High-speed secure data transmission method for commercial spaceflight measurement and control network

Abstract

The invention discloses a high-speed secure data transmission method for a commercial spaceflight measurement and control network, which is applied to a commercial spaceflight measurement and control network system, the commercial spaceflight measurement and control network system comprises a password service platform and a plurality of spaceflight measurement and control systems in communication connection with the password service platform, and the spaceflight measurement and control systems are in communication connection. Each spaceflight measurement and control system comprises a password security middleware, and the method comprises the following steps: obtaining an asymmetric encryption key pair of the password security middleware, obtaining an encryption public key of the spaceflight measurement and control system, encrypting data needing to be transmitted by adopting a digital envelope technology, and generating an encrypted data packet; the spaceflight measurement and control system needing to receive the data carries out unpacking operation on the encrypted data packet according to the received encrypted data packet, the asymmetric encryption algorithm is combined with the private key symmetric encryption secret key of the spaceflight measurement and control system needing to receive the data to carry out decryption, a symmetric encryption random secret key is obtained, and then the symmetric encryption algorithm is used for recovering the original data.

Description

Technical Field

[0001] The present invention relates to the field of aerospace communication technology, and in particular to a high-speed and secure data transmission method for a commercial aerospace measurement and control network. Background Art

[0002] With the continuous development of aerospace technology, the demand for data transmission between spacecraft and the ground is growing. Data transmission in the commercial aerospace field requires both high speed and security to meet the needs of commercial aerospace systems for high-speed and high-reliability data transmission of received data. However, traditional data transmission methods often have problems such as slow transmission speed and insufficient security when facing massive data. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a high-speed and safe data transmission method for a commercial aerospace measurement and control network, so as to improve the speed and safety of data transmission in satellite communications.

[0004] To solve the above technical problems, the purpose of the present invention is achieved through the following technical solutions: to provide a high-speed and secure data transmission method for a commercial aerospace measurement and control network, which is applied to a commercial aerospace measurement and control network system. The commercial aerospace measurement and control network system includes a cryptographic service platform and a number of aerospace measurement and control systems that are communicatively connected to the cryptographic service platform. Each of the aerospace measurement and control systems is communicatively connected to each other, and each of the aerospace measurement and control systems includes a cryptographic security middleware. The high-speed and secure data transmission method for the commercial aerospace measurement and control network includes the following steps: data preprocessing and encrypted transmission: obtaining an asymmetric encryption key pair from the cryptographic security middleware, obtaining an encryption public key from the aerospace measurement and control system, using digital envelope technology to encrypt the data to be transmitted, and generating an encrypted data packet; data reception and recovery: the aerospace measurement and control system that needs to receive data first unpacks the encrypted data packet according to the received encrypted data packet, uses an asymmetric encryption algorithm combined with a private key of the aerospace measurement and control system that needs to receive data to decrypt it, obtains a symmetric encryption random key, and then uses a symmetric encryption algorithm to restore the original data.

[0005] The beneficial technical effect of the present invention is that the high-speed and secure data transmission method for commercial aerospace measurement and control network of the present invention provides powerful cryptographic resources and flexible cryptographic service components through the cryptographic service platform, provides security for data transmission, and pre-processes the data, and uses a high-speed data transmission protocol between the cryptographic service platform and the cryptographic security middleware, which can significantly improve the data transmission speed, meet the real-time high-speed transmission requirements of the commercial aerospace measurement and control network system for a large amount of data, reduce transmission delays, and improve transmission efficiency. The digital envelope technology is used to encrypt and transmit the data to establish a secure encryption channel between the sender and the receiver, ensuring that only the receiver can decrypt the data, ensuring the security and integrity of the data during the transmission process, preventing data leakage or tampering, achieving high-speed and secure data transmission, and achieving secure exchange and management of secret keys, and has strong adaptability, and is suitable for data transmission between different types of spacecraft, between spacecraft or between the measurement and control network, and has strong adaptability and versatility. At the same time, the symmetric encryption technology makes the encryption speed fast, while the asymmetric encryption algorithm has high security, and the digital envelope technology combined with the two can ensure the security and integrity of the data during the transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0006] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying any creative work.

[0007] Figure 1 A schematic diagram of a flow chart of a method for high-speed and secure data transmission for a commercial aerospace measurement and control network provided by an embodiment of the present invention;

[0008] Figure 2 A schematic diagram of a sub-process of a method for high-speed and secure data transmission for a commercial aerospace measurement and control network provided by an embodiment of the present invention;

[0009] Figure 3 A data structure diagram of an encrypted data packet of a method for high-speed and secure data transmission for a commercial aerospace measurement and control network provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0010] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0011] See also Figure 1 , Figure 1 A flow chart of a method for high-speed and secure data transmission for a commercial aerospace measurement and control network provided in an embodiment of the present invention, wherein the method for high-speed and secure data transmission for a commercial aerospace measurement and control network is applied to a commercial aerospace measurement and control network system, wherein the commercial aerospace measurement and control network system includes a cryptographic service platform and a plurality of aerospace measurement and control systems that are communicatively connected to the cryptographic service platform, wherein each of the aerospace measurement and control systems is communicatively connected to each other, and each of the aerospace measurement and control systems includes a cryptographic security middleware, and the method for high-speed and secure data transmission for a commercial aerospace measurement and control network includes the following steps:

[0012] Step S11, data preprocessing and encrypted transmission: obtain the asymmetric encryption key pair of the cryptographic security middleware, obtain the encryption public key of the aerospace measurement and control system, use the digital envelope technology to encrypt the data to be transmitted, and generate an encrypted data packet. Among them, by obtaining the encryption public key of the aerospace measurement and control system and encrypting the data with the digital envelope technology, the data transmission speed can be increased and the security of the data during the transmission process can be ensured.

[0013] Step S12, data reception and recovery: The aerospace tracking and control system that needs to receive data first unpacks the encrypted data packet according to the received encrypted data packet, and decrypts it using an asymmetric encryption algorithm combined with the private key of the aerospace tracking and control system that needs to receive data, to obtain a symmetric encryption random key, and then uses the symmetric encryption algorithm to restore the original data.

[0014] The cryptographic service platform is used to provide the cryptographic security middleware with functions such as key management, middleware management and log auditing. The aerospace tracking and control system includes an aerospace tracking and control station and / or an aerospace tracking and control center. The cryptographic security middleware provides the aerospace tracking and control system with interfaces such as initialization, data encryption and decryption, which are called by the aerospace tracking and control system to encrypt data, decrypt data and report logs. The SSL (Secure Sockets Layer) transmission protocol is used between the cryptographic security middleware and the cryptographic service platform to prevent key leakage and improve the security of the commercial aerospace tracking and control network system. The high-speed and secure data transmission method for the commercial aerospace measurement and control network provides a strong cryptographic resource and a flexible cryptographic service component through a cryptographic service platform, provides security for data transmission, pre-processes the data, and uses a high-speed data transmission protocol between the cryptographic service platform and the cryptographic security middleware, which can significantly improve the data transmission speed, meet the commercial aerospace measurement and control network system's demand for real-time high-speed transmission of a large amount of data, reduce transmission delay, and improve transmission efficiency. The digital envelope technology is used to encrypt and transmit the data to establish a secure encryption channel between the sender and the receiver, ensuring that only the receiver can decrypt the data, ensuring the security and integrity of the data during the transmission process, preventing data leakage or tampering, achieving high-speed and secure data transmission, and achieving secure exchange and management of secret keys. The method has strong adaptability and is suitable for data transmission between different types of spacecraft, between spacecraft or between the spacecraft and the measurement and control network, and has strong adaptability and versatility. At the same time, the symmetric encryption technology makes the encryption speed fast, while the asymmetric encryption algorithm has high security. The digital envelope technology combined with the two can ensure the security and integrity of the data during the transmission process.

[0015] Combination Figure 2 Specifically, the step S11 includes:

[0016] Step S111, registering the cryptographic security middleware: the aerospace measurement and control system calls the initialization interface of its corresponding cryptographic security middleware to register the cryptographic security middleware with the cryptographic service platform;

[0017] Step S112, generate and bind an asymmetric encryption key pair for the cryptographic security middleware: the cryptographic service platform generates an asymmetric encryption key pair for the cryptographic security middleware, and binds the asymmetric encryption key pair to the corresponding cryptographic security middleware and the corresponding aerospace measurement and control system; wherein, the asymmetric encryption key pair is used by the corresponding aerospace measurement and control system for data security encryption and transmission.

[0018] Step S113, downloading asymmetric encryption key pairs and encrypted public keys: the aerospace tracking and control system calls its corresponding cryptographic security middleware to download and obtain the asymmetric encryption key pair of the aerospace tracking and control system from the cryptographic service platform, and calls the cryptographic security middleware to download and obtain the encrypted public keys of all aerospace tracking and control systems from the cryptographic service platform and caches them. Among them, the cryptographic service platform stores the encrypted key pairs of all aerospace tracking and control systems through a secure cryptographic device. The encrypted key pairs include encrypted public keys and encrypted private keys. The encrypted private keys cannot be exported and transmitted to other aerospace tracking and control systems except itself. The encrypted public keys of all aerospace tracking and control systems obtained by the cryptographic security middleware can be used to encrypt data when the aerospace tracking and control system corresponding to the cryptographic security middleware sends data to other aerospace tracking and control systems, so that encrypted data transmission can be performed between the aerospace tracking and control systems, preventing data leakage and improving the security and reliability of data transmission.

[0019] Step S114, data segmentation: the aerospace measurement and control system for collecting data calls its cryptographic security middleware to segment the data to be transmitted to obtain segmented data;

[0020] Step S115, data encryption: The cryptographic security middleware uses digital envelope technology to encrypt the obtained segmented data to generate an encrypted data packet. Among them, by encrypting the data to be transmitted by segmenting and then encrypting the data, the data transmission volume and transmission time can be reduced, which is conducive to real-time data transmission and improves data transmission efficiency.

[0021] Step S116, data transmission: the cryptographic security middleware returns the encrypted data packet to the corresponding aerospace measurement and control system used for collecting data, and the aerospace measurement and control system used for collecting data uses the SSL transmission protocol to send the encrypted data packet to the aerospace measurement and control system that needs to receive the data.

[0022] Specifically, the step of calling the cryptographic security middleware to download and cache the encryption public keys of all aerospace measurement and control systems from the cryptographic service platform in step S113 includes:

[0023] The cryptographic security middleware obtains the public key data list interface of all aerospace tracking and control systems, so as to configure the encrypted public key data of all aerospace tracking and control systems in the aerospace tracking and control system;

[0024] The cryptographic service platform uses the protection key to encrypt the encryption public keys of all aerospace measurement and control systems, obtains the encrypted public key ciphertexts of all aerospace measurement and control systems and stores them in secure cryptographic devices;

[0025] The cryptographic security middleware downloads and caches the encrypted public key ciphertexts of all aerospace tracking and control systems according to the public key data list interface of all aerospace tracking and control systems.

[0026] Of course, in some embodiments, the cryptographic service platform stores the encrypted public keys of all aerospace tracking and control systems directly in a secure cryptographic device, and the cryptographic security middleware downloads and caches the encrypted public keys of all aerospace tracking and control systems based on the public key data list interface of all aerospace tracking and control systems.

[0027] Specifically, the step S115 includes:

[0028] The aerospace measurement and control system calls the encryption interface of the cryptographic security middleware to generate a symmetric encryption random key;

[0029] The obtained segmented data is encrypted using a symmetric encryption algorithm combined with a symmetric encryption random key to obtain encrypted data; wherein the symmetric encryption algorithm includes an SM4 algorithm, an AES algorithm, and a 3DES algorithm. Preferably, the size of the segmented data is 1MB.

[0030] An asymmetric encryption algorithm is used in combination with an encryption public key of a space tracking and control system that needs to receive data to encrypt the generated symmetric encryption random key to obtain an encryption key; wherein the asymmetric encryption algorithm includes an SM2 algorithm and an RSA algorithm.

[0031] Combine the encrypted data and encryption key into an encrypted data packet.

[0032] Specifically, Figure 3 As shown in the data structure diagram of the encrypted data packet, the data structure of the encrypted data packet includes a key length 101, an encryption key 102, an encrypted data length 103 and encrypted data 104, wherein the key length 101, the encryption key 102, the encrypted data length 103 and the encrypted data 104 are arranged in sequence, and the key length and the encrypted data length both occupy four bytes, the length of the encryption key is the key length, and the length of the encrypted data is the encrypted data length.

[0033] Preferably, before step S11, the following steps may also be included:

[0034] Embed cryptographic security middleware into aerospace measurement and control systems.

[0035] Specifically, the step S12 includes:

[0036] The aerospace tracking and control system that needs to receive data calls the decryption interface of its cryptographic security middleware, unpacks the encrypted data packet received by the aerospace tracking and control system that needs to receive data within the security middleware, and disassembles the data of the encrypted data packet according to the secret key length and the encrypted data length to obtain the encryption key and the encrypted data;

[0037] An asymmetric encryption algorithm is used in combination with the encryption private key of the aerospace measurement and control system that needs to receive data to decrypt the encryption key obtained by disassembly, and a symmetric encryption random key is obtained;

[0038] The encrypted data obtained by disassembly is decrypted using a symmetric encryption algorithm combined with the symmetric encryption random key obtained by decryption to obtain the original data;

[0039] The cryptographic security middleware returns the original data to the corresponding aerospace measurement and control system that needs to receive the data, and the aerospace measurement and control system that needs to receive the data stores the original data according to demand.

[0040] In summary, the high-speed and secure data transmission method for commercial aerospace measurement and control network of the present invention provides powerful cryptographic resources and flexible cryptographic service components through the cryptographic service platform, provides security for data transmission, and pre-processes the data, and uses a high-speed data transmission protocol between the cryptographic service platform and the cryptographic security middleware, which can significantly improve the data transmission speed, meet the real-time high-speed transmission requirements of the commercial aerospace measurement and control network system for a large amount of data, reduce transmission delays, and improve transmission efficiency. The digital envelope technology is used to encrypt and transmit the data to establish a secure encryption channel between the sender and the receiver, ensuring that only the receiver can decrypt the data, ensuring the security and integrity of the data during the transmission process, preventing data leakage or tampering, and realizing high-speed and secure data transmission, and realizing the secure exchange and management of secret keys, and has strong adaptability, and is suitable for data transmission between different types of spacecraft, between spacecraft or between the measurement and control network, and has strong adaptability and versatility. At the same time, the symmetric encryption technology makes the encryption speed fast, while the asymmetric encryption algorithm has high security, and the digital envelope technology combined with the two can ensure the security and integrity of the data during the transmission process.

[0041] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A method for high-speed and secure data transmission for a commercial aerospace measurement and control network, characterized in that: Applied to a commercial aerospace tracking and control network system, the commercial aerospace tracking and control network system includes a cryptographic service platform and a plurality of aerospace tracking and control systems that are communicatively connected to the cryptographic service platform, each of the aerospace tracking and control systems is communicatively connected, and each of the aerospace tracking and control systems includes a cryptographic security middleware. The high-speed and secure data transmission method for the commercial aerospace tracking and control network includes the following steps: Data preprocessing and encrypted transmission: Obtain the asymmetric encryption key pair of the cryptographic security middleware, obtain the encryption public key of the aerospace measurement and control system, use digital envelope technology to encrypt the data to be transmitted, and generate an encrypted data packet; Data reception and recovery: The aerospace tracking and control system that needs to receive data first unpacks the encrypted data packet according to the received encrypted data packet, and uses an asymmetric encryption algorithm combined with the private key of the aerospace tracking and control system that needs to receive data to decrypt it, obtains the symmetric encryption random key, and then uses the symmetric encryption algorithm to restore the original data.

2. The method for high-speed and secure data transmission for a commercial aerospace measurement and control network according to claim 1 is characterized in that: The steps of data preprocessing and encrypted transmission include: Register the password security middleware: the aerospace measurement and control system calls the initialization interface of its corresponding password security middleware and registers the password security middleware with the password service platform; Generate and bind asymmetric encryption key pairs for cryptographic security middleware: The cryptographic service platform generates an asymmetric encryption key pair for the cryptographic security middleware, and binds the asymmetric encryption key pair to the corresponding cryptographic security middleware and the corresponding aerospace measurement and control system; Download asymmetric encryption key pairs and encrypted public keys: The aerospace tracking and control system calls its corresponding cryptographic security middleware to download and obtain the asymmetric encryption key pair of the aerospace tracking and control system from the cryptographic service platform, and calls the cryptographic security middleware to download and obtain the encrypted public keys of all aerospace tracking and control systems from the cryptographic service platform and cache them; Data segmentation: The aerospace measurement and control system used to collect data calls its cryptographic security middleware to segment the data to be transmitted and obtain segmented data; Data encryption: The cryptographic security middleware uses digital envelope technology to encrypt the obtained segmented data and generate encrypted data packets; Data transmission: The cryptographic security middleware returns the encrypted data packet to the corresponding aerospace measurement and control system used to collect data. The aerospace measurement and control system used to collect data uses the SSL transmission protocol to send the encrypted data packet to the aerospace measurement and control system that needs to receive the data.

3. The method for high-speed and secure data transmission for commercial aerospace measurement and control network according to claim 2 is characterized in that: The step of downloading the asymmetric encryption key pair and the encrypted public key and calling the cryptographic security middleware to download and cache the encrypted public keys of all aerospace measurement and control systems from the cryptographic service platform includes: The cryptographic security middleware obtains the public key data list interface of all aerospace measurement and control systems; The cryptographic service platform uses the protection key to encrypt the encryption public keys of all aerospace measurement and control systems, obtains the encrypted public key ciphertexts of all aerospace measurement and control systems and stores them in secure cryptographic devices; The cryptographic security middleware downloads and caches the encrypted public key ciphertexts of all aerospace tracking and control systems according to the public key data list interface of all aerospace tracking and control systems.

4. The method for high-speed and secure data transmission for commercial aerospace measurement and control network according to claim 2 is characterized in that: The steps of data encryption include: The aerospace measurement and control system calls the encryption interface of the cryptographic security middleware to generate a symmetric encryption random key; The obtained segmented data is encrypted using a symmetric encryption algorithm combined with a symmetric encryption random key to obtain encrypted data; An asymmetric encryption algorithm is used to encrypt the generated symmetric encryption random key in combination with the encryption public key of the aerospace measurement and control system that needs to receive data, thereby obtaining an encryption key; Combine the encrypted data and encryption key into an encrypted data packet.

5. The method for high-speed and secure data transmission for commercial aerospace measurement and control network according to claim 4 is characterized in that: The data structure of the encrypted data packet includes a key length, an encryption key, an encrypted data length and encrypted data.

6. The method for high-speed and secure data transmission for commercial aerospace measurement and control network according to claim 4 is characterized in that: The steps of data receiving and recovery include: The aerospace tracking and control system that needs to receive data calls the decryption interface of its cryptographic security middleware, unpacks the encrypted data packet received by the aerospace tracking and control system that needs to receive data within the security middleware, and disassembles the data of the encrypted data packet according to the secret key length and the encrypted data length to obtain the encryption key and the encrypted data; An asymmetric encryption algorithm is used in combination with the encryption private key of the aerospace measurement and control system that needs to receive data to decrypt the encryption key obtained by disassembly, and a symmetric encryption random key is obtained; The encrypted data obtained by disassembly is decrypted using a symmetric encryption algorithm combined with the symmetric encryption random key obtained by decryption to obtain the original data; The cryptographic security middleware returns the original data to the corresponding aerospace measurement and control system that needs to receive the data, and the aerospace measurement and control system that needs to receive the data stores the original data according to demand.

7. The method for high-speed and secure data transmission for commercial aerospace measurement and control network according to claim 1 is characterized in that: The steps of data preprocessing and encrypted transmission also include: embedding cryptographic security middleware into the aerospace measurement and control system.

Images