Method, system and terminal for realizing redundant channel of satellite data encryption service

Abstract

The invention discloses a method, a system and a terminal for realizing a redundant channel of a satellite data encryption service, and the method comprises the steps: obtaining a first configuration value, and enabling a target negotiation channel at a target encryption machine and a target center side according to the first configuration value; obtaining a second configuration value, and starting three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel; selecting a target service transmission channel from the three service transmission channels according to a preset requirement, and detecting the on-off condition of each service transmission channel in real time; and if the on-off condition of the current target service transmission channel is disconnection, selecting a corresponding target service transmission channel from the other two service transmission channels according to a preset priority, and correspondingly updating a transmission link between the target encryption machine and the router. According to the invention, encryption communication on satellites with different orbits can be completed.

Description

Technical Field

[0001] The present invention relates to the field of satellite communications, and in particular to a method, system and terminal for realizing a redundant channel of a satellite data encryption service. Background Art

[0002] Satellite transmission is to communicate with satellites through satellite terminals. Encrypted transmission communication requires encryption machine negotiation on both sides. The encryption machine uses the characteristic that unlabeled messages are used during negotiation. Only after the negotiation is successful can the labeled business data message be transmitted.

[0003] However, previous satellite communications used high-orbit satellites. With the development of WeChat technology and services, the data transmission method previously deployed on high-orbit satellites is not suitable for encrypted communications on current high, medium and low-orbit satellites, resulting in inconvenience in encrypted communications on high, medium and low-orbit satellites.

[0004] Therefore, the prior art still needs to be improved and developed. Summary of the invention

[0005] The main purpose of the present invention is to provide a method, system, terminal and computer-readable storage medium for realizing redundant channels of satellite data encryption services, aiming to solve the problem in the prior art that the data transmission method deployed on high-orbit satellites is not suitable for encrypted communications on current high, medium and low-orbit satellites, resulting in inconvenience in encrypted communications on high, medium and low-orbit satellites.

[0006] To achieve the above object, the present invention provides a method for implementing a satellite data encryption service redundant channel, the method comprising the following steps:

[0007] Obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value;

[0008] Obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel;

[0009] According to preset requirements, a target service transmission channel is selected from the three service transmission channels, and the on / off status of each service transmission channel is detected in real time;

[0010] If the current on / off status of the target service transmission channel is disconnected, the corresponding target service transmission channel is selected from the remaining two service transmission channels according to the preset priority, and the transmission link between the target encryption machine and the router is updated accordingly.

[0011] Optionally, the acquiring the first configuration value and enabling the target negotiation channel on the target encryption machine and the target center side according to the first configuration value specifically includes:

[0012] Obtaining a first configuration value, and marking a configuration file transmitted by a target encryption machine according to the first configuration value;

[0013] According to the configuration file transmitted by the marked target encryption machine, the corresponding target negotiation channel is directly enabled on the target encryption machine and the target center side.

[0014] Optionally, the acquiring the second configuration value and enabling three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel specifically includes:

[0015] Acquire a second configuration value and a negotiation result generated by the target encryption machine and the target center side based on the target negotiation channel, wherein the second configuration value includes a transmission configuration value corresponding to each service transmission channel;

[0016] When the negotiation result is passed, three service transmission channels are enabled between the target encryption machine and the target center side according to the second configuration value, wherein the three service transmission channels include a high-orbit service transmission channel, a mid-orbit service transmission channel and a ground-orbit service transmission channel.

[0017] Optionally, the method further includes selecting a target service transmission channel from the three service transmission channels according to a preset requirement, and detecting the on / off status of each service transmission channel in real time, and:

[0018] Obtaining the channel connection status between the target center side and the encryption machine at the other end;

[0019] When the encryption machines at the target center and the other end use corresponding configuration values ​​to enable corresponding negotiation channels and service transmission channels, the communication settings between the encryption machines are completed;

[0020] Returns the communication setting completion information corresponding to the target encryption machine.

[0021] Optionally, the selecting a target service transmission channel from the three service transmission channels according to a preset requirement, and detecting the on / off status of each service transmission channel in real time, specifically includes:

[0022] According to the preset requirements, selecting the service transmission channel with the highest priority among the three service transmission channels as the target service transmission channel, wherein the preset requirements include the priority ranking of each service transmission channel;

[0023] And start BFD in each service transmission channel to detect the connectivity of the corresponding channel.

[0024] Optionally, if the on / off status of the current target service transmission channel is disconnected, selecting a corresponding target service transmission channel from the remaining two service transmission channels according to a preset priority, and updating the transmission channel between the target encryption machine and the router accordingly, specifically includes:

[0025] If the current on / off status of the target service transmission channel is disconnected, the on / off status of the remaining two service transmission channels is obtained;

[0026] Select the service transmission channel with the highest priority from the remaining two service transmission channels according to the preset priority as the current target service transmission channel;

[0027] The transmission link between the target encryption machine and the router is updated accordingly according to the current target service transmission channel.

[0028] Optionally, the updating of the transmission link between the target encryption machine and the router according to the current target service transmission channel specifically includes:

[0029] Switch the port of the current network configuration device according to the address information corresponding to the current target service transmission channel;

[0030] According to the switched port, the transmission link between the router and the target encryption machine is switched accordingly.

[0031] In addition, to achieve the above-mentioned purpose, the present invention also provides a system for implementing a satellite data encryption service redundant channel, wherein the system for implementing a satellite data encryption service redundant channel includes:

[0032] A negotiation channel enabling module, used to obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value;

[0033] A service transmission channel enabling module, used to obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel;

[0034] A detection module, used to select a target service transmission channel from the three service transmission channels according to preset requirements, and detect the on / off status of each service transmission channel in real time;

[0035] The switching module is used to select the corresponding target business transmission channel from the other two business transmission channels according to the preset priority if the current target business transmission channel is disconnected, and to update the transmission link between the target encryption machine and the router accordingly.

[0036] In addition, to achieve the above-mentioned purpose, the present invention further provides a terminal, wherein the terminal comprises: a memory, a processor, and an implementation program of a satellite data encryption service redundant channel stored in the memory and executable on the processor, wherein the implementation program of the satellite data encryption service redundant channel implements the steps of the implementation method of the satellite data encryption service redundant channel as described above when the implementation program of the satellite data encryption service redundant channel is executed by the processor.

[0037] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores an implementation program of a satellite data encryption service redundant channel, and when the implementation program of the satellite data encryption service redundant channel is executed by a processor, the steps of the implementation method of the satellite data encryption service redundant channel as described above are implemented.

[0038] In the present invention, a first configuration value is obtained, and according to the first configuration value, a target negotiation channel is enabled between the target encryption machine and the target center side; a second configuration value is obtained, and according to the second configuration value and the target negotiation channel, three service transmission channels are enabled between the target encryption machine and the target center side; according to preset requirements, a target service transmission channel is selected from the three service transmission channels, and the on-off status of each service transmission channel is detected in real time; if the on-off status of the current target service transmission channel is disconnected, a corresponding target service transmission channel is selected from the remaining two service transmission channels according to a preset priority, and the transmission link between the target encryption machine and the router is updated accordingly. The present invention enables different channels corresponding to configuration values ​​to realize service transmission, and according to the priorities corresponding to different channels, the most suitable channel is selected for corresponding data transmission. When a problem occurs in the current channel, a different channel can be reselected to realize efficient data transmission, and encrypted communications on high, medium, and low orbit satellites are completed. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 It is a flow chart of a preferred embodiment of a method for implementing a redundant channel of satellite data encryption service of the present invention;

[0040] Figure 2 It is a structural diagram of a preferred embodiment of a system for implementing a redundant channel of a satellite data encryption service of the present invention;

[0041] Figure 3 It is a structural diagram of a preferred embodiment of the terminal of the present invention. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solution and advantages of the present invention clearer and more specific, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0043] Satellite transmission is to communicate with satellites through satellite terminals. Encrypted transmission communication requires negotiation between encryption machines on both sides. The encryption machine uses the characteristic that untagged messages are used during negotiation, that is, untagged messages. Only after successful negotiation can service data messages with VLAN be transmitted. However, previous satellite communications used high-orbit satellites. With the development of WeChat technology and services, the data transmission method previously deployed on high-orbit satellites is not suitable for encrypted communications on high, medium and low-orbit satellites, resulting in inconvenience in encrypted communications on high, medium and low-orbit satellites.

[0044] In response to one or more of the above problems, the present invention obtains a first configuration value, and enables a target negotiation channel between a target encryption machine and a target center side according to the first configuration value; obtains a second configuration value, and enables three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel; selects a target service transmission channel from the three service transmission channels according to preset requirements, and detects the on / off status of each service transmission channel in real time; if the on / off status of the current target service transmission channel is disconnected, selects a corresponding target service transmission channel from the remaining two service transmission channels according to a preset priority, and updates the transmission link between the target encryption machine and the router accordingly.

[0045] The method for implementing the satellite data encryption service redundant channel described in the preferred embodiment of the present invention is as follows: Figure 1 As shown, the method for implementing the satellite data encryption service redundant channel includes the following steps:

[0046] Step S10: Obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value.

[0047] Specifically, in the present invention, the first configuration value is used to enable an NVGRE tunnel that transmits untag messages for encryption machine negotiation, wherein untag means no VLAN tag is added, and VLAN is a virtual local area network, which is a group of logical devices and users.

[0048] Further, the obtaining of the first configuration value and enabling the target negotiation channel on the target encryption machine and the target center side according to the first configuration value specifically include:

[0049] Obtaining a first configuration value, and marking a configuration file transmitted by a target encryption machine according to the first configuration value;

[0050] According to the configuration file transmitted by the marked target encryption machine, the corresponding target negotiation channel is directly enabled on the target encryption machine and the target center side.

[0051] Specifically, in the present invention, a first configuration value is obtained, and the corresponding first configuration value is the default PVID configuration of the port of the network adapter device of the encryption machine. The untagged packet transmitted from the target encryption machine is marked with the first configuration value by default, and the corresponding target negotiation channel is enabled according to the default VLAN of the first configuration value.

[0052] Step S20: Obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel.

[0053] Specifically, after the target negotiation channel is configured, corresponding negotiation is performed. After the negotiation is completed, three NVGRE tunnels that transmit different VLANs can be enabled to transmit service data, that is, three service transmission channels.

[0054] Further, the obtaining of the second configuration value and enabling three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel specifically includes:

[0055] Acquire a second configuration value and a negotiation result generated by the target encryption machine and the target center side based on the target negotiation channel, wherein the second configuration value includes a transmission configuration value corresponding to each service transmission channel;

[0056] When the negotiation result is passed, three service transmission channels are enabled between the target encryption machine and the target center side according to the second configuration value, wherein the three service transmission channels include a high-orbit service transmission channel, a mid-orbit service transmission channel and a ground-orbit service transmission channel.

[0057] Specifically, in the present invention, after the target negotiation channel is enabled, the target encryption machine and the target center side are negotiated through the target negotiation channel, and the second configuration value is correspondingly obtained after the negotiation is successful. Among them, the second configuration value is the transmission configuration value of the three set service transmission channels, that is, three different VLANs. Through the second configuration value, the corresponding file package transmitted by the encryption machine is obtained, thereby enabling the corresponding three service transmission channels.

[0058] In one embodiment of the present invention, four NVGRE tunnels are created, and the default PVID of the port of the network adapter device connected to the encryption machine is configured to be 4000, i.e., the first configuration value, so that the untagged packets from the encryption machine are tagged with 4000 by default, and the configured NVGRE tunnel is selected according to the default VLAN of 4000 to obtain the target negotiation channel. Afterwards, after the negotiation is successful, the packets from the encryption machine in the other three service tunnels carry 280, 281, and 282, i.e., the transmission configuration values ​​corresponding to the three service transmission channels, and the configured NV GRE tunnel is selected according to the three different VLANs.

[0059] Furthermore, the method further includes selecting a target service transmission channel from the three service transmission channels according to preset requirements, and detecting the on / off status of each service transmission channel in real time, and:

[0060] Obtaining the channel connection status between the target center side and the encryption machine at the other end;

[0061] When the encryption machines at the target center and the other end use corresponding configuration values ​​to enable corresponding negotiation channels and service transmission channels, the communication settings between the encryption machines are completed;

[0062] Returns the communication setting completion information corresponding to the target encryption machine.

[0063] Specifically, in the present invention, after the target encryption machine and the target center side complete the corresponding channel activation, this logic must be implemented at both ends of the communication to achieve communication. That is, before communication, it is necessary to obtain the channel connection status between the target center side and the encryption machine at the other end, and determine whether the other side of the center side uses the corresponding configuration value to enable the corresponding negotiation channel and service transmission channel. If so, communication can be achieved, and the corresponding communication setting completion information of the target encryption machine is returned, indicating that the target encryption machine can achieve the corresponding service transmission.

[0064] Step S30: According to preset requirements, a target service transmission channel is selected from the three service transmission channels, and the on / off status of each service transmission channel is detected in real time.

[0065] Specifically, in the present invention, the preset requirement is to select the service transmission channel with the highest priority as the target service transmission channel, among which, for example, high, medium and low orbits, the low orbit transmission bandwidth is larger and the rate is faster. When configuring, the low orbit has a higher priority, followed by the medium orbit, and the high orbit has the lowest priority.

[0066] Further, the target service transmission channel is selected from the three service transmission channels according to the preset requirements, and the on-off status of each service transmission channel is detected in real time, specifically including:

[0067] According to the preset requirements, selecting the service transmission channel with the highest priority among the three service transmission channels as the target service transmission channel, wherein the preset requirements include the priority ranking of each service transmission channel;

[0068] And start BFD in each service transmission channel to detect the connectivity of the corresponding channel.

[0069] Specifically, the service transmission channel with the highest priority is selected from the three service transmission channels as the target service transmission channel. Similarly, the encryption machine at the other end of the target center side can also adopt the same implementation method.

[0070] After selecting the target service transmission channel, BFD will be started in each service transmission channel to detect the connectivity of the corresponding channel. However, BFD cannot be started on the untagged tunnel, that is, the target negotiation channel will not be detected. BFD has init, down, and up states. Only when the local end sends a packet and the other end receives it, and the other end sends a packet and the local end receives it, the state switches to UP, which means that the path is normal.

[0071] Furthermore, in an embodiment of the present invention, when each service transmission channel is created, the BDF can be enabled accordingly, so that the service transmission channel can be detected at all times.

[0072] Step S40: If the current target service transmission channel is disconnected, a corresponding target service transmission channel is selected from the remaining two service transmission channels according to a preset priority, and the transmission link between the target encryption machine and the router is updated accordingly.

[0073] Specifically, in the present invention, when it is found during the detection process that the on / off status of the current target service transmission channel is disconnected, the service transmission channel is switched accordingly, and the transmission link between the target encryption machine and the router is updated accordingly.

[0074] Further, if the on / off status of the current target service transmission channel is disconnected, a corresponding target service transmission channel is selected from the remaining two service transmission channels according to a preset priority, and the transmission channel between the target encryption machine and the router is updated accordingly, specifically including:

[0075] If the current on / off status of the target service transmission channel is disconnected, the on / off status of the remaining two service transmission channels is obtained;

[0076] Select the service transmission channel with the highest priority from the remaining two service transmission channels according to the preset priority as the current target service transmission channel;

[0077] The transmission link between the target encryption machine and the router is updated accordingly according to the current target service transmission channel.

[0078] Specifically, when the connection status of the current target service transmission channel is disconnected, the one with the highest priority will be selected from the remaining two service transmission channels as the current target service transmission channel, and the transmission link between the target encryption machine and the router will be updated accordingly. Figure 2 As shown, the priority of each service transmission channel can be preset.

[0079] Further, the updating of the transmission link between the target encryption machine and the router according to the current target service transmission channel specifically includes:

[0080] Switch the port of the current network configuration device according to the address information corresponding to the current target service transmission channel;

[0081] According to the switched port, the transmission link between the router and the target encryption machine is switched accordingly.

[0082] Specifically, in the present invention, after the target service transmission channel is updated, the router side finds out through OSPF route detection that the previous channel is broken, and the router side will also switch to the current link, so that the communication switch is completed. The router side can accelerate the switching action through OSPF and BFD detection linkage. The SPF protocol contains a routing algorithm. The transmission configuration value corresponding to the target service transmission channel is used to switch the port of the current network configuration device, that is, the address information of the updated target service transmission channel is used to switch the port of the network adapter device, that is, the first configuration value corresponding to the target negotiation channel is switched; after the network adapter device is switched, the OSPF protocol detection and routing of the router in front of the encryption machine finds that the previous link is different, and switches the route to the current route.

[0083] Furthermore, in the present invention, the encryption machine is directly connected to the center side through multiple business transmission channels, so that data transmission can be achieved in different situations, which is suitable for encrypted communications on current high, medium and low orbit satellites.

[0084] The present invention obtains a first configuration value, and according to the first configuration value, enables a target negotiation channel between the target encryption machine and the target center side; obtains a second configuration value, and according to the second configuration value and the target negotiation channel, enables three service transmission channels between the target encryption machine and the target center side; according to preset requirements, selects a target service transmission channel from the three service transmission channels, and detects the on-off status of each service transmission channel in real time; if the on-off status of the current target service transmission channel is disconnected, selects a corresponding target service transmission channel from the remaining two service transmission channels according to a preset priority, and updates the transmission link between the target encryption machine and the router accordingly. The present invention enables different channels corresponding to configuration values ​​to realize service transmission, and according to the priorities corresponding to different channels, selects the most suitable channel for corresponding data transmission. When a problem occurs in the current channel, a different channel can be reselected to realize efficient data transmission, and completes encrypted communications on high, medium, and low orbit satellites.

[0085] Furthermore, if Figure 2 As shown, based on the above-mentioned satellite data encryption service redundant channel implementation method, the present invention also provides a satellite data encryption service redundant channel implementation system, wherein the satellite data encryption service redundant channel implementation system includes:

[0086] A negotiation channel enabling module 21, configured to obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value;

[0087] A service transmission channel enabling module 22, configured to obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel;

[0088] The detection module 23 is used to select a target service transmission channel from the three service transmission channels according to preset requirements, and detect the on / off status of each service transmission channel in real time;

[0089] The switching module 24 is used to select a corresponding target service transmission channel from the other two service transmission channels according to a preset priority if the current target service transmission channel is disconnected, and to update the transmission link between the target encryption machine and the router accordingly.

[0090] Furthermore, if Figure 3 As shown, based on the above-mentioned satellite data encryption service redundant channel implementation method and system, the present invention also provides a terminal accordingly, and the terminal includes a processor 10, a memory 20 and a display 30. Figure 3Only some components of the terminal are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0091] In some embodiments, the memory 20 may be an internal storage unit of the terminal, such as a hard disk or memory of the terminal. In other embodiments, the memory 20 may also be an external storage device of the terminal, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the terminal. Further, the memory 20 may include both an internal storage unit of the terminal and an external storage device. The memory 20 is used to store application software and various data installed in the terminal, such as the program code of the installation terminal. The memory 20 may also be used to temporarily store data that has been output or is to be output. In one embodiment, the memory 20 stores a satellite data encryption service redundant channel implementation program 40, which can be executed by the processor 10, thereby realizing the satellite data encryption service redundant channel implementation method of the present invention.

[0092] In some embodiments, the processor 10 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run the program code or process data stored in the memory 20, such as executing the implementation method of the satellite data encryption service redundant channel.

[0093] In some embodiments, the display 30 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 30 is used to display information on the terminal and to display a visual user interface. The components 10-30 of the terminal communicate with each other via a system bus.

[0094] In one embodiment, when the processor 10 executes the satellite data encryption service redundant channel implementation program 40 in the memory 20, the steps of the above satellite data encryption service redundant channel implementation method are implemented.

[0095] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores an implementation program of a satellite data encryption service redundant channel, and the implementation program of the satellite data encryption service redundant channel implements the following steps when executed by a processor:

[0096] Obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value;

[0097] Obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel;

[0098] According to preset requirements, a target service transmission channel is selected from the three service transmission channels, and the on / off status of each service transmission channel is detected in real time;

[0099] If the current on / off status of the target service transmission channel is disconnected, the corresponding target service transmission channel is selected from the remaining two service transmission channels according to the preset priority, and the transmission link between the target encryption machine and the router is updated accordingly.

[0100] The acquiring of the first configuration value and enabling the target negotiation channel on the target encryption machine and the target center side according to the first configuration value specifically include:

[0101] Obtaining a first configuration value, and marking a configuration file transmitted by a target encryption machine according to the first configuration value;

[0102] According to the configuration file transmitted by the marked target encryption machine, the corresponding target negotiation channel is directly enabled on the target encryption machine and the target center side.

[0103] The acquiring of the second configuration value and enabling three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel specifically include:

[0104] Acquire a second configuration value and a negotiation result generated by the target encryption machine and the target center side based on the target negotiation channel, wherein the second configuration value includes a transmission configuration value corresponding to each service transmission channel;

[0105] When the negotiation result is passed, three service transmission channels are enabled between the target encryption machine and the target center side according to the second configuration value, wherein the three service transmission channels include a high-orbit service transmission channel, a mid-orbit service transmission channel and a ground-orbit service transmission channel.

[0106] Wherein, the method further includes: selecting a target service transmission channel from the three service transmission channels according to preset requirements, and detecting the on / off status of each service transmission channel in real time;

[0107] Obtaining the channel connection status between the target center side and the encryption machine at the other end;

[0108] When the encryption machines at the target center and the other end use corresponding configuration values ​​to enable corresponding negotiation channels and service transmission channels, the communication settings between the encryption machines are completed;

[0109] Returns the communication setting completion information corresponding to the target encryption machine.

[0110] Among them, the method of selecting a target service transmission channel from the three service transmission channels according to preset requirements and detecting the on / off status of each service transmission channel in real time specifically includes:

[0111] According to the preset requirements, selecting the service transmission channel with the highest priority among the three service transmission channels as the target service transmission channel, wherein the preset requirements include the priority ranking of each service transmission channel;

[0112] And start BFD in each service transmission channel to detect the connectivity of the corresponding channel.

[0113] Among them, if the on / off status of the current target service transmission channel is disconnected, the corresponding target service transmission channel is selected from the remaining two service transmission channels according to the preset priority, and the transmission channel between the target encryption machine and the router is updated accordingly, specifically including:

[0114] If the current on / off status of the target service transmission channel is disconnected, the on / off status of the remaining two service transmission channels is obtained;

[0115] Select the service transmission channel with the highest priority from the remaining two service transmission channels according to the preset priority as the current target service transmission channel;

[0116] The transmission link between the target encryption machine and the router is updated accordingly according to the current target service transmission channel.

[0117] The updating of the transmission link between the target encryption machine and the router according to the current target service transmission channel specifically includes:

[0118] Switch the port of the current network configuration device according to the address information corresponding to the current target service transmission channel;

[0119] According to the switched port, the transmission link between the router and the target encryption machine is switched accordingly.

[0120] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the existence of other identical elements in the process, method, article or terminal including the element.

[0121] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the program can be stored in a computer-readable storage medium that can be read by a computer, and the program can include the processes of the above-mentioned method embodiments when executed. The computer-readable storage medium can be a memory, a disk, an optical disk, etc.

[0122] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A method for implementing a redundant channel for satellite data encryption service, characterized in that: The method for implementing the satellite data encryption service redundant channel includes: Obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value; Obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel; According to preset requirements, a target service transmission channel is selected from the three service transmission channels, and the on / off status of each service transmission channel is detected in real time; If the current on / off status of the target service transmission channel is disconnected, the corresponding target service transmission channel is selected from the remaining two service transmission channels according to the preset priority, and the transmission link between the target encryption machine and the router is updated accordingly.

2. The method for implementing a satellite data encryption service redundant channel according to claim 1, characterized in that: The obtaining of the first configuration value and enabling the target negotiation channel on the target encryption machine and the target center side according to the first configuration value specifically includes: Obtaining a first configuration value, and marking a configuration file transmitted by a target encryption machine according to the first configuration value; According to the configuration file transmitted by the marked target encryption machine, the corresponding target negotiation channel is directly enabled on the target encryption machine and the target center side.

3. The method for implementing a redundant channel of satellite data encryption service according to claim 1, characterized in that: The obtaining of the second configuration value and enabling three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel specifically includes: Acquire a second configuration value and a negotiation result generated by the target encryption machine and the target center side based on the target negotiation channel, wherein the second configuration value includes a transmission configuration value corresponding to each service transmission channel; When the negotiation result is passed, three service transmission channels are enabled between the target encryption machine and the target center side according to the second configuration value, wherein the three service transmission channels include a high-orbit service transmission channel, a mid-orbit service transmission channel and a ground-orbit service transmission channel.

4. The method for implementing a satellite data encryption service redundant channel according to claim 1, characterized in that: The method further includes: selecting a target service transmission channel from the three service transmission channels according to preset requirements, and detecting the on / off status of each service transmission channel in real time; Obtaining the channel connection status between the target center side and the encryption machine at the other end; When the encryption machines at the target center and the other end use corresponding configuration values ​​to enable corresponding negotiation channels and service transmission channels, the communication settings between the encryption machines are completed; Returns the communication setting completion information corresponding to the target encryption machine.

5. The method for implementing a satellite data encryption service redundant channel according to claim 1, characterized in that: The step of selecting a target service transmission channel from the three service transmission channels according to preset requirements and detecting the on / off status of each service transmission channel in real time specifically includes: According to the preset requirements, selecting the service transmission channel with the highest priority among the three service transmission channels as the target service transmission channel, wherein the preset requirements include the priority ranking of each service transmission channel; And start BFD in each service transmission channel to detect the connectivity of the corresponding channel.

6. The method for implementing a satellite data encryption service redundant channel according to claim 1, characterized in that: If the on / off status of the current target service transmission channel is disconnected, the corresponding target service transmission channel is selected from the remaining two service transmission channels according to the preset priority, and the transmission channel between the target encryption machine and the router is updated accordingly, specifically including: If the current on / off status of the target service transmission channel is disconnected, the on / off status of the remaining two service transmission channels is obtained; Select the service transmission channel with the highest priority from the remaining two service transmission channels according to the preset priority as the current target service transmission channel; The transmission link between the target encryption machine and the router is updated accordingly according to the current target service transmission channel.

7. The method for implementing a satellite data encryption service redundant channel according to claim 6, characterized in that: The updating of the transmission link between the target encryption machine and the router according to the current target service transmission channel specifically includes: Switch the port of the current network configuration device according to the address information corresponding to the current target service transmission channel; According to the switched port, the transmission link between the router and the target encryption machine is switched accordingly.

8. A system for implementing a redundant channel for satellite data encryption services, characterized in that: The satellite data encryption service redundant channel implementation system includes: A negotiation channel enabling module, used to obtain a first configuration value, and enable a target negotiation channel on a target encryption machine and a target center side according to the first configuration value; A service transmission channel enabling module, used to obtain a second configuration value, and enable three service transmission channels between the target encryption machine and the target center side according to the second configuration value and the target negotiation channel; A detection module, used to select a target service transmission channel from the three service transmission channels according to preset requirements, and detect the on / off status of each service transmission channel in real time; The switching module is used to select the corresponding target business transmission channel from the other two business transmission channels according to the preset priority if the current target business transmission channel is disconnected, and to update the transmission link between the target encryption machine and the router accordingly.

9. A terminal, characterized in that: The terminal comprises: a memory, a processor, and an implementation program of a satellite data encryption service redundant channel stored in the memory and executable on the processor. When the implementation program of the satellite data encryption service redundant channel is executed by the processor, the steps of the implementation method of the satellite data encryption service redundant channel according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores an implementation program of a satellite data encryption service redundant channel. When the implementation program of the satellite data encryption service redundant channel is executed by a processor, the steps of the implementation method of the satellite data encryption service redundant channel according to any one of claims 1 to 7 are implemented.

Images