An integrated air-ground intelligent network communication system and method based on 5G ATG

Abstract

This application provides an integrated air-ground intelligent network communication system and method based on 5G ATG. The system includes an airborne subsystem, a 5G ATG ground base station, a core network, a ground leased line, and a campus subsystem. The airborne subsystem includes an airborne antenna, an airborne 5G CPE, an encryption device, a threat detection module, and an airborne switch / Wi-Fi. The campus subsystem includes a firewall, a switch, an encryption device, an ATG private network management application server, a private network self-service management platform, and 5G terminals. The 5G ATG ground base station is used to provide 5G ATG signal coverage to a designated airspace. The core network and ground leased line are used for data transmission between the 5G ATG ground base station and the campus subsystem.

Description

Technical Field

[0001] This invention belongs to the field of 5G communication, specifically relating to an air-ground integrated intelligent aviation network communication system and method based on 5G ATG. Background Technology

[0002] Commercial 5G ATG (Air to Ground) technology is an advanced technology used to improve the coverage and performance of mobile communication networks. The core concept of ATG technology is to mount communication equipment on high-altitude platforms (such as airplanes, balloons, or drones), which can then wirelessly communicate with ground base stations and user equipment. 5G ATG technology can provide high-speed wireless data transmission, supporting high-definition video streaming, real-time gaming, and other high-bandwidth applications. Due to the low latency of 5G networks, ATG technology can provide a near real-time communication experience, suitable for applications requiring rapid response.

[0003] An air-to-ground telemetry link is a wireless communication link established between an airborne platform and a ground system for data transmission and real-time monitoring.

[0004] However, existing commercial 5G ATG technology does not meet the needs of flight test services. The air-to-ground telemetry link has a low transmission rate, and a single base station of the air-to-ground telemetry link ground system can only support a limited number of users and does not support networking, which is not suitable for the development of flight test service needs. Summary of the Invention

[0005] The purpose of this invention is to propose an integrated air-ground intelligent aviation network communication system and method based on 5G ATG, driven by the need to meet the diverse and dynamic networking communication requirements of future intelligent flight. This system enables high-altitude, high-dynamic, wide-area 5G direct communication, effectively supports integrated air-ground flight test and collaborative application scenarios, and enables network threat alarm detection on aircraft.

[0006] Firstly, this application provides an integrated air-to-ground intelligent network communication system based on 5G ATG, comprising an airborne subsystem, a 5G ATG ground base station, a core network, a ground leased line, and a campus subsystem, wherein:

[0007] The airborne subsystem includes an airborne antenna, an airborne 5G CPE (Customer Premises Equipment), an encryption device, a threat detection module, and an airborne switch / WIFI;

[0008] The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms, and 5G terminals.

[0009] The 5G ATG ground base station is used to provide 5G ATG signal coverage for a designated airspace.

[0010] The core network and terrestrial leased lines are used to transmit data between 5G ATG terrestrial base stations and park subsystems.

[0011] Data from the airborne test data terminal and the 5G terminal passes sequentially through the switch / WIFI, threat detection module, encryption machine, and airborne 5G CPE, is transmitted via the airborne phased array antenna, and then transmitted to the 5G ATG ground base station via the 5G ATG link. The 5G ATG ground base station is connected to the ground leased line through the core network, and then sequentially connected to the firewall, switch, encryption machine, ATG private network management application server, and ground switch / WIFI through the ground leased line to transmit data to the private network self-service management platform and the 5G terminal.

[0012] Ground data from the private network self-service management platform and 5G terminals is received via ground switches / WIFI, encrypted by the ATG private network management application server and encryption machine, and then transmitted sequentially through switches, firewalls, ground leased lines, core networks and 5G ATG ground base stations to the aircraft via the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5G CPE, decrypted by the encryption machine and monitored by the threat detection module. After no abnormal behavior is detected, it is transmitted to the 5G terminal for visualization display via the airborne switch / WIFI.

[0013] Furthermore, the airborne 5G CPE refers to terminal equipment installed on the aircraft for communicating with the ground network;

[0014] The encryption device is used to ensure the security of air-to-ground data transmission;

[0015] The threat detection module is used to address network threat vulnerabilities. Through the analysis of avionics bus data and threat monitoring and alarm, it realizes the threat monitoring and alarm function of the secure link in the air-ground integrated aviation intelligent network communication system based on 5G ATG.

[0016] The airborne switch / WIFI is used to receive data from the airborne test data terminal and to interact with the 5G terminal.

[0017] Furthermore, the park subsystem is used to realize bidirectional service transmission between the airborne subsystem and the 5G terminal and private network self-service management platform connected to the ground switch / WIFI;

[0018] The firewall is used to monitor and control traffic, protecting the campus subsystems from unauthorized access, attacks, and threats.

[0019] The switch is used for data forwarding;

[0020] The ATG private network management application server is used to manage, control, and optimize applications and services within the ATG private network.

[0021] The private network self-service management platform is used to monitor and manage the performance of 5G terminals accessing the ATG network, network link status, and airborne 5G CPEs. It also deploys an application app to enable video and voice calls between ground and air clients, as well as real-time downlink management of onboard data.

[0022] Furthermore, the threat detection module includes a protocol parsing module, an attack detection module, a device acquisition module, a threat injection module, and a monitoring and alarm module;

[0023] The protocol parsing module is used to parse the communication data acquired by communication monitoring according to the fields, and obtain its communication protocol type and its corresponding key fields. It mainly supports the acquisition and parsing of IT protocol, OT protocol and avionics bus protocol.

[0024] The attack detection module is used to perform threat detection on the communication data transmitted by the protocol parsing module, and transmit the results to the private network self-service management platform and 5G terminal display via the 5G ATG link;

[0025] The device's data acquisition module is used to collect network traffic in real time, perform traffic analysis in real time to obtain relevant information, and automatically discard the analyzed traffic. It has high data acquisition capability and high efficiency, and the data acquisition process will not affect the operation of the entire network.

[0026] The threat injection module is used to automatically retrieve vulnerability databases or custom vulnerability detection rules;

[0027] The monitoring and alarm module is used to present alarms in a visual interface for security threats, and to realize visual display functions such as threat monitoring and analysis, event alarms and system management.

[0028] Furthermore, the encryption device includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a post-transmission section, and a post-reception section; it extracts and stores the key from the key distribution system, expands it, encapsulates it into an IP packet format at a preset rate, performs encryption / decryption operations with user data, and then sends it to the line for transmission or restore to the user.

[0029] Secondly, this application provides a method for an integrated air-ground intelligent network communication system based on 5G ATG, the method comprising:

[0030] Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem;

[0031] Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and ground leased line;

[0032] Step 3: The park subsystem processes the received IP signals and then displays them visually on the private network self-service management platform and 5G terminals;

[0033] Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization;

[0034] Step 5: If the analyzed data is abnormal, the processing measures will be transmitted to the onboard 5G terminal via the ground 5G terminal.

[0035] Furthermore, step 1 includes:

[0036] Step 11: Onboard data from the airborne test data terminal and the 5G terminal is received and transmitted to the threat detection module via the airborne switch / WIFI;

[0037] Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and onboard data to the encryption machine;

[0038] Step 13: The encryption device encrypts the analysis results of the threat detection module and the onboard data and transmits them to the airborne 5GCPE;

[0039] Step 14: After receiving the analysis results from the threat detection module and the onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive IP signals through the 5G ATG link.

[0040] Furthermore, step 5 includes:

[0041] Step 51: The processing measures are transmitted to the 5G ATG ground base station via the park subsystem, ground leased line and core network;

[0042] Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link;

[0043] Step 53: After receiving the processing measures, the airborne subsystem decrypts them through the encryption machine and analyzes them through the threat detection module. If there are no abnormalities, the 5G terminal on board will display the results visually.

[0044] In summary, this invention provides an integrated air-to-ground intelligent aviation network communication system and method based on 5G ATG. In flight tests of military and civilian aircraft in my country, the ATG system provides a stable, reliable, and high-bandwidth air-to-ground communication link to the test flight airspace, enabling high-altitude, high-dynamic, wide-area 5G direct communication. Through 5G ATG technology, 5G signals are radiated to altitudes of up to 10,000 meters, achieving wide-area direct communication at altitudes of 12,000 meters, speeds of 1200 km / h, and a range of 300 km. This invention effectively supports integrated air-to-ground flight test collaborative application scenarios by connecting cloud, network, and terminal, laying a technical foundation for the realization of multiple application scenarios such as air-to-ground collaboration and real-time online data processing. This invention achieves threat monitoring and alarm functions for the secure link in the "integrated air-to-ground intelligent aviation network communication system" through the analysis of avionics bus data and threat monitoring and alarm. Attached Figure Description

[0045] Figure 1 The diagram shows the integrated air-ground intelligent network communication system for aviation based on 5G ATG, as described in this invention.

[0046] Figure 2 This is a flowchart of the encryption and decryption process of the encryption machine of the present invention.

[0047] Figure 3 This is a distribution map of the ground base stations of the present invention. Detailed Implementation

[0048] Example 1

[0049] like Figure 1 As shown, this invention provides an integrated air-to-ground intelligent aviation network communication system based on 5G ATG, including an airborne subsystem, a 5G ATG ground base station, a core network, a ground leased line, and a campus subsystem, wherein:

[0050] The airborne subsystem includes an airborne antenna, an airborne 5G CPE (Customer Premises Equipment), an encryption device, a threat detection module, and an airborne switch / WIFI;

[0051] The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms, and 5G terminals.

[0052] Data from the airborne test data terminal and the 5G terminal sequentially passes through the switch / WIFI, threat detection module, encryption machine, and airborne 5G CPE, is transmitted via the airborne phased array antenna, and then transmitted to the 5G ATG ground base station via the 5G ATG link. The 5G ATG ground base station is connected to the ground leased line through the core network, and then sequentially connected to the firewall, switch, encryption machine, ATG private network management application server, and ground switch / WIFI through the ground leased line to transmit data to the private network self-service management platform and the 5G terminal.

[0053] Similarly, ground data from the private network self-service management platform and 5G terminals is received via ground switches / WIFI, encrypted by the ATG private network management application server and encryption machine, and then transmitted sequentially through switches, firewalls, ground leased lines, core networks and 5G ATG ground base stations to the aircraft via the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5GCPE, decrypted by the encryption machine and monitored by the threat detection module. After no abnormal behavior is detected, it is transmitted to the 5G terminal for visualization display via the airborne switch / WIFI.

[0054] Specifically, the airborne 5G CPE refers to the terminal equipment installed on the aircraft for communication with the ground network; the encryption device is used to ensure the security of air-to-ground data transmission; the threat detection module is used to address network threat risks brought about by the significant improvement in the intelligence and informatization level of ATG links, and realizes the threat monitoring and alarm function of the secure link in the "5G ATG-based air-to-ground integrated aviation intelligent network communication system" through the analysis of avionics bus data and threat monitoring and alarm; the airborne switch / WIFI is used to receive data from the airborne test data terminal and interact with the 5G terminal.

[0055] The 5G ATG ground base station is used to provide 5G ATG signal coverage for a designated airspace.

[0056] Specifically, 5G ATG ground base stations support a coverage radius of no less than 300km and a coverage height of 3000-13000m.

[0057] The core network and terrestrial leased lines are used to transmit data between 5G ATG terrestrial base stations and campus subsystems.

[0058] Specifically, the park subsystem is used to enable bidirectional transmission of voice, data, video, and images between the airborne subsystem and the 5G terminals connected to the ground switch / WIFI and the private network self-service management platform; the firewall is used to monitor and control traffic, protecting the park subsystem from unauthorized access, attacks, and threats; the switch is used for data forwarding; the ATG private network management application server is used to manage, control, and optimize applications and services in the ATG private network; the private network self-service management platform is used to monitor and manage the performance of 5G terminals accessing the ATG network, network link status, and airborne 5G CPEs, and to deploy applications to enable video and voice calls between ground and air clients, as well as real-time downlink management of onboard data.

[0059] The 5G terminals include mobile phones, tablets, computers, and cameras.

[0060] Specifically, the airborne 5G CPE includes a chassis, a baseband transceiver module, a power module, and a motherboard. As a processing unit that converts wireless signals into IP signals, the airborne 5G CPE has 5G baseband signal processing, radio frequency signal processing, and ARINC429 avionics bus data processing functions. It is responsible for beamforming of the phased array antenna and in-flight cell handover processing. It can realize all the software / hardware functions of the airborne 5G CPE power amplifier front end and control the working status of the 5G CPE antenna-side transceiver channel and antenna shaping control.

[0061] Specifically, such as Figure 2 As shown, the encryption device includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a back-end transmitting section, and a back-end receiving section. Its working principle is to extract and store the key from the key distribution system, expand it, encapsulate it into IP packet format at a certain rate, perform encryption / decryption operations with user data, and then send it over the line for transmission or restore to the user. Its design premise is that both the transmitting and receiving parties have key distribution systems, thus enabling them to extract identical keys from these systems. Key extraction and storage can be pre-completed within the ground-based key distribution system.

[0062] Specifically, the threat detection module includes a protocol parsing module, an attack detection module, a device acquisition module, a threat injection module, and a monitoring and alarm module. The protocol parsing module's main task is to parse the communication data acquired through communication monitoring according to fields, obtaining the communication protocol type and its corresponding key fields. It primarily supports the acquisition and parsing of IT protocols, OT protocols, and avionics bus protocols. The attack detection module's main task is to perform threat detection on the communication data transmitted from the protocol parsing module and transmit the results to the private network self-service management platform and 5G terminal display via the 5G ATG link. The device acquisition module supports the acquisition of avionics bus data from avionics onboard bus data gateway devices. The module adopts bypass data acquisition technology, collecting network traffic in real time and performing real-time traffic analysis to obtain relevant information. The analyzed traffic is automatically discarded by the system, resulting in high data acquisition capability and efficiency, without affecting the overall network operation. The threat injection module can automatically retrieve vulnerability databases and also allows for custom vulnerability detection rules. The monitoring and alarm module provides a visual interface for security threat alerts, enabling visual display functions such as threat monitoring and analysis, event alarms, and system management.

[0063] It should be noted that the threat detection module enables threat monitoring and alarming of the avionics bus network, supports the detection and timely alarming of network threat behaviors in 5 hacker intrusion scenarios and 20 abnormal / insecure platform system states.

[0064] Specifically, the private network self-service management platform includes modules such as a statistical analysis module, a real-time monitoring module, and a network status module. The statistical analysis module displays historical data (data aggregation, aircraft platform status data analysis, server and airborne CPE status presentation, real-time air-to-ground link status (base station level), and alarm statistical analysis). The real-time monitoring module displays the transmission rate, network status, transmission progress, and transmission monitoring of the air-to-ground link. The network status module displays information such as the air-to-ground link and ATG base stations.

[0065] It should be noted that the air-ground integrated aviation intelligent network communication system based on 5G ATG uses 5G ATG technology to radiate 5G signals to an altitude of 10,000 meters, achieving wide-area direct communication at an altitude of 12,000 meters, speeds of 1,200 km / h, and a range of 300 km. The peak rate of the single-unit end-to-end system is ≥64Mbps for air-to-ground communication and ≥128Mbps for ground-to-air communication.

[0066] It should be noted that multiple aircraft in the air can achieve bidirectional network communication with the support of a dedicated 5G ATG base station on the ground. Airborne test data terminals and mobile phones, tablets, and computers used by personnel on the aircraft can access the ATG airborne subsystem via wired and wireless means. Within the coverage area of ​​the ATG ground base station, they can transmit voice, data, video, and images in real time with ground and other members within the airborne network through the ATG air-to-ground data link. Ground-based 5G terminals can securely access the ATG private network management application server within the coverage area of ​​the ground base station, and can view relevant research tasks, real-time test parameters of aircraft equipped with the airborne subsystem, and interact with onboard personnel via voice and video through the private network self-service management platform.

[0067] Example 2

[0068] This invention provides a 5G ATG-based air-to-ground integrated intelligent aviation network communication method, applied to the 5G ATG-based air-to-ground integrated intelligent aviation network communication system provided in the above embodiments. The method includes:

[0069] Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem;

[0070] Specifically, step 1 includes:

[0071] Step 11: Onboard data from the airborne test data terminal and the 5G terminal is received and transmitted to the threat detection module via the airborne switch / WIFI;

[0072] Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and onboard data to the encryption machine;

[0073] Step 13: The encryption device encrypts the analysis results of the threat detection module and the onboard data and transmits them to the airborne 5GCPE;

[0074] Step 14: After receiving the analysis results from the threat detection module and the onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive IP signals through the 5G ATG link.

[0075] Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and ground leased line;

[0076] Step 3: The park subsystem processes the received IP signals and then displays them visually on the private network self-service management platform and 5G terminals;

[0077] It should be noted that the ground encryption device needs to decrypt the IP signal;

[0078] Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization;

[0079] Step 5: If any anomalies are found in the data analyzed in Step 4, the processing measures will be transmitted to the onboard 5G terminal via the ground 5G terminal.

[0080] Specifically, step 5 includes:

[0081] Step 51: The processing measures are transmitted to the 5G ATG ground base station via the park subsystem, ground leased line and core network;

[0082] It should be noted that the ground encryption machine must encrypt the processing measures;

[0083] Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link;

[0084] It should be noted that 5G ATG ground base stations need to track aircraft within their coverage area in real time and transmit the received processing measures to the designated aircraft in real time.

[0085] Step 53: After receiving the processing measures, the airborne subsystem decrypts them through the encryption machine and analyzes them through the threat detection module. If there are no abnormalities, the onboard 5G terminal displays the results visually to assist the pilot in handling the problem.

[0086] Example 3

[0087] This invention provides a 5G ATG-based air-to-ground integrated intelligent aviation network communication method, applied to the 5G ATG-based air-to-ground integrated intelligent aviation network communication system provided in the above embodiments. The method includes:

[0088] Step 1: Deploy 5G ATG ground base stations at locations A and B, ensuring that the 5G ATG signal from the ground base stations covers the test flight airspace.

[0089] In practical applications, such as Figure 3 As shown, the test flight airspace is the test flight area marked by a long white rectangle.

[0090] In practical applications, 5G ATG ground base stations can be deployed in Yanchuan, Yan'an and Heyang, Weinan.

[0091] Step 2: The two aircraft equipped with the airborne subsystem fly in the test flight airspace according to the preset flight mission. During the flight, the airborne subsystem and the park subsystem conduct bidirectional business transmission.

[0092] Step 3: During the flight, the airborne test data terminal transmits the data of the airborne equipment to the park subsystem in real time through the ATG air-to-ground data link. The data of the airborne equipment can be viewed in real time through the private network self-service management platform and 5G terminals.

[0093] Specifically, the data from airborne equipment includes, but is not limited to, dynamic meteorological data from weather radar surveys, aircraft platform status data, pilot physiological and psychological monitoring data, and data monitored by threat detection modules.

[0094] Step 4: View the status data of the aircraft platform in real time on the private network self-service management platform and 5G terminal, and perform real-time monitoring and analysis of the status data of the aircraft platform.

[0095] It should be noted that the private network self-service management platform needs to process the status data of the aircraft platform according to the testing requirements;

[0096] Step 5: When monitoring the aircraft platform's status data in real time, if any anomalies are detected, the abnormal equipment or abnormal flight interface will be transmitted back to the park subsystem via the onboard camera.

[0097] Step 6: Diagnose abnormal faults with the assistance of remote experts to ensure the safe conduct of flight missions;

[0098] It should be noted that if it is found that the flight mission cannot be carried out normally, the pilot will be notified by making a VoIP call or sending a message through the private network self-service management platform and 5G terminal to inform him of the mission interruption or mission change.

[0099] Step 7: Analyze and resolve network threat risks brought about by the significant improvement in intelligence and information technology levels by installing threat detection modules on aircraft;

[0100] Specifically, the threat detection module needs to test and analyze the potential risks brought about by the use of common protocols, common hardware, and common software in avionics networks such as the 5G ATG-based air-to-ground integrated aviation intelligent network communication system and avionics bus network.

[0101] Specifically, the threat detection module needs to monitor and alert on security threats arising from airborne equipment connecting to public networks such as the Internet and 5G core network;

[0102] It should be noted that the threat detection module can monitor data in real time. If an emergency or abnormal situation is detected, remote experts can assist in resolving it. If the situation cannot be resolved, the pilot will be prompted to return to base immediately. After the flight is completed, the dedicated network self-service management platform will output an aircraft information security risk test and assessment report.

Claims

1. A 5G ATG-based integrated air-ground intelligent network communication system for aviation, characterized in that, This includes airborne subsystems, 5G ATG ground base stations, core network, ground leased lines, and campus subsystems, among which: The airborne subsystem includes an airborne phased array antenna, an airborne 5G CPE, an encryption device, a threat detection module, and an airborne switch / WIFI. The airborne 5G CPE serves as a processing unit that converts wireless signals into IP signals and is used for beamforming of the airborne phased array antenna and in-flight cell handover processing. The threat detection module includes a protocol parsing module, an attack detection module, a device acquisition module, a threat injection module, and a monitoring and alarm module. The protocol parsing module is used to parse the communication data acquired by monitoring the communication according to the fields, and obtain its communication protocol type and its corresponding key fields. It supports the acquisition and parsing of IT protocol, OT protocol and avionics bus protocol. The attack detection module is used to perform threat detection on the communication data transmitted by the protocol parsing module, and transmit the results to the private network self-service management platform and 5G terminal display via the 5G ATG link; The device acquisition module is used to collect network traffic in real time, perform traffic analysis in real time to obtain relevant information, and automatically discard the analyzed traffic. The threat injection module is used to automatically retrieve vulnerability databases or custom vulnerability detection rules; The monitoring and alarm module is used to provide visual interface alarms for security threats; The park subsystem includes firewalls, switches, encryption machines, ATG private network management and control application servers, private network self-service management platforms, and 5G terminals. The 5G ATG ground base station is used to provide 5G ATG signal coverage for a designated airspace. The core network and terrestrial leased lines are used for data transmission between 5G ATG terrestrial base stations and park subsystems; Data from the airborne test data terminal and the 5G terminal sequentially passes through the switch / WIFI, threat detection module, encryption machine, and airborne 5G CPE, is transmitted via the airborne phased array antenna, and then transmitted to the 5G ATG ground base station via the 5G ATG link. The 5G ATG ground base station is connected to the ground leased line through the core network, and then sequentially connected to the firewall, switch, encryption machine, ATG private network management application server, and ground switch / WIFI via the ground leased line to transmit data to the private network self-service management platform and the 5G terminal. Ground data from the private network self-service management platform and 5G terminals is received via ground switches / WIFI, encrypted by the ATG private network management application server and encryption machine, and then transmitted sequentially through switches, firewalls, ground leased lines, core networks and 5G ATG ground base stations to the aircraft via the 5G ATG link. It is received by the airborne phased array antenna, processed by the airborne 5G CPE, decrypted by the encryption machine and monitored by the threat detection module. After no abnormal behavior is detected, it is transmitted to the 5G terminal for visualization display via the airborne switch / WIFI.

2. The system according to claim 1, characterized in that, The airborne 5G CPE refers to terminal equipment installed on an aircraft for communicating with ground networks; The encryption device is used to ensure the security of air-to-ground data transmission; The threat detection module is used to address network threat vulnerabilities. Through the analysis of avionics bus data and threat monitoring and alarm, it realizes the threat monitoring and alarm function of the secure link in the air-ground integrated aviation intelligent network communication system based on 5G ATG. The airborne switch / WIFI is used to receive data from the airborne test data terminal and to interact with the 5G terminal.

3. The system according to claim 1, characterized in that, The park subsystem is used to realize bidirectional service transmission between the airborne subsystem and the 5G terminal and private network self-service management platform that access the ground switch / WIFI; The firewall is used to monitor and control traffic, protecting the campus subsystems from unauthorized access, attacks, and threats. The switch is used for data forwarding; The ATG private network management application server is used to manage, control, and optimize applications and services within the ATG private network. The private network self-service management platform is used to monitor and manage the performance of 5G terminals accessing the ATG network, network link status, and airborne 5G CPE, and to deploy application apps to enable video and voice call functions between ground and air clients, as well as real-time downlink management of onboard data.

4. The system according to claim 1, characterized in that, The encryption device includes a key distribution system, an extraction and storage component, an encryption component, a decryption component, a post-transmission section, and a post-reception section. It extracts and stores the key from the key distribution system, expands it, encapsulates it into an IP packet format at a preset rate, and outputs it after encryption / decryption operations with user data. Then, it is sent to the line for transmission or restored to the user.

5. A method for implementing the air-ground integrated intelligent aviation network communication system based on 5G ATG as described in any one of claims 1 to 4, characterized in that, The methods include: Step 1: Transmit the onboard data of the airborne test data terminal and the 5G terminal to the 5G ATG ground base station through the airborne subsystem; Step 2: After receiving the IP signal, the 5G ATG ground base station transmits it to the park subsystem through the core network and ground leased line; Step 3: The park subsystem processes the received IP signals and then displays them visually on the private network self-service management platform and 5G terminals; Step 4: Analyze the data displayed on the private network self-service management platform and 5G terminal visualization; Step 5: If the analyzed data is abnormal, the processing measures will be transmitted to the onboard 5G terminal via the ground 5G terminal; Step 1 includes: Step 11: Onboard data from the airborne test data terminal and the 5G terminal is received and transmitted to the threat detection module via the airborne switch / WIFI; Step 12: The threat detection module analyzes the onboard data and transmits the analysis results and onboard data to the encryption machine; Step 13: The encryption device encrypts the analysis results of the threat detection module and the onboard data and transmits them to the onboard 5G CPE; Step 14: After receiving the analysis results from the threat detection module and the onboard data, the airborne 5G CPE converts them into IP signals and completes the beamforming of the airborne phased array antenna to ensure that the 5G ATG ground base station can receive IP signals through the 5G ATG link.

6. The method according to claim 5, characterized in that, Step 5 includes: Step 51: The processing measures are transmitted to the 5G ATG ground base station via the park subsystem, ground leased line and core network; Step 52: After receiving the processing measures, the 5G ATG ground base station transmits them to the airborne subsystem via the 5G ATG link; Step 53: After receiving the processing measures, the airborne subsystem decrypts them through the encryption machine and analyzes them through the threat detection module. If there are no abnormalities, the 5G terminal on board will display the results visually.

Images