Hot standby switching method of satellite ground cipher machine and cipher machine

Abstract

The invention provides a hot standby switching method of a satellite ground cipher machine and the cipher machine. The method comprises the steps that a first ground cipher machine receives first data information sent by ground equipment; the first data information is analyzed and calculated according to a preset key strategy to obtain first return data, and the first return data is returned to the satellite cipher machine through the special router and the ground equipment after the key strategy is packaged; under the condition that the first ground cipher machine breaks down and the detection message sent by the second ground cipher machine is not replied within the preset time, switching to the second ground cipher machine is carried out, and the second ground cipher machine receives second data information forwarded by the ground equipment through the special router and sends the second data information to the ground equipment; and performing operation processing on the second data information according to a preset key strategy to obtain second return data, and returning the second return data to the satellite cipher machine through the special router and the ground equipment. According to the scheme, the hot switching function of the first ground cipher machine and the second ground cipher machine can be achieved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a hot standby switching method for a satellite ground cryptographic machine and a cryptographic machine. Background Art

[0002] The satellite ground cryptographic machine interacts with the onboard security equipment to realize the encryption and decryption function of user business data. The ground cryptographic machine is connected to the satellite-specific router with the protocol stack data link layer forwarding function upstream, and the two devices exchange data through private protocol calls. The cryptographic machine does not need to parse the application layer protocol, and realizes data encryption and decryption through information such as MAC (media access control) address, VLAN (virtual local area network) information and key policy. In order to improve the performance of data encryption and decryption, the ground cryptographic machine realizes high-performance data throughput and processing at the user level based on DPDK (Data Plane Development Kit), and combines with dedicated cryptographic chips to improve the overall work efficiency of cryptographic applications.

[0003] Abnormal failures occur in the operation of cryptographic devices, making it impossible to perform business cryptographic functions normally. Therefore, dual-machine hot standby function is required. When necessary, the backup cryptographic machine can actively hot-swap the data and functions of the main cryptographic machine, so that users can operate the equipment without feeling the failure. The dual-machine hot standby operation of most devices is based on keepalived (software for detecting server status) of the IP address. Keepalived works in the network layer, transport layer and application layer of the TCP / IP protocol stack. It detects the failure of the main cryptographic machine and switches it by sending ICMP (a sub-protocol of the TCP / IP protocol family, mainly used to transmit control messages between the IP main cryptographic machine and the router) data packets or port scanning technology.

[0004] The ground cryptographic machine is developed based on the DPDK data plane kit, and the business data is processed at the second layer of the network, which does not involve IP address and port settings or application layer protocol processing. In the existing technology, the main and backup cryptographic machines based on DPDK cannot receive business data at the same time; the main and backup cryptographic machines based on MAC addresses cannot be effectively detected; the data synchronization and hot switching between the main and backup cryptographic machines based on MAC addresses are not reliable enough. Summary of the invention

[0005] The technical problem to be solved by the present invention is to provide a hot standby switching method and a cryptographic machine for a satellite ground cryptographic machine, so as to realize the hot switching function of the main and standby ground cryptographic machines communicating with the satellite cryptographic machine.

[0006] In order to solve the above technical problems, the technical solution of the present invention is as follows: A hot standby switching method for a satellite ground cryptographic machine is applied to a first ground cryptographic machine, the method comprising: The first ground cryptographic machine receives first data information sent by the ground device through a dedicated router, wherein the first data information is sent by the satellite cryptographic machine to the ground device; The first ground cryptographic machine parses the first data information and performs operations according to a preset key strategy to obtain first return data, and returns the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronizes the key strategy with the second ground cryptographic machine; wherein the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; When the first ground cryptographic machine fails and does not reply to the detection message of the second ground cryptographic machine within the preset time, it switches to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and processes the second data information according to the preset key strategy to obtain second return data, and returns it to the satellite cryptographic machine through the dedicated router and the ground equipment; the second data information is sent by the satellite cryptographic machine to the ground equipment.

[0007] Optionally, the hot standby switching method of the satellite ground cryptographic machine also includes: The first ground cryptographic machine receives the active detection message sent by the second ground cryptographic machine through the active and standby detection ports; The first ground cryptographic machine returns a detection response message to the second ground cryptographic machine based on the active detection message.

[0008] Optionally, when the first ground cryptographic machine fails and does not reply to the detection message of the second ground cryptographic machine within a preset time, switching to the second ground cryptographic machine includes: When the first ground cryptographic machine detects a fault in its own network card through the primary and standby detection ports, it is determined that the first ground cryptographic machine has a fault, and a fault message is sent to the second ground cryptographic machine; If there is no reply to the detection message of the second ground cipher machine within the preset time, switch to the second ground cipher machine.

[0009] Optionally, the hot standby switching method of the satellite ground cryptographic machine also includes: When the communication status of the first ground cryptographic machine is restored, a detection response message is returned to the second ground cryptographic machine.

[0010] Optionally, the primary and backup detection ports of the first ground cryptographic machine are communicatively connected to the second ground cryptographic machine through a dedicated router; or, the network card directly connected to the primary and backup detection ports of the first ground cryptographic machine is communicatively connected to the second ground cryptographic machine; the first ground cryptographic machine and the second ground cryptographic machine receive data based on the data link layer MAC address of the data plane development kit, and the first ground cryptographic machine and the second ground cryptographic machine have the same virtual LAN label.

[0011] Optionally, the hot standby switching method of the satellite ground cryptographic machine also includes: The first ground cryptographic machine receives the target key policy sent by the second ground cryptographic machine; The local preset key policy is updated according to the target key policy.

[0012] An embodiment of the present invention further provides a hot standby switching method of a satellite ground cryptographic machine, which is applied to a second ground cryptographic machine that is communicatively connected to the first ground cryptographic machine via a dedicated link, and the method comprises: When the first ground cryptographic machine fails and does not reply to the detection message within a preset time, the second ground cryptographic machine receives the second data information forwarded by the ground device through the dedicated router; The second ground cipher machine processes the second data information according to a preset key strategy to obtain second return data, and returns the second return data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent by the satellite cipher machine to the ground equipment.

[0013] An embodiment of the present invention further provides a first ground cryptographic machine, comprising: A transceiver module, used for receiving first data information sent by a ground device through a dedicated router, wherein the first data information is sent by a satellite cryptographic machine to the ground device; A processing module is used to parse the first data information and perform operations according to a preset key strategy to obtain first return data, and then return the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronize the key strategy with a second ground cryptographic machine; wherein, the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; when the first ground cryptographic machine fails and does not reply to the detection message within a preset time, it switches to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and performs operations on the second data information according to the preset key strategy to obtain second return data, and returns the second return data to the satellite cryptographic machine through a dedicated router and ground equipment; the second data information is sent from the satellite cryptographic machine to the ground equipment.

[0014] An embodiment of the present invention further provides a second ground cryptographic machine, comprising: A transceiver module, used for receiving the second data information forwarded by the ground device through the dedicated router when the first ground cipher machine fails and does not reply to the detection message within a preset time; The processing module is used to perform calculations on the second data information according to a preset key strategy to obtain second return data, and return the second data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent from the satellite cipher machine to the ground equipment.

[0015] An embodiment of the present invention further provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the method described above.

[0016] The above solution of the present invention includes at least the following beneficial effects: In the above scheme of the present invention, the first ground cryptographic machine receives the first data information sent by the ground equipment through the dedicated router, and the first data information is sent by the satellite cryptographic machine to the ground equipment; the first ground cryptographic machine parses the first data information and performs operations according to the preset key strategy to obtain the first return data, and encapsulates the key strategy and returns it to the satellite cryptographic machine through the dedicated router and the ground equipment; and synchronizes the key strategy with the second ground cryptographic machine; wherein the second ground cryptographic machine is connected to the ground equipment through the dedicated router and is connected to the first ground cryptographic machine through a dedicated link; when the first ground cryptographic machine fails and does not reply to the detection message within the preset time, the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and performs operations on the second data information according to the preset key strategy to obtain the second return data, and returns it to the satellite cryptographic machine through the dedicated router and the ground equipment. Thus, the hot switching function of the main and standby satellite ground cryptographic machines is realized. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flow chart of a hot standby switching method of a satellite ground cryptographic machine of the present invention; Figure 2 This is a schematic diagram of the main and standby communication structure of the cipher machine; Figure 3 This is a schematic diagram of the detection of the primary and backup cipher machines based on the router method; Figure 4 This is a schematic diagram of the detection of the main and backup cryptographic machines based on the direct connection method of the network card; Figure 5 This is a schematic diagram of the hot switching process of the main and standby cryptographic machines. DETAILED DESCRIPTION

[0018] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0019] like Figure 1 As shown, an embodiment of the present invention provides a hot standby switching method for a satellite ground cryptographic machine, which is applied to a first ground cryptographic machine, and the method includes: Step 11, a first ground cryptographic machine receives first data information sent by a ground device through a dedicated router, wherein the first data information is sent by a satellite cryptographic machine to the ground device; Step 12: the first ground cryptographic machine parses the first data information and performs operations according to a preset key strategy to obtain first return data, and returns the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronizes the key strategy with the second ground cryptographic machine; wherein the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; Step 13, when the first ground cryptographic machine fails and does not reply to the detection message within the preset time, switch to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and processes the second data information according to the preset key strategy to obtain second return data, and returns it to the satellite cryptographic machine through the dedicated router and the ground equipment; the second data information is sent by the satellite cryptographic machine to the ground equipment.

[0020] In this embodiment of the present invention, the satellite ground cryptographic machine interacts with the onboard security device to implement the encryption and decryption functions of user service data. The above method can realize the main and standby hot switching problem of the ground cryptographic machine during operation. Specifically, the first ground cryptographic machine (main cryptographic machine) and the second ground cryptographic machine (standby cryptographic machine) realize high-performance data throughput and processing based on the user state layer of DPDK.

[0021] The first ground cryptographic machine and the second ground cryptographic machine are connected to the satellite-dedicated router to realize the forwarding of the second layer data of the network protocol stack. According to the demand rules, the user data is transmitted and processed based on the MAC address at the data link layer, without the need for IP address and port settings.

[0022] The cipher machine and the backup cipher machine are hot-swapped based on the MAC address. The backup cipher machine needs to automatically start receiving user data forwarded by the dedicated router according to the switching trigger point.

[0023] To avoid router settings or manual intervention, the backup cipher needs to turn on the promiscuous mode and receive all data packets passing through the network card, including data sent by the router to the primary cipher. The primary and backup ciphers use a dedicated link to detect the status information of the primary cipher in real time to implement the trigger mechanism for the primary-backup switch. When the primary and backup are connected to the router port at the same time, in order to reduce broadcast network violence and conflicts, the VLAN settings of the network cards of the primary and backup ciphers need to be performed through DPDK, and the VLAN hardware offload function needs to be configured to reduce the additional load on the CPU. The VLAN setting can divide a physical LAN into multiple logically independent virtual LANs. The broadcast domain is isolated so that the detection link between the primary and backup ciphers is not affected by other networks, making it more independent and reliable, and improving the performance and availability of the network.

[0024] like Figure 2 As shown, the satellite cryptographic machine, the first ground cryptographic machine and the second ground cryptographic machine are simultaneously connected to the ground dedicated router. The first ground cryptographic machine performs encryption and decryption operations on the user's data information. The second ground cryptographic machine starts the data encryption and decryption operation after discovering that the first ground cryptographic machine is faulty. The first ground cryptographic machine and the second ground cryptographic machine send detection information through a dedicated link to detect whether the first ground cryptographic machine is faulty in real time, thereby determining whether the second ground cryptographic machine takes over the service function of the first ground cryptographic machine.

[0025] Dedicated routers can set VLAN information to isolate network communications and prevent flooding from affecting other network nodes. The password management system connects to the router and sends key policies and management instructions to the cipher machine. The user data device is forwarded to the cipher machine through a dedicated router for encryption or decryption operations. After completion, the communication ground communication device sends it to the satellite system, and finally the satellite cryptographic device decrypts and forwards it to other applications.

[0026] The specific implementation process of the above method is as follows: 1. The first ground cipher machine and the second ground cipher machine receive data (based on MAC address and promiscuous mode); 2. The first ground cryptographic machine is developed based on the DPDK data plane suite. Business data is processed at the second layer of the network, and does not involve IP address and port settings or application layer protocol processing. The user's business data passes through a dedicated ground router, sets the source MAC address and destination MAC address, and the communication link is transmitted based on the MAC address.

[0027] The dedicated router determines the destination MAC address of the data packet as the primary cipher machine based on the demand rules and performs port forwarding through MAC table retrieval.

[0028] The first ground cryptographic machine receives the business data, parses it, and performs cryptographic operations according to the pre-set key policy. After completion, the source MAC and destination MAC addresses are exchanged, and the key policy is encapsulated and returned through a dedicated router.

[0029] After the second ground cipher machine is started, it does not receive business data by default. When the first ground cipher machine is abnormal through detecting data packets, it automatically turns on the network card promiscuous mode and receives all data packets passing through the network card, including data not sent to this machine. It receives the user data forwarded by the router to the first ground cipher machine, performs cryptographic operations, and sends it to the dedicated router according to the MAC address rules of the first ground cipher machine after completion.

[0030] DPDK supports setting the promiscuous mode of the network card. Enabling promiscuous mode allows the network card to receive all data streams passing through it, regardless of whether the destination MAC is itself. The default network card is in non-promiscuous mode, which can only receive data with its own destination address, or receive broadcast data packets in broadcast mode, and other data packets are discarded. The second ground cipher machine is to receive the second-layer data packets of the router, and the destination MAC address is not the local machine. The network card promiscuous mode needs to be enabled to receive and send data from the first ground cipher machine to achieve hot switching function.

[0031] In an optional embodiment of the present invention, the hot standby switching method of the satellite ground cryptographic machine further includes: Step 14, the first ground cryptographic machine receives the active detection message sent by the second ground cryptographic machine through the primary and standby detection ports; Step 15: The first ground cryptographic machine returns a detection response message to the second ground cryptographic machine based on the first detection message.

[0032] In an optional embodiment of the present invention, in step 13, when the first ground cryptographic machine fails and does not reply to the detection message of the second ground cryptographic machine within a preset time, switching to the second ground cryptographic machine includes: When the first ground cryptographic machine detects a fault in its own network card through the primary and standby detection ports, it is determined that the first ground cryptographic machine has a fault, and a fault message is sent to the second ground cryptographic machine; If there is no reply to the detection message of the second ground cipher machine within the preset time, switch to the second ground cipher machine.

[0033] In an optional embodiment of the present invention, the hot standby switching method of the satellite ground cryptographic machine further includes: Step 16: When the communication status of the first ground cryptographic machine is restored, a detection response message is returned to the second ground cryptographic machine.

[0034] In this embodiment, an independent detection port is set between the first ground cryptographic machine and the second ground cryptographic machine, and only the detection data is transmitted based on the MAC address.

[0035] There are two detection connection methods: dedicated router-based connection and network card-based direct connection.

[0036] When the primary and backup detection ports are connected to the router, data link layer forwarding is performed through the mapping of MAC addresses and ports. In order to reduce the second-layer network broadcast riots and conflicts, VLAN information needs to be set to isolate the communication within the virtual private LAN from other networks. DPDK supports setting VLAN and adding or removing VLAN tags in the packet processing process. VLAN uses tags to identify the virtual network to which the data packet belongs, and DPDK can enable the VLAN offload function, which is executed by the hardware offload function of the network card to reduce the additional load on the CPU.

[0037] In this embodiment, the first ground cryptographic machine has the function of actively triggering the detection of the state of the service port of the machine. When the first ground cryptographic machine actively triggers the detection that the service port is in the down (fault) state, after the attempt fails to go up (online or recover), the first ground cryptographic machine actively sends the state fault information to the second ground cryptographic machine, so that the second ground cryptographic machine enters the hot switching process.

[0038] The second ground cipher machine detects whether the state of the first ground cipher machine is abnormal for N seconds (for example, 1 second). The first ground cipher machine receives the detection request information and returns to normal state. When the second ground cipher machine does not receive a response from the first ground cipher machine within a predetermined timeout, the second ground cipher machine enters the hot switching process.

[0039] In the above embodiment, if Figure 3 The primary and standby detection ports of the first ground cryptographic machine are connected to the second ground cryptographic machine through a dedicated router; or Figure 4 As shown, the network card directly connected to the primary and backup detection ports of the first ground cryptographic machine is communicatively connected to the second ground cryptographic machine.

[0040] The first ground cryptographic machine and the second ground cryptographic machine poll and receive data based on the data link layer MAC address of the data plane development kit, and the first ground cryptographic machine and the second ground cryptographic machine have the same virtual LAN tag.

[0041] In this embodiment, the first ground cryptographic machine (main cryptographic machine) receives key policy data or management instructions from the management system during normal operation, saves and processes them, and sends the data to the second ground cryptographic machine (backup cryptographic machine) in real time to ensure that the key policy and management instructions of the backup cryptographic machine after hot switching are synchronized with the main cryptographic machine. The backup cryptographic machine is pre-configured with the MAC address of the main cryptographic machine, and can normally receive the policy data or management instructions of the main cryptographic machine. After verification, it is saved without processing.

[0042] After the standby cipher machine performs hot switching, it turns on the promiscuous mode and normally receives and processes the key policy data or management instructions. When the main cipher machine returns to normal state, the standby cipher machine immediately sends the received management data and key policy to the main cipher machine to ensure that the key policy data or management instructions during the operation of the main cipher machine and the standby cipher machine are synchronized.

[0043] Active / standby hot switching is the hot switching between the active and standby machines, which can be performed automatically according to the triggering reason without restarting the equipment or manual intervention, so that users can feel the active / standby operation. The triggering point is that the active cipher machine actively triggers the detection of abnormality of the service port of the machine, or the standby cipher machine actively detects abnormality of the whole machine status of the active cipher machine.

[0044] When performing hot switching, the backup cipher machine starts the network card promiscuous mode, receives the user data forwarded to the main cipher machine by the dedicated router, and performs cryptographic operations. After completion, it is forwarded to the router according to the address rules of the main cipher machine.

[0045] After the main cipher machine is restored, the backup cipher machine synchronizes the policy data to the main cipher machine, turns off the network card promiscuous mode, stops receiving user data, and the main cipher machine receives and processes user data normally.

[0046] based on Figure 3 and Figure 4 The communication mode shown, the detection operation mode between the main cipher machine and the backup cipher machine is as follows: Active triggering of the main cipher machine: The main cipher machine program actively triggers and detects the status of the local service port. When the port status is abnormal, the main cipher machine sends a fault message through the detection port, and the standby cipher machine enters the hot switching process.

[0047] Active detection by the backup cipher machine: The backup cipher machine program periodically sends detection data packets to the main cipher machine through the detection port. If the backup cipher machine does not respond to the detection packet from the main cipher machine within the time limit, the backup cipher machine determines that the main cipher machine is abnormal and enters the hot switching process.

[0048] The service port and detection port of the master and backup cryptographic machines operate independently. The detection port can be forwarded based on the router or based on the network card direct connection. When forwarding based on the router, in order to reduce network broadcast riots and conflicts, VLAN needs to be configured so that the detection link between the master and backup cryptographic machines is not affected by other networks and the virtual private LAN operates, thereby increasing the link performance and reliability. Based on the network card direct connection communication, the detection physical link is independent and forwarded directly through the MAC address of the master and backup cryptographic machines, which is not affected by other networks, making the detection function of the master and backup cryptographic machines more stable and reliable.

[0049] In an optional embodiment of the present invention, the hot standby switching method of the satellite ground cryptographic machine further includes: Step 17, the first ground cryptographic machine receives the target key policy sent by the second ground cryptographic machine; Step 18: Update the local preset key policy according to the target key policy.

[0050] like Figure 5 As shown, it is the implementation process of a specific embodiment of the present invention: Connect the service ports of the main cipher machine and the backup cipher machine to the dedicated ground router, and connect the user service system equipment and management system equipment to a port of the router.

[0051] If you choose the router detection method, connect the primary and backup cipher machine detection ports to the dedicated router port, and the router configuration needs to configure the two detection ports to pass the VLAN ID. If you choose the network card direct connection detection method, connect the primary and backup cipher machine detection ports directly to each other without configuring VLAN.

[0052] 1. Start the main and backup cryptographic machines, and poll and receive data based on the DPDK data link layer MAC address. No IP address configuration is required. After the main and backup cryptographic machines are successfully started, they are configured with the main and backup identification, VLAN information, MAC address, port and other information. DPDK enables VLAN hardware offloading, and the main and backup machines have the same VLAN Tag.

[0053] 2. The master cipher machine starts to receive business data, management data, key policy data and detection data. The dedicated router configures the MAC address and port of the master cipher machine to forward user data and management data, and forwards detection information according to the VLAN configuration of the detection port of the master and standby cipher machines. The management data and key policy data received by the master cipher machine are sent to the standby cipher machine for data synchronization during hot switching of the cipher machines. The master cipher machine encrypts and decrypts user data according to the key policy. After the cryptographic operation is completed, the source and destination MAC addresses are exchanged and forwarded to the destination device through the dedicated router.

[0054] 3. The master cipher machine starts to actively trigger the detection port status. The master cipher machine program actively detects whether the link status of the local service port is up or down. When it is in the down state, after multiple attempts to up fail, it means that the local service port is abnormal and cannot send or receive service data. At this time, the master cipher machine triggers to send fault information to the detection port. When the service port is up, sending and receiving data is normal, and there is no need to send status information to the detection port.

[0055] 4. The standby cipher machine starts the function of detecting the status of the main cipher machine. The standby cipher machine sends status detection information to the main cipher machine through the detection port every 1 second, and the main cipher machine responds to the detection packet in time. If configured as a router, a detection packet with VLAN information is sent to prevent network flood storms from affecting network nodes. 1) When the standby cipher machine detection program times out and does not receive a reply from the main cipher machine, the main cipher machine is judged to be abnormal. 2) When the standby cipher machine receives its own abnormal detection packet actively sent by the main cipher machine, the main cipher machine is judged to be abnormal.

[0056] 5. After the backup cipher machine determines that the main cipher machine is abnormal through detection information, it immediately starts the process operation of the backup cipher machine taking over the main cipher machine. 1) The backup cipher machine turns on the promiscuous mode of the network card and receives all data packets passing through the network card, including data that is not sent to the local machine. 2) After turning it on, the backup cipher machine can receive business data forwarded by the router to the main cipher machine, and the destination MAC address is the main cipher machine. 3) The password program of the backup cipher machine performs cryptographic operations on user data according to the key policy previously synchronized with the main cipher machine. After completion, the source and destination MAC addresses are exchanged and forwarded through a dedicated router to complete the hot switching of the main and backup cipher machines. At this time, the user is unaware that the main cipher machine or the backup cipher machine performs cryptographic operations.

[0057] 6. After the main cipher machine returns to normal state, the detection packet sent by the backup cipher machine receives a valid response, which means that the main cipher machine is in normal state. At this time, the backup cipher machine will synchronously forward the key policy information received at that time to the main cipher machine, stop the promiscuous mode, and no longer receive business data. The main cipher machine resumes normal user data reception and cryptographic operations.

[0058] The above method of the present invention solves the problem of dual-machine hot standby based on DPDK sending and receiving data at the link layer, and the cryptographic machine can be extended to general equipment. The active trigger detection of the main cryptographic machine and the timed detection of the backup cryptographic machine are combined with each other to improve the fault detection range and real-time performance. By adding a VLAN Tag to the detection port, it is isolated from the business network, management network or other integrated network in the switch or router, and the independence, effectiveness and reliability of the detection link are guaranteed to the maximum extent.

[0059] An embodiment of the present invention further provides a hot standby switching method of a satellite ground cryptographic machine, which is applied to a second ground cryptographic machine that is communicatively connected to the first ground cryptographic machine via a dedicated link, and the method comprises: When the first ground cryptographic machine fails and does not reply to the detection message within a preset time, the second ground cryptographic machine receives the second data information forwarded by the ground device through the dedicated router; The second ground cipher machine processes the second data information according to a preset key strategy to obtain second return data, and returns the second return data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent by the satellite cipher machine to the ground equipment.

[0060] This method is a method on the second ground cipher machine side corresponding to the method on the first ground cipher machine side. All implementation methods of the method on the first ground cipher machine side are applicable to the method on the second ground cipher machine side, and can achieve the same technical effect.

[0061] An embodiment of the present invention further provides a first ground cryptographic machine, comprising: A transceiver module, used for receiving first data information sent by a ground device through a dedicated router, wherein the first data information is sent by a satellite cryptographic machine to the ground device; A processing module is used to parse the first data information and perform operations according to a preset key strategy to obtain first return data, and then return the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronize the key strategy with a second ground cryptographic machine; wherein, the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; when the first ground cryptographic machine fails and does not reply to the detection message within a preset time, it switches to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and performs operations on the second data information according to the preset key strategy to obtain second return data, and returns the second return data to the satellite cryptographic machine through a dedicated router and ground equipment; the second data information is sent from the satellite cryptographic machine to the ground equipment.

[0062] Optionally, the transceiver module is also used to: receive an active detection message sent by the second ground cryptographic machine through the primary and backup detection ports; and return a detection response message to the second ground cryptographic machine according to the active detection message.

[0063] Optionally, when the first ground cryptographic machine fails and does not reply to the detection message of the second ground cryptographic machine within a preset time, switching to the second ground cryptographic machine includes: When the first ground cryptographic machine detects a fault in its own network card through the primary and standby detection ports, it is determined that the first ground cryptographic machine has a fault, and a fault message is sent to the second ground cryptographic machine; If there is no reply to the detection message of the second ground cipher machine within the preset time, switch to the second ground cipher machine.

[0064] Optionally, the transceiver module is also used to return a detection response message to the second ground cryptographic machine when the communication status of the first ground cryptographic machine is restored.

[0065] Optionally, the primary and backup detection ports of the first ground cryptographic machine are communicatively connected to the second ground cryptographic machine via a dedicated router; or, the network card directly connected to the primary and backup detection ports of the first ground cryptographic machine is communicatively connected to the second ground cryptographic machine.

[0066] Optionally, the first ground cryptographic machine and the second ground cryptographic machine poll and receive data based on the data link layer MAC address of the data plane development kit, and the first ground cryptographic machine and the second ground cryptographic machine have the same virtual LAN tag.

[0067] Optionally, the transceiver module is also used to: receive a target key policy sent by the second ground cryptographic machine; and update a local preset key policy according to the target key policy.

[0068] It should be noted that this device corresponds to the method on the first ground cipher machine side, and all implementation methods in the above method embodiments are applicable to the embodiments of this device and can achieve the same technical effects.

[0069] An embodiment of the present invention further provides a second ground cryptographic machine, comprising: A transceiver module, used for receiving the second data information forwarded by the ground device through the dedicated router when the first ground cipher machine fails and does not reply to the detection message within a preset time; The processing module is used to perform calculations on the second data information according to a preset key strategy to obtain second return data, and return the second data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent from the satellite cipher machine to the ground equipment.

[0070] It should be noted that this device corresponds to the method on the second ground cipher machine side, and all implementation methods in the above method embodiments are applicable to the embodiments of this device and can achieve the same technical effects.

[0071] An embodiment of the present invention further provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the method described above or the method described above.

[0072] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments invented herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0073] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0074] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0075] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0076] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0077] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0078] In addition, it should be pointed out that in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it is understandable that all or any steps or components of the method and apparatus of the present invention can be implemented in hardware, firmware, software or a combination thereof in any computing device (including processors, storage media, etc.) or a network of computing devices, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0079] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general-purpose device. Therefore, the purpose of the present invention can also be achieved by simply providing a program product containing a program code for implementing a method or device. That is to say, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order. Some steps can be performed in parallel or independently of each other.

[0080] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A hot standby switching method for a satellite ground cryptographic machine, characterized in that: Applied to the first ground cryptographic machine, the method comprises: The first ground cryptographic machine receives first data information sent by the ground device through a dedicated router, wherein the first data information is sent by the satellite cryptographic machine to the ground device; The first ground cryptographic machine parses the first data information and performs operations according to a preset key strategy to obtain first return data, and returns the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronizes the key strategy with the second ground cryptographic machine; wherein the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; When the first ground cryptographic machine fails and does not reply to the detection message of the second ground cryptographic machine within the preset time, it switches to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and processes the second data information according to the preset key strategy to obtain second return data, and returns it to the satellite cryptographic machine through the dedicated router and the ground equipment; the second data information is sent by the satellite cryptographic machine to the ground equipment.

2. The hot standby switching method of the satellite ground cryptographic machine according to claim 1 is characterized in that: Also includes: The first ground cryptographic machine receives the active detection message sent by the second ground cryptographic machine through the active and standby detection ports; The first ground cryptographic machine returns a detection response message to the second ground cryptographic machine based on the active detection message.

3. The hot standby switching method of a satellite ground cryptographic machine according to claim 1, characterized in that: When the first ground cipher machine fails and does not reply to the detection message of the second ground cipher machine within a preset time, switching to the second ground cipher machine includes: When the first ground cryptographic machine detects a fault in its own network card through the primary and standby detection ports, it is determined that the first ground cryptographic machine has a fault, and a fault message is sent to the second ground cryptographic machine; If there is no reply to the detection message of the second ground cipher machine within the preset time, switch to the second ground cipher machine.

4. The hot standby switching method of a satellite ground cryptographic machine according to claim 1, characterized in that: Also includes: When the communication status of the first ground cryptographic machine is restored, a detection response message is returned to the second ground cryptographic machine.

5. The hot standby switching method of a satellite ground cryptographic machine according to any one of claims 2 to 4, characterized in that: The primary and backup detection ports of the first ground cryptographic machine are connected to the second ground cryptographic machine through a dedicated router; or, the network card directly connected to the primary and backup detection ports of the first ground cryptographic machine is connected to the second ground cryptographic machine; The first ground cryptographic machine and the second ground cryptographic machine poll and receive data based on the data link layer MAC address of the data plane development kit, and the first ground cryptographic machine and the second ground cryptographic machine have the same virtual LAN tag.

6. The hot standby switching method of the satellite ground cryptographic machine according to claim 4, characterized in that: Also includes: The first ground cryptographic machine receives the target key policy sent by the second ground cryptographic machine; The local preset key policy is updated according to the target key policy.

7. A hot standby switching method for a satellite ground cryptographic machine, characterized in that: Applied to a second ground cryptographic machine that is communicatively connected to the first ground cryptographic machine via a dedicated link, the method comprising: When the first ground cryptographic machine fails and does not reply to the detection message within a preset time, the second ground cryptographic machine receives the second data information forwarded by the ground device through the dedicated router; The second ground cipher machine processes the second data information according to a preset key strategy to obtain second return data, and returns the second return data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent by the satellite cipher machine to the ground equipment.

8. A first ground cipher machine, characterized in that: include: A transceiver module, used for receiving first data information sent by a ground device through a dedicated router, wherein the first data information is sent by a satellite cryptographic machine to the ground device; A processing module is used to parse the first data information and perform operations according to a preset key strategy to obtain first return data, and then return the first return data to the satellite cryptographic machine through a dedicated router and ground equipment after encapsulating the key strategy; and synchronize the key strategy with a second ground cryptographic machine; wherein, the second ground cryptographic machine is connected to the ground equipment through the dedicated router, and is connected to the first ground cryptographic machine through a dedicated link; when the first ground cryptographic machine fails and does not reply to the detection message within a preset time, it switches to the second ground cryptographic machine, and the second ground cryptographic machine receives the second data information forwarded by the ground equipment through the dedicated router, and performs operations on the second data information according to the preset key strategy to obtain second return data, and returns the second return data to the satellite cryptographic machine through a dedicated router and ground equipment; the second data information is sent from the satellite cryptographic machine to the ground equipment.

9. A second ground cipher machine, characterized in that: include: A transceiver module, used for receiving second data information forwarded by the ground device through a dedicated router when the first ground cipher machine fails and does not reply to the detection message within a preset time; The processing module is used to perform calculations on the second data information according to a preset key strategy to obtain second return data, and return the second data to the satellite cipher machine through a dedicated router and ground equipment; the second data information is sent from the satellite cipher machine to the ground equipment.

10. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 6 or the method according to claim 7.

Images