Air-ground integrated aviation intelligent network communication system and method based on 5G ATG

Abstract

The invention provides an air-ground integrated aviation intelligent network communication system and method based on 5G ATG, the system comprises an airborne subsystem, a 5G ATG ground base station, a core network, a ground special line and a park subsystem, the airborne subsystem comprises an airborne antenna, an airborne 5G CPE, an encryption machine, a threat detection module and an airborne switch / WIFI; the park subsystem comprises a firewall, a switch, an encryption machine, an ATG private network management and control application server, a private network self-service management platform and a 5G terminal; the 5G ATG ground base station is used for performing 5G ATG signal coverage on a specified airspace; and the core network and the ground special line are used for transmitting data between the 5G ATG ground base station and the park subsystem.

Description

Technical Field

[0001] The present invention belongs to the field of 5G communications, and specifically relates to an air-ground integrated aviation intelligent network communication system and method based on 5G ATG. Background Art

[0002] Commercial 5G ATG (Air to Ground) technology is an advanced technology used to improve the coverage and performance of mobile communication networks. The core concept of ATG technology is to install communication equipment on high-altitude platforms (such as aircraft, balloons or drones), which can communicate wirelessly with ground base stations and user devices. 5G ATG technology can provide high-speed wireless data transmission speeds, supporting high-definition video streaming, real-time gaming and other high-bandwidth applications. Due to the low latency characteristics of 5G networks, ATG technology is able to provide an almost real-time communication experience and is suitable for applications that require fast response.

[0003] The air-to-ground telemetry link refers to the wireless communication link established between the aerial platform and the ground system for data transmission and real-time monitoring.

[0004] However, the existing commercial 5G ATG technology does not meet the needs of flight test business. The air-to-ground transmission rate of the air-to-ground telemetry link is low, and one base station of the ground system of the air-to-ground telemetry link can only support a small number of users, and does not support networking, which is not suitable for the development of flight test business needs. Summary of the invention

[0005] The purpose of this invention is to meet the future intelligent flight multi-dynamic networking communication needs, propose an air-ground integrated aviation intelligent network communication system and method based on 5G ATG, realize high-altitude and high-dynamic wide-area 5G direct communication, effectively support air-ground integrated test flight collaborative application scenarios, and realize network threat warning detection on aviation aircraft.

[0006] In the first aspect, the present application provides an air-ground integrated aviation intelligent network communication system based on 5G ATG, including an airborne subsystem, a 5G ATG ground base station, a core network, a ground dedicated line and a campus subsystem, wherein:

[0007] The airborne subsystem includes an airborne antenna, an airborne 5G CPE (Customer Premises Equipment), an encryption machine, a threat detection module and an airborne switch / WIFI;

[0008] The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms and 5G terminals;

[0009] The 5G ATG ground base station is used to provide 5G ATG signal coverage to the designated airspace;

[0010] The core network and ground dedicated line are used to transmit data between the 5G ATG ground base station and the park subsystem;

[0011] The data of the airborne test data terminal and the 5G terminal are transmitted through the switch / WIFI, threat detection module, encryption machine, airborne 5G CPE in turn, and then transmitted to the 5G ATG ground base station through the 5G ATG link. The 5G ATG ground base station is connected to the ground dedicated line through the core network, and then connected to the firewall, switch, encryption machine, ATG private network control application server and ground switch / WIFI in turn through the ground dedicated line to transmit to the private network self-service management platform and 5G terminal.

[0012] The ground data of the private network self-service management platform and 5G terminals are received through the ground switch / WIFI, passed through the ATG private network control application server, encrypted by the encryption machine, and then passed through the switch, firewall, ground dedicated line, core network and 5GATG ground base station in sequence, and transmitted to the aircraft through the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5G CPE, decrypted by the encryption machine and monitored by the threat detection module. After no abnormal behavior is found, it is transmitted to the 5G terminal for visual display through the airborne switch / WIFI.

[0013] Furthermore, the airborne 5G CPE refers to a terminal device installed on an aircraft for communicating with a ground network;

[0014] The encryption machine is used to ensure the security of air-to-ground data transmission;

[0015] The threat detection module is used to solve the hidden dangers of network threats. Through the analysis of avionics bus data and threat monitoring and alarm, the threat monitoring and alarm function of the security link in the air-ground integrated aviation intelligent network communication system based on 5G ATG is realized;

[0016] The onboard switch / WIFI is used to receive data from the onboard test data terminal and interact with the 5G terminal.

[0017] Furthermore, the park subsystem is used to realize two-way service transmission between the airborne subsystem and the 5G terminal connected to the ground switch / WIFI and the private network self-service management platform;

[0018] The firewall is used to monitor and control traffic and protect the campus subsystem from unauthorized access, attacks and threats;

[0019] The switch is used for data forwarding;

[0020] The ATG private network management and control application server is used to manage, control and optimize applications and services in the ATG private network;

[0021] The private network self-service management platform is used to realize performance monitoring and management of 5G terminals accessing the ATG network, network link status, and airborne 5G CPE, and deploy application apps to realize video and voice call functions between ground and air clients and real-time downlink management of onboard data.

[0022] Furthermore, the threat detection module includes a protocol parsing module, an attack detection module, a device acquisition module, a threat injection module, and a monitoring alarm module;

[0023] The protocol parsing module is used to parse the communication data acquired through communication monitoring according to fields, obtain its communication protocol type and its corresponding key fields, and mainly supports IT protocol, OT protocol and avionics bus protocol for collection and parsing;

[0024] The attack detection module is used to perform threat detection on the communication data transmitted by the protocol analysis module, and transmit the results to the private network self-service management platform and 5G terminal display through the 5G ATG link;

[0025] The device collection module is used to collect network traffic in real time, and to perform traffic analysis in real time to obtain relevant information, and the analyzed traffic system is automatically discarded. It has high data collection capability and high efficiency, and the data collection process will not affect the operation of the entire network;

[0026] The threat injection module is used to automatically retrieve a vulnerability library or a custom vulnerability detection rule;

[0027] The monitoring and alarm module is used to present visual interface alarms for security threats, and realize visual display functions such as threat monitoring and analysis, event alarms and system management.

[0028] Furthermore, the encryption machine includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a post-stage sending part and a post-stage receiving part; the key is extracted from the key distribution system and stored, and after expansion, it is encapsulated into an IP packet format at a preset rate and output, and after encryption / decryption operations are performed with user data, it is sent to the line for transmission or restored to the user.

[0029] In the second aspect, the present application provides a method for an air-ground integrated aviation intelligent network communication system based on 5G ATG, the method comprising:

[0030] Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem;

[0031] Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and the ground dedicated line;

[0032] Step 3: The campus subsystem processes the received IP signal and displays it visually on the private network self-service management platform and 5G terminal;

[0033] Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization;

[0034] Step 5: If there is an abnormality in the analysis data, the processing measures will be transmitted to the onboard 5G terminal through the ground 5G terminal.

[0035] Furthermore, step 1 includes:

[0036] Step 11: The onboard data of the airborne test data terminal and the 5G terminal are transmitted to the threat detection module via the airborne switch / WIFI.

[0037] Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and the onboard data to the encryption machine;

[0038] Step 13: The encryption machine encrypts the threat detection module analysis results and onboard data and transmits them to the onboard 5G CPE;

[0039] Step 14: After receiving the threat detection module analysis results and onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive the IP signal through the 5G ATG link.

[0040] Furthermore, step 5 includes:

[0041] Step 51: The processing measures are transmitted to the 5G ATG ground base station through the campus subsystem, ground dedicated line and core network;

[0042] Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link;

[0043] Step 53: After the onboard subsystem receives the processing measures, they are decrypted by the encryption machine and analyzed by the threat detection module. If there is no abnormality, they are visualized by the onboard 5G terminal.

[0044] In summary, the present invention provides an air-ground integrated aviation intelligent network communication system and method based on 5G ATG. In the flight test of my country's military and civilian aircraft, the ATG system provides a stable, reliable, and large-bandwidth air-ground communication link for the test flight airspace, which can realize high-altitude, high-dynamic, wide-area 5G direct communication. The 5G ATG technology radiates the 5G signal to an altitude of 10,000 meters, realizing 12,000 meters, 1,200km / h, and 300km wide-area direct communication. The present invention opens up the cloud network end to effectively support the air-ground integrated test flight collaborative application scenario, and lays a technical foundation for the realization of multiple application scenarios such as air-ground collaboration and real-time data online processing. The present invention realizes the threat monitoring and warning function of the security link in the "air-ground integrated aviation intelligent network communication system" through the analysis of avionics bus data and threat monitoring and warning. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 The diagram is of the air-ground integrated aviation intelligent network communication system based on 5G ATG of the present invention.

[0046] Figure 2 This is a flowchart of the encryption and decryption process of the encryption machine of the present invention.

[0047] Figure 3 This is a distribution diagram of the ground base stations of the present invention. DETAILED DESCRIPTION

[0048] Embodiment 1

[0049] like Figure 1 As shown, the present invention provides an air-ground integrated aviation intelligent network communication system based on 5G ATG, including an airborne subsystem, a 5G ATG ground base station, a core network, a ground dedicated line and a campus subsystem, wherein:

[0050] The airborne subsystem includes an airborne antenna, an airborne 5G CPE (Customer Premises Equipment), an encryption machine, a threat detection module and an airborne switch / WIFI;

[0051] The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms and 5G terminals;

[0052] The data of the airborne test data terminal and the 5G terminal are transmitted through the switch / WIFI, threat detection module, encryption machine, airborne 5G CPE, and then transmitted to the 5G ATG ground base station through the 5G ATG link. The 5G ATG ground base station is connected to the ground dedicated line through the core network, and then connected to the firewall, switch, encryption machine, ATG private network control application server and ground switch / WIFI through the ground dedicated line to transmit to the private network self-service management platform and 5G terminal;

[0053] Similarly, the ground data of the private network self-service management platform and 5G terminals are received through the ground switch / WIFI, passed through the ATG private network management and control application server, encrypted by the encryption machine, and then passed through the switch, firewall, ground dedicated line, core network and 5G ATG ground base station in sequence, and transmitted to the aircraft through the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5GCPE, decrypted by the encryption machine and monitored by the threat detection module. If there is no abnormal behavior, it is transmitted to the 5G terminal for visual display through the airborne switch / WIFI.

[0054] Specifically, the airborne 5G CPE refers to a terminal device installed on an aircraft for communicating with the ground network; the encryption machine is used to ensure the security of air-to-ground data transmission; the threat detection module is used to solve the network threat risks brought about by the substantial improvement of the intelligence and information level of ATG links, etc., and realizes the threat monitoring and alarm function of the security link in the "5G ATG-based air-to-ground integrated aviation intelligent network communication system" through the analysis of avionics bus data and threat monitoring and alarm; the airborne switch / WIFI is used to receive data from the airborne test data terminal and exchange data with the 5G terminal;

[0055] The 5G ATG ground base station is used to provide 5G ATG signal coverage to the designated airspace;

[0056] Specifically, the 5G ATG ground base station supports a coverage radius of no less than 300km and a coverage altitude of 3000-13000m.

[0057] The core network and ground dedicated lines are used to transmit data between the 5G ATG ground base station and the campus subsystem.

[0058] Specifically, the campus subsystem is used to realize two-way service transmission of voice, data, video, images, etc. between the airborne subsystem and the 5G terminal connected to the ground switch / WIFI and the private network self-service management platform; the firewall is used to monitor and control traffic to protect the campus subsystem from unauthorized access, attacks and threats; the switch is used for data forwarding; the ATG private network management and control application server is used to manage, control and optimize applications and services in the ATG private network; the private network self-service management platform is used to realize performance monitoring and management of 5G terminals accessed to the ATG network, network link status, and airborne 5G CPE, and deploy application apps to realize video and voice call functions between ground and air clients and real-time downlink management of onboard data.

[0059] The 5G terminals include mobile phones, tablets, computers and cameras.

[0060] Specifically, the airborne 5G CPE includes a chassis, a baseband transceiver module, a power module and a motherboard. As a processing unit that converts wireless signals into IP signals, the airborne 5G CPE has 5G baseband signal processing functions, RF signal processing functions and ARINC429 aviation bus data processing functions. It is responsible for the beamforming of the phased array antenna and the air cell switching processing, and can realize all the software / hardware functions of the airborne 5G CPE power amplifier front end and the working state control of the 5G CPE antenna side transceiver channel and antenna shaping control;

[0061] Specifically, Figure 2 As shown, the encryption machine includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a post-stage sending part, and a post-stage receiving part. The working principle is to extract and store the key from the key distribution system, encapsulate it into an IP packet format at a certain rate after expansion, and output it. After encryption / decryption operations with user data, it is sent to the line for transmission or restored to the user. The design premise is that the communication sender and receiver have a key distribution system, so that they can extract exactly the same key from the key distribution system. The extraction and storage of the key can be completed in advance in the ground key distribution system;

[0062] Specifically, the threat detection module includes a protocol parsing module, an attack detection module, a device collection module, a threat injection module and a monitoring and alarm module. The main task of the protocol parsing module is to parse the communication data obtained by communication monitoring according to the field, obtain its communication protocol type and its corresponding key fields, and mainly support the collection and analysis of IT protocols, OT protocols and avionics bus protocols; the main task of the attack detection module is to perform threat detection on the communication data passed by the protocol parsing module, and pass the results to the private network self-service management platform and 5G terminal display through the 5G ATG link; the device collection module supports the collection of avionics bus data of avionics onboard bus data gateway devices. The module adopts bypass data collection technology, collects network traffic in real time, and performs real-time traffic analysis to obtain relevant information, and automatically discards the analyzed traffic system. It has high data collection capabilities and high efficiency, and the data collection process will not affect the operation of the entire network; the threat injection module can automatically retrieve the vulnerability library, and can also customize the vulnerability detection rules; the monitoring and alarm module performs visual interface alarm presentation for security threats, and can realize visual display functions such as threat monitoring analysis, event alarm and system management.

[0063] It should be noted that the threat detection module realizes threat monitoring and alarm of the avionics bus network, supports 5 hacker intrusion scenarios, 20 platform system abnormal / unsafe state network threat behavior detection and timely alarm.

[0064] Specifically, the private network self-service management platform includes a statistical analysis module, a real-time monitoring module, a network status module and other modules; the statistical analysis module displays historical data (data summary, aircraft platform status data analysis, server and airborne CPE status presentation, real-time ground-to-air link status (base station level), alarm statistical analysis); the real-time monitoring module displays the transmission rate, network status, transmission progress, and transmission monitoring of the ground-to-air link; the network status module displays information such as the ground-to-air link and the ATG base station.

[0065] It should be noted that the 5G ATG-based air-ground integrated aviation intelligent network communication system radiates 5G signals to an altitude of 10,000 meters through 5G ATG technology, achieving 12,000-meter altitude, 1,200km / h, and 300km wide-area direct communication. The peak rate of a single-machine end-to-end system is ≥64Mbps for air-to-ground and ≥128Mbps for ground-to-air.

[0066] It should be noted that multiple aircraft in the air can achieve two-way networking communication with the support of the ground 5G ATG dedicated base station. The onboard test data terminals on the aircraft and the mobile phones, tablets, computers, etc. used by personnel can access the ATG airborne subsystem through wired and wireless methods. Within the access coverage of the ATG ground base station, the ATG air-to-ground data link can be used to transmit voice, data, video, images and other two-way services with the ground and other members of the air network in real time. The ground 5G terminal can securely access the ATG private network control application server through the 5G network within the coverage area of ​​the ground base station, and can view the relevant subject tasks in real time through the private network self-service management platform, view the real-time test parameters of the aircraft equipped with the airborne subsystem, and interact with the personnel on board through voice and video.

[0067] Embodiment 2

[0068] The present invention provides an air-ground integrated aviation intelligent network communication method based on 5G ATG, which is applied to the air-ground integrated aviation intelligent network communication system based on 5G ATG provided in the above embodiment, and the method includes:

[0069] Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem;

[0070] Specifically, step 1 includes:

[0071] Step 11: The onboard data of the airborne test data terminal and the 5G terminal are transmitted to the threat detection module via the airborne switch / WIFI.

[0072] Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and the onboard data to the encryption machine;

[0073] Step 13: The encryption machine encrypts the threat detection module analysis results and onboard data and transmits them to the onboard 5G CPE;

[0074] Step 14: After receiving the threat detection module analysis results and onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive the IP signal through the 5G ATG link;

[0075] Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and the ground dedicated line;

[0076] Step 3: The campus subsystem processes the received IP signal and displays it visually on the private network self-service management platform and 5G terminal;

[0077] It should be noted that the ground encryption machine needs to decrypt the IP signal;

[0078] Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization;

[0079] Step 5: If the analysis data in step 4 is found to be abnormal, the processing measures are transmitted to the onboard 5G terminal through the ground 5G terminal;

[0080] Specifically, step 5 includes:

[0081] Step 51: The processing measures are transmitted to the 5G ATG ground base station through the campus subsystem, ground dedicated line and core network;

[0082] It should be noted that the ground encryption machine must encrypt the treatment measures;

[0083] Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link;

[0084] It should be noted that the 5G ATG ground base station needs to track the aircraft within the coverage area in real time and transmit the received processing measures to the designated aircraft in real time.

[0085] Step 53: After the onboard subsystem receives the processing measures, they are decrypted by the encryption machine and analyzed by the threat detection module. If there is no abnormality, the onboard 5G terminal will visualize the information to assist the pilot in solving the problem.

[0086] Embodiment 3

[0087] The present invention provides an air-ground integrated aviation intelligent network communication method based on 5G ATG, which is applied to the air-ground integrated aviation intelligent network communication system based on 5G ATG provided in the above embodiment, and the method includes:

[0088] Step 1: Deploy 5G ATG ground base stations at locations A and B, and the 5G ATG signals of the ground base stations cover the test flight airspace;

[0089] In practical applications, such as Figure 3 As shown, the test flight airspace is the white rectangular test flight area.

[0090] In actual applications, 5G ATG ground base stations can be deployed in Yanchuan, Yan'an and Heyang, Weinan.

[0091] Step 2: The two aircraft equipped with the airborne subsystem fly in the test flight airspace according to the preset flight mission, and the airborne subsystem and the park subsystem perform two-way business transmission during the flight;

[0092] Step 3: During the flight of the aircraft, the airborne test data terminal transmits the data of the airborne equipment to the park subsystem in real time through the ATG air-ground data link, and checks the data of the airborne equipment in real time through the private network self-service management platform and 5G terminal;

[0093] Specifically, the data of the airborne equipment includes, but is not limited to, dynamic meteorological data from weather radar surveys, aircraft platform status data, pilot's physiological and psychological monitoring data, and data monitored by threat detection modules.

[0094] Step 4: Check the aircraft platform status data in real time on the private network self-service management platform and 5G terminals, and conduct real-time monitoring and analysis of the aircraft platform status data;

[0095] It should be noted that the private network self-service management platform needs to process the aircraft platform status data according to the test requirements;

[0096] Step 5: When checking the status data of the aircraft platform in real time, if any abnormality is found, the abnormal equipment or abnormal flight interface will be transmitted back to the park subsystem through the onboard camera.

[0097] Step 6: Perform abnormal fault diagnosis with the assistance of remote experts to ensure the safe implementation of the flight mission;

[0098] It should be noted that if it is found that the flight mission cannot be carried out normally, an Internet call or message will be made to the pilot through the dedicated network self-service management platform and 5G terminal to inform him of the mission interruption or change.

[0099] Step 7: Install threat detection modules on aircraft to analyze and resolve potential network threats caused by the substantial improvement in intelligence and information technology levels;

[0100] Specifically, the threat detection module needs to test and analyze the hidden dangers caused by the use of common protocols, common hardware and common software in avionics networks such as the air-ground integrated aviation intelligent network communication system and avionics bus network based on 5G ATG;

[0101] Specifically, the threat detection module needs to monitor and warn of security threats brought about by the connection between airborne equipment and public networks such as the Internet and 5G core network;

[0102] It should be noted that the data monitored by the threat detection module can be viewed in real time. If an emergency abnormal situation is found, remote experts can assist in solving it. If it cannot be solved, the pilot will be prompted to return home urgently. After the flight, the dedicated network self-service management platform will output an aircraft information security risk test assessment report.

Claims

1. A 5G ATG-based air-ground integrated aviation intelligent network communication system, characterized in that: It includes airborne subsystem, 5G ATG ground base station, core network, ground dedicated line and campus subsystem, including: The airborne subsystem includes an airborne antenna, an airborne 5G CPE (Customer Premises Equipment), an encryption machine, a threat detection module and an airborne switch / WIFI; The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms and 5G terminals; The 5G ATG ground base station is used to provide 5G ATG signal coverage to the designated airspace; The core network and ground dedicated line are used to transmit data between the 5G ATG ground base station and the park subsystem; The data of the airborne test data terminal and the 5G terminal are transmitted through the switch / WIFI, threat detection module, encryption machine, airborne 5G CPE in turn, and then transmitted to the 5G ATG ground base station through the 5G ATG link. The 5GATG ground base station is connected to the ground dedicated line through the core network, and then connected to the firewall, switch, encryption machine, ATG private network control application server and ground switch / WIFI in turn through the ground dedicated line to transmit to the private network self-service management platform and 5G terminal. The ground data of the private network self-service management platform and 5G terminals are received through the ground switch / WIFI, passed through the ATG private network management and control application server, encrypted by the encryption machine, and then passed through the switch, firewall, ground dedicated line, core network and 5G ATG ground base station in sequence, and transmitted to the aircraft through the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5G CPE, decrypted by the encryption machine, and monitored by the threat detection module. After no abnormal behavior is found, it is transmitted to the 5G terminal for visual display through the airborne switch / WIFI.

2. The system according to claim 1, characterized in that The airborne 5G CPE refers to terminal equipment installed on the aircraft for communicating with the ground network; The encryption machine is used to ensure the security of air-to-ground data transmission; The threat detection module is used to solve the hidden dangers of network threats. Through the analysis of avionics bus data and threat monitoring and alarm, the threat monitoring and alarm function of the security link in the air-ground integrated aviation intelligent network communication system based on 5G ATG is realized; The onboard switch / WIFI is used to receive data from the onboard test data terminal and interact with the 5G terminal.

3. The system according to claim 1, characterized in that The park subsystem is used to realize two-way service transmission between the airborne subsystem and the 5G terminal connected to the ground switch / WIFI and the private network self-service management platform; The firewall is used to monitor and control traffic and protect the campus subsystem from unauthorized access, attacks and threats; The switch is used for data forwarding; The ATG private network management and control application server is used to manage, control and optimize applications and services in the ATG private network; The private network self-service management platform is used to realize performance monitoring and management of 5G terminals accessing the ATG network, network link status, and airborne 5G CPE, and deploy application apps to realize video and voice call functions between ground and air clients and real-time downlink management of onboard data.

4. The system according to claim 1, characterized in that The threat detection module includes a protocol analysis module, an attack detection module, a device acquisition module, a threat injection module, and a monitoring and alarm module; The protocol parsing module is used to parse the communication data acquired through communication monitoring according to fields, obtain its communication protocol type and its corresponding key fields, and mainly supports IT protocol, OT protocol and avionics bus protocol for collection and parsing; The attack detection module is used to perform threat detection on the communication data transmitted by the protocol analysis module, and transmit the results to the private network self-service management platform and 5G terminal display through the 5G ATG link; The device collection module is used to collect network traffic in real time, and to perform traffic analysis in real time to obtain relevant information, and the analyzed traffic system is automatically discarded. It has high data collection capability and high efficiency, and the data collection process will not affect the operation of the entire network; The threat injection module is used to automatically retrieve a vulnerability library or a custom vulnerability detection rule; The monitoring and alarm module is used to present visual interface alarms for security threats, and realize visual display functions such as threat monitoring and analysis, event alarms and system management.

5. The system according to claim 1, characterized in that The encryption machine includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a post-stage sending part and a post-stage receiving part; the key is extracted from the key distribution system and stored, and after expansion, it is encapsulated into an IP packet format at a preset rate and output, and after encryption / decryption operations with user data, it is sent to the line for transmission or restored to the user.

6. A method for an air-ground integrated aviation intelligent network communication system based on 5G ATG, characterized in that: Methods include: Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem; Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and the ground dedicated line; Step 3: The campus subsystem processes the received IP signal and displays it visually on the private network self-service management platform and 5G terminal; Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization; Step 5: If there is an abnormality in the analysis data, the processing measures will be transmitted to the onboard 5G terminal through the ground 5G terminal.

7. The method according to claim 6, characterized in that Step 1 includes: Step 11: The onboard data of the airborne test data terminal and the 5G terminal are transmitted to the threat detection module via the airborne switch / WIFI. Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and the onboard data to the encryption machine; Step 13: The encryption machine encrypts the threat detection module analysis results and onboard data and transmits them to the onboard 5G CPE; Step 14: After receiving the threat detection module analysis results and onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive the IP signal through the 5G ATG link.

8. The method according to claim 6, characterized in that Step 5 includes: Step 51: The processing measures are transmitted to the 5G ATG ground base station through the campus subsystem, ground dedicated line and core network; Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link; Step 53: After the onboard subsystem receives the processing measures, they are decrypted by the encryption machine and analyzed by the threat detection module. If there is no abnormality, they are visualized by the onboard 5G terminal.

Images