.
[0128] The terminal device receives the random number for the current card identification number and passes it to the IoT card.
[0129] S607: The terminal device receives the random number for the current card identification number and sends it to the Internet of Things card.
[0130] S608: The IoT card calculates a first authentication response based on the random number and returns it to the target satellite.
[0131] The IoT card calculates a first authentication response using a key (KI) stored on the card, and sends the card identification number and the first authentication response to a terminal device; the terminal device sends the card identification number and the first authentication response to a target satellite.
[0132] S609: The satellite receives the first authentication response sent by the terminal device, and sends the card identification number and the first authentication response to the core network.
[0133] S610: The core network finds the key corresponding to the card identification number, and uses the same random number to calculate a second authentication response, and compares the first authentication response uploaded by the IoT card with the second authentication response calculated by the core network.
[0134] If the comparison is consistent, the authentication is successful and the terminal device can use the satellite network for communication.
[0135] Figure 7 The following is a schematic diagram of the structure of a satellite communication authentication system provided by the present disclosure. Figure 7 As shown, the system 700 includes: a terminal device 710 and an operator network access device 720;
[0136] The terminal device 710 is used to obtain the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device when a satellite communication signal is detected, and the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card;
[0137] When the switch is in the off state, refusing to receive the satellite communication signal;
[0138] The operator network access device 720 is used to return a service status change instruction to the terminal device based on the device parameters carried in the service status change request when receiving the service status change request for opening a satellite communication service.
[0139] In a possible embodiment, the system further includes:
[0140] Core network equipment;
[0141] Operator network access equipment is also used for:
[0142] When it is determined that the satellite communication service has been activated for the terminal device, parameters indicating the activation of the satellite communication service are sent to the core network device.
[0143] To ensure that the service activation information on the IoT card side is consistent with the service activation information on the core network side.
[0144] Core network equipment is also used for:
[0145] When the terminal device is disconnected from the ground network and it is determined based on parameters that the activation duration of the satellite communication service exceeds the preset duration, the control maintains the switch state of the satellite communication service switch in the on state until the terminal device is reconnected to the ground network, and sends a shutdown instruction to the operator's network access device to shut down the satellite communication service switch.
[0146] Specifically, the satellite communication service activated by the IoT card built into the terminal device may have a time limit for activation, and the activation time is managed on the operator's core network side. When the terminal device is disconnected from the ground network at this time (for example, in extreme environments such as deserts, forests, and oceans), and the satellite communication activation time exceeds the preset time limit, if the satellite communication network is disconnected, it may pose a threat to the terminal device user. It is necessary to keep the satellite communication service switch on, and when the terminal device can access the ground network again, a judgment is made on the core network side as to whether the satellite communication service is activated. If it is confirmed that the satellite communication service exceeds the activation time, an instruction to turn off the satellite communication service switch on the IoT card is issued through the ground network OTA method, and the satellite communication service switch is turned off in time to maintain the consistency of the service activation information of the IoT card and the service activation information on the core network side, so as to avoid the terminal device from initiating network connection requests to the satellite multiple times when the satellite communication service has expired.
[0147] Figure 8 The schematic diagram of the structure of a satellite communication authentication device provided by the present disclosure is as follows. Figure 8 As shown, the device 800 includes: an acquisition module 810 and a receiving module 820;
[0148] The acquisition module 810 is used to acquire the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device when the satellite communication signal is detected, and the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card;
[0149] The receiving module 820 is used to refuse to receive the satellite communication signal when the switch state is in the off state.
[0150] Optionally, the acquisition module 810 is used to:
[0151] Sending a service status change request for opening the satellite communication service to the operator network access device, wherein the service status change request carries the device parameters of the terminal device;
[0152] Receiving a service status change instruction returned by the operator network access device based on the device parameters;
[0153] The service status change instruction is parsed to obtain the switch status of the satellite communication service switch.
[0154] Optionally, the acquisition module 810 is used to:
[0155] In the case where the service status change instruction is a ciphertext, decrypting the service status change instruction to obtain a service status change plaintext instruction;
[0156] The service status change plain text instruction is parsed to obtain the switch status of the satellite communication service switch.
[0157] Optionally, the acquisition module 810 is used to:
[0158] Obtain the switch status of the satellite communication service switch from the sub-security domain of the Internet of Things card.
[0159] The present application also provides an electronic device to perform the above satellite communication authentication method. Fig. 9 It shows a schematic diagram of an electronic device provided by some embodiments of the present application. Fig. 9 As shown, the electronic device 90 includes: a processor 900, a memory 901, a bus 902 and a communication interface 903, wherein the processor 900, the communication interface 903 and the memory 901 are connected via the bus 902; the memory 901 stores a computer program that can be run on the processor 900, and when the processor 900 runs the computer program, the satellite communication authentication method provided in any of the aforementioned embodiments of the present application is executed.
[0160] The memory 901 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk storage. The communication connection between the device network element and at least one other network element is realized through at least one communication interface 903 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.
[0161] The bus 902 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 901 is used to store a program, and the processor 900 executes the program after receiving an execution instruction. The satellite communication authentication method disclosed in any implementation of the embodiment of the present application may be applied to the processor 900, or implemented by the processor 900.
[0162] The processor 900 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 900. The above processor 900 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a readily available programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor to be executed, or the hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 901, and the processor 900 reads the information in the memory 901 and completes the steps of the above method in combination with its hardware.
[0163] The electronic device provided in the embodiment of the present application and the satellite communication authentication method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, operated or implemented therein.
[0164] An embodiment of the present application also provides a computer-readable storage medium corresponding to the satellite communication authentication method provided in the aforementioned embodiment. The computer-readable storage medium shown may be a CD having a computer program stored thereon. When the computer program is run by a processor, it executes the satellite communication authentication method provided in any of the aforementioned embodiments.
[0165] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.
[0166] The computer-readable storage medium provided in the above-mentioned embodiment of the present application and the satellite communication authentication method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the method adopted, run or implemented by the application program stored therein.
[0167] The present application also provides a computer program product 1000. Fig.10 The computer program product carries a computer program 1001, and the instructions included in the program code can be used to execute the steps of the satellite communication authentication method described in the above method embodiment. For details, please refer to the above method embodiment, which will not be repeated here.
[0168] The computer program product may be implemented in hardware, software or a combination thereof. In one optional embodiment, the computer program product is implemented as a computer storage medium. In another optional embodiment, the computer program product is implemented as a software product, such as a software development kit (SDK).
[0169] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.
[0170] The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.
[0171] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.
[0172] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.
[0173] Various changes, substitutions, and modifications of the technology herein may be made without departing from the technology of the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the above processes, machines, manufactures, compositions of events, means, methods, and actions. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.
[0174] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
[0175] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.
Claims
1. A satellite communication authentication method, characterized in that: Applied to a terminal device, the method comprises: When a satellite communication signal is detected, obtaining a switch state of a satellite communication service switch set in the Internet of Things card of the terminal device, wherein the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card; When the switch is in the off state, reception of the satellite communication signal is rejected.
2. The method according to claim 1, characterized in that The obtaining the switch status of the satellite communication service switch set in the Internet of Things card of the terminal device includes: Sending a service status change request for opening the satellite communication service to the operator network access device, wherein the service status change request carries the device parameters of the terminal device; Receiving a service status change instruction returned by the operator network access device based on the device parameters; The service status change instruction is parsed to obtain the switch status of the satellite communication service switch.
3. The method according to claim 2, characterized in that The step of parsing the service status change instruction to obtain the switch status of the satellite communication service switch includes: In the case where the service status change instruction is a ciphertext, decrypting the service status change instruction to obtain a service status change plaintext instruction; The service status change plain text instruction is parsed to obtain the switch status of the satellite communication service switch.
4. The method according to claim 1, characterized in that: The obtaining the switch status of the satellite communication service switch set in the Internet of Things card of the terminal device includes: Obtain the switch status of the satellite communication service switch from the sub-security domain of the Internet of Things card.
5. An authentication system for satellite communication, characterized in that: include: Terminal equipment and operator network access equipment; The terminal device is used to execute the method according to any one of claims 1 to 4 above; The operator network access device is used to return a service status change instruction to the terminal device based on the device parameters carried in the service status change request when receiving the service status change request for opening a satellite communication service.
6. The system according to claim 5, characterized in that The system further comprises: Core network equipment; The operator network access device is also used for: When it is determined that the terminal device has activated the satellite communication service, sending a parameter indicating activation of the satellite communication service to the core network device; The core network device is also used for: When the terminal device is disconnected from the ground network and it is determined based on the parameters that the activation duration of the satellite communication service exceeds the preset duration, the switch state of the satellite communication service switch is controlled to be kept on until the terminal device is reconnected to the ground network, and a shutdown instruction for shutting down the satellite communication service switch is sent to the operator network access device.
7. An authentication device for satellite communication, characterized in that: include: An acquisition module, used to acquire the switch state of the satellite communication service switch set in the Internet of Things card of the terminal device when a satellite communication signal is detected, wherein the switch state is used to indicate whether the satellite communication service is currently activated for the Internet of Things card; The receiving module is used to refuse to receive the satellite communication signal when the switch is in the off state.
8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: The processor runs the computer program to implement the method according to any one of claims 1 to 4.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: The program is executed by a processor to implement the method according to any one of claims 1 to 4.
10. A computer program product, characterized in that The invention comprises a computer-readable code, or a non-volatile computer-readable storage medium carrying the computer-readable code. When the computer-readable code runs in a processor of an electronic device, the processor in the electronic device executes any one of claims 1 to 4.