Hotspot access control method and device for satellite communication terminal and communication terminal

Abstract

The hotspot access control method, device and communication terminal of the satellite communication terminal provided by the present invention include: real-time monitoring of the channel state information of the hotspot signal transmitted by the satellite communication terminal to obtain a channel state data set; analyzing the channel state data set to obtain a channel quality index; obtaining the connection state parameters of each user device connected to the hotspot of the satellite communication terminal, and constructing a user connection state matrix; clustering the user connection state matrix to identify the corresponding user groups; wherein different user groups correspond to different load states; and according to the channel quality index and the load state of the user group, hotspot resources are allocated by a preset resource allocation algorithm to realize hotspot access control of the satellite communication terminal. In the present invention, hotspot resources are dynamically allocated according to the connection state parameters of the user device, thereby overcoming the defect of unreasonable resource allocation during hotspot access at present.

Description

Technical Field

[0001] The present invention relates to the technical field of communication equipment, and in particular to a hotspot access control method and device for a satellite communication terminal and a communication terminal. Background Art

[0002] The hotspot services provided by satellite communication terminals have been widely used in many fields, such as network coverage in remote areas, communication guarantee in aviation and navigation, and information transmission in emergency rescue scenarios. However, in practical applications, the hotspot access control method of satellite communication is difficult to meet the needs of efficient and stable communication.

[0003] User devices in satellite communication hotspots are diverse and dynamic. Different user devices may have different communication requirements, transmission capabilities, and signal reception capabilities, and the access and exit of users occur randomly, which makes the load status of the hotspot constantly changing. Traditional access control methods often cannot accurately identify the load status of user groups, and usually adopt simple average allocation or first-come-first-served strategies, which not only cannot make full use of limited hotspot resources, but also cause some user devices to be unable to communicate normally due to insufficient resources, while other devices occupy too many resources and cause waste, thereby reducing the resource utilization and communication efficiency of the entire satellite communication system. That is, the current hotspot access for user terminals has the defect of unreasonable resource allocation. Summary of the invention

[0004] The main purpose of the present invention is to provide a hotspot access control method, device and communication terminal for a satellite communication terminal, aiming to overcome the defect of unreasonable resource allocation during hotspot access.

[0005] To achieve the above object, the present invention provides a hotspot access control method for a satellite communication terminal, comprising the following steps:

[0006] Real-time monitoring of the channel status information of the hot spot signal transmitted by the satellite communication terminal to obtain a channel status data set;

[0007] Analyze the channel status data set to obtain a channel quality indicator;

[0008] Acquire connection status parameters of each user device connected to the satellite communication terminal hotspot, and construct a user connection status matrix;

[0009] Clustering the user connection state matrix to identify corresponding user groups; wherein different user groups correspond to different load states;

[0010] According to the channel quality index and the load status of the user group, hotspot resource allocation is performed through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

[0011] Further, analyzing the channel status data set to obtain a channel quality indicator includes:

[0012] Decomposing the channel state data set in multiple dimensions to obtain a signal strength sequence, a signal noise sequence, a signal fading sequence, and a signal interference sequence;

[0013] Performing mean calculation on the signal strength sequence to obtain an average signal strength characteristic value;

[0014] Calculating the standard deviation of the signal noise sequence to obtain a noise fluctuation characteristic value;

[0015] Calculating the slope of the signal fading sequence to obtain a fading trend characteristic value;

[0016] Performing spectrum analysis on the signal interference sequence to determine the interference frequency band characteristic value;

[0017] The average signal strength characteristic value, the noise fluctuation characteristic value, the fading trend characteristic value and the interference frequency band characteristic value are input into a pre-trained channel quality assessment model for analysis to obtain the channel quality index.

[0018] Furthermore, the connection status parameters include transmission data volume, transmission rate and signal strength.

[0019] Furthermore, according to the channel quality index and the load status of the user group, hotspot resource allocation is performed through a preset resource allocation algorithm to implement hotspot access control of the satellite communication terminal, including:

[0020] quantifying the channel quality index into a channel capacity value, and determining a resource demand weight of each user group according to a load state of the user group;

[0021] According to the channel capacity value and the resource demand weight of each user group, a resource allocation algorithm is used to perform initial resource allocation to allocate initial bandwidth resources and time slot resources to each user group;

[0022] Monitor the actual transmission efficiency of each user group after initial resource allocation;

[0023] Comparing the actual transmission efficiency with a preset transmission efficiency threshold, and dynamically adjusting resources for user groups whose transmission efficiency does not reach the threshold according to a preset adjustment strategy;

[0024] Conduct stability assessment on resource allocation plans after dynamic resource adjustment;

[0025] Implement resource allocation plans that have passed stability assessments to achieve optimal allocation of satellite communication terminal hotspot resources and hotspot access control.

[0026] Further, after the hotspot access control of the satellite communication terminal is realized, it includes:

[0027] For each user device, obtaining identification information of the user device; generating an identification key based on the identification information;

[0028] Generate a comprehensive matrix based on the channel state data set and the user connection state matrix; generate a basic key based on the comprehensive matrix;

[0029] The basic key and the identification key are combined to obtain the communication key of the user equipment; the communication key is used as the key when the user equipment interacts with data.

[0030] Further, based on the channel state data set and the user connection state matrix, a comprehensive matrix is ​​generated, including:

[0031] Obtaining attributes of the user connection state matrix;

[0032] Generate a blank matrix with the same properties as described;

[0033] Performing a hash operation on the channel state data set to obtain a hash value;

[0034] Adding the hash value to the blank matrix to generate a hash matrix;

[0035] The user connection state matrix and the hash matrix are superimposed to obtain the comprehensive matrix; wherein the elements at the same position of the user connection state matrix and the hash matrix are superimposed.

[0036] Further, based on the comprehensive matrix, a basic key is generated, including:

[0037] Performing discrete Fourier transform on the elements of the comprehensive matrix to obtain a frequency domain sequence;

[0038] Performing encryption mapping on the frequency domain sequence using a trapdoor function based on lattice cryptography to generate an encrypted sequence;

[0039] Generate a pseudo-random sequence based on hardware identification information of the satellite communication terminal, and perform an XOR operation on the encrypted sequence based on the pseudo-random sequence to obtain an obfuscated sequence;

[0040] Based on the obfuscated sequence, a basic key is generated through an error correction coding algorithm; wherein the parameters of the error correction coding algorithm are dynamically adjusted according to the statistical characteristics of the channel state data set.

[0041] Further, based on the comprehensive matrix, a basic key is generated, including:

[0042] Using each row element of the comprehensive matrix as a coefficient of the polynomial to construct a set of polynomials, and using fast Fourier transform to evaluate the polynomials to obtain a set of values ​​in the complex domain;

[0043] Using the values ​​of the complex domain as control points, a spline curve interpolation method is used to generate an encrypted curve, and discrete sampling is performed on the encrypted curve to obtain coordinate values ​​of a series of discrete points;

[0044] The coordinate values ​​are converted into high-dimensional vectors according to a preset base conversion rule, and a symmetric positive definite matrix is ​​constructed by inner product operation between high-dimensional vectors;

[0045] Decomposing the symmetric positive definite matrix to obtain a lower triangular matrix; extracting the diagonal elements and the non-zero elements of the lower triangular part of the lower triangular matrix, and forming a one-dimensional sequence according to a preset arrangement rule;

[0046] The one-dimensional sequence is input into a key generator based on the elliptic curve cryptography system, and a basic key is generated in combination with the geographical location information of the satellite communication terminal; the geographical location information is used to optimize the base point selection and parameter adjustment in the key generator.

[0047] The present invention also provides a hotspot access control device for a satellite communication terminal, comprising:

[0048] A monitoring unit, used to monitor the channel state information of the hot spot signal transmitted by the satellite communication terminal in real time to obtain a channel state data set;

[0049] An analysis unit, configured to analyze the channel status data set to obtain a channel quality indicator;

[0050] A construction unit, used to obtain connection status parameters of each user equipment connected to the satellite communication terminal hotspot, and construct a user connection status matrix;

[0051] A clustering unit, used to cluster the user connection state matrix and identify corresponding user groups; wherein different user groups correspond to different load states;

[0052] The access unit is used to perform hotspot resource allocation according to the channel quality index and the load status of the user group through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

[0053] The present invention also provides a communication terminal, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any one of the above methods when executing the computer program.

[0054] The present invention also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned methods are implemented.

[0055] The hotspot access control method, device and communication terminal of the satellite communication terminal provided by the present invention include: real-time monitoring of the channel state information of the hotspot signal transmitted by the satellite communication terminal to obtain a channel state data set; analyzing the channel state data set to obtain a channel quality index; obtaining the connection state parameters of each user device connected to the hotspot of the satellite communication terminal, and constructing a user connection state matrix; clustering the user connection state matrix to identify the corresponding user groups; wherein different user groups correspond to different load states; and according to the channel quality index and the load state of the user group, hotspot resources are allocated by a preset resource allocation algorithm to realize hotspot access control of the satellite communication terminal. In the present invention, hotspot resources are dynamically allocated according to the connection state parameters of the user device, thereby overcoming the defect of unreasonable resource allocation during hotspot access at present. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 It is a schematic diagram of the steps of a hotspot access control method of a satellite communication terminal in one embodiment of the present invention;

[0057] Figure 2 It is a structural block diagram of a hotspot access control device of a satellite communication terminal in one embodiment of the present invention;

[0058] Figure 3 It is a schematic block diagram of the structure of a communication terminal according to an embodiment of the present invention.

[0059] The implementation, functional features and advantages of the present invention will be further described in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0061] Reference Figure 1 In one embodiment of the present invention, a hotspot access control method for a satellite communication terminal is provided, comprising the following steps:

[0062] Step S1, real-time monitoring of the channel state information of the hot spot signal transmitted by the satellite communication terminal to obtain a channel state data set;

[0063] Step S2, analyzing the channel status data set to obtain a channel quality indicator;

[0064] Step S3, obtaining connection status parameters of each user device connected to the satellite communication terminal hotspot, and constructing a user connection status matrix;

[0065] Step S4, clustering the user connection state matrix to identify corresponding user groups; wherein different user groups correspond to different load states;

[0066] Step S5, performing hotspot resource allocation according to the channel quality index and the load status of the user group through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

[0067] In this embodiment, as described in step S1 above, in a satellite communication environment, channel state information is essential for optimizing communication performance. The hot spot signal emitted by the satellite communication terminal is tracked and data collected in real time by a monitoring device. The above monitoring device can capture parameters of multiple dimensions of the signal, such as signal strength, signal-to-noise ratio, signal frequency offset, multipath fading, etc. The above parameter values ​​collected continuously over time are sorted and recorded to form a complete channel state data set. The above data set can fully reflect the real-time status of the current satellite communication channel and provide basic data support for subsequent analysis and decision-making. For example, under different weather conditions, such as sunny, cloudy, rainstorm, etc., the signal strength and noise ratio will change significantly, and these changes can be captured in time through real-time monitoring.

[0068] As described in step S2 above, after receiving the channel status data set, it is necessary to conduct an in-depth analysis to extract key indicators that can accurately characterize the channel quality. First, statistical analysis is performed on each parameter in the data set to calculate some basic statistics, such as mean value, standard deviation, maximum value, minimum value, etc. The above statistics can preliminarily reflect the stability and fluctuation range of the signal. Then, some signal processing algorithms and models are used to further evaluate the channel quality. For example, a spectrum analysis algorithm is used to determine the distribution of signals in different frequency bands and identify the existing interference frequency bands; the channel fading model is used to predict the fading trend of the signal in the future period of time, so as to take corresponding compensation measures in advance. Finally, the various evaluation results obtained through analysis and processing are comprehensively quantified to form a unified channel quality index, which can intuitively reflect the quality of the current channel, for example, represented by a value between 0 and 1. The closer the value is to 1, the better the channel quality is, and the closer it is to 0, the worse the channel quality is.

[0069] As described in the above-mentioned step S3, in order to realize efficient hotspot resource allocation, it is necessary to fully understand the connection status of each user equipment connected to the hotspot of the satellite communication terminal. Through the communication protocol and interaction mechanism between the user equipment, the relevant connection status parameters of each user equipment are collected, and these parameters include but are not limited to the transmission data volume, transmission rate, signal strength, connection duration, packet loss rate, etc. of the user equipment. The above parameters are sorted and arranged according to certain rules to build a user connection state matrix. Each row of the matrix represents a user equipment, and each column corresponds to a specific connection state parameter. Such a matrix structure can clearly show the connection state of all user equipment, and facilitates subsequent cluster analysis and resource allocation decisions. For example, in a hotspot environment with multiple user equipment connected simultaneously, by building a user connection state matrix, it can be intuitively seen which devices have a higher transmission rate and which devices have a weaker signal strength, thereby providing a basis for targeted resource allocation.

[0070] As described in step S4 above, based on the constructed user connection state matrix, a clustering algorithm is used to divide user devices with similar connection state characteristics into the same group. The clustering algorithm can perform intelligent grouping according to the weights and correlations of different connection state parameters. For example, a distance-based clustering algorithm, such as the K-Means algorithm, is used to group user devices with similar performance in terms of transmission data volume, transmission rate, signal strength, etc. into one category. Through this clustering method, different user groups can be identified, and each user group actually represents a specific load state. For example, the user devices in one group have a higher transmission rate requirement and a larger transmission data volume, which indicates that the group is in a high load state; while the user devices in another group have a lower transmission rate and a smaller data volume, which belongs to a low load state. By classifying users in the above manner, it is possible to more accurately understand the load distribution of the entire hotspot and provide a more targeted basis for subsequent resource allocation.

[0071] As described in step S5 above, after obtaining the channel quality index and the load status information of the user group, a preset resource allocation algorithm is used to reasonably allocate hotspot resources. The resource allocation algorithm comprehensively considers the carrying capacity of the channel and the needs of different user groups. First, the total amount of resources that the current channel can provide, such as the total available bandwidth, the number of time slots, etc., is determined according to the channel quality index. Then, a corresponding proportion of resources are allocated to each user group according to its load status. For user groups in high load status, if the channel conditions permit, more resources are preferentially allocated to meet their higher communication needs; for user groups in low load status, relatively fewer resources are allocated to avoid resource waste. In the resource allocation process, the fairness and stability of resource allocation also need to be considered to avoid some user groups occupying too many resources for a long time, which causes other user groups to be unable to communicate normally. By continuously and dynamically adjusting the resource allocation scheme according to the changes in the channel status and user load, efficient control of hotspot access of satellite communication terminals is achieved, ensuring that each user device can obtain relatively stable and appropriate communication service quality in the current satellite communication environment.

[0072] In summary, the hotspot access control method of the satellite communication terminal can effectively cope with the complex and changeable situations in the satellite communication environment and improve the utilization rate of hotspot resources and the user's communication experience through real-time monitoring, analysis, clustering of channel status and user connection status and reasonable allocation of resources.

[0073] In one embodiment, analyzing the channel status data set to obtain a channel quality indicator includes:

[0074] Decomposing the channel state data set in multiple dimensions to obtain a signal strength sequence, a signal noise sequence, a signal fading sequence, and a signal interference sequence;

[0075] Performing mean calculation on the signal strength sequence to obtain an average signal strength characteristic value;

[0076] Calculating the standard deviation of the signal noise sequence to obtain a noise fluctuation characteristic value;

[0077] Calculating the slope of the signal fading sequence to obtain a fading trend characteristic value;

[0078] Performing spectrum analysis on the signal interference sequence to determine the interference frequency band characteristic value;

[0079] The average signal strength characteristic value, the noise fluctuation characteristic value, the fading trend characteristic value and the interference frequency band characteristic value are input into a pre-trained channel quality assessment model for analysis to obtain the channel quality index.

[0080] In this embodiment, the channel state data set contains rich information, but the above information is mixed together, which is not conducive to direct analysis and evaluation of channel quality. Through multi-dimensional decomposition, complex channel data can be classified and extracted according to different features, so that subsequent analysis is more targeted and accurate. For example, all data points related to signal strength are screened out from the original data and arranged in chronological order to form a signal strength sequence; similarly, the data reflecting the signal noise situation is organized into a signal noise sequence, and so on to obtain a signal fading sequence and a signal interference sequence. Such a decomposition enables the changing trend and law of each feature to be more clearly displayed, providing a basis for subsequent eigenvalue calculations.

[0081] The above signal strength is an important indicator for measuring channel quality, and its mean can reflect the overall strength level of the signal over a period of time. By calculating the mean of the signal strength sequence, some short-term, random signal fluctuations can be eliminated to obtain a relatively stable value representing the signal strength. For example, if the signal strength fluctuates frequently over a period of time, but the mean is relatively high, it means that the overall signal strength is still considerable; conversely, if the mean is low, it indicates that the signal may have problems such as attenuation or insufficient coverage. This average signal strength characteristic value will be used as an important parameter for channel quality assessment and will participate in subsequent comprehensive analysis.

[0082] The size and stability of the above signal noise have a key impact on the channel quality. The standard deviation is a statistic that measures the degree of data dispersion. Calculating the standard deviation of the signal noise sequence can reflect the fluctuation of the noise. If the standard deviation is small, it means that the noise is relatively stable and the degree of interference to the signal is relatively constant; if the standard deviation is large, it means that the noise changes more dramatically, which may cause large sudden interference to the signal at certain moments, seriously affecting the communication quality. Therefore, the noise fluctuation characteristic value can help evaluate the uncertainty and potential risks of noise factors in the channel and provide more comprehensive information for channel quality assessment.

[0083] The above-mentioned signal fading is a common phenomenon in satellite communications, and its fading trend is crucial for predicting the future performance of the channel. By calculating the slope of the signal fading sequence, it can be determined whether the signal is gradually increasing, gradually decreasing, or relatively stable. For example, a positive slope indicates that the signal is increasing, which may be due to improved environmental factors or adaptive adjustments of communication equipment; a negative slope indicates that the signal is fading, and timely measures need to be taken to compensate, such as adjusting the transmission power or switching the communication frequency band. The fading trend eigenvalue can provide strong support for the dynamic evaluation and forward-looking decision-making of channel quality, and be prepared in advance to deal with signal changes.

[0084] In a complex satellite communication environment, there are various interference sources, and the above interference may be concentrated in a specific frequency band. By performing spectrum analysis on the signal interference sequence, the frequency band range and intensity distribution of the interference signal can be determined. For example, identifying the presence of strong electromagnetic interference in a certain frequency band is of great guiding significance for subsequent communication frequency selection, channel adjustment or interference suppression measures. The interference frequency band characteristic value can help the communication system accurately locate the frequency characteristics of the interference source, so as to take targeted measures to avoid or reduce the impact of interference on channel quality.

[0085] The eigenvalues ​​calculated above reflect the state of the channel from different angles, but it is difficult to comprehensively and accurately evaluate the channel quality by relying on these eigenvalues ​​alone. Therefore, they are input into the pre-trained channel quality assessment model, which is trained based on a large amount of historical channel data and actual communication cases, and can learn the complex relationship and rules between different eigenvalue combinations and channel quality. Through the algorithms and parameters within the model, the input eigenvalues ​​are comprehensively analyzed and calculated, and finally an indicator that can comprehensively and objectively characterize the channel quality is output. This indicator can be in the form of a numerical value, a level, or a probability value, so that the communication system can quickly and intuitively understand the quality status of the current channel, and perform operations such as resource allocation and communication strategy adjustment based on this to ensure the stability and reliability of satellite communications.

[0086] In one embodiment, hotspot resource allocation is performed according to the channel quality index and the load status of the user group through a preset resource allocation algorithm to implement hotspot access control of the satellite communication terminal, including:

[0087] quantifying the channel quality index into a channel capacity value, and determining a resource demand weight of each user group according to a load state of the user group;

[0088] According to the channel capacity value and the resource demand weight of each user group, a resource allocation algorithm is used to perform initial resource allocation to allocate initial bandwidth resources and time slot resources to each user group;

[0089] Monitor the actual transmission efficiency of each user group after initial resource allocation;

[0090] Comparing the actual transmission efficiency with a preset transmission efficiency threshold, and dynamically adjusting resources for user groups whose transmission efficiency does not reach the threshold according to a preset adjustment strategy;

[0091] Conduct stability assessment on resource allocation plans after dynamic resource adjustment;

[0092] Implement resource allocation plans that have passed stability assessments to achieve optimal allocation of satellite communication terminal hotspot resources and hotspot access control.

[0093] In this embodiment, the above-mentioned channel quality index is an abstract representation of the comprehensive evaluation of the channel state. In order to facilitate the subsequent specific operation of resource allocation, it needs to be converted into a more practical channel capacity value. This process is implemented based on certain mathematical models and communication theories. For example, according to Shannon's theorem (channel capacity = bandwidth × log2 (1 + signal-to-noise ratio), where factors such as bandwidth and signal-to-noise ratio are related to the channel quality index), the maximum data transmission rate that the current channel can carry under ideal conditions is calculated through the information on signal strength, noise, etc. contained in the channel quality index, that is, the quantified channel capacity value. This value intuitively reflects the upper limit of the total amount of resources that the channel can currently allocate, and is one of the basic bases for resource allocation.

[0094] Different user groups are in different load states due to differences in their connection status characteristics (such as the amount of data transmitted, transmission rate requirements, etc.), and their resource requirements are also different. For user groups with higher loads, it means that they have more data to transmit and are more urgent for resources such as bandwidth and time slots, so they should be given a relatively large resource demand weight; on the contrary, user groups with lower loads have relatively less urgent resource needs, so their weights will be relatively small. By determining weights based on load status, the differentiated needs of different user groups can be reflected in subsequent resource allocation, ensuring that resource allocation is more in line with actual communication conditions, avoiding blind resource allocation, and enabling limited hotspot resources to give priority to more urgent user groups.

[0095] After obtaining the channel capacity value and the resource demand weight of each user group, the preset resource allocation algorithm can be used for initial resource allocation. Common resource allocation algorithms will take these two key factors into consideration, such as the principle of proportional allocation. Through such initial allocation, each user group can obtain a certain amount of bandwidth and time slot resources, so that they can start communication activities such as data transmission, and initially build a resource allocation framework based on the current channel status and user group needs.

[0096] After the initial resource allocation is completed, it does not mean that the resource allocation has reached the optimal state, because the actual communication environment is complex and changeable, and may be affected by various interferences, channel changes and other factors. Therefore, it is necessary to monitor the actual transmission efficiency of each user group in real time. The actual transmission efficiency can be measured by calculating the ratio of the amount of data successfully transmitted by the user group per unit time to the amount of data that should be transmitted theoretically. For example, monitoring the ratio of the number of complete data packets actually received by a user group in a specific time period to the number of data packets that should be received theoretically according to the allocated resources can intuitively understand the actual communication effect of the user group under the currently allocated resources, and provide accurate actual data support for subsequent judgments on whether resources need to be adjusted.

[0097] The preset transmission efficiency threshold is a measurement standard pre-set according to the performance requirements and business needs of the satellite communication system, and is used to determine whether the resource allocation of the current user group is reasonable and whether it meets the basic communication quality requirements. When the actual transmission efficiency of a user group is monitored to be lower than the preset threshold, it means that the resources currently allocated to the user group may not be sufficient to ensure its normal and efficient communication, and its resources need to be adjusted.

[0098] Dynamic allocation of resources is performed according to preset adjustment strategies, which are usually formulated based on certain rules and algorithms. For example, if the low transmission efficiency of a user group is due to insufficient bandwidth, its bandwidth resources can be appropriately increased according to a certain incremental ratio; or if the low efficiency is caused by unreasonable time slot allocation, its time slot allocation can be replanned and adjusted. This dynamic adjustment can flexibly optimize resource allocation according to actual communication conditions, so that the resource allocation plan can better adapt to the changing channel environment and user needs, maximize the transmission efficiency of each user group, and ensure the stable operation of the overall communication system.

[0099] After the resources are dynamically adjusted, although they are optimized from the perspective of improving transmission efficiency, whether the new resource allocation scheme can remain stable and reliable in the face of subsequent channel fluctuations, changes in user group status, etc., needs further evaluation. Stability evaluation can be carried out by simulating different channel interference scenarios, dynamic changes such as user access and exit, to observe the transmission performance fluctuations of each user group under the resource allocation scheme. For example, Monte Carlo simulation and other methods are used to simulate various possible complex situations multiple times, and statistically analyze the range of changes in key indicators such as transmission efficiency and packet loss rate of each user group under these simulated scenarios. If the fluctuations of these indicators are within an acceptable range, it means that the resource allocation scheme has good stability and can ensure the rationality and effectiveness of satellite communication terminal hotspot resource allocation over a long period of time and in complex environments.

[0100] A resource allocation plan that has passed the stability assessment means that it can meet the basic communication needs of each user group and improve the actual transmission efficiency in the current satellite communication environment, and can maintain relatively stable performance in the face of various potential changes. At this time, this plan will be formally implemented. According to the allocation of bandwidth resources, time slot resources, etc. of each user group determined in the plan, actual resource configuration and management will be carried out in the hotspot access control mechanism of the satellite communication terminal, so as to achieve the optimal allocation of hotspot resources, ensure that different user devices can communicate stably and efficiently in this hotspot, complete the entire satellite communication terminal hotspot access control process, and improve the resource utilization efficiency and communication service quality of the entire satellite communication system.

[0101] To sum up, this technical solution has formed a closed-loop resource management process from initial resource allocation to dynamic adjustment, stability assessment and final implementation. It fully considers multiple factors such as channel quality and user group load, and can flexibly respond to the complex and changeable environment of satellite communications, realize the scientific and reasonable allocation of hot spot resources, and provide strong guarantees for the efficient and stable operation of satellite communication terminals.

[0102] In one embodiment, after hotspot access control of a satellite communication terminal is implemented, the process includes:

[0103] For each user device, obtaining identification information of the user device; generating an identification key based on the identification information;

[0104] Generate a comprehensive matrix based on the channel state data set and the user connection state matrix; generate a basic key based on the comprehensive matrix;

[0105] The basic key and the identification key are combined to obtain the communication key of the user equipment; the communication key is used as the key when the user equipment interacts with data.

[0106] In this embodiment, in the hotspot network environment of the satellite communication terminal, each user device has a unique identifier, which can be the hardware serial number, MAC address, IMEI number of the device, or a unique digital identifier assigned when accessing the hotspot, etc. Through the communication protocol and interaction mechanism between the hotspot and the user device, the satellite communication terminal can accurately obtain this identification information.

[0107] Based on the acquired user device identification information, a specific encryption algorithm is used to generate an identification key. This encryption algorithm can be based on a hash function, a symmetric encryption algorithm, or a variant of an asymmetric encryption algorithm. For example, a hash function is used to perform a hash operation on the identification information, and the resulting hash value is used as part of the identification key; or the device identification information is used as the initial key of a symmetric encryption algorithm, and the final identification key is generated after multiple encryption iterations.

[0108] The above channel status data set reflects the real-time physical characteristics of the satellite communication channel, including signal strength, signal noise, fading, interference and other information; while the user connection status matrix describes the connection status of each user device, such as the amount of data transmitted, transmission rate, signal strength, connection duration and other parameters. Fusion of these two different dimensional but closely related data sets to generate a comprehensive matrix can fully reflect the overall situation in the current satellite communication environment, including the combined impact of channel conditions and user behavior.

[0109] When generating a comprehensive matrix, a specific data fusion algorithm and matrix construction rules can be used. For example, the eigenvalues ​​in the channel state data set are arranged in a certain order in the first few rows of the comprehensive matrix, and then the elements in the user connection state matrix are filled in the subsequent rows in sequence, thereby constructing a two-dimensional matrix structure that contains both channel information and user connection information.

[0110] Using a comprehensive matrix to generate a basic key is a complex encryption process that aims to extract a key sequence with high confidentiality and randomness from the large amount of information contained in the comprehensive matrix.

[0111] The purpose of combining the basic key and identification key generated previously is to further enhance the security and uniqueness of the key. The combination can be a simple string concatenation followed by an encryption operation. For example, the basic key and identification key are connected in a certain order into a new string, and then the string is encrypted using a symmetric encryption algorithm to obtain the final communication key. A more complex key negotiation protocol can also be used, such as a variant based on the Diffie-Hellman key exchange algorithm, in which the satellite communication terminal and the user device use the basic key and identification key as initial parameters respectively, and finally negotiate a common communication key through a series of interactions and calculations. The communication key generated in this way contains both the specific identification information related to the user device and the dynamic characteristics of the satellite communication environment, so that each user device has a unique and highly secure communication key, which is used to encrypt and decrypt data during the data interaction process, ensure the confidentiality, integrity and authenticity of data transmitted in the satellite communication channel, effectively prevent data from being stolen, tampered with or forged, and provide a reliable security mechanism for data communication in the satellite communication terminal hotspot network.

[0112] In one embodiment, generating a comprehensive matrix based on the channel state data set and the user connection state matrix includes:

[0113] Obtaining attributes of the user connection state matrix;

[0114] Generate a blank matrix with the same properties as described;

[0115] Performing a hash operation on the channel state data set to obtain a hash value;

[0116] Adding the hash value to the blank matrix to generate a hash matrix;

[0117] The user connection state matrix and the hash matrix are superimposed to obtain the comprehensive matrix; wherein the elements at the same position of the user connection state matrix and the hash matrix are superimposed.

[0118] In this embodiment, in a satellite communication environment, the user connection status matrix carries a lot of key information, and its attributes cover multiple aspects. The above attributes mainly include the dimensions of the matrix (number of rows and columns), the data type, and the specific meanings represented by each element. For example, the number of rows of the matrix corresponds to the number of user devices connected to the satellite communication terminal hotspot, and each row represents a specific user device; the number of columns reflects the type of user connection status parameters recorded. The data type determines whether the elements in the matrix are stored in integers, floating points, or other forms, which is related to the accuracy of subsequent calculations and processing. Understanding these attributes is the basis for the subsequent generation of a comprehensive matrix, because the generated comprehensive matrix needs to match the user connection status matrix in structure, so that relevant data information can be reasonably integrated to ensure the orderliness and effectiveness of data integration.

[0119] Based on the properties of the acquired user connection status matrix, create a blank matrix with the same dimension and data type. This blank matrix is ​​used to fill in data information related to the channel status, thereby realizing the fusion of channel status data and user connection status data. For example, if the user connection status matrix is ​​a matrix with 10 rows and 5 columns and elements of floating point type, then the generated blank matrix will also be a structure with 10 rows and 5 columns and elements of floating point type. Its initial element value will usually be set to the default value (such as all 0s), waiting for the subsequent addition of processed channel status data.

[0120] The channel state data set contains a large amount of real-time monitoring information about various parameters of satellite communication channels, which is relatively complex and original. Through hash operations, these complex data can be converted into a hash value with a relatively fixed length and unique characteristics. The hash function is unidirectional, that is, the hash value can be easily calculated from the original data, but it is difficult to reversely deduce the original data from the hash value, which ensures the confidentiality and non-tamperability of the data after hash processing. The hash value obtained by the hash operation is added to the blank matrix according to certain rules to form a hash matrix. The added rules need to be determined based on the structure of the blank matrix and the characteristics of the hash value. For example, if the hash value is a long binary sequence, it can be filled into specific rows or columns of a blank matrix in the order of matrix elements, or the hash value can be divided into segments and filled into different element positions according to a certain division method to ensure that the hash value can be reasonably distributed in the entire matrix space, so that the generated hash matrix not only contains the key feature representation of the channel state data set after hash processing, but also has the same structural properties as the user connection state matrix, preparing for the next step of matrix superposition operation, so that the channel state information can be combined with the user connection state information in a structured manner, which is convenient for subsequent unified processing and analysis.

[0121] After obtaining the user connection state matrix and the hash matrix, the comprehensive matrix is ​​generated by superimposing the elements in the same position. For example, for the elements in the third row and fourth column of the two matrices, their values ​​are added, and the result is used as the element value of the third row and fourth column in the comprehensive matrix. Similarly, such superposition operations are performed on all elements in corresponding positions, and finally a comprehensive matrix that integrates channel state information and user connection state information is obtained. This comprehensive matrix comprehensively reflects the channel conditions and the connection status of each user device in the satellite communication environment, and provides an integrated data foundation for further encryption operations such as generating basic keys based on the comprehensive matrix, so that the keys generated subsequently can fully consider various factors in communication and enhance the security protection in the hotspot access control of the entire satellite communication terminal.

[0122] In one embodiment, generating a basic key based on the comprehensive matrix includes:

[0123] Performing discrete Fourier transform on the elements of the comprehensive matrix to obtain a frequency domain sequence;

[0124] Performing encryption mapping on the frequency domain sequence using a trapdoor function based on lattice cryptography to generate an encrypted sequence;

[0125] Generate a pseudo-random sequence based on hardware identification information of the satellite communication terminal, and perform an XOR operation on the encrypted sequence based on the pseudo-random sequence to obtain an obfuscated sequence;

[0126] Based on the obfuscated sequence, a basic key is generated through an error correction coding algorithm; wherein the parameters of the error correction coding algorithm are dynamically adjusted according to the statistical characteristics of the channel state data set.

[0127] In this embodiment, in the construction of the security mechanism of satellite communication, the comprehensive matrix integrates various information such as channel status and user connection status, but its original form in the time domain (or conventional data representation domain such as space domain) is not conducive to directly generating a secure and reliable basic key. Discrete Fourier transform (DFT) is a powerful mathematical tool that can convert the signal composed of the elements in the comprehensive matrix (a signal form formed by the arrangement of these data from a broad perspective) from the time domain to the frequency domain. By treating each row element of the comprehensive matrix or the entire matrix as a discrete signal according to certain rules and performing discrete Fourier transform operations, the characteristics contained in these data can be displayed in the form of frequency domain. For example, the complex laws such as the signal intensity changing with time originally reflected in the time domain will be converted into the amplitude and phase information of different frequency components after discrete Fourier transform. The characteristics presented by these frequency domain sequences have unique value for subsequent encryption operations, because the characteristics of the frequency domain can make some hidden features of the data easier to extract and utilize, and also change the form of expression of the data, increase the difficulty of potential crackers to analyze the data, and lay the foundation for the subsequent generation of secure basic keys.

[0128] Lattice cryptography is a technical direction with high security potential in the field of modern cryptography. The trapdoor function based on lattice cryptography uses the mathematical structure and problems in the lattice to construct an encryption mechanism. For the frequency domain sequence obtained above, the trapdoor function of lattice cryptography is used to perform encryption mapping operations on it. The trapdoor function has the following characteristics: the forward calculation (i.e., the encryption process) is relatively easy. Given an input frequency domain sequence, the frequency domain sequence can be quickly mapped to a new encryption sequence through specific lattice-based operation rules defined in the trapdoor function, such as linear combination of lattice vectors, lattice basis reduction and other complex mathematical operations; however, the reverse calculation (i.e., the decryption process) is extremely difficult without knowing the trapdoor information (which is secret information only held by the legally authorized party), which is almost equivalent to solving some difficult mathematical problems on the lattice (such as the shortest vector problem, the nearest vector problem, etc.), which makes it difficult for attackers to restore the original frequency domain sequence from the encrypted sequence, thereby ensuring the confidentiality of the data. Through such an encryption mapping, the frequency domain sequence is converted into an encryption sequence, which further improves the security of the data and builds a strong encryption defense line for the subsequent generation of basic keys.

[0129] The hardware identification information of the satellite communication terminal is unique, such as its device serial number, specific hardware code, etc. This information can be used as the seed for generating a pseudo-random sequence. Using a special pseudo-random number generation algorithm, with the hardware identification information as the initial parameter, a pseudo-random sequence is generated through a series of mathematical operations (such as improved algorithms based on linear congruential algorithm and Mersenne rotation algorithm, to ensure that the generated sequence has good randomness and unpredictability). Then, this pseudo-random sequence is XORed with the previously obtained encryption sequence. XOR operation is a simple but effective obfuscation method in cryptography. It operates on the corresponding bits of the two sequences bit by bit (the same is 0, and the different is 1), so that the original data characteristics of the encryption sequence are further hidden and obfuscated. The obfuscated sequence generated in this way not only retains the high security brought by lattice cryptography encryption, but also incorporates the randomness based on hardware identification information, which greatly increases the difficulty for external crackers to analyze the original data or restore useful information, making the data more confidential and adding protection for the final generation of a reliable basic key.

[0130] Error correction coding algorithm plays an important role in the field of communication and cryptography. It can correct errors that may occur during data transmission or processing to a certain extent, and ensure the accuracy and stability of the final generated key. Based on the current confusion sequence, the error correction coding algorithm is used for processing, such as the common Hamming code, Reed-Solomon code and other error correction coding methods. The basic key is generated by adding redundant information to the confusion sequence and performing coding grouping and other operations. What is special here is that the parameters of the error correction coding algorithm (such as coding redundancy, group length, etc.) will be dynamically adjusted according to the statistical characteristics of the channel state data set. Because the satellite communication channel is time-varying and uncertain, the statistical characteristics such as signal strength and noise in the channel state data set reflect the real-time quality of the channel. If the channel quality is poor and there is more interference, it is necessary to increase the redundancy of the error correction coding and add more error correction capabilities to ensure that the basic key is not affected by channel interference and errors during transmission and use; on the contrary, when the channel quality is good, the redundancy can be appropriately reduced to improve the efficiency of key generation. Through this dynamic adjustment mechanism, the generated basic key can better adapt to the complex and changeable channel environment of satellite communications, ensuring that the basic key has sufficient security in subsequent communications and can play a role stably and accurately, providing reliable key support for operations such as data encryption and decryption in satellite communication terminal hotspot access control.

[0131] In one embodiment, generating a basic key based on the comprehensive matrix includes:

[0132] Using each row element of the comprehensive matrix as a coefficient of the polynomial to construct a set of polynomials, and using fast Fourier transform to evaluate the polynomials to obtain a set of values ​​in the complex domain;

[0133] Using the values ​​of the complex domain as control points, a spline curve interpolation method is used to generate an encrypted curve, and discrete sampling is performed on the encrypted curve to obtain coordinate values ​​of a series of discrete points;

[0134] The coordinate values ​​are converted into high-dimensional vectors according to a preset base conversion rule, and a symmetric positive definite matrix is ​​constructed by inner product operation between high-dimensional vectors;

[0135] Decomposing the symmetric positive definite matrix to obtain a lower triangular matrix; extracting the diagonal elements and the non-zero elements of the lower triangular part of the lower triangular matrix, and forming a one-dimensional sequence according to a preset arrangement rule;

[0136] The one-dimensional sequence is input into a key generator based on the elliptic curve cryptography system, and a basic key is generated in combination with the geographical location information of the satellite communication terminal; the geographical location information is used to optimize the base point selection and parameter adjustment in the key generator.

[0137] In this embodiment, the comprehensive matrix integrates multiple key information in satellite communication, and uses each row element as the coefficient of the polynomial to construct a polynomial, which is a data conversion method. In this way, the data information in the matrix is ​​re-expressed in the form of a polynomial, which is convenient for subsequent use of mathematical transformation to explore the hidden features therein and prepare for the generation of a secure basic key.

[0138] Fast Fourier Transform (FFT) is an algorithm that efficiently calculates the values ​​of polynomials in the complex domain. By using FFT to evaluate the constructed polynomial, the function values ​​at a series of complex points can be quickly obtained, that is, a set of values ​​in the complex domain. Compared with the traditional method of directly calculating the value of the polynomial, FFT greatly reduces the computational complexity and improves the computational efficiency. The above values ​​in the complex domain not only contain the information contained in the row elements of the original comprehensive matrix, but also due to the unique mathematical properties of the complex domain, it can provide richer changes and higher confidentiality in the subsequent encryption process, laying the foundation for subsequent operations such as constructing encryption curves based on these values.

[0139] Spline interpolation is a mathematical method that constructs a smooth curve through a given series of control points. Using the complex domain values ​​obtained by FFT as control points, the spline interpolation method can generate an encryption curve with a specific shape and mathematical properties. This curve integrates and associates the original complex domain data at the geometric level. It is not a simple list of data, but a continuous and smooth curve to represent the data, making the relationship between the data more obscure and increasing the difficulty of analyzing and cracking the data from the outside. At the same time, since the shape of the curve depends on these complex control points, it is indirectly closely related to the information in the comprehensive matrix, so that the basic key generated subsequently can contain the various characteristics of the channels and user connections contained in the comprehensive matrix.

[0140] In order to facilitate further cryptographic processing, the generated encryption curve needs to be discretely sampled, that is, a series of points are selected on the curve according to certain intervals or rules to obtain the coordinate values ​​of these discrete points (usually two-dimensional or higher-dimensional coordinates, depending on the spatial dimension of the spline curve). The coordinate values ​​of these discrete points not only retain the key features of the encryption curve, but also convert the continuous curve information into discrete data form, which is convenient for subsequent operations such as vector conversion, and further promotes the generation process of the basic key.

[0141] According to the preset base conversion rules, the coordinate values ​​of discrete points are converted into high-dimensional vectors, which is another transformation of the data form. For example, if the coordinate values ​​are originally expressed in decimal, they are converted into binary or other base forms according to the preset rules, and rearranged into high-dimensional vectors. The purpose of this is to make the data more suitable for subsequent cryptographic processing based on vector operations, and to express the information contained in the coordinate values ​​in the form of vectors, which are widely used in cryptography and easy to perform mathematical operations, so as to facilitate the mining of potential features in the data for the construction of encryption structures.

[0142] The inner product operation between high-dimensional vectors plays an important role in cryptography and mathematics. By performing inner product operations on these converted high-dimensional vectors in pairs and combining the inner product results in a preset way, a symmetric positive definite matrix is ​​constructed. Symmetric positive definite matrices have many good mathematical properties. For example, their eigenvalues ​​are all positive numbers, and they have specific algorithmic advantages in subsequent operations such as matrix decomposition. At the same time, the process of constructing a matrix using the vector inner product further integrates the vector information converted from the coordinate value, so that the matrix contains the data features processed by the previous steps, providing a suitable data structure foundation for the subsequent key operations of generating the basic key.

[0143] The symmetric positive definite matrix is ​​decomposed, and common methods such as Cholesky decomposition can decompose it into the product of a lower triangular matrix and its transposed matrix to obtain the lower triangular matrix. The process of matrix decomposition is actually a reorganization and refinement of the information contained in the matrix. In this way, the hidden structural relationship inside the matrix can be excavated, and the form of the lower triangular matrix is ​​more convenient for subsequent extraction of key elements for further processing. The relationship between its elements is relatively simple and has a certain order, which is conducive to the subsequent generation of a one-dimensional sequence with specific rules and security.

[0144] Extract the diagonal elements and non-zero elements of the lower triangular part from the obtained lower triangular matrix, and combine these elements according to the preset arrangement rules (for example, from top to bottom of the diagonal and from left to right of each row, etc.) to form a one-dimensional sequence. This one-dimensional sequence condenses the key information retained after multiple complex transformations from the comprehensive matrix. It is presented in a concise linear form, ready for the final input into the key generator of the elliptic curve cryptography system, so that the basic key generated subsequently can fully reflect the various characteristics related to satellite communications integrated into the previous links, and ensure the security and relevance of the basic key.

[0145] Elliptic Curve Cryptography (ECC) is a public key cryptography system that is widely used in modern cryptography and has high security. The one-dimensional sequence obtained above is input into the key generator based on ECC. The key generator will use the information in this one-dimensional sequence to perform a series of complex operations based on the mathematical properties of the elliptic curve and related algorithms, such as point operations on the elliptic curve, key pair generation, and finally generate the basic key. The security of ECC is based on the difficulty of the elliptic curve discrete logarithm problem, which makes it difficult for attackers to reversely deduce the relevant operation parameters and original information from the generated basic key, thus ensuring the confidentiality of the key.

[0146] The geographic location information of satellite communication terminals has unique value. In the key generation process, the geographic location information is used to optimize the base point selection and parameter adjustment in the key generator. Different geographic locations may correspond to different communication environments, security requirements, and regulatory requirements. For example, the characteristics of the communication frequency band in the area, potential interference sources, etc. are determined based on the geographic location information, and then a more suitable elliptic curve base point (a specific reference point on the elliptic curve that has an important impact on subsequent operations) is selected, and some parameters in the cryptographic system (such as curve parameters, operation modulus, etc.) are dynamically adjusted, so that the generated basic key is more in line with the actual geographical environment and communication scenarios of the satellite communication terminal, further enhancing the adaptability, security and relevance of the basic key to satellite communications, and ensuring that the basic key can effectively protect the security of communication data in different satellite communication environments.

[0147] To sum up, this technical solution uses a variety of mathematical tools and cryptographic techniques, fully combines the relevant characteristics of satellite communications, and step by step generates basic keys with high security and close adaptation to the satellite communication environment from the comprehensive matrix, providing reliable security protection for data encryption and decryption in communication processes such as hotspot access control of satellite communication terminals.

[0148] Reference Figure 2 In one embodiment of the present invention, a hotspot access control device for a satellite communication terminal is provided, comprising:

[0149] A monitoring unit, used to monitor the channel state information of the hot spot signal transmitted by the satellite communication terminal in real time to obtain a channel state data set;

[0150] An analysis unit, configured to analyze the channel status data set to obtain a channel quality indicator;

[0151] A construction unit, used to obtain connection status parameters of each user equipment connected to the satellite communication terminal hotspot, and construct a user connection status matrix;

[0152] A clustering unit, used to cluster the user connection state matrix and identify corresponding user groups; wherein different user groups correspond to different load states;

[0153] The access unit is used to perform hotspot resource allocation according to the channel quality index and the load status of the user group through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

[0154] In this embodiment, for the specific implementation of each unit in the above device embodiment, please refer to the above method embodiment, which will not be repeated here.

[0155] Reference Figure 3 The embodiment of the present invention further provides a communication terminal, the internal structure of which can be as follows Figure 3 As shown. The communication terminal includes a processor, a memory, a display screen, an input device, a network interface and a database connected through a system bus. Among them, the computer-designed processor is used to provide computing and control capabilities. The memory of the communication terminal includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the communication terminal is used to store the corresponding data in this embodiment. The network interface of the communication terminal is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the above method is implemented.

[0156] Those skilled in the art will understand that Figure 3 The structure shown in the figure is merely a block diagram of a part of the structure related to the solution of the present invention, and does not constitute a limitation on the communication terminal to which the solution of the present invention is applied.

[0157] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the above method is implemented. It can be understood that the computer-readable storage medium in this embodiment can be a volatile readable storage medium or a non-volatile readable storage medium.

[0158] In summary, the hotspot access control method, device and communication terminal of the satellite communication terminal provided in the embodiments of the present invention include: real-time monitoring of the channel state information of the hotspot signal transmitted by the satellite communication terminal to obtain a channel state data set; analyzing the channel state data set to obtain a channel quality index; obtaining the connection state parameters of each user device connected to the hotspot of the satellite communication terminal, and constructing a user connection state matrix; clustering the user connection state matrix to identify the corresponding user groups; wherein different user groups correspond to different load states; and according to the channel quality index and the load state of the user group, hotspot resources are allocated through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal. In the present invention, hotspot resources are dynamically allocated according to the connection state parameters of the user device, thereby overcoming the defect of unreasonable resource allocation during hotspot access.

[0159] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media provided by the present invention and used in the embodiments can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double-speed data rate SDRAM (SSRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM.

[0160] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, device, article or method including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, device, article or method. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the presence of other identical elements in the process, device, article or method including the element.

[0161] The above description is only a preferred embodiment of the present invention, and does not limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A hotspot access control method for a satellite communication terminal, characterized in that: The following steps are involved: Real-time monitoring of the channel status information of the hot spot signal transmitted by the satellite communication terminal to obtain a channel status data set; Analyze the channel status data set to obtain a channel quality indicator; Acquire connection status parameters of each user device connected to the satellite communication terminal hotspot, and construct a user connection status matrix; Clustering the user connection state matrix to identify corresponding user groups; wherein different user groups correspond to different load states; According to the channel quality index and the load status of the user group, hotspot resource allocation is performed through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

2. The hotspot access control method for a satellite communication terminal according to claim 1, characterized in that: Analyzing the channel status data set to obtain a channel quality indicator includes: Decomposing the channel state data set in multiple dimensions to obtain a signal strength sequence, a signal noise sequence, a signal fading sequence, and a signal interference sequence; Performing mean calculation on the signal strength sequence to obtain an average signal strength characteristic value; Calculating the standard deviation of the signal noise sequence to obtain a noise fluctuation characteristic value; Calculating the slope of the signal fading sequence to obtain a fading trend characteristic value; Performing spectrum analysis on the signal interference sequence to determine the interference frequency band characteristic value; The average signal strength characteristic value, the noise fluctuation characteristic value, the fading trend characteristic value and the interference frequency band characteristic value are input into a pre-trained channel quality assessment model for analysis to obtain the channel quality index.

3. The hotspot access control method of a satellite communication terminal according to claim 1, characterized in that: The connection status parameters include transmission data volume, transmission rate and signal strength.

4. The hotspot access control method for a satellite communication terminal according to claim 1, characterized in that: According to the channel quality index and the load status of the user group, hotspot resource allocation is performed through a preset resource allocation algorithm to realize hotspot access control of the satellite communication terminal, including: quantifying the channel quality index into a channel capacity value, and determining a resource demand weight of each user group according to a load state of the user group; According to the channel capacity value and the resource demand weight of each user group, a resource allocation algorithm is used to perform initial resource allocation to allocate initial bandwidth resources and time slot resources to each user group; Monitor the actual transmission efficiency of each user group after initial resource allocation; Comparing the actual transmission efficiency with a preset transmission efficiency threshold, and dynamically adjusting resources for user groups whose transmission efficiency does not reach the threshold according to a preset adjustment strategy; Conduct stability assessment on resource allocation plans after dynamic resource adjustment; Implement resource allocation plans that have passed stability assessments to achieve optimal allocation of satellite communication terminal hotspot resources and hotspot access control.

5. The hotspot access control method for a satellite communication terminal according to claim 1, characterized in that: After the hotspot access control of satellite communication terminals is realized, it includes: For each user device, obtaining identification information of the user device; generating an identification key based on the identification information; Generate a comprehensive matrix based on the channel state data set and the user connection state matrix; generate a basic key based on the comprehensive matrix; The basic key and the identification key are combined to obtain the communication key of the user equipment; the communication key is used as the key when the user equipment interacts with data.

6. The hotspot access control method of a satellite communication terminal according to claim 5, characterized in that: Based on the channel state data set and the user connection state matrix, a comprehensive matrix is ​​generated, including: Obtaining attributes of the user connection state matrix; Generate a blank matrix with the same properties as described; Performing a hash operation on the channel state data set to obtain a hash value; Adding the hash value to the blank matrix to generate a hash matrix; The user connection state matrix and the hash matrix are superimposed to obtain the comprehensive matrix; wherein the elements at the same position of the user connection state matrix and the hash matrix are superimposed.

7. The hotspot access control method of a satellite communication terminal according to claim 5, characterized in that: Based on the comprehensive matrix, a basic key is generated, including: Performing discrete Fourier transform on the elements of the comprehensive matrix to obtain a frequency domain sequence; Performing encryption mapping on the frequency domain sequence using a trapdoor function based on lattice cryptography to generate an encrypted sequence; Generate a pseudo-random sequence based on hardware identification information of the satellite communication terminal, and perform an XOR operation on the encrypted sequence based on the pseudo-random sequence to obtain an obfuscated sequence; Based on the obfuscated sequence, a basic key is generated through an error correction coding algorithm; wherein the parameters of the error correction coding algorithm are dynamically adjusted according to the statistical characteristics of the channel state data set.

8. A hotspot access control device for a satellite communication terminal, characterized in that: include: A monitoring unit, used to monitor the channel state information of the hot spot signal transmitted by the satellite communication terminal in real time to obtain a channel state data set; An analysis unit, configured to analyze the channel status data set to obtain a channel quality indicator; A construction unit, used to obtain connection status parameters of each user equipment connected to the satellite communication terminal hotspot, and construct a user connection status matrix; A clustering unit, used to cluster the user connection state matrix and identify corresponding user groups; wherein different user groups correspond to different load states; The access unit is used to perform hotspot resource allocation according to the channel quality index and the load status of the user group through a preset resource allocation algorithm to achieve hotspot access control of the satellite communication terminal.

9. A communication terminal, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images