Satellite communication method and device

Abstract

The invention provides a satellite communication method and device, and relates to the technical field of communication. The method comprises the following steps: receiving a satellite measurement and control message sent by a ground station; determining the type of the satellite measurement and control message; when the type is the telemetering ciphertext, decrypting the satellite measurement and control message to obtain a decrypted telemetering message, and sending the decrypted telemetering message to a ground station; and when the type is the remote control plaintext, encrypting the satellite measurement and control message to obtain an encrypted remote control message, and sending the encrypted remote control message to the ground station, so that the ground station sends the encrypted remote control message to the satellite. According to the method, the type of the satellite measurement and control message is judged after the satellite measurement and control message is obtained, the satellite measurement and control message is decrypted when the type is the telemetering ciphertext, and the satellite measurement and control message is encrypted when the type is the remote control plaintext, so that the risk that the satellite measurement and control message is leaked, tampered or damaged in the transmission process can be reduced.

Description

Background Art

[0002] With the rapid development of satellite communications, satellite network technology has been widely used in commercial and other fields. The communication links in satellite communication systems mainly include uplinks for ground stations to send information to satellites, downlinks for satellites to send information to ground stations, and intersatellite links for information exchange between different satellites. They have the characteristics of long communication links, large delays, and complex systems, making them vulnerable to attacks.

[0003] For satellite measurement and control, the satellite orbit and attitude data, and the control attitude adjustment and orbit change data have extremely high confidentiality requirements. If the satellite measurement and control messages are intercepted or tampered with, it will directly lead to the satellite being remotely controlled, causing problems such as deviation from orbit or even tracking loss.

[0004] Therefore, how to reduce the risk of satellite measurement and control messages being leaked, tampered with or destroyed during transmission is an urgent problem to be solved. Summary of the invention

[0005] The present application provides a satellite communication method and device, which at least provides a communication solution that can reduce the risk of satellite measurement and control messages being leaked, tampered with or destroyed during transmission.

[0006] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by the practice of the present application.

[0007] According to one aspect of the present application, a satellite communication method is provided, including: receiving a satellite measurement and control message sent by a ground station; determining the type of the satellite measurement and control message; when the type is a telemetry ciphertext, decrypting the satellite measurement and control message to obtain a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; when the type is a remote control plaintext, encrypting the satellite measurement and control message to obtain an encrypted remote control message, and sending the encrypted remote control message to the ground station, so that the ground station sends the encrypted remote control message to the satellite.

[0008] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame main header of the telemetry message includes a first field, and the frame main header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plain or secret state of the message; determining the type of the satellite measurement and control message includes: determining the message type of the satellite measurement and control message; when the message type is a telemetry message, determining the plain or secret state of the satellite measurement and control message according to the content of the first field to obtain a first result, and when the first result is a ciphertext, determining the type of the satellite measurement and control message to be a telemetry ciphertext; when the message type is a remote control message, determining the plain or secret state of the satellite measurement and control message according to the content of the second field to obtain a second result, and when the second result is a plaintext, determining the type of the satellite measurement and control message to be a remote control plaintext.

[0009] In some embodiments, the length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

[0010] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; the encrypting of the satellite measurement and control message includes: obtaining a first key and decryption information, using the first key to encrypt the content in the data field, and inserting the decryption information into the password field, the decryption information is used to assist in decrypting the encrypted remote control message; modifying the content of the second field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame main header and the frame data field, and inserting the check code into the error control field.

[0011] In some embodiments, when the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; decrypting the satellite measurement and control message includes: decrypting the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculating the check code of the content of the frame main header, insertion field and frame data field after decryption, comparing the calculation result with the check code included in the error control field, and completing the decryption when the comparison result is the same.

[0012] According to another aspect of the present application, another satellite communication method is provided, including: receiving an encrypted remote control message sent by a ground station; decrypting the encrypted remote control message to obtain a remote control message; generating a telemetry message; encrypting the telemetry message to obtain an encrypted telemetry message; and sending the encrypted telemetry message to the ground station.

[0013] In some embodiments, the encrypted remote control message includes a frame main header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; decrypting the encrypted remote control message includes: decrypting the content of the data field according to the decryption information; calculating the check code of the content of the frame main header and the frame data field after decryption, and comparing the calculation result with the check code included in the error control field, and completing the decryption when the comparison results are the same.

[0014] In some embodiments, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encrypting of the telemetry message includes: obtaining a second key and decryption information, using the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and inserting the decryption information into the cipher field, the decryption information being used to assist in decrypting the encrypted telemetry message; modifying the contents of the first field so that the modified contents indicate that the message has been encrypted; calculating the check codes of the frame main header, the insertion field, and the frame data field, and inserting the check codes into the error control field.

[0015] According to another aspect of the present application, a satellite communication device is also provided, including: a first receiving module, used to receive a satellite measurement and control message sent by a ground station; a determination module, used to determine the type of the satellite measurement and control message; a decryption and sending module, used to decrypt the satellite measurement and control message when the type is a telemetry ciphertext, obtain a decrypted telemetry message, and send the decrypted telemetry message to the ground station; an encryption and sending module, used to encrypt the satellite measurement and control message when the type is a remote control plaintext, obtain an encrypted remote control message, and send the encrypted remote control message to the ground station, so that the ground station can send the encrypted remote control message to the satellite.

[0016] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame main header of the telemetry message includes a first field, and the frame main header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plain or secret state of the message; the determination module is used to determine the message type of the satellite measurement and control message; when the message type is a telemetry message, the plain or secret state of the satellite measurement and control message is determined according to the content of the first field, and when the plain or secret state is ciphertext, the type of the satellite measurement and control message is determined to be telemetry ciphertext; when the message type is a remote control message, the plain or secret state of the satellite measurement and control message is determined according to the content of the second field, and when the plain or secret state is plaintext, the type of the satellite measurement and control message is determined to be remote control plaintext.

[0017] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; the encryption and sending module is used to obtain a first key and decryption information, use the first key to encrypt the content in the data field, and insert the decryption information into the password field, and the decryption information is used to assist in decrypting the encrypted remote control message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame main header and the frame data field, and insert the check code into the error control field.

[0018] In some embodiments, when the type of the satellite measurement and control message is telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; the decryption and sending module is used to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculate the check code of the content of the frame main header, insertion field and frame data field after decryption, compare the calculation result with the check code included in the error control field, and complete the decryption when the comparison result is the same.

[0019] According to another aspect of the present application, another satellite communication device is provided, including: a second receiving module for receiving an encrypted remote control message sent by a ground station; a decryption module for decrypting the encrypted remote control message to obtain a remote control message; a generating module for generating a telemetry message; an encryption module for encrypting the telemetry message to obtain an encrypted telemetry message; and a sending module for sending the encrypted telemetry message to the ground station.

[0020] In some embodiments, the encrypted remote control message includes a frame main header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; the decryption module is used to decrypt the content of the data field according to the decryption information; calculate the check code of the content of the frame main header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0021] In some embodiments, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encryption module is used to obtain a second key and decryption information, and use the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and insert the decryption information into the cipher field, and the decryption information is used to assist in decrypting the encrypted telemetry message; the content of the first field is modified so that the modified content indicates that the message has been encrypted; the check code of the frame main header, the insertion field, and the frame data field is calculated, and the check code is inserted into the error control field.

[0022] According to another aspect of the present application, an electronic device is also provided, which includes: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the satellite communication methods described above by executing the executable instructions.

[0023] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the satellite communication method described in any one of the above is implemented.

[0024] According to another aspect of the present application, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the computer program implements any one of the above-mentioned satellite communication methods.

[0025] The technical solutions provided in the embodiments of the present application include at least the following beneficial effects: The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present application, and together with the specification are used to explain the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0027] Figure 1 A schematic diagram showing a satellite communication system in one embodiment of the present application; Figure 2 A flow chart of a satellite communication method in one embodiment of the present application is shown; Figure 3 A flow chart of a satellite communication method in another embodiment of the present application is shown; Figure 4 A schematic diagram showing the structure of a remote control message in one embodiment of the present application is shown; Figure 5 A schematic diagram showing the structure of a telemetry message in one embodiment of the present application is shown; Figure 6 A flowchart showing an encryption process in one embodiment of the present application is shown; Figure 7 A flowchart showing a decryption process in one embodiment of the present application; Figure 8 A schematic diagram of a satellite communication device in one embodiment of the present application is shown; Fig. 9 A schematic diagram of a satellite communication device in another embodiment of the present application is shown; Fig.10 A structural block diagram of an electronic device in one embodiment of the present application is shown. DETAILED DESCRIPTION

[0028] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this application will be more comprehensive and complete and fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0029] In addition, the accompanying drawings are only schematic illustrations of the present application and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0030] It should be noted that the acquisition, storage, use, and processing of data in the technical solution of this application are in compliance with the relevant provisions of national laws and regulations.

[0031] For ease of understanding, before introducing the embodiments of the present application, several terms involved in the embodiments of the present application are first explained as follows: Satellite measurement and control message: a general term for telemetry messages and remote control messages in satellite communications, which can be telemetry messages, remote control messages, or encrypted telemetry messages or remote control messages; Telemetry message: used to transmit measurement data from remote devices (such as satellites, spacecraft, drones, etc.) to ground stations or control centers (hereinafter referred to as ground stations), usually sent from remote devices to ground stations; Remote control message: used to send control instructions from the ground station to the remote device to achieve remote control of the device; Telemetry ciphertext: encrypted telemetry message; Decrypting telemetry message: telemetry message; Remote control plain text: remote control message; Encrypted remote control message: encrypted remote control message.

[0032] For satellite measurement and control, the satellite orbit and attitude data, and the control attitude adjustment and orbit change data have extremely high confidentiality requirements. Once they are intercepted or tampered with, it will directly lead to the satellite being remotely controlled, causing problems such as deviation from orbit or even loss of tracking.

[0033] In this regard, this application proposes data encryption for satellite communications, which can be used to encrypt signaling data and business data, but traditional IPSec VPN (Internet Protocol Security Virtual Private Network, a virtual private network based on network security protocol) equipment cannot be directly applied to satellite communication networks.

[0034] Therefore, there is an urgent need for a method to implement data encryption during satellite measurement and control communications.

[0035] In this regard, the present application determines the type of satellite measurement and control messages after obtaining them, and decrypts the satellite measurement and control messages when the type is telemetry ciphertext, and encrypts the satellite measurement and control messages when the type is remote control plaintext. This allows the telemetry messages transmitted by the satellite to the ground station to be encrypted, and the remote control messages transmitted by the ground station to the satellite to be encrypted, thereby reducing the risk of satellite measurement and control messages being leaked, tampered with, or destroyed during transmission.

[0036] The specific implementation of the embodiment of the present application is described in detail below in conjunction with the accompanying drawings.

[0037] Figure 1 FIG. 1 is a schematic diagram of a satellite communication system in one embodiment of the present application. Figure 1 As shown, the system may include an encryption server 11 , a ground station 12 , and a satellite 13 .

[0038] The ground station 12 may generate a remote control message and send the remote control message to the encryption server 11 .

[0039] The encryption server 11 may encrypt the remote control message to obtain an encrypted remote control message (remote control ciphertext), and send the encrypted remote control message to the ground station 12 .

[0040] After receiving the encrypted remote control message, the ground station 12 sends the encrypted remote control message to the satellite 13 .

[0041] The satellite 13 can receive the encrypted remote control message sent by the ground station 12, and can decrypt the encrypted remote control message to obtain a decrypted remote control message (ie, the remote control message), and obtain the instruction command of the ground station 12 according to the decrypted remote control message.

[0042] The satellite 13 may generate a telemetry message, encrypt the telemetry message, and send the encrypted telemetry message to the ground station 12 .

[0043] The ground station 12 can receive the encrypted telemetry message sent by the satellite 13 and send the encrypted telemetry message to the encryption server 11.

[0044] The encryption server 11 can receive the encrypted telemetry message sent by the ground station, and decrypt the encrypted telemetry message to obtain a decrypted telemetry message. Afterwards, the encryption server 11 can also send the decrypted telemetry message to the ground station 12.

[0045] Before the encryption server 11 decrypts the telemetry ciphertext and encrypts the remote control plaintext, it can determine whether the message sent by the ground station 12 is a telemetry ciphertext or a remote control plaintext, and then process the satellite measurement and control message sent by the ground station 12 through the corresponding encryption or decryption processing flow.

[0046] The network is used as a medium to provide a communication link between the encryption server 11 and the ground station 12, and between the ground station 12 and the satellite 13, and can be a wired network or a wireless network.

[0047] Optionally, the wireless network or wired network described above uses standard communication technology and / or protocols. The network is typically the Internet, but may also be any network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a private network or any combination of a virtual private network). In some embodiments, technologies and / or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), etc. are used to represent data exchanged over the network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), Internet Protocol Security (IPSec), etc. may be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies may also be used to replace or supplement the above data communication technologies.

[0048] In one embodiment, the encryption server 11 and the ground station 12 can communicate through an internal network, including directly connecting through a communication line, so as to prevent satellite tracking and control messages from being leaked, tampered with or destroyed when communicating between the encryption server 11 and the ground station 12.

[0049] The encryption server 11 may be a server that provides various services. Optionally, the server may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0050] Under the above system architecture, a satellite communication method is provided in an embodiment of the present application, and the method can be executed by any electronic device with computing and processing capabilities. For example, the electronic device is an encryption server.

[0051] Figure 2 A flow chart of a satellite communication method in an embodiment of the present application is shown as follows: Figure 2 As shown, the satellite communication method provided in the embodiment of the present application includes the following S201 to S204. Among them, there is no fixed execution order of S203 and S204.

[0052] S201, the encryption server receives a satellite tracking and control message sent by a ground station.

[0053] S202: The encryption server determines the type of the satellite tracking and control message.

[0054] The embodiments of the present application do not limit how the encryption server determines the type of satellite tracking and control messages.

[0055] Among them, the message type of the satellite measurement and control message is a telemetry message or a remote control message. In one embodiment, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plaintext or ciphertext status of the message. The plaintext or ciphertext status refers to whether the message is plaintext or ciphertext. In this case, determining the type of the satellite measurement and control message includes: determining the message type of the satellite measurement and control message; when the message type is a telemetry message, determining the plaintext or ciphertext status of the satellite measurement and control message according to the content of the first field, obtaining a first result, and when the first result is ciphertext, determining the type of the satellite measurement and control message is a telemetry ciphertext; when the message type is a remote control message, determining the plaintext or ciphertext status of the satellite measurement and control message according to the content of the second field, obtaining a second result, and when the second result is plaintext, determining the type of the satellite measurement and control message is a remote control plaintext.

[0056] The embodiments of the present application do not limit how to determine the message type of the satellite tracking and control message. For example, the message type of the satellite tracking and control message can be directly determined by the structure of the frame leading header of the satellite tracking and control message. For another example, the message type of the satellite tracking and control message can also be determined by the structure of the entire satellite tracking and control message.

[0057] After determining the message type of the satellite measurement and control message, the content of the first field or the second field can be read according to the preset processing logic, and whether the satellite measurement and control message is encrypted can be determined according to the content of the first field or the second field.

[0058] In one embodiment, the length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

[0059] Two bits can represent four combinations of "00", "01", "10" and "11", and only two combinations are needed to represent the encrypted or unencrypted state of the message. Based on this, the length of the first field and / or the second field is still limited to not less than 2 bits, so that the first field has better scalability. In addition to being used to represent the combination of encryption and decryption states, it can also be used to represent other information. In addition, by setting the length of the first field and / or the second field to not less than 2 bits, it is also easy to identify problems with the message during satellite communication. If the content of the first field and / or the second field is neither a combination representing an encrypted state nor a combination representing an unencrypted state, it can be determined that there is a problem with the satellite measurement and control message.

[0060] The embodiments of the present application do not limit when the contents of the first field and the second field indicate that the message is encrypted and when they indicate that the message is not encrypted.

[0061] For example, the length of the first field and the second field are both 2 bits, and both are "00" indicating that the message is not encrypted, and "11" indicating that the message is encrypted.

[0062] S203, when the type is a telemetry ciphertext, the encryption server decrypts the satellite measurement and control message to obtain a decrypted telemetry message, and sends the decrypted telemetry message to the ground station.

[0063] The embodiments of the present application do not limit how to decrypt the satellite measurement and control message. The decryption can be performed according to the encryption method of the satellite measurement and control message. For the encryption method of the telemetry ciphertext, please refer to the following Figure 3 The corresponding embodiments are not described in detail here.

[0064] In one embodiment, when the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame header, an insertion field, a frame data field, and an error control field. The frame header includes a first field, and the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information. The content of the error control field includes a check code.

[0065] In one embodiment, for the telemetry message, the encrypted part is the content of the key telemetry and fixed telemetry fields, as well as the content of the frame data field. The content of the error control field includes a check code, which is a check code calculated by the satellite based on the content of the frame leading header, the insertion field and the frame data field.

[0066] The decryption information is used to assist in decrypting the telemetry ciphertext.

[0067] In one embodiment, the satellite measurement and control message is decrypted, including: decrypting the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field according to the decryption information; calculating the check code of the contents of the frame leading header, insertion field and frame data field after decryption, and comparing the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0068] The embodiments of the present application do not limit how to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field based on the decryption information.

[0069] In one embodiment, a first dynamic decryption table is maintained in the encryption server, and the first dynamic decryption table includes a key number and a corresponding key. The decryption information includes the key number information and the first part of the key information. The decryption information is obtained by reading the information in the password domain. According to the preset structure of the decryption information, the key number information and the first part of the key information can be separated.

[0070] For example, the decryption information includes 26 bytes, wherein the first 2 bytes are used to represent the key number information, and the last 24 bytes are used to represent the first part of the key. According to the structure of the decryption information, the encryption server can separate the key number information including 2 bytes and the first part of the key information including 24 bytes.

[0071] Afterwards, the encryption server can obtain the key number according to the key number information, and query the first dynamic decryption table according to the key number to obtain the key corresponding to the key number, and use the obtained key as the second part of the key. The encryption server can also obtain the first part of the key according to the first part of the key information, for example, the first part of the key information is the first part of the key; for another example, the encryption server processes the first part of the key information according to a preset processing logic to obtain the first part of the key.

[0072] Then, according to a preset processing method, the first part of the key and the second part of the key are used to generate a decryption key, and then the decryption key is used to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field.

[0073] In another embodiment, the decryption information includes key information, and the encryption server can process the key information according to a preset processing method to obtain a decryption key, and then use the decryption key to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field.

[0074] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the encryption server can directly decrypt the telemetry ciphertext.

[0075] S204, when the type is remote control plain text, the encryption server encrypts the satellite measurement and control message to obtain an encrypted remote control message, and sends the encrypted remote control message to the ground station so that the ground station sends the encrypted remote control message to the satellite.

[0076] The embodiments of the present application do not limit how the encryption server encrypts the satellite measurement and control messages (here, the remote control messages).

[0077] In one embodiment, when the type of the satellite measurement and control message is remote control plain text, the satellite measurement and control message includes a frame leading header, a frame data field, and an error control field.

[0078] The frame header includes a second field, the frame data field includes a data field and a password field, and the second field is used to indicate the clear or secret state of the message. In this case, encrypting the satellite measurement and control message includes: obtaining a first key and decryption information, encrypting the content in the data field using the first key, and inserting the decryption information into the password field, the decryption information is used to assist in decrypting the encrypted remote control message; modifying the content of the second field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame header and the frame data field, and inserting the check code into the error control field.

[0079] The embodiments of the present application do not limit how to obtain the first key and decryption information. In one embodiment, the encryption server stores a first dynamic encryption table, which includes multiple keys for encrypting remote control messages and decryption information corresponding to each key; or, the first dynamic encryption table includes multiple keys for encrypting remote control messages and key information for generating decryption information corresponding to each key. After the encryption server obtains the key information, it can generate decryption information based on the key information. After the encryption server obtains the key from the first dynamic encryption table, it uses the key as the first key.

[0080] In one embodiment, the decryption information includes key number information and third part key information. For how the key number information and third part key information help the satellite decrypt the remote control ciphertext, please refer to the following Figure 3 The corresponding embodiments are not described in detail here.

[0081] In another embodiment, the decryption information includes key information. For details on how the key information helps the satellite decrypt the remote control ciphertext, see the following Figure 3 The corresponding embodiments are not described in detail here.

[0082] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the encryption server can directly encrypt the remote control plain text.

[0083] For example, in the remote control plain text, the content of the second field is "00", then "00" is modified to "11" to indicate that the message has been encrypted.

[0084] The embodiment of the present application does not limit the method of calculating the check code when calculating the check code of the frame header and the frame data field. For example, the method of calculating the check code is to calculate a CRC (Cyclic Redundancy Check) check code.

[0085] The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission.

[0086] In one embodiment, Figure 3 As shown, the satellite communication method in another embodiment of the present application may include S301 to S305. Among them, the execution order between S301-S302 and S303-S305 is not fixed. The satellite communication method can be executed by high-altitude equipment such as satellites, and the following is described by taking satellite execution as an example.

[0087] S301, the satellite receives the encrypted remote control message sent by the ground station.

[0088] After receiving the encrypted remote control message from the encryption server, the ground station sends the encrypted remote control message to the satellite.

[0089] S302, the satellite decrypts the encrypted remote control message to obtain the remote control message.

[0090] Regarding how the satellite decrypts the encrypted remote control message, the embodiment of the present application does not limit it, and it can be determined according to the encryption method of the remote control message. Figure 2 The corresponding embodiments will not be described in detail here.

[0091] In one embodiment, the encrypted remote control message includes a frame header, a frame data field, and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code. In this case, decrypting the encrypted remote control message includes: decrypting the content of the data field according to the decryption information; calculating the check code of the content of the decrypted frame header and the frame data field, and comparing the calculation result with the check code included in the error control field. When the comparison results are the same, decryption is completed.

[0092] In one embodiment, the decryption information includes key number information and the third part of key information. The decryption information is obtained by reading the information in the password field. According to the preset structure of the decryption information, the key number information and the first part of key information can be separated.

[0093] In one embodiment, a second dynamic decryption table is maintained in the satellite, and the second dynamic decryption table includes a key number and a corresponding key. The decryption information includes the key number information and the third part of the key information. The decryption information is obtained by reading the information in the password field. According to the preset structure of the decryption information, the key number information and the third part of the key information can be separated.

[0094] For example, the decryption information includes 50 bytes, wherein the first 2 bytes are used to represent the key number information, and the last 48 bytes are used to represent the third part of the key information. According to the structure of the decryption information, the encryption server can separate the key number information including 2 bytes and the third part of the key information including 48 bytes.

[0095] It should be noted that the length corresponding to the password field is not less than the length of the decrypted information. For example, the length corresponding to the password field is 50 bytes, and the length of the decrypted information is 26 bytes.

[0096] Afterwards, the encryption server can obtain the key number according to the key number information, and query the second dynamic decryption table according to the key number to obtain the key corresponding to the key number, and use the obtained key as the fourth part of the key. The encryption server can also obtain the third part of the key according to the third part of the key information, for example, the third part of the key information is the third part of the key; for another example, the encryption server processes the third part of the key information according to the preset processing logic to obtain the third part of the key.

[0097] Then, according to a preset processing method, the third part key and the fourth part key are used to generate a decryption key, and then the decryption key is used to decrypt the content of the data domain.

[0098] In another embodiment, the decryption information includes key information. The satellite may process the key information according to a preset processing method to obtain a decryption key, and then use the decryption key to decrypt the content of the data domain.

[0099] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the satellite can directly decrypt the remote control ciphertext.

[0100] S303, the satellite generates a telemetry message.

[0101] S304, the satellite encrypts the telemetry message to obtain an encrypted telemetry message.

[0102] The embodiments of the present application do not limit how the satellite encrypts the telemetry message.

[0103] In one embodiment, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a password field and key telemetry and fixed telemetry fields.

[0104] Encrypting the telemetry message includes: obtaining a second key and decryption information, using the second key to encrypt the contents of key telemetry and fixed telemetry fields and the contents of the frame data field, and inserting the decryption information into the password field, the decryption information is used to assist in decrypting the encrypted telemetry message; modifying the content of the first field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame leading header, the insertion field, and the frame data field, and inserting the check code into the error control field.

[0105] The embodiments of the present application do not limit how to obtain the second key and decryption information. In one embodiment, the satellite stores a second dynamic encryption table, which includes multiple keys for encrypting telemetry messages and decryption information corresponding to each key; or, the second dynamic encryption table includes multiple keys for encrypting telemetry messages and key information for generating decryption information corresponding to each key. After the satellite obtains the key information, it can generate decryption information based on the key information. After the satellite obtains the key from the second dynamic encryption table, it uses the key as the second key.

[0106] In one embodiment, the decryption information includes key number information and the first part of key information. For how the key number information and the first part of key information help the encryption server decrypt the telemetry ciphertext, please refer to the above Figure 2 The corresponding embodiments will not be described in detail here.

[0107] In another embodiment, the decryption information includes key information. For information on how the key information helps the encryption server decrypt the telemetry ciphertext, see the above Figure 2 The corresponding embodiments will not be described in detail here.

[0108] For example, in the telemetry plaintext, if the content of the first field is "00", then "00" is modified to "11" to indicate that the message has been encrypted.

[0109] The embodiment of the present application does not limit the method of calculating the check code when calculating the check code of the frame leading header, the insertion field, and the frame data field. For example, the method of calculating the check code is to calculate the CRC check code.

[0110] S305, the satellite sends the encrypted telemetry message to the ground station.

[0111] In one embodiment, the message structures of the remote control message and the telemetry message can be respectively as follows: Figure 4 and Figure 5 shown.

[0112] Among them, the telemetry message includes a frame header, an insertion field, a frame data field, and an error control field. The frame header includes a version number, a spacecraft identifier, a virtual channel identification (field), a virtual channel frame count (field), and a signaling field. The signaling field includes a real transmission / return transmission (field), a first reserved field, and a first field. The insertion field includes a password field (length is 26 bytes), a timestamp, a second reserved field, key telemetry, and fixed telemetry. The frame data field includes an MPDU (MAC Protocol Data Unit) header and an MPDU packet field.

[0113] The remote control message includes a frame header, a frame data field, and an error control field. The frame header includes a version number, a pass identifier, a control command identifier, a second field, a spacecraft identifier, a virtual channel identifier (field), a transmission frame length, and a transmission frame sequence number. The frame data field includes a password field and a data field.

[0114] The embodiment of the present application does not limit the number of bytes included in the password field in the remote control message. For example, the password field includes 50 bytes.

[0115] In one embodiment, Figure 6 As shown, the encryption server may implement the encryption process including S601 to S609. The specific implementation of S601 to S609 may refer to the above embodiments.

[0116] S601, an application (an application in a ground station) sends an encryption request to a network service (provided by an encryption server).

[0117] S602, the network service reads the database interface through the middleware call.

[0118] S603, the middleware reads the database and feeds back the reading result to the network service through the middleware.

[0119] S604, the network service calls the encryption interface through the middleware.

[0120] S605, the middleware executes the encryption command through the password card.

[0121] S606, the cryptographic card feeds back the encryption result to the network service through the middleware.

[0122] S607, the network service responds to the encryption request of the application.

[0123] S608, the network service calls the log writing interface.

[0124] S609, the middleware writes data to the database, and the database records the log.

[0125] In one embodiment, Figure 7 As shown, the process of the encryption server implementing decryption may include S701 to S709.

[0126] S701, the application (the application in the ground station) sends a decryption request to the network service (provided by the encryption server).

[0127] S702, the network service reads the database interface through the middleware call.

[0128] S703, the middleware reads the database and feeds back the reading result to the network service through the middleware.

[0129] S704, the network service calls the decryption interface through the middleware.

[0130] S705, the middleware executes the decryption command through the password card.

[0131] S706, the cryptographic card feeds back the decryption result to the network service through the middleware.

[0132] S707, the network service responds to the decryption request of the application.

[0133] S708, the network service calls the log writing interface.

[0134] S709, the middleware writes data to the database, and the database records the log.

[0135] Based on the same inventive concept, the present application also provides two satellite communication devices in the embodiments, as described in the following embodiments. Since the principle of solving the problem in the device embodiment is similar to that in the above method embodiment, the implementation of the device embodiment can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0136] Figure 8 A schematic diagram of a satellite communication device in an embodiment of the present application is shown. Figure 8 As shown, the device includes: a first receiving module 81, used to receive a satellite measurement and control message sent by a ground station; a determination module 82, used to determine the type of the satellite measurement and control message; a decryption and sending module 83, used to decrypt the satellite measurement and control message when the type is a telemetry ciphertext, obtain a decrypted telemetry message, and send the decrypted telemetry message to the ground station; an encryption and sending module 84, used to encrypt the satellite measurement and control message when the type is a remote control plaintext, obtain an encrypted remote control message, and send the encrypted remote control message to the ground station, so that the ground station sends the encrypted remote control message to the satellite.

[0137] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plain or secret state of the message; the determination module 82 is used to determine the message type of the satellite measurement and control message; when the message type is a telemetry message, the plain or secret state of the satellite measurement and control message is determined according to the content of the first field to obtain a first result, and when the first result is a ciphertext, the type of the satellite measurement and control message is determined to be a telemetry ciphertext; when the message type is a remote control message, the plain or secret state of the satellite measurement and control message is determined according to the content of the second field to obtain a second result, and when the second result is a plaintext, the type of the satellite measurement and control message is determined to be a remote control plaintext.

[0138] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; the encryption and sending module 84 is used to obtain a first key and decryption information, use the first key to encrypt the content in the data field, and insert the decryption information into the password field, and the decryption information is used to assist in decrypting the encrypted remote control message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame main header and the frame data field, and insert the check code into the error control field.

[0139] In some embodiments, when the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; the decryption and sending module 83 is used to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculate the check code of the content of the frame main header, insertion field and frame data field after decryption, compare the calculation result with the check code included in the error control field, and complete the decryption when the comparison result is the same.

[0140] Fig. 9 A schematic diagram of another satellite communication device in an embodiment of the present application is shown. Fig. 9 As shown, the satellite communication device includes: a second receiving module 91, used to receive the encrypted remote control message sent by the ground station; a decryption module 92, used to decrypt the encrypted remote control message to obtain the remote control message; a generating module 93, used to generate a telemetry message; an encryption module 94, used to encrypt the telemetry message to obtain an encrypted telemetry message; a sending module 95, used to send the encrypted telemetry message to the ground station.

[0141] In some embodiments, the encrypted remote control message includes a frame main header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; the decryption module 92 is used to decrypt the content of the data field according to the decryption information; calculate the check code of the content of the frame main header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0142] In some embodiments, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encryption module 94 is used to obtain a second key and decryption information, and use the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and insert the decryption information into the cipher field, and the decryption information is used to assist in decrypting the encrypted telemetry message; the content of the first field is modified so that the modified content indicates that the message has been encrypted; the check code of the frame main header, the insertion field, and the frame data field is calculated, and the check code is inserted into the error control field.

[0143] The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission.

[0144] Those skilled in the art will appreciate that various aspects of the present application may be implemented as a system, method or program product. Therefore, various aspects of the present application may be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to as "circuit", "module" or "system" herein.

[0145] Refer to the following Fig.10 The electronic device 1000 according to this embodiment of the present application is described. Fig.10 The electronic device 1000 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0146] like Fig.10 As shown, the electronic device 1000 is in the form of a general computing device. The components of the electronic device 1000 may include but are not limited to: the at least one processing unit 1010, the at least one storage unit 1020, and a bus 1030 connecting different system components (including the storage unit 1020 and the processing unit 1010).

[0147] The storage unit stores program codes, which can be executed by the processing unit 1010, so that the processing unit 1010 performs the steps of various exemplary embodiments of the present application described in the above “Exemplary Method” section of this specification. For example, the processing unit 1010 can perform each step of the above method embodiment.

[0148] The storage unit 1020 may include a readable medium in the form of a volatile storage unit, such as a random access memory unit (RAM) 1021 and / or a cache memory unit 1022 , and may further include a read-only memory unit (ROM) 1023 .

[0149] The storage unit 1020 may also include a program / utility 1024 having a set (at least one) of program modules 1025, such program modules 1025 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0150] Bus 1030 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0151] The electronic device 1000 may also communicate with one or more external devices 1040 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 1000, and / or may communicate with any device that enables the electronic device 1000 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed through an input / output (I / O) interface 1050. In addition, the electronic device 1000 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) through a network adapter 1060. As shown, the network adapter 1060 communicates with other modules of the electronic device 1000 through a bus 1030. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 1000, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0152] Through the description of the above implementation methods, it is easy for those skilled in the art to understand that the example implementation methods described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solution according to the implementation method of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation method of the present application.

[0153] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart may be implemented as a computer program product, which includes: a computer program, which implements the above satellite communication method when executed by a processor.

[0154] In an exemplary embodiment of the present application, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. The computer-readable storage medium stores a program product capable of implementing the above method of the present application.

[0155] In some possible implementations, various aspects of the present application may also be implemented in the form of a program product, which includes a program code. When the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps of various exemplary implementations of the present application described in the above “Exemplary Method” section of this specification.

[0156] More specific examples of computer-readable storage media in the present application may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0157] In the present application, a computer readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, wherein a readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A readable signal medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0158] Alternatively, the program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0159] In specific implementation, the program code for performing the operation of the present application can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and also conventional procedural programming languages ​​such as "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, as an independent software package, partially on the user computing device and partially on the remote computing device, or completely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0160] It should be noted that, although several modules or units of the equipment for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present application, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0161] In addition, although the steps of the method in the present application are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0162] Through the description of the above implementation methods, it is easy for those skilled in the art to understand that the example implementation methods described here can be implemented by software, or by combining software with necessary hardware. Therefore, the technical solution according to the implementation method of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation method of the present application.

[0163] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the appended claims.

Claims

1. A satellite communication method, characterized in that: include: Receive satellite tracking and control messages sent by ground stations; Determining the type of the satellite tracking and control message; When the type is a telemetry ciphertext, decrypting the satellite measurement and control message to obtain a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; When the type is remote control plain text, the satellite measurement and control message is encrypted to obtain an encrypted remote control message, and the encrypted remote control message is sent to the ground station so that the ground station sends the encrypted remote control message to the satellite.

2. The satellite communication method according to claim 1, characterized in that: The message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the clear or secret state of the message; The determining the type of the satellite tracking and control message includes: Determining the message type of the satellite tracking and control message; When the message type is a telemetry message, determining the plaintext or ciphertext state of the satellite measurement and control message according to the content of the first field to obtain a first result, and when the first result is ciphertext, determining that the type of the satellite measurement and control message is a telemetry ciphertext; When the message type is a remote control message, the plain or secret state of the satellite measurement and control message is determined according to the content of the second field to obtain a second result, and when the second result is plain text, the type of the satellite measurement and control message is determined to be remote control plain text.

3. The satellite communication method according to claim 2, characterized in that: The length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

4. The satellite communication method according to claim 1, characterized in that: When the type of the satellite measurement and control message is remote control plain text, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; The encrypting the satellite measurement and control message comprises: Acquire a first key and decryption information, use the first key to encrypt the content in the data domain, and insert the decryption information into the password domain, wherein the decryption information is used to assist in decrypting the encrypted remote control message; Modifying the content of the second field so that the modified content indicates that the message has been encrypted; The check code of the frame leading header and the frame data field is calculated, and the check code is inserted into the error control field.

5. The satellite communication method according to claim 1, characterized in that: When the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame dominant header, an insertion field, a frame data field, and an error control field; the frame dominant header includes a first field, and the insertion field includes a cipher field and key telemetry and fixed telemetry fields; The content of the password field includes decryption information; the content of the error control field includes a check code; The decrypting of the satellite measurement and control message comprises: Decrypting the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field according to the decryption information; Calculate the check code of the contents of the frame leading header, insertion field and frame data field after decryption, compare the calculation result with the check code included in the error control field, and complete the decryption when the comparison results are the same.

6. A satellite communication method, characterized in that: include: Receive encrypted remote control messages sent by the ground station; Decrypting the encrypted remote control message to obtain a remote control message; Generate telemetry messages; Encrypting the telemetry message to obtain an encrypted telemetry message; The encrypted telemetry message is sent to the ground station.

7. The satellite communication method according to claim 6, characterized in that: The encrypted remote control message includes a frame header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; The decrypting the encrypted remote control message comprises: Decrypting the content of the data domain according to the decryption information; Calculate the check code of the content of the frame leading header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, complete the decryption.

8. The satellite communication method according to claim 6, characterized in that: The telemetry message includes a frame header, an insertion field, a frame data field and an error control field; the frame header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a password field and key telemetry and fixed telemetry fields; The step of encrypting the telemetry message comprises: Obtaining a second key and decryption information, using the second key to encrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field, and inserting the decryption information into the password field, wherein the decryption information is used to assist in decrypting the encrypted telemetry message; Modifying the content of the first field so that the modified content indicates that the message has been encrypted; Calculate the check code of the frame leading header, insertion field, and frame data field, and insert the check code into the error control field.

9. A satellite communication device, characterized in that: include: A first receiving module, used for receiving satellite measurement and control messages sent by a ground station; A determination module, used to determine the type of the satellite tracking and control message; A decryption and sending module, used for decrypting the satellite measurement and control message when the type is a telemetry ciphertext, obtaining a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; The encryption and sending module is used to encrypt the satellite measurement and control message when the type is remote control plain text, obtain an encrypted remote control message, and send the encrypted remote control message to the ground station so that the ground station sends the encrypted remote control message to the satellite.

10. A satellite communication device, characterized in that: include: A second receiving module is used to receive the encrypted remote control message sent by the ground station; A decryption module, used for decrypting the encrypted remote control message to obtain a remote control message; A generation module, used for generating telemetry messages; An encryption module, used for encrypting the telemetry message to obtain an encrypted telemetry message; A sending module is used to send the encrypted telemetry message to the ground station.

Images