Satellite communication method and device

Abstract

The present application provides a satellite communication method and device, relating to the field of communication technology. The method includes: receiving a satellite measurement and control message sent by a ground station; determining the type of the satellite measurement and control message; when the type is a telemetry ciphertext, decrypting the satellite measurement and control message to obtain a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; when the type is a remote control plaintext, encrypting the satellite measurement and control message to obtain an encrypted remote control message, and sending the encrypted remote control message to the ground station so that the ground station can send the encrypted remote control message to the satellite. By first determining the type of the satellite measurement and control message after obtaining it, and decrypting the satellite measurement and control message when the type is a telemetry ciphertext, and encrypting the satellite measurement and control message when the type is a remote control plaintext, the risk of the satellite measurement and control message being leaked, tampered with, or destroyed during transmission can be reduced.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a satellite communication method and device. Background Art

[0002] With the rapid development of satellite communications, satellite network technology has been widely used in commercial and other fields. The communication links in satellite communication systems primarily include uplinks, which send information from ground stations to satellites; downlinks, which send information from satellites to ground stations; and inter-satellite links, which exchange information between satellites. These links are characterized by long communication links, high latency, and complex systems, making them vulnerable to attacks.

[0003] For satellite measurement and control, satellite orbit and attitude data, and control attitude adjustment and trajectory change data have extremely high confidentiality requirements. If the satellite measurement and control messages are intercepted or tampered with, it will directly lead to the satellite being remotely controlled, causing problems such as deviation from orbit or even tracking loss.

[0004] Therefore, how to reduce the risk of satellite measurement and control messages being leaked, tampered with or destroyed during transmission is an urgent problem to be solved. Summary of the Invention

[0005] The present application provides a satellite communication method and apparatus, which at least provides a communication solution that can reduce the risk of satellite measurement and control messages being leaked, tampered with, or destroyed during transmission.

[0006] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by practice of the present application.

[0007] According to one aspect of the present application, a satellite communication method is provided, including: receiving a satellite measurement and control message sent by a ground station; determining the type of the satellite measurement and control message; when the type is a telemetry ciphertext, decrypting the satellite measurement and control message to obtain a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; when the type is a remote control plaintext, encrypting the satellite measurement and control message to obtain an encrypted remote control message, and sending the encrypted remote control message to the ground station, so that the ground station sends the encrypted remote control message to the satellite.

[0008] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plain or secret state of the message; determining the type of the satellite measurement and control message includes: determining the message type of the satellite measurement and control message; when the message type is a telemetry message, determining the plain or secret state of the satellite measurement and control message according to the content of the first field to obtain a first result, and when the first result is a ciphertext, determining the type of the satellite measurement and control message to be a telemetry ciphertext; when the message type is a remote control message, determining the plain or secret state of the satellite measurement and control message according to the content of the second field to obtain a second result, and when the second result is a plaintext, determining the type of the satellite measurement and control message to be a remote control plaintext.

[0009] In some embodiments, the length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

[0010] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; the encrypting of the satellite measurement and control message includes: obtaining a first key and decryption information, using the first key to encrypt the content in the data field, and inserting the decryption information into the password field, the decryption information is used to assist in decrypting the encrypted remote control message; modifying the content of the second field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame main header and the frame data field, and inserting the check code into the error control field.

[0011] In some embodiments, when the type of the satellite measurement and control message is telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; decrypting the satellite measurement and control message includes: decrypting the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculating the check code of the content of the decrypted frame main header, insertion field and frame data field, comparing the calculation result with the check code included in the error control field, and completing the decryption when the comparison results are the same.

[0012] According to another aspect of the present application, another satellite communication method is provided, including: receiving an encrypted remote control message sent by a ground station; decrypting the encrypted remote control message to obtain a remote control message; generating a telemetry message; encrypting the telemetry message to obtain an encrypted telemetry message; and sending the encrypted telemetry message to the ground station.

[0013] In some embodiments, the encrypted remote control message includes a frame main header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; decrypting the encrypted remote control message includes: decrypting the content of the data field according to the decryption information; calculating the check code of the content of the frame main header and the frame data field after decryption, and comparing the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0014] In some embodiments, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encrypting of the telemetry message includes: obtaining a second key and decryption information, using the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and inserting the decryption information into the cipher field, and the decryption information is used to assist in decrypting the encrypted telemetry message; modifying the content of the first field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame main header, the insertion field, and the frame data field, and inserting the check code into the error control field.

[0015] According to another aspect of the present application, a satellite communication device is also provided, including: a first receiving module for receiving satellite measurement and control messages sent by a ground station; a determination module for determining the type of the satellite measurement and control message; a decryption and sending module for decrypting the satellite measurement and control message when the type is a telemetry ciphertext, obtaining a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; an encryption and sending module for encrypting the satellite measurement and control message when the type is a remote control plaintext, obtaining an encrypted remote control message, and sending the encrypted remote control message to the ground station, so that the ground station can send the encrypted remote control message to the satellite.

[0016] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plaintext or ciphertext status of the message; the determination module is used to determine the message type of the satellite measurement and control message; when the message type is a telemetry message, the plaintext or ciphertext status of the satellite measurement and control message is determined according to the content of the first field, and when the plaintext or ciphertext status is ciphertext, the type of the satellite measurement and control message is determined to be telemetry ciphertext; when the message type is a remote control message, the plaintext or ciphertext status of the satellite measurement and control message is determined according to the content of the second field, and when the plaintext or ciphertext status is plaintext, the type of the satellite measurement and control message is determined to be remote control plaintext.

[0017] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame main header, a frame data field and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; the encryption and sending module is used to obtain a first key and decryption information, use the first key to encrypt the content in the data field, and insert the decryption information into the password field, and the decryption information is used to assist in decrypting the encrypted remote control message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame main header and the frame data field, and insert the check code into the error control field.

[0018] In some embodiments, when the type of the satellite measurement and control message is telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; the decryption and sending module is used to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculate the check code of the content of the decrypted frame main header, insertion field and frame data field, compare the calculation result with the check code included in the error control field, and complete the decryption when the comparison result is the same.

[0019] According to another aspect of the present application, another satellite communication device is provided, including: a second receiving module for receiving an encrypted remote control message sent by a ground station; a decryption module for decrypting the encrypted remote control message to obtain a remote control message; a generation module for generating a telemetry message; an encryption module for encrypting the telemetry message to obtain an encrypted telemetry message; and a sending module for sending the encrypted telemetry message to the ground station.

[0020] In some embodiments, the encrypted remote control message includes a frame main header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; the decryption module is used to decrypt the content of the data field according to the decryption information; calculate the check code of the content of the frame main header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0021] In some embodiments, the telemetry message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, and the first field is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encryption module is used to obtain a second key and decryption information, use the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and insert the decryption information into the cipher field, and the decryption information is used to assist in decrypting the encrypted telemetry message; modify the content of the first field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame main header, insertion field, and frame data field, and insert the check code into the error control field.

[0022] According to another aspect of the present application, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the above-mentioned satellite communication methods by executing the executable instructions.

[0023] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, it implements any one of the satellite communication methods described above.

[0024] According to another aspect of the present application, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements any one of the above satellite communication methods.

[0025] The technical solutions provided in the embodiments of the present application include at least the following beneficial effects:

[0026] The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This method can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite also in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] The accompanying drawings are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present application, and together with the specification, are used to explain the principles of the present application. Obviously, the drawings described below are only some embodiments of the present application, and those skilled in the art can derive other drawings based on these drawings without inventive effort.

[0028] Figure 1 A schematic diagram showing a satellite communication system according to an embodiment of the present application is shown;

[0029] Figure 2 A flow chart of a satellite communication method according to an embodiment of the present application is shown;

[0030] Figure 3 A flowchart of a satellite communication method in another embodiment of the present application is shown;

[0031] Figure 4 A schematic diagram showing the structure of a remote control message in one embodiment of the present application is shown;

[0032] Figure 5 A schematic diagram showing the structure of a telemetry message in one embodiment of the present application is shown;

[0033] Figure 6 A flowchart showing an encryption process in one embodiment of the present application is shown;

[0034] Figure 7 A flowchart showing a decryption process in one embodiment of the present application;

[0035] Figure 8 A schematic diagram of a satellite communication device in one embodiment of the present application is shown;

[0036] Figure 9 A schematic diagram of a satellite communication device in another embodiment of the present application is shown;

[0037] Figure 10 A structural block diagram of an electronic device in one embodiment of the present application is shown. DETAILED DESCRIPTION

[0038] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be embodied in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0039] In addition, the accompanying drawings are merely schematic illustrations of the present application and are not necessarily drawn to scale. Identical reference numerals in the figures denote identical or similar parts, and thus repetitive descriptions thereof will be omitted. Some of the blocks shown in the accompanying drawings are functional entities that do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0040] It should be noted that the acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0041] For ease of understanding, before introducing the embodiments of the present application, several terms involved in the embodiments of the present application are first explained as follows:

[0042] Satellite measurement and control message: a general term for telemetry messages and remote control messages in satellite communications, which can be telemetry messages, remote control messages, or encrypted telemetry messages or remote control messages;

[0043] Telemetry messages: used to transmit measurement data from remote devices (such as satellites, spacecraft, drones, etc.) to ground stations or control centers (hereinafter referred to as ground stations). They are usually sent from remote devices to ground stations.

[0044] Remote control message: used to send control instructions from the ground station to the remote device to achieve remote control of the device;

[0045] Telemetry ciphertext: encrypted telemetry message;

[0046] Decrypt telemetry message: telemetry message;

[0047] Remote control plain text: remote control message;

[0048] Encrypted remote control message: encrypted remote control message.

[0049] For satellite measurement and control, satellite orbit and attitude data, as well as control attitude adjustment and trajectory change data, have extremely high confidentiality requirements. Once they are intercepted or tampered with, it will directly lead to the satellite being remotely controlled, causing problems such as deviation from orbit or even loss of tracking.

[0050] In this regard, this application proposes data encryption for satellite communications, which can be used to encrypt signaling data and business data, but traditional IPSec VPN (Internet Protocol Security Virtual Private Network, a virtual private network based on network security protocol) equipment cannot be directly applied to satellite communication networks.

[0051] Therefore, there is an urgent need for a method to implement data encryption during satellite measurement and control communication.

[0052] In this regard, the present application determines the type of satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is telemetry ciphertext, and encrypts the satellite measurement and control message when the type is remote control plaintext. This method can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite also in an encrypted state, thereby reducing the risk of satellite measurement and control messages being leaked, tampered with or destroyed during transmission.

[0053] The specific implementation of the embodiment of the present application is described in detail below with reference to the accompanying drawings.

[0054] Figure 1 FIG. 1 shows a schematic diagram of a satellite communication system in one embodiment of the present application. Figure 1 As shown, the system may include an encryption server 11 , a ground station 12 and a satellite 13 .

[0055] The ground station 12 may generate a remote control message and send the remote control message to the encryption server 11 .

[0056] The encryption server 11 may encrypt the remote control message to obtain an encrypted remote control message (remote control ciphertext), and send the encrypted remote control message to the ground station 12 .

[0057] After receiving the encrypted remote control message, the ground station 12 sends the encrypted remote control message to the satellite 13.

[0058] The satellite 13 can receive the encrypted remote control message sent by the ground station 12, and can decrypt the encrypted remote control message to obtain a decrypted remote control message (ie, the remote control message), and obtain the instruction command of the ground station 12 according to the decrypted remote control message.

[0059] The satellite 13 may generate a telemetry message, encrypt the telemetry message, and send the encrypted telemetry message to the ground station 12 .

[0060] The ground station 12 can receive the encrypted telemetry message sent by the satellite 13 and send the encrypted telemetry message to the encryption server 11.

[0061] The encryption server 11 can receive the encrypted telemetry message sent by the ground station, decrypt the encrypted telemetry message, and obtain a decrypted telemetry message. Afterwards, the encryption server 11 can also send the decrypted telemetry message to the ground station 12.

[0062] Before the encryption server 11 decrypts the telemetry ciphertext and encrypts the remote control plaintext, it can determine whether the message sent by the ground station 12 is a telemetry ciphertext or a remote control plaintext, and then process the satellite measurement and control message sent by the ground station 12 through the corresponding encryption or decryption processing flow.

[0063] The network is used as a medium for providing a communication link between the encryption server 11 and the ground station 12, and between the ground station 12 and the satellite 13, and can be a wired network or a wireless network.

[0064] Optionally, the wireless network or wired network described above uses standard communication technologies and / or protocols. The network is typically the Internet, but may be any network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a private network, or any combination of a virtual private network. In some embodiments, technologies and / or formats including Hypertext Markup Language (HTML) and Extensible Markup Language (XML) are used to represent data exchanged over the network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), and Internet Protocol Security (IPSec) may be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies may be used to replace or supplement the above-mentioned data communication technologies.

[0065] In one embodiment, the encryption server 11 and the ground station 12 can communicate through an internal network, including directly connecting through a communication line, so as to prevent satellite tracking and control messages from being leaked, tampered with or destroyed when communicating between the encryption server 11 and the ground station 12.

[0066] The encryption server 11 can be a server that provides various services. Optionally, the server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0067] Under the above system architecture, an embodiment of the present application provides a satellite communication method, which can be executed by any electronic device with computing and processing capabilities, such as an encryption server.

[0068] Figure 2 A flow chart of a satellite communication method according to an embodiment of the present application is shown as follows: Figure 2 As shown, the satellite communication method provided in the embodiment of the present application includes the following S201 to S204. Among them, there is no fixed execution order of S203 and S204.

[0069] S201: The encryption server receives a satellite tracking and control message sent by a ground station.

[0070] S202: The encryption server determines the type of the satellite tracking and control message.

[0071] The embodiments of this application do not limit how the encryption server determines the type of satellite tracking and control message.

[0072] The message type of the satellite tracking and control message is a telemetry message or a remote control message. In one embodiment, the telemetry message's frame header includes a first field, and the remote control message's frame header includes a second field. Both the first field and the second field are used to indicate whether the message is plaintext or ciphertext. The plaintext or ciphertext status refers to whether the message is plaintext or ciphertext. In this case, determining the type of the satellite tracking and control message includes: determining the message type of the satellite tracking and control message; when the message type is a telemetry message, determining the plaintext or ciphertext status of the satellite tracking and control message based on the content of the first field to obtain a first result, and when the first result is ciphertext, determining the type of the satellite tracking and control message as telemetry ciphertext; when the message type is a remote control message, determining the plaintext or ciphertext status of the satellite tracking and control message based on the content of the second field to obtain a second result, and when the second result is plaintext, determining the type of the satellite tracking and control message as remote control plaintext.

[0073] The embodiments of the present application do not limit how to determine the message type of a satellite tracking and control message. For example, the message type of a satellite tracking and control message can be determined directly based on the structure of the satellite tracking and control message's frame leader. For another example, the message type of a satellite tracking and control message can also be determined based on the structure of the entire satellite tracking and control message.

[0074] After determining the message type of the satellite tracking and control message, the content of the first field or the second field can be read according to the pre-set processing logic, and whether the satellite tracking and control message is encrypted can be determined based on the content of the first field or the second field.

[0075] In one embodiment, the length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

[0076] Two bits can represent four combinations of "00," "01," "10," and "11," while only two combinations are needed to indicate whether a message is encrypted or unencrypted. Therefore, limiting the length of the first field and / or the second field to no less than two bits allows for greater scalability of the first field. In addition to being used to represent combinations of encryption and decryption status, the first field can also be used to represent other information. Furthermore, by setting the length of the first field and / or the second field to no less than two bits, it is also easier to identify problems with messages during satellite communications. If the content of the first field and / or the second field is neither a combination representing an encrypted state nor a combination representing an unencrypted state, it can be determined that there is a problem with the satellite tracking and control message.

[0077] The embodiments of the present application do not limit when the contents of the first field and the second field indicate that the message is encrypted and when they indicate that the message is not encrypted.

[0078] For example, the length of the first field and the second field are both 2 bits, and both are "00" to indicate that the message is not encrypted, and "11" to indicate that the message is encrypted.

[0079] S203: When the type is telemetry ciphertext, the encryption server decrypts the satellite tracking and control message to obtain a decrypted telemetry message, and sends the decrypted telemetry message to the ground station.

[0080] The embodiment of the present application does not limit how to decrypt the satellite measurement and control message. The decryption can be performed according to the encryption method of the satellite measurement and control message. For the encryption method of the telemetry ciphertext, please refer to the following Figure 3 The corresponding embodiments are not described here in detail.

[0081] In one embodiment, when the satellite tracking and control message type is telemetry ciphertext, the satellite tracking and control message includes a frame header, an insertion field, a frame data field, and an error control field. The frame header includes a first field, the insertion field includes a cipher field, and key telemetry and fixed telemetry fields. The cipher field includes decryption information. The error control field includes a checksum.

[0082] In one embodiment, the encrypted portion of the telemetry message consists of the contents of the key telemetry and fixed telemetry fields, as well as the contents of the frame data field. The contents of the error control field include a checksum, which is calculated by the satellite based on the contents of the frame header, insertion field, and frame data field.

[0083] The decryption information is used to assist in decrypting the telemetry ciphertext.

[0084] In one embodiment, decrypting a satellite measurement and control message includes: decrypting the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field according to the decryption information; calculating the check code of the contents of the decrypted frame leading header, insertion field and frame data field, and comparing the calculation result with the check code included in the error control field. When the comparison results are the same, decryption is completed.

[0085] The embodiments of the present application do not limit how to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field based on the decryption information.

[0086] In one embodiment, the encryption server maintains a first dynamic decryption table that includes key numbers and corresponding keys. Decryption information includes the key number and a first portion of key information. The decryption information is obtained by reading information in the password field. The key number and the first portion of key information can be separated based on a predetermined structure of the decryption information.

[0087] For example, the decryption information includes 26 bytes, of which the first 2 bytes are used to represent the key number information and the last 24 bytes are used to represent the first part of the key. According to the structure of the decryption information, the encryption server can separate the key number information including 2 bytes and the first part of the key information including 24 bytes.

[0088] The encryption server can then obtain the key number based on the key number information, query the first dynamic decryption table based on the key number, obtain the key corresponding to the key number, and use the obtained key as the second key portion. The encryption server can also obtain the first key portion based on the first key portion information. For example, the first key portion information is the first key portion; in another example, the encryption server processes the first key portion information according to preset processing logic to obtain the first key portion.

[0089] Then, according to the preset processing method, the first part of the key and the second part of the key are used to generate a decryption key, and then the decryption key is used to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field.

[0090] In another embodiment, the decryption information includes key information. The encryption server can process the key information according to a preset processing method to obtain a decryption key, and then use the decryption key to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field.

[0091] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the encryption server can directly decrypt the telemetry ciphertext.

[0092] S204, when the type is remote control plain text, the encryption server encrypts the satellite measurement and control message to obtain an encrypted remote control message, and sends the encrypted remote control message to the ground station so that the ground station sends the encrypted remote control message to the satellite.

[0093] The embodiments of the present application do not limit how the encryption server encrypts the satellite measurement and control message (here, the remote control message).

[0094] In one embodiment, when the type of the satellite tracking and control message is remote control plain text, the satellite tracking and control message includes a frame header, a frame data field, and an error control field.

[0095] The frame header includes a second field, and the frame data field includes a data field and a cipher field. The second field is used to indicate whether the message is encrypted. In this case, encrypting the satellite telemetry message includes: obtaining a first key and decryption information, encrypting the content in the data field using the first key, and inserting the decryption information into the cipher field. The decryption information is used to assist in decrypting the encrypted telemetry message; modifying the content of the second field so that the modified content indicates that the message is encrypted; and calculating a checksum for the frame header and frame data fields, and inserting the checksum into the error control field.

[0096] The embodiments of this application do not limit how the first key and decryption information are obtained. In one embodiment, the encryption server stores a first dynamic encryption table, which includes multiple keys for encrypting remote control messages and decryption information corresponding to each key; or the first dynamic encryption table includes multiple keys for encrypting remote control messages and key information corresponding to each key for generating decryption information. After the encryption server obtains the key information, it can generate decryption information based on the key information. After the encryption server obtains the key from the first dynamic encryption table, it uses the key as the first key.

[0097] In one embodiment, the decryption information includes key number information and third part key information. For details on how the key number information and third part key information help the satellite decrypt the remote control ciphertext, please refer to the following Figure 3 The corresponding embodiments are not described here in detail.

[0098] In another embodiment, the decryption information includes key information. For details on how the key information helps the satellite decrypt the remote control ciphertext, please refer to the following. Figure 3 The corresponding embodiments are not described here in detail.

[0099] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the encryption server can directly encrypt the remote control plaintext.

[0100] For example, if the content of the second field in the remote control plain text is "00", then "00" is modified to "11" to indicate that the message has been encrypted.

[0101] The embodiments of the present application do not limit the method used to calculate the checksums of the frame header and the frame data field. For example, the method for calculating the checksum is to calculate a CRC (Cyclic Redundancy Check) checksum.

[0102] The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This method can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite also in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission.

[0103] In one embodiment, Figure 3 As shown, the satellite communication method in another embodiment of the present application may include S301 to S305. The execution order of S301-S302 and S303-S305 is not fixed. The satellite communication method can be executed by a high-altitude device such as a satellite. The following description uses satellite execution as an example.

[0104] S301, the satellite receives the encrypted remote control message sent by the ground station.

[0105] After receiving the encrypted remote control message from the encryption server, the ground station sends the encrypted remote control message to the satellite.

[0106] S302: The satellite decrypts the encrypted remote control message to obtain the remote control message.

[0107] Regarding how the satellite decrypts the encrypted remote control message, the embodiment of the present application does not limit it, and it can be determined according to the encryption method of the remote control message. Figure 2 The corresponding embodiments will not be described in detail here.

[0108] In one embodiment, an encrypted remote control message includes a frame header, a frame data field, and an error control field. The frame data field includes a cipher field and a data field. The cipher field includes decryption information, and the error control field includes a check code. In this case, decrypting the encrypted remote control message includes: decrypting the data field based on the decryption information; calculating a check code for the decrypted frame header and frame data field, and comparing the calculated check code with the check code included in the error control field. If the comparison results are the same, decryption is completed.

[0109] In one embodiment, the decryption information includes key number information and the third part of key information. The decryption information is obtained by reading the information in the password field. According to the preset structure of the decryption information, the key number information and the first part of key information can be separated.

[0110] In one embodiment, a second dynamic decryption table is maintained in the satellite, which includes key numbers and corresponding keys. Decryption information includes the key number and a third portion of key information. The decryption information is obtained by reading information in the password field. The key number and the third portion of key information can be separated based on a predetermined decryption information structure.

[0111] For example, the decryption information includes 50 bytes, of which the first 2 bytes are used to represent the key number information, and the last 48 bytes are used to represent the third part of the key information. Based on the structure of the decryption information, the encryption server can separate the key number information including 2 bytes and the third part of the key information including 48 bytes.

[0112] It should be noted that the length of the password field is not less than the length of the decrypted information. For example, the length of the password field is 50 bytes, and the length of the decrypted information is 26 bytes.

[0113] The encryption server can then obtain the key number based on the key number information, and query the second dynamic decryption table based on the key number to obtain the key corresponding to the key number, and use the obtained key as the fourth key. The encryption server can also obtain the third key part based on the third key part information. For example, the third key part information is the third key part; in another example, the encryption server processes the third key part information according to preset processing logic to obtain the third key part.

[0114] Then, according to a preset processing method, the third part of the key and the fourth part of the key are used to generate a decryption key, and then the decryption key is used to decrypt the content of the data field.

[0115] In another embodiment, the decryption information includes key information. The satellite can process the key information according to a preset processing method to obtain a decryption key, and then use the decryption key to decrypt the content of the data field.

[0116] In one embodiment, the satellite and the encryption server have an agreed encryption and decryption method, and the satellite can directly decrypt the remote control ciphertext.

[0117] S303: The satellite generates a telemetry message.

[0118] S304: The satellite encrypts the telemetry message to obtain an encrypted telemetry message.

[0119] The embodiments of this application do not limit how the satellite encrypts the telemetry message.

[0120] In one embodiment, the telemetry message includes a frame header, an insertion field, a frame data field and an error control field; the frame header includes a first field, which is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields.

[0121] Encrypting the telemetry message includes: obtaining a second key and decryption information, using the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and inserting the decryption information into the password field, the decryption information is used to assist in decrypting the encrypted telemetry message; modifying the content of the first field so that the modified content indicates that the message has been encrypted; calculating the check code of the frame header, the insertion field, and the frame data field, and inserting the check code into the error control field.

[0122] The embodiments of the present application do not limit how the second key and decryption information are obtained. In one embodiment, the satellite stores a second dynamic encryption table, which includes multiple keys used to encrypt telemetry messages and decryption information corresponding to each key; or, the second dynamic encryption table includes multiple keys used to encrypt telemetry messages and key information corresponding to each key for generating decryption information. After the satellite obtains this key information, it can generate decryption information based on the key information. After the satellite obtains the key from the second dynamic encryption table, it uses this key as the second key.

[0123] In one embodiment, the decryption information includes key number information and first part key information. For details on how the key number information and first part key information help the encryption server decrypt the telemetry ciphertext, please refer to the above Figure 2 The corresponding embodiments will not be described in detail here.

[0124] In another embodiment, the decryption information includes key information. For details on how the key information helps the encryption server decrypt the telemetry ciphertext, please refer to the above Figure 2 The corresponding embodiments will not be described in detail here.

[0125] For example, in the telemetry plaintext, if the content of the first field is "00", then "00" is modified to "11" to indicate that the message has been encrypted.

[0126] The embodiments of the present application do not limit the method used to calculate the check code of the frame header, insertion field, and frame data field. For example, the method of calculating the check code is to calculate a CRC check code.

[0127] S305: The satellite sends the encrypted telemetry message to the ground station.

[0128] In one embodiment, the message structures of the remote control message and the telemetry message can be respectively as follows: Figure 4 and Figure 5 shown.

[0129] The telemetry message consists of a frame header, insertion fields, frame data fields, and an error control field. The frame header includes the version number, spacecraft identifier, virtual channel identification (field), virtual channel frame count (field), and signaling fields. The signaling field includes the actual transmission / return transmission (field), the first reserved field, and the first field. The insertion fields include the password field (26 bytes long), timestamp, second reserved field, key telemetry, and fixed telemetry. The frame data field includes the MPDU (MAC Protocol Data Unit) header and MPDU packet field.

[0130] The telecontrol message consists of a frame header, a frame data field, and an error control field. The frame header includes a version number, a pass identifier, a control command identifier, a second field, a spacecraft identifier, a virtual channel identifier (field), a transmission frame length, and a transmission frame sequence number. The frame data field includes a password field and a data field.

[0131] The embodiment of the present application does not limit the number of bytes included in the password field in the remote control message. For example, the password field includes 50 bytes.

[0132] In one embodiment, Figure 6 As shown, the encryption server may implement the encryption process including S601 to S609. The specific implementation of S601 to S609 may refer to the above embodiments.

[0133] S601: An application (an application in a ground station) sends an encryption request to a network service (provided by an encryption server).

[0134] S602: The network service reads the database interface through the middleware call.

[0135] S603: The middleware reads the database and feeds back the reading result to the network service through the middleware.

[0136] S604, the network service calls the encryption interface through the middleware.

[0137] S605: The middleware executes the encryption command through the password card.

[0138] S606, the password card feeds back the encryption result to the network service through the middleware.

[0139] S607: The network service responds to the encryption request of the application.

[0140] S608: The network service calls the log writing interface.

[0141] S609: The middleware writes data into the database, and the database records the log.

[0142] In one embodiment, Figure 7 As shown, the process of the encryption server implementing decryption may include S701 to S709.

[0143] S701: The application (the application in the ground station) sends a decryption request to the network service (provided by the encryption server).

[0144] S702, the network service reads the database interface through the middleware call.

[0145] S703: The middleware reads the database and feeds back the reading result to the network service through the middleware.

[0146] S704, the network service calls the decryption interface through the middleware.

[0147] S705, the middleware executes the decryption command through the password card.

[0148] S706, the password card feeds back the decryption result to the network service through the middleware.

[0149] S707: The network service responds to the application's decryption request.

[0150] S708, the network service calls the log writing interface.

[0151] S709: The middleware writes data into the database, and the database records the log.

[0152] Based on the same inventive concept, the present application also provides two satellite communication devices in the following embodiments. Since the principles of the device embodiments are similar to those of the above-mentioned method embodiments, the implementation of the device embodiments can refer to the implementation of the above-mentioned method embodiments, and the repeated parts will not be repeated.

[0153] Figure 8 A schematic diagram of a satellite communication device according to an embodiment of the present application is shown in FIG. Figure 8 As shown, the device includes: a first receiving module 81, used to receive a satellite measurement and control message sent by a ground station; a determination module 82, used to determine the type of the satellite measurement and control message; a decryption and sending module 83, used to decrypt the satellite measurement and control message when the type is a telemetry ciphertext, obtain a decrypted telemetry message, and send the decrypted telemetry message to the ground station; an encryption and sending module 84, used to encrypt the satellite measurement and control message when the type is a remote control plaintext, obtain an encrypted remote control message, and send the encrypted remote control message to the ground station, so that the ground station can send the encrypted remote control message to the satellite.

[0154] In some embodiments, the message type of the satellite measurement and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the plaintext or ciphertext status of the message; the determination module 82 is used to determine the message type of the satellite measurement and control message; when the message type is a telemetry message, the plaintext or ciphertext status of the satellite measurement and control message is determined according to the content of the first field to obtain a first result, and when the first result is ciphertext, the type of the satellite measurement and control message is determined to be a telemetry ciphertext; when the message type is a remote control message, the plaintext or ciphertext status of the satellite measurement and control message is determined according to the content of the second field to obtain a second result, and when the second result is plaintext, the type of the satellite measurement and control message is determined to be a remote control plaintext.

[0155] In some embodiments, when the type of the satellite measurement and control message is remote control plaintext, the satellite measurement and control message includes a frame header, a frame data field and an error control field; the frame header includes a second field, and the frame data field includes a data field and a password field; the encryption and sending module 84 is used to obtain a first key and decryption information, use the first key to encrypt the content in the data field, and insert the decryption information into the password field, and the decryption information is used to assist in decrypting the encrypted remote control message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame header and the frame data field, and insert the check code into the error control field.

[0156] In some embodiments, when the type of the satellite measurement and control message is telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; the decryption and sending module 83 is used to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculate the check code of the content of the frame main header, insertion field and frame data field after decryption, compare the calculation result with the check code included in the error control field, and complete the decryption when the comparison result is the same.

[0157] Figure 9 FIG. 1 shows another schematic diagram of a satellite communication device according to an embodiment of the present application. Figure 9 As shown, the satellite communication device includes: a second receiving module 91, used to receive the encrypted remote control message sent by the ground station; a decryption module 92, used to decrypt the encrypted remote control message to obtain the remote control message; a generation module 93, used to generate the telemetry message; an encryption module 94, used to encrypt the telemetry message to obtain an encrypted telemetry message; and a sending module 95, used to send the encrypted telemetry message to the ground station.

[0158] In some embodiments, the encrypted remote control message includes a frame header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; the decryption module 92 is used to decrypt the content of the data field according to the decryption information; calculate the check code of the content of the frame header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, the decryption is completed.

[0159] In some embodiments, the telemetry message includes a frame header, an insertion field, a frame data field and an error control field; the frame header includes a first field, which is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the encryption module 94 is used to obtain a second key and decryption information, use the second key to encrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field, and insert the decryption information into the cipher field, and the decryption information is used to assist in decrypting the encrypted telemetry message; modify the content of the first field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame header, insertion field, and frame data field, and insert the check code into the error control field.

[0160] The technical solution provided in the embodiments of the present application determines the type of the satellite measurement and control message after obtaining it, and decrypts the satellite measurement and control message when the type is a telemetry ciphertext, and encrypts the satellite measurement and control message when the type is a remote control plaintext. This method can make the telemetry message transmitted by the satellite to the ground station in an encrypted state, and the remote control message transmitted by the ground station to the satellite also in an encrypted state, thereby reducing the risk of satellite measurement and control messages (telemetry messages, remote control messages) being leaked, tampered with or destroyed during transmission.

[0161] Those skilled in the art will appreciate that various aspects of the present application can be implemented as systems, methods, or program products. Therefore, various aspects of the present application can be specifically implemented in the following forms: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or an implementation that combines hardware and software aspects, which may be collectively referred to herein as a "circuit," "module," or "system."

[0162] Refer to the following Figure 10 1000 according to this embodiment of the present application will be described. Figure 10 The electronic device 1000 shown is merely an example and should not limit the functions and scope of use of the embodiments of the present application.

[0163] like Figure 10 As shown, electronic device 1000 is implemented as a general-purpose computing device. Components of electronic device 1000 may include, but are not limited to, the aforementioned at least one processing unit 1010, the aforementioned at least one storage unit 1020, and a bus 1030 connecting various system components (including storage unit 1020 and processing unit 1010).

[0164] The storage unit stores program code, which can be executed by the processing unit 1010, so that the processing unit 1010 performs the steps of various exemplary embodiments of the present application described in the "Exemplary Method" section above. For example, the processing unit 1010 can perform each step of the above method embodiment.

[0165] The storage unit 1020 may include a readable medium in the form of a volatile memory unit, such as a random access memory unit (RAM) 1021 and / or a cache memory unit 1022 , and may further include a read-only memory unit (ROM) 1023 .

[0166] The storage unit 1020 may also include a program / utility 1024 having a set (at least one) of program modules 1025, such program modules 1025 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0167] Bus 1030 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0168] Electronic device 1000 may also communicate with one or more external devices 1040 (e.g., a keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with electronic device 1000, and / or any device that enables electronic device 1000 to communicate with one or more other computing devices (e.g., a router, modem, etc.). This communication may occur via input / output (I / O) interface 1050. Furthermore, electronic device 1000 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) via network adapter 1060. As shown, network adapter 1060 communicates with other modules of electronic device 1000 via bus 1030. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with electronic device 1000, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0169] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the embodiments of the present application.

[0170] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart may be implemented as a computer program product, which includes: a computer program, which implements the above satellite communication method when executed by a processor.

[0171] In an exemplary embodiment of the present application, a computer-readable storage medium is further provided, which may be a readable signal medium or a readable storage medium. The computer-readable storage medium stores a program product capable of implementing the above-mentioned method of the present application.

[0172] In some possible implementations, various aspects of the present application may also be implemented in the form of a program product, which includes program code. When the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps of various exemplary implementations of the present application described in the above "Exemplary Method" section of this specification.

[0173] More specific examples of computer-readable storage media in the present application may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fibers, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0174] In this application, a computer-readable storage medium may include a data signal transmitted in baseband or as part of a carrier wave, which carries readable program code. Such a transmitted data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium that can transmit, propagate, or transfer a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0175] Alternatively, the program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0176] In a specific implementation, the program code for performing the operations of the present application can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, as a standalone software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0177] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiment of the application, the features and functions of two or more modules or units described above can be concretized in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be concretized.

[0178] Furthermore, although the steps of the method of the present application are described in a particular order in the accompanying drawings, this does not require or imply that the steps must be performed in this particular order, or that all steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps.

[0179] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the embodiments of the present application.

[0180] Those skilled in the art will readily appreciate other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present invention that follow the general principles of the present invention and include common knowledge or customary techniques in the art not disclosed herein. The description and examples are to be considered merely as exemplary, and the true scope and spirit of the present application are indicated by the appended claims.

Claims

1. A satellite communication method, characterized in that: Applicable to encryption servers, including: Receive satellite tracking and control messages sent by the ground station; Determining the type of the satellite tracking and control message; When the type is a telemetry ciphertext, decrypting the satellite tracking and control message to obtain a decrypted telemetry message, and sending the decrypted telemetry message to the ground station; When the type is remote control plaintext, encrypting the satellite measurement and control message to obtain an encrypted remote control message, and sending the encrypted remote control message to the ground station so that the ground station sends the encrypted remote control message to the satellite; When the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field, and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; the content of the error control field includes a check code; decrypting the satellite measurement and control message includes: decrypting the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculating the check code of the decrypted content of the frame main header, the insertion field, and the frame data field, comparing the calculated result with the check code included in the error control field, and completing the decryption if the comparison results are the same; A first dynamic decryption table is maintained in the encryption server, which includes a key number and a corresponding key; the decryption information includes key number information and a first part of key information; the decryption of the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information includes: obtaining the key number according to the key number information, and querying the first dynamic decryption table according to the key number to obtain the key corresponding to the key number, and using the obtained key as the second part of the key; obtaining the first part of the key according to the first part of the key information; according to a preset processing method, using the first part of the key and the second part of the key to generate a decryption key; using the decryption key to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field.

2. The satellite communication method according to claim 1, wherein: The message type of the satellite tracking and control message is a telemetry message or a remote control message, the frame header of the telemetry message includes a first field, and the frame header of the remote control message includes a second field, and the first field and the second field are both used to indicate the clear or encrypted state of the message; Determining the type of the satellite tracking and control message includes: Determining the message type of the satellite tracking and control message; When the message type is a telemetry message, determining the plaintext or ciphertext state of the satellite measurement and control message according to the content of the first field to obtain a first result, and when the first result is ciphertext, determining that the type of the satellite measurement and control message is telemetry ciphertext; When the message type is a remote control message, the plaintext or encrypted state of the satellite measurement and control message is determined according to the content of the second field to obtain a second result, and when the second result is plaintext, the type of the satellite measurement and control message is determined to be remote control plaintext.

3. The satellite communication method according to claim 2, wherein: The length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

4. The satellite communication method according to claim 1, wherein: When the type of the satellite measurement and control message is remote control plain text, the satellite measurement and control message includes a frame header, a frame data field, and an error control field; the frame header includes a second field, and the frame data field includes a data field and a password field; The encrypting the satellite measurement and control message includes: Obtaining a first key and decryption information, encrypting the content in the data field using the first key, and inserting the decryption information into the password field, wherein the decryption information is used to assist in decrypting the encrypted remote control message; Modifying the content of the second field so that the modified content indicates that the message is encrypted; Calculate the check code of the frame leading header and the frame data field, and insert the check code into the error control field.

5. A satellite communication method, characterized in that: Applications in satellites include: receiving an encrypted remote control message sent by a ground station, wherein the encrypted remote control message is obtained by encrypting the remote control message by an encryption server such as that described in any one of claims 1 to 4; decrypting the encrypted remote control message to obtain a remote control message; Generate telemetry messages; Encrypting the telemetry message to obtain an encrypted telemetry message; Sending the encrypted telemetry message to the ground station.

6. The satellite communication method according to claim 5, wherein: The encrypted remote control message includes a frame header, a frame data field and an error control field, the frame data field includes a password field and a data field, the content of the password field includes decryption information, and the content of the error control field includes a check code; Decrypting the encrypted remote control message includes: decrypting the content of the data domain according to the decryption information; Calculate the check code of the content of the frame leading header and the frame data field after decryption, and compare the calculation result with the check code included in the error control field. When the comparison results are the same, complete the decryption.

7. The satellite communication method according to claim 5, wherein: The telemetry message includes a frame header, an insertion field, a frame data field, and an error control field; the frame header includes a first field, which is used to indicate the clear or encrypted state of the message; the insertion field includes a cipher field and key telemetry and fixed telemetry fields; The encrypting the telemetry message includes: Obtaining a second key and decryption information, encrypting the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field using the second key, and inserting the decryption information into the cipher field, wherein the decryption information is used to assist in decrypting the encrypted telemetry message; Modifying the content of the first field so that the modified content indicates that the message is encrypted; Calculate the check codes of the frame leading header, the insertion field, and the frame data field, and insert the check codes into the error control field.

8. A satellite communication device, characterized in that: Applicable to encryption servers, including: A first receiving module is used to receive satellite measurement and control messages sent by a ground station; A determination module, configured to determine the type of the satellite tracking and control message; a decryption and sending module, configured to decrypt the satellite tracking and control message when the type is a telemetry ciphertext, obtain a decrypted telemetry message, and send the decrypted telemetry message to the ground station; an encryption and transmission module, configured to, when the type is remote control plaintext, encrypt the satellite measurement and control message to obtain an encrypted remote control message, and transmit the encrypted remote control message to the ground station so that the ground station transmits the encrypted remote control message to the satellite; When the type of the satellite measurement and control message is a telemetry ciphertext, the satellite measurement and control message includes a frame main header, an insertion field, a frame data field, and an error control field; the frame main header includes a first field, the insertion field includes a cipher field and key telemetry and fixed telemetry fields; the content of the cipher field includes decryption information; a decryption and sending module is used to decrypt the content of the key telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information; calculate a check code of the decrypted content of the frame main header, the insertion field, and the frame data field, compare the calculated result with the check code included in the error control field, and complete decryption if the comparison results are the same; A first dynamic decryption table is maintained in the encryption server, which includes a key number and a corresponding key; the decryption information includes key number information and a first part of the key information; a decryption and sending module is used to obtain the key number according to the key number information, and query the first dynamic decryption table according to the key number to obtain the key corresponding to the key number, and use the obtained key as the second part of the key; obtain the first part of the key according to the first part of the key information; generate a decryption key using the first part of the key and the second part of the key according to a preset processing method; use the decryption key to decrypt the contents of the key telemetry and fixed telemetry fields and the contents of the frame data field.

9. A satellite communication device, characterized in that: Applications in satellites include: a second receiving module, configured to receive an encrypted remote control message sent by a ground station, wherein the encrypted remote control message is obtained by encrypting the remote control message by an encryption server such as that described in any one of claims 1 to 4; A decryption module, configured to decrypt the encrypted remote control message to obtain a remote control message; A generation module, used to generate telemetry messages; An encryption module, used for encrypting the telemetry message to obtain an encrypted telemetry message; A sending module is used to send the encrypted telemetry message to the ground station.

Images