Satellite communication management system and electronic equipment

Abstract

The invention provides a satellite communication management system and electronic equipment, and relates to the technical field of satellite communication. The system comprises a key management system and an encryption system, the key management system comprises a user interaction interface, a system platform and a data support layer, and the system platform comprises an encryption application interface and a service logic processing module; the encryption application interface is used for providing an encryption and decryption algorithm; the data support layer is used for storing system data information including key information; the user interaction interface is used for receiving an operation instruction and calling the service logic processing module to update the system data information; and the encryption system is used for calling the encryption application interface and encrypting or decrypting the satellite measurement and control message sent by the ground station according to the key information so as to send the processed message to the ground station. The system at least provides a technical scheme capable of reducing the risk that the satellite measurement and control message is leaked, tampered or damaged in the transmission process.

Description

Technical Field

[0001] This application relates to the field of satellite communication technology, and particularly to a satellite communication management system and an electronic device. Background Art

[0002] With the rapid development of satellite communication, satellite network technology has been widely applied in military, commercial and other fields. In a satellite communication system, communication links mainly include an uplink for a ground station to send information to a satellite, a downlink for the satellite to send information to the ground station, and an inter-satellite link for information exchange between different satellites. Due to characteristics such as long communication links, large delays, and complex systems, satellite communication systems are vulnerable to attacks.

[0003] For satellite measurement and control, whether it is a military communication satellite or a commercial communication satellite, there are extremely high confidentiality requirements for satellite orbit and attitude data, and control and attitude adjustment and orbit change data. If satellite measurement and control messages are eavesdropped or tampered with, it will directly lead to the satellite being remotely controlled, causing problems such as deviation from the orbit or even loss of tracking.

[0004] Therefore, how to manage satellite communication to reduce the risk of satellite measurement and control messages being leaked, tampered with or damaged during transmission is an urgent problem to be solved. Summary of the Invention

[0005] This application provides a satellite communication management system and an electronic device, and at least provides a technical solution that can reduce the risk of satellite measurement and control messages being leaked, tampered with or damaged during transmission.

[0006] Other features and advantages of this application will become apparent through the following detailed description, or be learned in part through the practice of this application.

[0007] According to one aspect of this application, a satellite communication management system is provided, including: a key management system and an encryption system. The key management system includes a user interface, a system platform, and a data support layer. The system platform includes an encryption application interface and a service logic processing module. The encryption application interface is used to provide encryption and decryption algorithms; the data support layer is used to store system data information including key information; the user interface is used to receive operation instructions and call the service logic processing module to update the system data information; the encryption system is used to call the encryption application interface and encrypt or decrypt the satellite measurement and control messages sent by the ground station according to the key information, so as to send the processed messages to the ground station.

[0008] Through the user interface, the administrator can call the business logic processing module to update the content such as the key information stored in the system. The encryption system can encrypt or decrypt the satellite TT&C messages sent by the ground station, so as to ensure that the satellite TT&C messages between the satellite and the ground station are in an encrypted state, thereby reducing the risk of the satellite TT&C messages being leaked, tampered with or damaged during the transmission process.

[0009] In some embodiments, the user interface includes an administrator management sub-interface, a key management sub-interface, an injector management sub-interface, a data management sub-interface, and a log management sub-interface; the business logic processing module is used to provide administrator management logic, key management logic, injector management logic, data management logic, and log management logic; the data support layer is used to store the administrator information table, the key information table recording the key information, the injector information table, the data backup information table, the event log table, the administrator log table, the satellite equipment log table, and the satellite equipment information table.

[0010] By configuring multiple sub-interfaces, multiple management logics, and multiple tables, the functions of the system can be enhanced, thus facilitating better management of satellite communication.

[0011] In some embodiments, the key management logic includes key generation logic, key storage logic, and key distribution logic; the key management sub-interface is used to receive key generation operation instructions, so as to call the key generation logic and the key storage logic to generate and store keys; the key management sub-interface is also used to receive key distribution operation instructions, so as to call the key distribution logic to distribute keys to the satellite through the ground station.

[0012] Using the satellite communication management system to generate, update, and distribute keys can reduce the complexity of the ground station operation, and by distributing keys, the freshness of the keys in the satellite can be maintained, thereby reducing the risk of key leakage and improving the security of the satellite TT&C messages encrypted with the highly fresh keys during the transmission process.

[0013] In some embodiments, the encryption system includes: a message identification unit for identifying the type of the satellite TT&C message sent from the ground station; a message decryption unit for decrypting the satellite TT&C message by calling the encryption application interface when the type is telemetry ciphertext, so as to send the decrypted telemetry message obtained by decryption to the ground station; a message encryption unit for encrypting the satellite TT&C message according to the key information by calling the encryption application interface when the type is remote control plaintext, so as to send the encrypted remote control message obtained by encryption to the ground station.

[0014] By first determining the type after obtaining the satellite TT&C message, decrypting the satellite TT&C message when the type is telemetry ciphertext, and encrypting the satellite TT&C message when the type is telecommand plaintext, it is possible to make the telemetry message transmitted from the satellite to the ground station in an encrypted state, and the telecommand message transmitted from the ground station to the satellite is also in an encrypted state, thereby reducing the risk of the satellite TT&C message (telemetry message, telecommand message) being leaked, tampered with, or damaged during transmission.

[0015] In some embodiments, the message type of the satellite TT&C message is a telemetry message or a telecommand message. The frame leading header of the telemetry message includes a first field, and the frame leading header of the telecommand message includes a second field. Both the first field and the second field are used to indicate the plaintext / ciphertext state of the message; a message identification unit for determining the message type of the satellite TT&C message; when the message type is a telemetry message, determining the plaintext / ciphertext state of the satellite TT&C message according to the content of the first field to obtain a first result, and when the first result is ciphertext, determining the type of the satellite TT&C message as telemetry ciphertext; when the message type is a telecommand message, determining the plaintext / ciphertext state of the satellite TT&C message according to the content of the second field to obtain a second result, and when the second result is plaintext, determining the type of the satellite TT&C message as telecommand plaintext.

[0016] The method of adding a first field or a second field to the frame leading header provides a way to label the message type of the satellite TT&C message, which is beneficial to setting up an additional satellite communication control system outside the ground station to assist the ground station in key management and encryption / decryption processing of the labeled satellite TT&C message, so as to ensure the security of the satellite TT&C message interaction between the ground station and the satellite, and avoid complicating the ground station. Further, it is convenient to improve the existing ground station without making major changes to the existing ground station.

[0017] In some embodiments, when the type of the satellite TT&C message is telecommand plaintext, the satellite TT&C message includes a frame leading header, a frame data field, and an error control field; the frame leading header includes a second field, and the frame data field includes a data field and a password field; the message encryption unit is used to obtain a first key and corresponding decryption information from the key information, call the encryption application interface to encrypt the content in the data field according to the first key, and insert the decryption information into the password field. The decryption information is used to assist in decrypting the encrypted telecommand message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the checksum of the frame leading header and the frame data field, and insert the checksum into the error control field.

[0018] By dividing the frame data field of the remote control message into a data domain and a password domain, inserting decryption information into the password domain, and using the original error control field in the remote control message to write the check code, encryption of the remote control plaintext is achieved without affecting the original functions of the remote control plaintext and without further increasing the message length, which is beneficial to improving the original remote control message and has a low improvement difficulty.

[0019] In some embodiments, when the type of the satellite TT&C message is a telemetry ciphertext, the satellite TT&C message includes a frame leading header, an insertion field, a frame data field, and an error control field; the frame leading header includes a first field, the insertion field includes a password domain and a key telemetry and fixed telemetry field; the content of the password domain includes decryption information; the content of the error control field includes a check code; the message decryption unit is configured to call the encryption application interface and decrypt the content of the key telemetry and fixed telemetry field and the content of the frame data field according to the decryption information; calculate the check code of the content of the frame leading header, the insertion field, and the frame data field after decryption, compare the calculation result with the check code included in the error control field, and complete decryption when the comparison result is the same.

[0020] By dividing the insertion field of the telemetry message into a password domain and a key telemetry and fixed telemetry field, inserting decryption information into the password domain, and using the original error control field in the telemetry message to write the check code, encryption and decryption of the telemetry plaintext are achieved without affecting the original functions of the telemetry message and without further increasing the message length, which is beneficial to improving the original telemetry message and has a low improvement difficulty.

[0021] In some embodiments, the key information includes a key state, and the key state includes unused; the key distribution logic includes: sending a request for distributing a key signaling to the ground station; receiving the remote control message fed back by the ground station in response to the key distribution signaling, the remote control message including a frame leading header, a frame data field, and an error control field, the frame leading header including a second field, the frame data field including a data domain and a password domain, and the content of the second field indicating that the type of the remote control message is a key distribution type remote control plaintext; obtaining multiple keys, a second key, and corresponding decryption information with the state of unused from the key information; modifying the content of the data domain to be the multiple keys; calling the encryption application interface to encrypt the content in the data domain according to the second key, and inserting the decryption information into the password domain; calculating the check code of the frame leading header and the frame data field, and inserting the check code into the error control field to obtain a key distribution remote control message; sending the key distribution remote control message to the ground station so that the ground station forwards the key distribution remote control message to the satellite.

[0022] The method of further using the second field to classify the remote control plaintext into the key distribution type remote control plaintext increases the functionality of the second field and avoids adding an extra field to identify the key distribution type remote control plaintext. In addition, the method of carrying multiple unused keys in the remote control message and encrypting them before sending them to the satellite makes the key distribution more secure, avoids the leakage of keys during the distribution phase, and improves the security of satellite encrypted communication.

[0023] In some embodiments, the length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

[0024] According to another aspect of the present application, an electronic device is provided, configured with a satellite communication management system such as described in any one of the above embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The drawings herein are incorporated into the specification and constitute a part of this specification, showing embodiments consistent with the present application, and are used together with the specification to explain the principles of the present application. Obviously, the drawings in the following description are only some embodiments of the present application, and those of ordinary skill in the art can obtain other drawings based on these drawings without creative efforts.

[0026] Figure 1 Schematic diagram showing a satellite communication management system in an embodiment of the present application;

[0027] Figure 2 Schematic diagram showing the structure of a remote control message in an embodiment of the present application;

[0028] Figure 3 Schematic diagram showing the structure of a telemetry message in an embodiment of the present application;

[0029] Figure 4 Schematic diagram showing a satellite communication management system in another embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0030] Example embodiments will now be described more fully with reference to the accompanying drawings. However, the example embodiments can be implemented in various forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this application will be more complete and comprehensive, and will fully convey the concept of the example embodiments to those skilled in the art. The described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments.

[0031] In addition, the attached drawings are only schematic diagrams of the present application and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus repeated descriptions thereof will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software form, or in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0032] It should be noted that the acquisition, storage, use, processing, etc. of data in the technical solution of the present application all comply with the relevant regulations of national laws and regulations.

[0033] For ease of understanding, before introducing the embodiments of the present application, several terms involved in the embodiments of the present application are explained as follows:

[0034] Satellite TT&C message: A general term for telemetry messages and telecommand messages in satellite communication, which can be a telemetry message, a telecommand message, or an encrypted telemetry message or telecommand message;

[0035] Telemetry message: Used to transmit measurement data from remote devices (such as satellites, spacecraft, drones, etc.) to a ground station or a control center (hereinafter referred to as the ground station), usually sent from the remote device to the ground station;

[0036] Telecommand message: Used to send control commands from the ground station to a remote device to achieve remote control of the device;

[0037] Encrypted telemetry message: An encrypted telemetry message;

[0038] Decrypted telemetry message: Telemetry message

[0039] Plaintext telecommand message: Telemetry message;

[0040] Encrypted telecommand message: An encrypted telecommand message.

[0041] Plaintext telecommand message for key distribution: A telecommand message used for key distribution.

[0042] As Figure 1 shown, the satellite communication management system in the embodiments of the present application may include a key management system 1 and an encryption system 2. The key management system 1 includes a user interface 11, a system platform 12, and a data support layer 13. The system platform 12 includes an encryption application interface 121 and a service logic processing module 123.

[0043] Among them, the encryption application interface 121 is used to provide encryption and decryption algorithms.

[0044] The data support layer 13 is used to store system data information including key information.

[0045] The user interaction interface 11 is used to receive operation instructions and call the service logic processing module 123 to update the system data information.

[0046] The encryption system 2 is used to call the encryption application interface 121 and encrypt or decrypt the satellite measurement and control message sent by the ground station according to the key information, so as to send the processed message to the ground station.

[0047] Through the user interaction interface, the administrator can call the service logic processing module to update the content such as the key information stored in the system. Through the encryption system, the satellite measurement and control message sent by the ground station can be encrypted or decrypted, so as to ensure that the satellite measurement and control message between the satellite and the ground station can be in an encrypted state, thereby reducing the risk of the satellite measurement and control message being leaked, tampered with or damaged during the transmission process.

[0048] Regarding what specific encryption and decryption algorithms are provided by the encryption application interface 121, the embodiments of the present application do not make limitations. For example, symmetric encryption and decryption algorithms, asymmetric encryption and decryption algorithms, hashing algorithms, etc.

[0049] Regarding what specific information the key information includes, the embodiments of the present application do not make limitations. For example, the key information may include keys, decryption information, key status, generation time, etc.

[0050] Regarding what specific service logics the service logic processing module 123 includes, the embodiments of the present application do not make limitations. The service logic processing module is mainly used to process user management, key management, and peripheral device management, etc. For example, the service logic processing module provides administrator management logic, key management logic, injector management logic, data management logic, and log management logic, etc.

[0051] Correspondingly, the user interaction interface 11 includes an administrator management sub-interface, a key management sub-interface, an injector management sub-interface, a data management sub-interface, and a log management sub-interface.

[0052] The user interaction interface 11 adopts a multi-menu switching mode. The multi-menu switching mode includes a main menu and multiple sub-menus. Each sub-menu corresponds to a sub-interface. The main menu is used to display the entrances of the respective sub-menus, and the sub-menu is used to display the corresponding sub-interface. According to the result of the user clicking on the main menu or the sub-menu, it is determined to display the corresponding main interface or sub-interface.

[0053] In one embodiment, the user interaction interface further includes a status display area for real-time displaying the current operation status and the system operation status.

[0054] In one embodiment, the data support layer stores an administrator information table, a key information table for recording the key information, an injector information table, a data backup information table, an event log table, an administrator log table, a satellite device log table, and a satellite device information table.

[0055] By configuring multiple sub-interfaces, multiple management logics, and multiple tables, the functions of the system can be enhanced, thus facilitating better management of satellite communication.

[0056] For example, an administrator can operate through the administrator management sub-interface to call the corresponding administrator management logic to update the content in the administrator information table, and the update methods can include modification, addition, deletion, etc.

[0057] In one embodiment, the key management logic includes a key generation logic, a key storage logic, and a key distribution logic.

[0058] The key management sub-interface is used to receive key generation operation instructions, so as to call the key generation logic and the key storage logic to generate and store keys; the key management sub-interface is also used to receive key distribution operation instructions, so as to call the key distribution logic to distribute keys to the satellite through the ground station.

[0059] Among them, both the key generation operation instructions and the key distribution operation instructions can be generated when the administrator operates on the key management sub-interface.

[0060] In one embodiment, the administrator table is used to store the account information, permission information, and login records of the administrator; the event log table is used to record various events during the operation of the system; the key information table is used to store keys, decryption information, key status, generation time, etc.; the satellite device information table is used to store the model, status, and maintenance records of the satellite device; the data backup information table is used to record the time, content, and status of data backup; the administrator log table is used to record the operation behaviors and operation times of the administrator; the satellite device log table is used to record the operation status and fault information of the satellite device.

[0061] Using the satellite communication management system to generate, update, and distribute keys can reduce the complexity of the ground station operation, and by distributing keys, the freshness of the keys in the satellite can be maintained, thereby reducing the risk of key leakage and improving the security of the satellite TT&C messages encrypted with the highly fresh keys during transmission.

[0062] In one embodiment, the satellite communication management system interacts with the injector through a USB (Universal Serial Bus) interface, and the injector interacts with the satellite (the on-board cryptographic device in the satellite) through an RS422 (a serial communication interface standard, belonging to the differential signal transmission protocol) interface.

[0063] After receiving the key distribution operation instruction in the key management sub-interface, the key distribution logic can be invoked to obtain multiple keys with the status of unused from the key information, and send the multiple keys to the injector through the USB interface. Then, the injector sends the multiple keys to the satellite through the RS422 interface.

[0064] In another embodiment, the key information includes a key status, and the key status includes unused. The key distribution logic includes: sending a request for distributing key signaling to the ground station; receiving the telecommand message feedback by the ground station for the distributing key signaling, as Figure 2 shown, the telecommand message includes a frame leading header, a frame data field, and an error control field. The frame leading header includes a second field, and the frame data field includes a data field and a cipher field. The content of the second field indicates that the type of the telecommand message is a key distribution type telecommand plaintext; obtaining multiple keys with the status of unused, a second key, and the corresponding decryption information from the key information; modifying the content of the data field to be the multiple keys; invoking the encryption application interface to encrypt the content in the data field according to the second key, and inserting the decryption information into the cipher field; calculating the checksum of the frame leading header and the frame data field, and inserting the checksum into the error control field to obtain the key distribution telecommand message; sending the key distribution telecommand message to the ground station so that the ground station forwards the key distribution telecommand message to the satellite.

[0065] Among them, the second key and the corresponding decryption information are any unused key and the corresponding decryption information in the key information except the multiple unused keys.

[0066] For example, if the length of the second field is 2 bits, then the content of the second field has 4 types: 00, 01, 10, 11. Any one of the contents of "01, 10, 11" can be used as an indication that the type of the telecommand message is a key distribution type telecommand plaintext. For example, when the content of the second field is 10, the type of the telecommand message is a key distribution type telecommand plaintext.

[0067] Using the second field to further classify the telecommand plaintext into a key distribution type telecommand plaintext increases the functionality of the second field and avoids adding an extra field to identify the key distribution type telecommand plaintext. In addition, using the telecommand message to carry multiple unused keys and encrypting them before sending them to the satellite makes the key distribution more secure, avoids the leakage of keys during the distribution phase, and improves the security of satellite encrypted communication.

[0068] In one embodiment, the encryption system includes: a message recognition unit, a message decryption unit, and a message encryption unit.

[0069] Among them, the message recognition unit is used to identify the type of the satellite TT&C message sent from the ground station.

[0070] A message decryption unit, which is used to call an encryption application interface to decrypt the satellite TT&C message when the type is telemetry ciphertext, so as to send the decrypted telemetry message obtained by decryption to the ground station.

[0071] A message encryption unit, which is used to call an encryption application interface to encrypt the satellite TT&C message according to the key information when the type is telecommand plaintext, so as to send the encrypted telecommand message obtained by encryption to the ground station.

[0072] By first determining the type after obtaining the satellite TT&C message, decrypting the satellite TT&C message when the type is telemetry ciphertext, and encrypting the satellite TT&C message when the type is telecommand plaintext, it can be ensured that the telemetry message transmitted from the satellite to the ground station is in an encrypted state, and the telecommand message transmitted from the ground station to the satellite is also in an encrypted state, thereby reducing the risk of the satellite TT&C message (telemetry message, telecommand message) being leaked, tampered with, or damaged during the transmission process.

[0073] Among them, the message type of the satellite TT&C message is a telemetry message or a telecommand message.

[0074] In one embodiment, the frame leading header of the telemetry message includes a first field, and the frame leading header of the telecommand message includes a second field. Both the first field and the second field can be used to indicate the plaintext / ciphertext state of the message. The plaintext / ciphertext state refers to whether the message is plaintext or ciphertext. In this case, a message identification unit is used to determine the message type of the satellite TT&C message; when the message type is a telemetry message, the plaintext / ciphertext state of the satellite TT&C message is determined according to the content of the first field to obtain a first result, and when the first result is ciphertext, the type of the satellite TT&C message is determined to be telemetry ciphertext; when the message type is a telecommand message, the plaintext / ciphertext state of the satellite TT&C message is determined according to the content of the second field to obtain a second result, and when the second result is plaintext, the type of the satellite TT&C message is determined to be telecommand plaintext.

[0075] Regarding how to determine the message type of the satellite TT&C message, the embodiments of the present application do not make any limitations. For example, the message type of the satellite TT&C message can be directly determined by the structure of the frame leading header of the satellite TT&C message. For another example, the message type of the satellite TT&C message can also be determined by the structure of the entire satellite TT&C message.

[0076] After determining the message type of the satellite TT&C message, the content of the first field or the second field can be read according to the preset processing logic, and whether the satellite TT&C message is encrypted can be determined according to the content of the first field or the second field.

[0077] In one embodiment, the length of the first field is not less than 2 bits and / or the length of the content of the second field is not less than 2 bits.

[0078] Two bits can represent four combinations: "00", "01", "10", and "11". Only two combinations are needed to represent the encrypted or unencrypted state of the message. Based on this, still restricting the length of the first field and / or the second field to be not less than two bits can make the first field have better scalability. Besides the combinations used to represent the encryption and decryption states, it can also be used to represent other information, such as indicating that the type of the remote control message is a key distribution type remote control plaintext.

[0079] Regarding when the first field and the second field represent that the message is encrypted and when they represent that the message is not encrypted, the embodiments of the present application do not make restrictions.

[0080] For example, the lengths of both the first field and the second field are two bits, and both being "00" indicates that the message is not encrypted, while "11" indicates that the message is encrypted.

[0081] The method of adding the first field or the second field in the frame leading header provides a way to identify the message type of the satellite TT&C message. Thus, it is beneficial to additionally set up a satellite communication control system outside the ground station to assist the ground station in key management and in identifying the encryption and decryption processing of the satellite TT&C message, which can not only ensure the security of the satellite TT&C message interaction between the ground station and the satellite, but also avoid complicating the ground station. Further, it is convenient to improve the existing ground station without making major changes to the existing ground station.

[0082] In one embodiment, as Figure 3 shown, when the type of the satellite TT&C message is a telemetry ciphertext, the satellite TT&C message includes a frame leading header, an insertion field, a frame data field, and an error control field; the frame leading header includes a first field, the insertion field includes a cipher domain and a key telemetry and fixed telemetry field; the content of the cipher domain includes decryption information; the content of the error control field includes a check code. In this case, the message decryption unit is used to call the encryption application interface and decrypt the content of the key telemetry and fixed telemetry field and the content of the frame data field according to the decryption information; calculate the check code of the content of the decrypted frame leading header, insertion field, and frame data field, and compare the calculation result with the check code included in the error control field. When the comparison result is the same, the decryption is completed.

[0083] Regarding how to decrypt the satellite TT&C message, the embodiments of the present application do not make restrictions. The corresponding decryption can be performed according to the encryption method of the satellite TT&C message.

[0084] In one embodiment, for the telemetry message, the encrypted parts are the content of the key telemetry and fixed telemetry field, and the content of the frame data field. The content of the error control field includes a check code, which is the check code calculated by the satellite according to the content of the frame leading header, insertion field, and frame data field.

[0085] The decryption information is used to assist in decrypting the telemetry ciphertext.

[0086] The embodiments of the present application do not limit how to decrypt the content of the critical telemetry and fixed telemetry fields and the content of the frame data field according to the decryption information.

[0087] In one embodiment, the key information table includes a first dynamic decryption table, and the first dynamic decryption table includes key numbers and corresponding keys. The decryption information includes key number information and a first part of key information. By reading the information in the password field, the decryption information is obtained, and according to the preset structure of the decryption information, the key number information and the first part of key information can be separated.

[0088] For example, the decryption information includes 26 bytes. Among them, the first 2 bytes are used to represent the key number information, and the last 24 bytes are used to represent the first part of the key. According to the structure of this decryption information, the encryption server can separate the key number information including 2 bytes and the first part of key information including 24 bytes.

[0089] After that, the message decryption unit can obtain the key number according to the key number information, query the first dynamic decryption table according to the key number to obtain the key corresponding to the key number, and use the obtained key as the second part of the key. The message decryption unit can also obtain the first part of the key according to the first part of key information. For example, the first part of key information is the first part of the key; for another example, the message decryption unit processes the first part of key information according to the preset processing logic to obtain the first part of the key.

[0090] Then, the message decryption unit generates a decryption key by using the first part of the key and the second part of the key according to the preset processing method, and then uses the decryption key to decrypt the content of the critical telemetry and fixed telemetry fields and the content of the frame data field.

[0091] In another embodiment, the decryption information includes key information, and the message decryption unit can process the key information according to the preset processing method to obtain a decryption key, and then use the decryption key to decrypt the content of the critical telemetry and fixed telemetry fields and the content of the frame data field.

[0092] In one embodiment, there is a pre-agreed encryption and decryption method between the satellite and the satellite communication management system, and the message decryption unit can directly decrypt the telemetry ciphertext.

[0093] The insertion domain of the telemetry message is divided into a password domain and key telemetry and fixed telemetry fields, and the decryption information is inserted into the password domain. The original error control domain in the telemetry message is used to write the check code. This realizes the encryption and decryption of the telemetry plaintext without affecting the original function of the telemetry message and without further increasing the message length. It is beneficial to improve the original telemetry message with low difficulty.

[0094] In one embodiment, Figure 2 As shown, when the type of the satellite measurement and control message is remote control plain text, the satellite measurement and control message includes a frame header, a frame data field and an error control field; the frame header includes a second field, and the frame data field includes a data field and a password field. In this case, the message encryption unit is used to obtain the first key and the corresponding decryption information from the key information, call the encryption application interface to encrypt the content in the data field according to the first key, and insert the decryption information into the password field, and the decryption information is used to assist in decrypting the encrypted remote control message; modify the content of the second field so that the modified content indicates that the message has been encrypted; calculate the check code of the frame header and the frame data field, and insert the check code into the error control field.

[0095] In one embodiment, the key information table further includes a first dynamic encryption table, the first dynamic encryption table includes multiple keys for encrypting the remote control message, and decryption information corresponding to each key; or the first dynamic encryption table includes multiple keys for encrypting the remote control message, and key information for generating decryption information corresponding to each key, and after the message encryption unit obtains the key information, the decryption information can be generated according to the key information. After the message encryption unit obtains the key from the first dynamic encryption table, the key is used as the first key.

[0096] In one embodiment, the decryption information includes key number information and third part key information. As to how the key number information and third part key information help the satellite to decrypt the remote control ciphertext, please refer to the decryption process of the message decryption unit mentioned above.

[0097] In another embodiment, the decryption information includes key information. Regarding how the key information helps the satellite to decrypt the remote control ciphertext, reference can be made to the process of the message decryption unit decrypting the telemetry ciphertext.

[0098] In one embodiment, there is an agreed encryption and decryption method between the satellite and the satellite communication management system, and the message encryption unit can directly encrypt the remote control plaintext.

[0099] For example, in the remote control plain text, the content of the second field is "00", then "00" is modified to "11" to indicate that the message has been encrypted.

[0100] The embodiments of the present application do not limit the method for calculating the check code when calculating the check codes of the frame leading header and the frame data field. For example, the method for calculating the check code is to calculate the CRC (Cyclic Redundancy Check) check code.

[0101] The method of dividing the frame data field of the remote control message into a data sum and a password field, inserting the decryption information into the password field, and using the original error control field in the remote control message to write the check code realizes the encryption of the remote control plaintext without affecting the original functions of the remote control plaintext and without further increasing the message length, which is beneficial to improving the original remote control message and has a low improvement difficulty.

[0102] In one embodiment, the satellite communication management system interacts with the PCI-E (Peripheral Component Interconnect Express) cryptographic card through the PCI-E bus.

[0103] When the encryption system 2 encrypts the satellite TT&C message, it can send the content to be encrypted in the satellite TT&C message to be encrypted to the PCI-E cryptographic card through the PCI-E bus for encryption.

[0104] In one embodiment of the present application, the electronic device may include the satellite communication management system in any of the above embodiments.

[0105] In one embodiment, as Figure 4 shown, the satellite communication management system may include: a user interaction interface, a system platform, a data support layer, and a running environment.

[0106] The user interaction interface is used to realize the information interaction between the user and the system, and includes function modules for administrator management, key management, injector management, data management, and log management.

[0107] The system platform includes an encryption application interface and a service logic processing module. The encryption application interface is configured to provide cryptographic services for symmetric encryption and decryption algorithms, asymmetric encryption and decryption algorithms, and hash algorithms.

[0108] The service logic processing module is used to process user management, key management, and peripheral device management, and interacts with the cryptographic card through the PCI-E bus and with the password resource injector through the USB interface.

[0109] The data support layer includes an administrator table for storing administrator information, an event log table for recording operation events, a key information table for storing key status, a satellite device information table for managing satellite device information, a data backup information table, an administrator log table, and a satellite device log table.

[0110] The operating environment, including the hardware environment and the software environment, provides secure and stable operating conditions for the data support layer and the system platform.

[0111] The satellite communication management system realizes the encryption and anti-eavesdropping and anti-tampering protection of satellite communication data through the generation, distribution, update, destruction and status management of keys, combined with the permission control and security audit functions.

[0112] Among them, the user interacts with the password key management system through the interaction interface, such as inputting key management information, issuing key management operations, etc., while the key management system presents the operation results through the interaction interface for the user to view, analyze and understand the operation results and status of the system.

[0113] In one embodiment, the system platform further includes a network communication module. The network communication module is a module for realizing the transceiver communication of the external data network. For example, it acquires the satellite measurement and control message to be transmitted and transmits the processed satellite measurement and control message to the receiving end function.

[0114] Among them, user management includes: creating a super administrator, initializing the system, creating other administrators, etc. The creation of the super administrator is prompted when the password key management system runs for the first time. Once the creation of the super administrator is successful, the key management system no longer provides the function of creating the super administrator. Initializing the system is mainly responsible for initializing the uninitialized password key management system. The initialization process includes system login, issuing the administrator information of the key management system, etc. Creating other administrators is to facilitate the hierarchical management mechanism of the key management system. It first selects to create different administrators, and then assigns the permissions within the maximum permissions of the administrator type to which the administrator belongs according to different administrators.

[0115] Key management is various business operations on the working key, including operations such as key generation, destruction, distribution, update, viewing, etc. Key management mainly manages the working keys prefabricated in the ground station, and numbering the keys can be adopted for convenient management.

[0116] 1) Record the status of the working key

[0117] The working key stored in the system may have the following several states:

[0118] ① Unallocated state: The key in the unallocated state means that the current key is not allocated but has been generated and stored in the system.

[0119] ② Allocated state: The key in the allocated state means that the current key has been allocated to the corresponding satellite system.

[0120] ③ Ungenerated state: The key of the current key number has not been generated yet.

[0121] ④Unknown status: A key with an unknown status refers to a key with the current key number being in an abnormal state, caused by some error, and at this time, human intervention is required.

[0122] 2) Generation of working keys

[0123] The cryptographic key management system provides a key generation function, supporting the generation of a set of symmetric keys according to the key number, or the generation of multiple sets of keys according to the key number range.

[0124] 3) Update of working keys

[0125] The working key update function is to update the corresponding key in the way of working key update when the corresponding working key is not in use. The working key update only supports the non-in-use state. If it has been allocated to a satellite, updating the working key is not allowed.

[0126] 4) Distribution of working keys

[0127] The cryptographic key management system automatically distributes working keys according to the work process.

[0128] 5) Injection of working keys

[0129] The cryptographic key management system needs to inject the key into the injector by selecting the key file.

[0130] 6) Destruction of working keys

[0131] The key management system needs to provide the user with the function of destroying this key. Destroying the key means destroying the key corresponding to the key number, and it can only be destroyed successfully when the corresponding key is in the non-allocated state.

[0132] 7) View the status of working keys

[0133] The cryptographic key management system supports querying the status of working keys, and returns whether the working key has been injected into the key resource injector and the current key number of the corresponding working key.

[0134] Electronic device management includes key resource injector management. Key resource injector management is to manage the key resource injector and view its operating status. Key resource injector management can include:

[0135] 1) Injection of working keys

[0136] The cryptographic key management system needs to inject the key into the injector by selecting the key file.

[0137] 2) Update of working keys

[0138] The working key update function updates the corresponding key by means of working key update when the corresponding key resource has not been injected into the satellite. The working key update only supports the state where it has not been injected into the satellite. If it has been injected into the satellite, the system will not allow the working key to be updated.

[0139] 3) Working key destruction

[0140] The cryptographic key management system needs to provide users with the function of destroying this key. Key destruction means destroying the key corresponding to the key number, and it can only be successfully destroyed when the corresponding key has not been injected into the satellite.

[0141] 4) View injector status

[0142] The cryptographic key management system supports querying the status of the injector and returns whether the resources in the injector have been injected into the satellite platform.

[0143] In one embodiment, the data layer is the database of the satellite communication system, providing information, data and other resources required by each subsystem of the satellite communication system.

[0144] The data stored in the cryptographic key management system database includes administrator-related information, event log information, key information, satellite device information, and data backup information. Different tables are used in the database to store this information, namely the administrator table, event log table, key information table, satellite device information table, and data backup information table. To show the relationship structure between the databases, an administrator log table and a satellite device log table are added.

[0145] Those skilled in the art will readily conceive of other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any variations, uses, or adaptations of the present application, which follow the general principles of the present application and include known common knowledge or conventional technical means in the technical field not disclosed in the present application. The specification and examples are only to be considered as exemplary, and the true scope and spirit of the present application are pointed out by the appended claims.

Claims

1. A satellite communication management system, characterized in that, Including: A key management system and an encryption system. The key management system includes a user interaction interface, a system platform, and a data support layer. The system platform includes an encryption application interface and a business logic processing module; The encryption application interface is used to provide encryption and decryption algorithms; The data support layer is used to store system data information including key information; The user interaction interface is used to receive operation instructions and call the business logic processing module to update the system data information; The encryption system is used to call the encryption application interface and encrypt or decrypt the satellite measurement and control message sent by the ground station according to the key information, so as to send the processed message to the ground station.

2. The satellite communication management system according to claim 1, wherein The user interaction interface includes an administrator management sub-interface, a key management sub-interface, an injector management sub-interface, a data management sub-interface, and a log management sub-interface; The business logic processing module is used to provide administrator management logic, key management logic, injector management logic, data management logic, and log management logic; The data support layer is used to store an administrator information table, a key information table recording the key information, an injector information table, a data backup information table, an event log table, an administrator log table, a satellite equipment log table, and a satellite equipment information table.

3. The satellite communication management system according to claim 2, characterized in that, The key management logic includes key generation logic, key storage logic, and key distribution logic; The key management sub-interface is used to receive key generation operation instructions, so as to call the key generation logic and the key storage logic to generate and store keys; The key management sub-interface is also used to receive key distribution operation instructions, so as to call the key distribution logic to distribute keys to the satellite through the ground station.

4. The satellite communication management system according to claim 1, characterized in that The encryption system includes: A message identification unit, which is used to identify the type of the satellite measurement and control message sent from the ground station; A message decryption unit, which is used to call the encryption application interface to decrypt the satellite measurement and control message when the type is telemetry ciphertext, so as to send the decrypted telemetry message obtained by decryption to the ground station; A message encryption unit, which is used to call the encryption application interface to encrypt the satellite measurement and control message according to the key information when the type is remote control plaintext, so as to send the encrypted remote control message obtained by encryption to the ground station.

5. The satellite communication management system according to claim 4, wherein The message type of the satellite measurement and control message is a telemetry message or a remote control message. The frame leading header of the telemetry message includes a first field, and the frame leading header of the remote control message includes a second field. Both the first field and the second field are used to indicate the plaintext / ciphertext status of the message; A message identification unit, which is used to determine the message type of the satellite measurement and control message; When the message type is a telemetry message, determine the plaintext / ciphertext status of the satellite TT&C message according to the content of the first field to obtain a first result, and when the first result is ciphertext, determine that the type of the satellite TT&C message is telemetry ciphertext; when the message type is a telecommand message, determine the plaintext / ciphertext status of the satellite TT&C message according to the content of the second field to obtain a second result, and when the second result is plaintext, determine that the type of the satellite TT&C message is telecommand plaintext.

6. The satellite communication management system according to claim 4, wherein, When the type of the satellite TT&C message is telecommand plaintext, the satellite TT&C message includes a frame main header, a frame data field, and an error control field; the frame main header includes a second field, and the frame data field includes a data field and a password field; The message encryption unit is configured to obtain a first key and corresponding decryption information from the key information, call the encryption application interface to encrypt the content in the data field according to the first key, and insert the decryption information into the password field, where the decryption information is used to assist in decrypting the encrypted telecommand message; Modify the content of the second field so that the modified content indicates that the message has been encrypted; Calculate the checksum of the frame main header and the frame data field, and insert the checksum into the error control field.

7. The satellite communication management system according to claim 4, wherein When the type of the satellite TT&C message is telemetry ciphertext, the satellite TT&C message includes a frame main header, an insertion field, a frame data field, and an error control field; the frame main header includes a first field, the insertion field includes a password field and a critical telemetry and fixed telemetry field; the content of the password field includes decryption information; the content of the error control field includes a checksum; The message decryption unit is configured to call the encryption application interface and decrypt the content of the critical telemetry and fixed telemetry field and the content of the frame data field according to the decryption information; Calculate the checksum of the content of the frame main header, the insertion field, and the frame data field after decryption, compare the calculation result with the checksum included in the error control field, and complete decryption when the comparison result is the same; 8. The satellite communication management system according to claim 3, characterized in that, The key information includes a key status, and the key status includes unused; The key distribution logic includes: sending a key distribution request signaling to the ground station; receiving a telecommand message feedback by the ground station for the key distribution signaling, the telecommand message including a frame leading header, a frame data field, and an error control field, the frame leading header including a second field, the frame data field including a data field and a cipher domain, the content of the second field indicating that the type of the telecommand message is a key distribution type telecommand plaintext; obtaining a plurality of keys, a second key, and corresponding decryption information with an unused status from the key information; modifying the content of the data field to be the plurality of keys; calling the encryption application interface to encrypt the content in the data field according to the second key, and inserting the decryption information into the cipher domain; calculating a check code for the frame leading header and the frame data field, and inserting the check code into the error control field to obtain a key distribution telecommand message; and sending the key distribution telecommand message to the ground station so that the ground station forwards the key distribution telecommand message to the satellite.

9. The satellite communication management system according to claim 5, wherein The length of the first field is not less than 2 bits and / or the length of the second field is not less than 2 bits.

10. An electronic device, characterized in that, A satellite communication management system configured as described in any one of claims 1-9 above is provided.

Images