A satellite communication data secure encryption transmission method, system and storage medium

Abstract

The present invention belongs to the technical field of data transmission security. The present invention provides a satellite communication data security encryption transmission method, system and storage medium. In a historical use cycle, historical key data is extracted from a historical key database, the historical key data is processed, and a historical penetration value is outputted. The historical penetration value is compared with a historical burst threshold to obtain a security key and a risk key. The security key is analyzed to obtain a penetration difference. A judgment is made based on the penetration difference to output a historical security report. The security key ranked first in the historical security report is selected as a use key. The security level of each key in the historical key database is comprehensively evaluated. The historical penetration values ​​corresponding to each historical key in the historical key database are compared with each other to output a historical security report, thereby providing data support for the subsequent reuse of the key.

Description

Technical Field

[0001] The present invention belongs to the technical field of data transmission security, and in particular to a satellite communication data security encryption transmission method, system and storage medium. Background Art

[0002] Satellite communication data secure encryption transmission methods mainly rely on advanced encryption technologies, which use mathematical or physical means to protect electronic information during transmission and in storage to prevent information leakage. Encryption technology converts the format or content of information so that unauthorized users cannot read or understand the original information.

[0003] In the prior art, the key is replaced regularly according to a preset time period. When a potential security threat is monitored or the key risk value reaches the key risk threshold, the key replacement mechanism is triggered. However, too high a frequency of key replacement will increase the risk of key leakage. Therefore, the problem of key leakage caused by too high a frequency of key replacement during data transmission is solved.

[0004] To this end, the present invention provides a satellite communication data secure encryption transmission method, system and storage medium. Summary of the invention

[0005] In order to make up for the deficiencies of the prior art, at least one technical problem raised in the background technology is solved.

[0006] The technical solution adopted by the present invention to solve its technical problem is:

[0007] A satellite communication data secure encryption transmission method, comprising:

[0008] Step 1: In the historical use cycle, historical key data is extracted from the historical key database. The historical key data includes the effective cracking time ratio and the effective cracking number ratio. The effective cracking time ratio and the effective cracking number ratio are processed to obtain the historical penetration value;

[0009] Step 2: Based on the historical penetration value, compare the historical penetration value with the historical burst threshold to obtain the security key and the risk key, analyze the security key to obtain the penetration difference, and make a judgment based on the penetration difference to output the historical security report, and select the security key ranked first in the historical security report as the use key;

[0010] Step 3: During the usage period, the usage period is divided into several usage sub-periods. When each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the threshold value to generate a replacement signal or an analysis signal;

[0011] Step 4: Based on the replacement signal, the keys are sorted according to the actual penetration values, and an actual security report is outputted. The use keys are replaced based on the actual security report, and the replaced use keys are applied to the next use sub-period;

[0012] Step 5: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value, and finally determine whether to replace the key in use according to the penetration change value. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated;

[0013] Step 6: When the usage cycle ends, the keys used during the usage cycle are marked as used keys. The number of times the used keys are used and the usage intervals during the usage cycle are processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys are screened out from all used keys, and the priority recommended keys are sorted according to the usage stability value. The priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle.

[0014] As a further solution of the present invention, the historical penetration value is obtained by:

[0015] Divide the historical usage period into several historical sub-periods, obtain the number of times the key was successfully cracked in each historical sub-period, and mark it as the effective cracking number;

[0016] Count the number of effective cracking times in all historical sub-periods and add them up to get the total number of effective cracking times;

[0017] Calculate the ratio of the total number of effective cracking times to the total number of cracking times to get the effective cracking times ratio, and mark it as ;

[0018] In the historical sub-period, obtain the time when the key is successfully cracked each time and mark it as the cracking time;

[0019] Calculate the ratio of the cracking time to the length of the historical sub-period to obtain the cracking time ratio;

[0020] In the historical usage cycle, all cracking time ratios are added and averaged to obtain the effective cracking time ratio, which is marked as ;

[0021] The effective cracking time is Compared with the number of effective cracking Substituting into the formula: , calculate the historical penetration value ,in, , Expressed as a preset scaling factor.

[0022] As a further solution of the present invention, the method of obtaining the key is as follows:

[0023] The historical penetration value is compared with the penetration threshold. The comparison process is as follows:

[0024] If the historical penetration value is greater than or equal to the penetration threshold, the historical key whose historical penetration value is greater than or equal to the penetration threshold has strong penetration capability, and the historical key with strong penetration capability is marked as a safe key;

[0025] Subtract the historical penetration value corresponding to the security key from the penetration threshold, and calculate the ratio with the penetration threshold to obtain the penetration difference;

[0026] Compare the penetration differences corresponding to all security keys, and rank them in descending order of the penetration differences to obtain a historical security ranking, and generate a historical security report;

[0027] The security key ranked first in the historical security report is selected as the key to be used.

[0028] As a further solution of the present invention, the actual penetration value is obtained by:

[0029] The effective cracking times ratio and effective cracking time ratio of the key in the sub-period of use are obtained and calculated to obtain the actual penetration value.

[0030] A further solution of the present invention is to obtain the actual penetration value of each key, and rank them in order from large to small to obtain an actual security report, select the key ranked first in the actual security report as a new usage key, replace the new usage key with the usage key to achieve the replacement of the usage key, and apply the replaced usage key to the next usage sub-period.

[0031] As a further solution of the present invention, the method for obtaining the penetration change value is:

[0032] The ranking of the used key in the actual security report and the ranking in the historical security report are obtained respectively, and the difference is processed, the absolute value of the difference is taken to obtain the ranking difference, and the ranking difference is processed by ratio with the maximum ranking difference to obtain the ranking change value, which is marked as PB;

[0033] Among them, the maximum ranking difference is obtained by subtracting 1 from the total number of keys;

[0034] In the actual security report, the actual penetration value of the key used is obtained and the actual penetration value of the key ranked first in the actual security report is subtracted, and the absolute value of the difference is taken to obtain the actual penetration difference, and the actual penetration difference is ratioed with the penetration threshold to obtain the penetration difference ratio, which is marked as TB;

[0035] The obtained ranking change value PB and penetration difference ratio TB are processed by data, and the formula is: The penetration change value TC is obtained, where z1 and z2 are both preset proportional coefficients.

[0036] As a further solution of the present invention, the penetration change value TC is compared with the penetration change threshold value;

[0037] If the penetration change value TC is greater than the penetration change threshold, a no-change signal is generated;

[0038] If the penetration change value TC is less than or equal to the penetration change threshold, a replacement confirmation signal is generated.

[0039] As a further solution of the present invention, a process of using a stable value to select a priority recommended key from all used keys based on the stable value is as follows:

[0040] Count the number of times the used key is used during the usage period, and perform a ratio process on the number of times the used key is used during the usage period and the total number of times the key is used during the usage period to obtain a usage ratio, which is marked as SY;

[0041] The total number of unused intervals of the used key in the usage period is counted, and the ratio is processed with the total number of key usages in the usage period to obtain the usage interval ratio, which is marked as JG;

[0042] The obtained used times ratio SY and used interval ratio JG are processed by the formula: The stable value WD is obtained, wherein q1 and q2 are both preset proportional coefficients;

[0043] The use stability value WD is compared with the use stability threshold value;

[0044] If the usage stability value WD is greater than the usage stability threshold, the used key is marked as a priority recommended key;

[0045] The priority recommended keys are sorted from large to small according to the usage stability values, and the priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle.

[0046] A satellite communication data security encryption transmission system, comprising:

[0047] Historical key processing module: extract historical key data from the historical key database during the historical use cycle. The historical key data includes the effective cracking time ratio and the effective cracking times ratio. The effective cracking time ratio and the effective cracking times ratio are processed to obtain the historical penetration value.

[0048] Historical key analysis module: Based on the historical penetration value, the historical penetration value is compared with the historical burst threshold to obtain the security key and the risk key, the security key is analyzed to obtain the penetration difference, and the historical security report is output based on the judgment of the penetration difference. The security key ranked first in the historical security report is selected as the key to be used;

[0049] Key replacement evaluation module: within the usage period, the usage period is divided into several usage sub-periods. When each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the threshold value to generate a replacement signal or analysis signal;

[0050] Key replacement determination module: based on the replacement signal, the keys are sorted according to the actual penetration value, the actual security report is output, the use key is replaced based on the actual security report, and the replaced use key is applied to the next use sub-period;

[0051] Key analysis and evaluation module: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value. According to the penetration change value, it is finally determined whether to replace the key in use. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated;

[0052] Key priority selection module: When the usage cycle ends, the keys used during the usage cycle will be marked as used keys. The number of times the used keys are used and the usage intervals during the usage cycle will be processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys will be screened out from all used keys, and the priority recommended keys will be sorted according to the usage stability value. The priority recommended key ranked first will be selected as the usage key at the beginning of the next usage cycle.

[0053] A computer-readable storage medium, wherein the computer program enables the computer to execute the satellite communication data secure encryption transmission method.

[0054] The beneficial effects of the present invention are as follows:

[0055] The present invention extracts historical key data from a historical key database during a historical use cycle, wherein the historical key data includes an effective cracking time ratio and an effective cracking number ratio, processes the effective cracking time ratio and the effective cracking number ratio, outputs a historical penetration value, compares the historical penetration value with a historical burst threshold based on the historical penetration value, obtains a security key and a risk key, analyzes the security key, obtains a penetration difference, makes a judgment based on the penetration difference, outputs a historical security report, selects the security key ranked first in the historical security report as the use key, comprehensively evaluates the security level of each key in the historical key database, compares the historical penetration values ​​corresponding to each historical key in the historical key database, outputs a historical security report, and thus provides data support for the subsequent reuse of the key; the present invention uses the historical key database to obtain a historical key data structure, and compares the historical penetration values ​​corresponding to each historical key in the historical key database, outputs a historical security report, and then provides data support for the subsequent reuse of the key; , divide the usage cycle into several usage sub-periods, and when each usage sub-period ends, obtain the ratio of the number of effective cracking times and the ratio of the effective cracking time of the usage key in the usage sub-period and perform calculation processing to obtain the actual penetration value, and compare it with the penetration threshold, generate a replacement signal or analysis signal, and sort the keys according to the actual penetration value based on the replacement signal, output to obtain an actual security report, replace the usage key based on the actual security report, and apply the replaced usage key to the next usage sub-period, obtain the usage stability value based on the analysis signal, and sort the priority recommended keys according to the usage stability value, and select the first-ranked priority recommended key as the usage key at the beginning of the next usage cycle, so as to timely replace the key with degraded performance by dynamically evaluating the penetration performance of the key, thereby solving the problem of key leakage caused by excessive key replacement frequency.

[0056] The present invention will be further described below in conjunction with the accompanying drawings.

[0057] Figure 1 It is a flow chart of the steps of a satellite communication data secure encryption transmission method of the present invention;

[0058] Figure 2 It is a module diagram for key security analysis in a satellite communication data security encryption transmission system of the present invention;

[0059] Figure 3 This is an example diagram of a satellite communication data secure encryption transmission medium according to the present invention. DETAILED DESCRIPTION

[0060] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the present invention is further explained below in conjunction with specific implementation methods.

[0061] Example 1

[0062] like Figure 1 - Figure 2As shown, a satellite communication data secure encryption transmission method according to an embodiment of the present invention includes:

[0063] Step 1: During the historical usage cycle, obtain the historical cracking data of the key, process and analyze the historical cracking data, and obtain the historical penetration value;

[0064] It should be noted that the historical usage period can be one month, two months or three months;

[0065] In some embodiments, the historical cracking data includes an effective cracking time ratio and an effective cracking times ratio. The effective cracking time ratio and the effective cracking times ratio are processed and output to obtain a historical penetration value. The specific process is as follows:

[0066] Divide the historical usage period into several historical sub-periods, obtain the number of times the key was successfully cracked in each historical sub-period, and mark it as the effective cracking number;

[0067] It should be noted that the historical usage period is divided by dividing the historical usage period into equal time intervals, thereby obtaining a number of historical sub-periods, and each historical sub-period has an equal time period;

[0068] Count the number of effective cracking times in all historical sub-periods and add them up to get the total number of effective cracking times;

[0069] Calculate the ratio of the total number of effective cracking times to the total number of cracking times to get the effective cracking times ratio, and mark it as ;

[0070] It should be noted that the total number of cracking attempts is the sum of the number of times the key has been successfully cracked and the number of times the key has failed to be cracked;

[0071] In the historical sub-period, obtain the time when the key is successfully cracked each time and mark it as the cracking time;

[0072] Calculate the ratio of the cracking time to the length of the historical sub-period to obtain the cracking time ratio;

[0073] In the historical usage cycle, all cracking time ratios are added and averaged to obtain the effective cracking time ratio, which is marked as ;

[0074] The effective cracking time is Compared with the number of effective cracking Substituting into the formula: , calculate the historical penetration value ,in, , Expressed as a preset scaling factor;

[0075] Understandably, historical penetration values The meaning is: a quantitative indicator of the key system's ability to resist cracking during the historical use cycle, reflecting the frequency of the key being effectively cracked and the relative length of time required for cracking during the historical use cycle. Specifically, the historical penetration value The larger the value is, the stronger the key's ability to resist cracking in its historical use cycle is, that is, the stronger its penetration capability is. On the contrary, the smaller the historical penetration value is, the stronger the key's penetration capability is. The smaller it is, the weaker the key's ability to resist cracking during its historical use period, that is, the weaker its penetration capability.

[0076] Step 2: Based on the historical penetration value, compare the historical penetration value with the historical burst threshold to obtain the security key and the risk key, analyze the security key to obtain the penetration difference, and make a judgment based on the penetration difference to output the historical security report, and select the security key ranked first in the historical security report as the use key;

[0077] In some embodiments, when the historical penetration value is obtained, the historical penetration value is compared with the penetration threshold, and the comparison process is as follows:

[0078] If the historical penetration value is greater than or equal to the penetration threshold, it means that the historical key has a strong ability to resist cracking during its historical use period, that is, it has a strong penetration capability. The historical key with a strong penetration capability is marked as a secure key.

[0079] If the historical penetration value is less than the penetration threshold, it means that the historical key has a weaker ability to resist cracking during its historical use period, that is, a weaker penetration capability. The historical key with the weaker penetration capability will be marked as a risky key.

[0080] Subtract the historical penetration value corresponding to the security key from the penetration threshold, and calculate the ratio with the penetration threshold to obtain the penetration difference;

[0081] It can be understood that the penetration difference value means: reflecting the relative difference between the historical penetration value corresponding to the security key in the historical database and the penetration threshold. Specifically, the larger the value, the higher the security level of the historical key. Conversely, the smaller the value, the lower the security level of the historical key.

[0082] Compare the penetration differences corresponding to all security keys, and rank them in descending order of the penetration differences to obtain a historical security ranking, and generate a historical security report;

[0083] Select the security key ranked first in the historical security report as the key to be used;

[0084] The specific implementation scheme of the embodiment of the present invention is as follows: in the historical use cycle, historical key data is extracted from the historical key database, wherein the historical key data includes an effective cracking time ratio and an effective cracking number ratio, the effective cracking time ratio and the effective cracking number ratio are processed, and a historical penetration value is outputted, based on the historical penetration value, the historical penetration value is compared with the historical burst threshold to obtain a security key and a risk key, the security key is analyzed to obtain a penetration difference, and a judgment is made based on the penetration difference to output a historical security report, and the security key ranked first in the historical security report is selected as the use key, thereby comprehensively evaluating the security level of each key in the historical key database by analyzing the frequency of effective cracking of each historical key in the historical key database during the historical use cycle and the relative length of time required for cracking, and comparing the historical penetration values ​​corresponding to each historical key in the historical key database with each other to output a historical security report, thereby providing data support for the subsequent reuse of the key.

[0085] Example 2

[0086] like Figure 1 - Figure 2 As shown, based on Example 1, a method for securely encrypting and transmitting satellite communication data according to an embodiment of the present invention includes:

[0087] Step 3: Within the usage cycle, the usage cycle is divided into several usage sub-periods. After each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the usage key within the usage sub-period are obtained and calculated to obtain the actual penetration value, and compared with the penetration threshold. If the actual penetration value is greater than the actual penetration threshold, a replacement signal is generated; if the actual penetration value is less than or equal to the actual penetration threshold, an analysis signal is generated;

[0088] Specifically, the effective cracking times ratio and effective cracking time ratio of the key in the sub-period of use are obtained and calculated to obtain the actual penetration value, wherein the actual penetration value is obtained in the same manner as the historical penetration value;

[0089] Step 4: Based on the replacement signal, the keys are sorted according to the actual penetration values, and an actual security report is outputted. The use keys are replaced based on the actual security report, and the replaced use keys are applied to the next use sub-period;

[0090] Specifically, the actual penetration value of each key is obtained, and the keys are ranked in descending order to obtain an actual security report, the key ranked first in the actual security report is selected as a new usage key, the new usage key is replaced with the usage key to achieve the replacement of the usage key, and the replaced usage key is applied to the next usage sub-period;

[0091] It should be noted that the replaced usage key is a new usage key;

[0092] Step 5: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value, and finally determine whether to replace the key in use according to the penetration change value. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated;

[0093] Specifically, the ranking of the used key in the actual security report and the ranking in the historical security report are obtained respectively, and difference processing is performed, the absolute value of the difference is taken to obtain the ranking difference, and the ranking difference is ratioed with the maximum ranking difference to obtain the ranking change value, which is marked as PB;

[0094] Among them, the maximum ranking difference is obtained by subtracting 1 from the total number of keys;

[0095] It should be noted that, no matter in the historical safety report or the actual safety report, the keys with the same historical penetration value or actual penetration value have the same ranking;

[0096] In the actual security report, the actual penetration value of the key used is obtained and the actual penetration value of the key ranked first in the actual security report is subtracted, and the absolute value of the difference is taken to obtain the actual penetration difference, and the actual penetration difference is ratioed with the penetration threshold to obtain the penetration difference ratio, which is marked as TB;

[0097] The obtained ranking change value PB and penetration difference ratio TB are processed by data, and the formula is: The penetration change value TC is obtained, wherein z1 and z2 are both preset proportional coefficients;

[0098] In some embodiments, the penetration change value TC is compared with a penetration change threshold;

[0099] If the penetration change value TC is greater than the penetration change threshold, a no-change signal is generated;

[0100] If the penetration change value TC is less than or equal to the penetration change threshold, a replacement confirmation signal is generated;

[0101] Step 6: When the usage cycle ends, the keys used in the usage cycle are marked as used keys, and the number of times the used keys are used and the usage intervals in the usage cycle are processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys are screened out from all used keys, and the priority recommended keys are sorted according to the usage stability value. The priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle.

[0102] Specifically, the number of times the used key is used in the use period is counted, and the number of times the used key is used in the use period is compared with the total number of times the key is used in the use period to obtain a used number ratio, which is marked as SY;

[0103] It should be noted that the total number of times a key is used within a usage period is equal to the total number of usage sub-periods within the usage period, because a usage key is applied to each usage sub-period;

[0104] The total number of unused intervals of the used key in the usage period is counted, and the ratio is processed with the total number of key usages in the usage period to obtain the usage interval ratio, which is marked as JG;

[0105] The obtained used times ratio SY and used interval ratio JG are processed by the formula: The stable value WD is obtained, wherein q1 and q2 are both preset proportional coefficients;

[0106] The use stability value WD is compared with the use stability threshold value;

[0107] If the usage stability value WD is greater than the usage stability threshold, the used key is marked as a priority recommended key;

[0108] If the usage stability value WD is less than or equal to the usage stability threshold, no operation is performed;

[0109] Sort the priority recommended keys from large to small according to the usage stability value, and select the first-ranked priority recommended key as the usage key at the beginning of the next usage cycle;

[0110] The specific implementation scheme of the embodiment of the present invention is as follows: within the usage cycle, the usage cycle is divided into several usage sub-periods. After each usage sub-period ends, the effective cracking number ratio and effective cracking time ratio of the usage key within the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the penetration threshold to generate a replacement signal or an analysis signal. Based on the replacement signal, the keys are sorted according to the actual penetration value, and an actual security report is output. The usage key is replaced based on the actual security report, and the replaced usage key is applied to the next usage sub-period. Based on the analysis signal, the usage stability value is obtained, and the priority recommended keys are sorted according to the usage stability value. The first-ranked priority recommended key is selected as the usage key at the beginning of the next usage cycle, so that the key with degraded performance is replaced in time by dynamically evaluating the penetration performance of the key, thereby solving the problem of key leakage caused by excessively high key replacement frequency.

[0111] Example 3

[0112] like Figure 1 - Figure 2As shown, based on Example 1 and Example 2, a satellite communication data secure encryption transmission system according to an embodiment of the present invention includes:

[0113] Historical key processing module: extract historical key data from the historical key database during the historical use cycle. The historical key data includes the effective cracking time ratio and the effective cracking times ratio. The effective cracking time ratio and the effective cracking times ratio are processed to obtain the historical penetration value.

[0114] Historical key analysis module: Based on the historical penetration value, the historical penetration value is compared with the historical burst threshold to obtain the security key and the risk key, the security key is analyzed to obtain the penetration difference, and the historical security report is output based on the judgment of the penetration difference. The security key ranked first in the historical security report is selected as the key to be used;

[0115] Key replacement evaluation module: within the usage period, the usage period is divided into several usage sub-periods. When each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the threshold value to generate a replacement signal or analysis signal;

[0116] Key replacement determination module: based on the replacement signal, the keys are sorted according to the actual penetration value, the actual security report is output, the use key is replaced based on the actual security report, and the replaced use key is applied to the next use sub-period;

[0117] Key analysis and evaluation module: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value. According to the penetration change value, it is finally determined whether to replace the key in use. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated;

[0118] Key priority selection module: When the usage cycle ends, the keys used during the usage cycle will be marked as used keys. The number of times the used keys are used and the usage intervals during the usage cycle will be processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys will be screened out from all used keys, and the priority recommended keys will be sorted according to the usage stability value. The priority recommended key ranked first will be selected as the usage key at the beginning of the next usage cycle.

[0119] Example 4

[0120] like Figure 3 As shown, this embodiment provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented:

[0121] Step 1: In the historical use cycle, historical key data is extracted from the historical key database. The historical key data includes the effective cracking time ratio and the effective cracking number ratio. The effective cracking time ratio and the effective cracking number ratio are processed to obtain the historical penetration value;

[0122] Step 2: Based on the historical penetration value, compare the historical penetration value with the historical burst threshold to obtain the security key and the risk key, analyze the security key to obtain the penetration difference, and make a judgment based on the penetration difference to output the historical security report, and select the security key ranked first in the historical security report as the use key;

[0123] Step 3: During the usage period, the usage period is divided into several usage sub-periods. When each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the threshold value to generate a replacement signal or an analysis signal;

[0124] Step 4: Based on the replacement signal, the keys are sorted according to the actual penetration values, and an actual security report is outputted. The use keys are replaced based on the actual security report, and the replaced use keys are applied to the next use sub-period;

[0125] Step 5: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value, and finally determine whether to replace the key in use according to the penetration change value. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated;

[0126] Step 6: When the usage cycle ends, the keys used during the usage cycle are marked as used keys. The number of times the used keys are used and the usage intervals during the usage cycle are processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys are screened out from all used keys, and the priority recommended keys are sorted according to the usage stability value. The priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle.

[0127] The above shows and describes the basic principles, main features and advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A satellite communication data secure encryption transmission method, characterized in that: include: Step 1: In the historical use cycle, historical key data is extracted from the historical key database. The historical key data includes the effective cracking time ratio and the effective cracking number ratio. The effective cracking time ratio and the effective cracking number ratio are processed to obtain the historical penetration value; The historical penetration value is obtained as follows: Divide the historical usage period into several historical sub-periods, obtain the number of times the key was successfully cracked in each historical sub-period, and mark it as the effective cracking number; Count the number of effective cracking times in all historical sub-periods and add them up to get the total number of effective cracking times; Calculate the ratio of the total number of effective cracking times to the total number of cracking times to get the effective cracking times ratio, and mark it as ; In the historical sub-period, obtain the time when the key is successfully cracked each time and mark it as the cracking time; The cracking time is calculated by comparing the cracking time with the length of the historical sub-period to obtain the cracking time ratio, where the total number of cracking times is the sum of the number of times the key is successfully cracked and the number of times the key is failed to be cracked; In the historical usage cycle, all cracking time ratios are added and averaged to obtain the effective cracking time ratio, which is marked as ; The effective cracking time is Compared with the number of effective cracking Substituting into the formula: , calculate the historical penetration value ,in, , Expressed as a preset scaling factor; Step 2: Based on the historical penetration value, compare the historical penetration value with the penetration threshold to obtain the security key and the risk key, analyze the security key to obtain the penetration difference, and make a judgment based on the penetration difference to output the historical security report, and select the security key ranked first in the historical security report as the use key; Subtract the historical penetration value corresponding to the security key from the penetration threshold, and calculate the ratio with the penetration threshold to obtain the penetration difference; Compare the penetration differences corresponding to all security keys, and rank them in descending order of the penetration differences to obtain a historical security ranking, and generate a historical security report; Select the security key ranked first in the historical security report as the key to be used; Step 3: During the usage period, the usage period is divided into several usage sub-periods. After each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the usage key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the penetration threshold to generate a replacement signal or analysis signal; Step 4: Based on the replacement signal, the keys are sorted according to the actual penetration values, and an actual security report is outputted. The use keys are replaced based on the actual security report, and the replaced use keys are applied to the next use sub-period; The actual penetration value of each key is obtained, and the keys are ranked in descending order to obtain an actual security report, the key ranked first in the actual security report is selected as a new usage key, the new usage key is replaced with the usage key to achieve the replacement of the usage key, and the replaced usage key is applied to the next usage sub-period; Step 5: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value, and finally determine whether to replace the key in use according to the penetration change value. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated; The way to obtain the penetration change value is: The ranking of the used key in the actual security report and the ranking in the historical security report are obtained respectively, and the difference is processed, the absolute value of the difference is taken to obtain the ranking difference, and the ranking difference is processed by ratio with the maximum ranking difference to obtain the ranking change value, which is marked as PB, where the maximum ranking difference is obtained by subtracting 1 from the total number of keys; In the actual security report, the actual penetration value of the key used is obtained and the actual penetration value of the key ranked first in the actual security report is subtracted, and the absolute value of the difference is taken to obtain the actual penetration difference, and the actual penetration difference is ratioed with the penetration threshold to obtain the penetration difference ratio, which is marked as TB; The obtained ranking change value PB and penetration difference ratio TB are processed by data, and the formula is: The penetration change value TC is obtained, wherein z1 and z2 are both preset proportional coefficients; Compare the penetration change value TC with the penetration change threshold; If the penetration change value TC is greater than the penetration change threshold, a no-change signal is generated; If the penetration change value TC is less than or equal to the penetration change threshold, a replacement confirmation signal is generated; Step 6: When the usage cycle ends, the keys used in the usage cycle are marked as used keys, and the number of times the used keys are used and the usage intervals in the usage cycle are processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys are screened out from all used keys, and the priority recommended keys are sorted according to the usage stability value. The priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle. Using stable values, the process of selecting the preferred key from all used keys based on the stable value is as follows: Count the number of times the used key is used during the usage period, and perform a ratio process on the number of times the used key is used during the usage period and the total number of times the key is used during the usage period to obtain a usage ratio, which is marked as SY; The total number of unused intervals of the used key in the usage period is counted, and the ratio is processed with the total number of key usages in the usage period to obtain the usage interval ratio, which is marked as JG; The obtained used times ratio SY and used interval ratio JG are processed by the formula: The stable value WD is obtained, wherein q1 and q2 are both preset proportional coefficients; The use stability value WD is compared with the use stability threshold value; If the usage stability value WD is greater than the usage stability threshold, the used key is marked as a priority recommended key; The priority recommended keys are sorted from large to small according to the usage stability values, and the priority recommended key ranked first is selected as the usage key at the beginning of the next usage cycle.

2. A satellite communication data secure encryption transmission method according to claim 1, characterized in that: In step 2, the historical penetration value is compared with the penetration threshold. The comparison process is as follows: If the historical penetration value is greater than or equal to the penetration threshold, the historical key whose historical penetration value is greater than or equal to the penetration threshold has strong penetration capability, and the historical key with strong penetration capability is marked as a secure key.

3. A satellite communication data secure encryption transmission system, characterized in that: Executing a satellite communication data secure encryption transmission method as claimed in claim 1 or 2, comprising: Historical key processing module: extract historical key data from the historical key database during the historical use cycle. The historical key data includes the effective cracking time ratio and the effective cracking times ratio. The effective cracking time ratio and the effective cracking times ratio are processed to obtain the historical penetration value. Historical key analysis module: Based on the historical penetration value, the historical penetration value is compared with the penetration threshold to obtain the security key and the risk key, the security key is analyzed to obtain the penetration difference, and the historical security report is output based on the judgment of the penetration difference. The security key ranked first in the historical security report is selected as the key to be used; Key replacement evaluation module: within the usage period, the usage period is divided into several usage sub-periods. When each usage sub-period ends, the effective cracking times ratio and effective cracking time ratio of the key in the usage sub-period are obtained and calculated to obtain the actual penetration value, which is compared with the penetration threshold to generate a replacement signal or analysis signal; Key replacement determination module: based on the replacement signal, the keys are sorted according to the actual penetration value, the actual security report is output, the use key is replaced based on the actual security report, and the replaced use key is applied to the next use sub-period; Key analysis and evaluation module: Based on the analysis signal, the actual security report is compared and analyzed with the historical security report to obtain the penetration change value. According to the penetration change value, it is finally determined whether to replace the key in use. If so, a replacement confirmation signal is generated, and the key in use is replaced based on the actual security report; if not, a non-replacement signal is generated; Key priority selection module: When the usage cycle ends, the keys used during the usage cycle will be marked as used keys. The number of times the used keys are used and the usage intervals during the usage cycle will be processed and analyzed to obtain a usage stability value. Based on the usage stability value, priority recommended keys will be screened out from all used keys, and the priority recommended keys will be sorted according to the usage stability value. The priority recommended key ranked first will be selected as the usage key at the beginning of the next usage cycle.

4. A computer-readable storage medium, characterized in that: The computer program enables the computer to execute the satellite communication data secure encryption transmission method as described in claim 1 or 2.

Images