Relay communication system and method of satellite terminal and authentication charging system

Abstract

The invention relates to a relay communication system and method of a satellite terminal and an authentication and charging system, the satellite terminal is arranged to provide network access, charging request and account control functions, a relay server module and an authentication and charging server are arranged on the basis, and the relay server module is arranged between the satellite terminal and the authentication and charging server. The remote user dial-in authentication protocol interface communicates with the satellite terminal, so that data of the satellite terminal can be received, reported and analyzed. And the network is protected from being interfered by unauthorized visitors, so that high-security network authentication, authorization and charging service levels are provided.

Description

Technical Field

[0001] The present invention relates to the technical field of communication services, and more particularly, to a relay communication system and method between a satellite terminal and an authentication and charging system. Background Art

[0002] The traditional terminal authentication and charging method is that after the user enters the terminal, the user inputs authentication information, and the terminal sends the authentication data packet to the unified authentication and charging system (AAA system, Authentication, Authorization, Accounting) for account authentication and authorization. After the user successfully logs in to the terminal and obtains network access rights, traffic statistics are started and charging data packets are periodically sent, and the charging system performs real-time cost settlement.

[0003] However, in the satellite network environment, due to communication defects such as high latency, limited bandwidth resources, signal attenuation or interference, problems such as network packet loss are likely to occur, and the direct connection communication between the terminal and the authentication and charging system is prone to instability, resulting in authentication delay or the need for multiple retries, discontinuous reporting of charging data, inaccurate charging results, and other problems.

[0004] In addition, in scenarios where a satellite network is used in maritime, aircraft, etc., and multiple users are served by a single satellite terminal, multi-account authentication and differential charging are required, and the communication pressure and efficiency between the terminal and the server will also face challenges. Summary of the Invention

[0005] The technical problem to be solved by the present invention is how to reduce communication latency in the terminal authentication and charging system, optimize the protocol conversion process, and improve the reliability of authentication and charging. To solve the above technical problems, the present invention provides a relay communication system and method between a satellite terminal and an authentication and charging system, including a relay communication system between a satellite terminal and an authentication and charging system and a relay communication method between a satellite terminal and an authentication and charging system.

[0006] A relay communication system between a satellite terminal and an authentication and charging system provided by the present invention includes:

[0007] A satellite terminal, which is built-in with a Remote Authentication Dial-In User Service (RADIUS) client, and is configured to: encapsulate the login information into an authentication request message through the RADIUS client when the user logs in to the account, form a charging request message through the RADIUS client after the user successfully logs in to the account, and finally obtain a logout request message through the RADIUS client when the user logs out, and control the corresponding account according to the remote control command through the RADIUS client after receiving the remote control command for a specified account;

[0008] The relay server module is configured to: convert the authentication request message into a JSON data format to obtain authentication request data; convert the charging request message into a JSON data format to obtain charging request data; convert the logout request message into a JSON data format to obtain logout request data; relay a remote control command for a specified account to the satellite terminal;

[0009] The authentication and charging server is configured to: perform authentication and authorization on the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feedback the authentication result to the satellite terminal through the relay server module; perform charging settlement on the corresponding account according to the content of the charging request data and the logout request data; issue a remote control command for a specified account when it is necessary to control a specified account;

[0010] Wherein,

[0011] The relay server module communicates with the satellite terminal through a Remote Authentication Dial-In User Service (RADIUS) protocol interface, and the authentication and charging server communicates with the relay server module through an application programming interface.

[0012] The relay communication system between the satellite terminal and the authentication and charging system disclosed by the present invention provides functions of network access, charging request, and account control by setting a satellite terminal. On this basis, a relay server module and an authentication and charging server are set, and the relay server module is arranged between the satellite terminal and the authentication and charging server, and communicates with the satellite terminal through a Remote Authentication Dial-In User Service (RADIUS) protocol interface, so as to be able to receive and parse the data reported by the satellite terminal. The Remote Authentication Dial-In User Service (RADIUS) protocol is a distributed client-server combined information interaction protocol, which can protect the network from interference by unauthorized visitors, thereby providing a high-security network authentication, authorization, and charging service level, and can greatly save bandwidth and reduce communication latency; in addition, the relay server module communicates with the application programming interface of the authentication and charging server, which can ensure the reliability of the service, greatly relieve the request pressure of the authentication and charging service, and enable more complex and flexible rate setting and calculation. At the same time, by setting the authentication and charging server to be responsible for terminal account management and charging settlement, while taking into account the security and reliability of the system, the stability of the system is improved to a certain extent, and a short-term normal service capability can also be provided in the case of abnormal core services.

[0013] In a possible implementation, the login information includes account information, password information, Internet Protocol (IP) address information, Media Access Control (MAC) address information, and User Datagram Protocol (UDP) port information; this solution can ensure the control of the user's key information, thus facilitating the orderly operation of the billing business process.

[0014] In a possible implementation, the relay server module includes:

[0015] A data memory;

[0016] A Remote Authentication Dial-In User Service (RADIUS) server, configured to: extract the account authentication field, account information, and IP address information from the authentication request message, then convert the account authentication field into the JSON data format to obtain the authentication request data, and store the account information and IP address information in the memory; extract the billing field from the billing request message, and then convert the billing field into the JSON data format to obtain the billing request data;

[0017] An open-source server, configured to relay the remote control command for a specified account to the satellite terminal;

[0018] Wherein,

[0019] The data memory communicates with the RADIUS server and the open-source server simultaneously, and the RADIUS server and the open-source server communicate with the authentication and billing server through their respective application programming interfaces;

[0020] The relay server of this solution can be flexibly deployed at the edge node, solving the communication delay problem with the terminal device, and can also greatly share the request pressure on the server side, significantly improving the communication efficiency; in addition, it can further take into account the security and reliability of the system.

[0021] In a possible implementation, the RADIUS server is a FreeRadius server; the FreeRadius server is an open-source RADIUS server that can provide account authentication, network access authorization, and billing services. Using this server can parse the request data and convert it into a new JSON (JavaScript Object Notation) data format, which is more convenient for performing account authentication and billing settlement interactions.

[0022] In a possible implementation, the open-source server is a WorkerMan micro-server;

[0023] WorkerMan micro-server is an open-source and high-performance server. Using this server, remote control commands from the authentication and charging server side or externally can be obtained, relayed and forwarded, and sent to the satellite terminal to achieve remote control.

[0024] Another technical solution of the present invention is to provide a relay communication method between a satellite terminal and an authentication and charging system, which is applicable to the relay communication system between the above-mentioned satellite terminal and the authentication and charging system. The relay communication method includes a service reporting process, and the service reporting process includes the following steps:

[0025] S1: After the user sends a login authentication request on the access interface of the satellite terminal, the satellite terminal obtains login information according to the login authentication request, and calls the remote user dial authentication client to encapsulate the login information into an authentication request message, and then transmits the authentication request message to the relay server module;

[0026] S2: The relay server module converts the authentication request message into a JSON data format to obtain authentication request data;

[0027] S3: The authentication and charging server authenticates and authorizes the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feeds back the authentication result to the satellite terminal through the relay server module;

[0028] S4: The satellite terminal determines whether to grant the user's login authentication request according to the authentication result;

[0029] If so, proceed to the next step;

[0030] If not, end the service reporting process;

[0031] S5: The satellite terminal calls the remote user dial authentication client to form a charging request message, and then transmits the charging request message to the relay server module;

[0032] S6: The relay server module converts the charging request message into a JSON data format to obtain charging request data, and then transmits the charging request data to the authentication and charging server;

[0033] S7: The authentication and charging server starts charging the corresponding account according to the content of the charging request data;

[0034] S8: After the user sends a logout request on the access interface of the satellite terminal, the satellite terminal calls the remote user dial authentication client to obtain a logout request message according to this logout request, and then transmits the logout request message to the relay server module;

[0035] The content of the logout request message includes account information and the time when the logout request is sent.

[0036] S9: Convert the logout request message into JSON data format through the relay server module to obtain logout request data, and then transmit the logout request data to the authentication and charging server.

[0037] S10: Generate a charging result by the authentication and charging server according to the content of the logout request data and the authentication request data.

[0038] In the method disclosed by the present invention, after sending a login authentication request using a satellite terminal, an authentication result is obtained under the processing of a relay server module and an authentication and charging server, and then a charging item is performed. In this series of processes, it is all based on the Remote Authentication Dial-In User Service (RADIUS) protocol, which can protect the network from interference by unauthorized visitors, thereby providing high-security network authentication, authorization, and charging service capabilities. Moreover, it can greatly save bandwidth, reduce communication latency, ensure the reliability of services, greatly relieve the request pressure of the authentication and charging service, enabling more complex and flexible rate settings and calculations, and reliable charging.

[0039] In a possible implementation manner, the relay communication method further includes a control command distribution process, and the control command distribution process includes the following steps:

[0040] R1: Send a remote control command for a specified account to the relay server module through the authentication and charging server or an external control terminal.

[0041] R2: Relay this remote control command to the satellite terminal through the relay server module.

[0042] R3: Call the Remote Authentication Dial-In User Service (RADIUS) client by the satellite terminal to control the corresponding account according to the remote control command. Description of the Drawings

[0043] Figure 1 It is a schematic structural diagram of a relay communication system between a satellite terminal and an authentication and charging system disclosed in an embodiment of the present invention.

[0044] Figure 2 It is a flowchart of service reporting disclosed in an embodiment of the present invention.

[0045] Figure 3 It is a flowchart of control command distribution disclosed in an embodiment of the present invention. Detailed Embodiments

[0046] First of all, those skilled in the art should understand that these embodiments are only used to explain the technical principles of the embodiments of this application, and are not intended to limit the protection scope of the embodiments of this application. Those skilled in the art can make adjustments according to needs to adapt to specific application scenarios.

[0047] In the description of the embodiments of this application, it should be noted that unless otherwise clearly specified and limited, the terms "communication" and "communication connection" should be understood in a broad sense, that is, it means that there is a link relationship between the two parties of communication that can transmit information such as data. For example, it can be a fixed connection through a data line, a detachable connection of a data connection line, or an integral connection; it can be a connection through an electric wire, or other forms of electrical connection; it can be directly connected, or indirectly connected through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the embodiments of this application can be understood according to specific situations.

[0048] In the embodiments of this application, unless otherwise clearly specified and limited, the first feature being "on" or "under" the second feature can be that the first and second features are in direct contact, or the first and second features are indirectly in contact through an intermediate medium. Moreover, the first feature being "above", "over" and "on" the second feature can be that the first feature is directly above or obliquely above the second feature, or merely indicates that the first feature has a higher horizontal height than the second feature. The first feature being "under", "below" and "beneath" the second feature can be that the first feature is directly below or obliquely below the second feature, or merely indicates that the first feature has a lower horizontal height than the second feature.

[0049] The following further details this application with reference to the drawings and specific embodiments.

[0050] See Figures 1 to 3 , the embodiments of this application disclose a relay communication system between a satellite terminal and an authentication and charging system. Figure 1 For the structural schematic diagram of this system, this relay communication system includes a satellite terminal, a relay server module, and an authentication and charging server. Among them, the relay server module communicates with the satellite terminal through a Remote Authentication Dial-In User Service (RADIUS) interface, and the authentication and charging server communicates with the relay server module through an Application Programming Interface (API).

[0051] In this relay communication system, the satellite terminal is built-in with a remote user dial authentication client. The satellite terminal is configured to encapsulate the login information into an authentication request message through the remote user dial authentication client when the user logs in to the account, form a charging request message through the remote user dial authentication client after the user successfully logs in to the account, and finally obtain a logout request message through the remote user dial authentication client when the user logs out. After receiving a remote control command for a specified account, the satellite terminal controls the corresponding account according to this remote control command through the remote user dial authentication client. The login information includes account information, password information, Internet Protocol (IP) address information, Media Access Control (MAC) address information, and User Datagram Protocol (UDP) service port information.

[0052] In this relay communication system, the relay server module is configured to convert the authentication request message into a JSON data format to obtain authentication request data; and is also configured to convert the charging request message into a JSON data format to obtain charging request data; in addition, it is also configured to convert the logout request message into a JSON data format to obtain logout request data; and at the same time, it is also configured to relay the remote control command for a specified account to the satellite terminal.

[0053] See Figure 1 , in this embodiment, the relay server module includes a data memory, a remote user dial authentication server, and an open source server. Among them, the data memory communicates with the remote user dial authentication server and the open source server at the same time, and the remote user dial authentication server and the open source server communicate with the authentication and charging server through their respective application programming interfaces.

[0054] In the relay server module, the remote user dial authentication server is a FreeRadius server. This server is configured to extract the account authentication field, account information, and Internet Protocol address information from the authentication request message, and then convert the account authentication field into a JSON data format to obtain authentication request data, and store the account information and Internet Protocol address information in the memory; in addition, it is also configured to extract the charging field from the charging request message, and then convert the charging field into a JSON data format to obtain charging request data.

[0055] In the relay server module, the open source server is a WorkerMan micro server. This server is configured to relay the remote control command for a specified account to the satellite terminal. The WorkerMan micro server is an open source high-performance server with great development and application potential in aspects such as protocol gateways and Internet of Things communications. In this embodiment, this service is used to create an API interface to listen for remote control commands from the authentication and charging server side or the outside, and perform relay forwarding processing and send them to the satellite terminal for execution to achieve remote control.

[0056] In this relay communication system, the authentication and charging server is configured to authenticate and authorize the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feedback the authentication result to the satellite terminal through the relay server module; it is also configured to perform charging settlement on the corresponding account according to the content of the charging request data and the logout request data; and it is further configured to execute and issue a remote control command for a specified account when it is necessary to control the specified account.

[0057] The relay communication method implemented through this relay communication system will be further disclosed below. The relay communication method includes a service reporting process and a control command distribution process. Figure 2 For the service reporting flow chart, see Figure 2 , and the service reporting process includes the following steps:

[0058] S1: After the user sends a login authentication request on the access interface of the satellite terminal, the satellite terminal obtains login information according to this login authentication request, and calls the remote user dial authentication client to encapsulate the login information into an authentication request message, and then transmits the authentication request message to the relay server module.

[0059] Specifically, in this step, after the satellite terminal accesses the satellite network, the user sends a login authentication request by accessing the satellite terminal interface. The satellite terminal obtains login information according to this login authentication request. The login information includes account information, password information, Internet protocol address information, media access control address information, and user datagram service port information.

[0060] The satellite terminal calls the remote user dial authentication (abbreviated as RADIUS) client to encapsulate the login information into an authentication request message of the remote user dial authentication protocol, and sends it to the relay server module. The authentication request message contains user account, password, Internet protocol address, media access control address, and user datagram service port device data.

[0061] S2: The relay server module converts the authentication request message into a JSON data format to obtain authentication request data.

[0062] Specifically, in this step, the FreeRadius server in the relay server module obtains the authentication request message from the satellite terminal, then parses the content of the authentication request message, saves the account and the Internet protocol address in the data memory, then extracts the account authentication field and converts it into a JSON data format. After obtaining the authentication request data, the authentication request data is transmitted to the authentication and charging server through the application programming interface.

[0063] S3: The authentication and charging server authenticates and authorizes the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feeds back the authentication result to the satellite terminal through the relay server module.

[0064] Specifically, after receiving the authentication request data, the authentication and charging server authenticates and authorizes the account in the authentication request data, and returns the authentication result to the FreeRadius server in the relay server module. After receiving the authentication result, the FreeRadius server converts it into a RADIUS format message to reply to the satellite terminal, and synchronously saves the authentication status record to the data storage.

[0065] S4: The satellite terminal determines whether to grant the user's login authentication request according to the authentication result;

[0066] If so, proceed to the next step;

[0067] If not, end the service reporting process.

[0068] S5: The satellite terminal calls the remote user dial-up authentication client to form a charging request message, and then transmits the charging request message to the relay server module.

[0069] Specifically, granting the user's login authentication request means that the satellite terminal account authentication is passed, so that the satellite network access permission is successfully obtained, and then charging needs to start. The charging process can include three types of states: charging start, periodic continuous charging, and charging end. In this step, the satellite terminal sends a charging request message to the relay server module, and the charging request message contains charging data such as account information, charging status, and current traffic or duration consumption.

[0070] S6: The relay server module converts the charging request message into a JSON data format to obtain charging request data, and then transmits the charging request data to the authentication and charging server.

[0071] Specifically, in this step, the FreeRadius server in the relay server module obtains the charging request data from the satellite terminal, then parses the content of the charging request message, and saves the parsing result of the charging request message content to the data storage. The charging fields are converted into a JSON data format. After obtaining the charging request data, the charging request data is transmitted to the authentication and charging server through the application programming interface. Since the charging request data reporting status does not affect subsequent requests of the satellite terminal, the FreeRadius server can also quickly reply to the charging request of the satellite terminal asynchronously without waiting for the return result of the authentication and charging server.

[0072] S7: The authentication and charging server starts charging the corresponding account according to the content of the charging request data (specifically, according to the specific login time).

[0073] S8: After the user sends a logout request on the access interface of the satellite terminal, the satellite terminal calls the remote user dial authentication client to obtain a logout request message based on this logout request, and then transmits the logout request message to the relay server module. The content of the logout request message includes account information and the time when the logout request is sent.

[0074] S9: The relay server module converts the logout request message into JSON data format to obtain logout request data, and then transmits the logout request data to the authentication and charging server.

[0075] Specifically, in this step, the FreeRadius server in the relay server module obtains the logout request message from the satellite terminal, then parses the content of the logout request message to obtain the status of the corresponding account, and stores the status of the account in the data storage. At the same time, the account logout field is converted into JSON data format. After obtaining the logout request data, the logout request data is transmitted to the authentication and charging server through the application programming interface. In addition, in this step, the FreeRadius server can also use an asynchronous method to perform a quick response to the logout request of the satellite terminal.

[0076] S10: The authentication and charging server generates a charging result according to the content of the logout request data and the authentication request data. Subsequently, the status of the corresponding account can also be updated and stored in the data storage, and at the same time, the charging result can also be fed back to the satellite terminal.

[0077] See Figure 3 , in this embodiment, the control command distribution process includes the following steps:

[0078] R1: The authentication and charging server or the external control terminal sends a remote control command for a specified account to the relay server module.

[0079] Specifically, when a remote control of a specified account is required, the authentication and charging server or the external control terminal sends a remote control command for the corresponding account to the relay server module, such as commands for account recharge, forced logout, etc.

[0080] R2: The relay server module relays this remote control command to the satellite terminal.

[0081] Specifically, in this step, WorkerMan in the relay server Facilitation obtains control commands for the server from the authentication and charging server and the external control terminal; at the same time, a User Datagram Protocol client (abbreviated as UDP client) is created to initiate a communication session to the satellite terminal, forward the control commands to the satellite terminal, and then query the Internet Protocol address and Media Access Control address of the corresponding account by connecting to the database.

[0082] R3: The satellite terminal invokes the Remote Authentication Dial-In User Service (RADIUS) client to control the corresponding account according to this remote control command.

[0083] The relay communication system between the satellite terminal and the authentication and charging system disclosed in this embodiment provides functions such as network access, charging request, and account control by setting the satellite terminal. On this basis, a relay server module and an authentication and charging server are set, and the relay server module is located between the satellite terminal and the authentication and charging server, communicating with the satellite terminal through the Remote Authentication Dial-In User Service (RADIUS) protocol interface, so as to be able to receive and parse the data reported by the satellite terminal. The Remote Authentication Dial-In User Service (RADIUS) protocol is a distributed client-server combined information interaction protocol, which can protect the network from interference by unauthorized visitors, thus providing high-security network authentication, authorization, and charging service capabilities, and can greatly save bandwidth and reduce communication latency; in addition, the relay server module communicates with the application program interface of the authentication and charging server, which can ensure the reliability of the service, greatly relieve the request pressure of the authentication and charging service, and enable more complex and flexible rate setting and calculation. At the same time, by setting the authentication and charging server to be responsible for terminal account management and charging settlement, while taking into account the security and reliability of the system, the stability of the system is improved to a certain extent, and short-term normal service capabilities can also be provided in the case of core service anomalies.

[0084] In the description of the embodiments of this application, it should be noted that in the description of this application, terms such as "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is only for convenience of description, rather than indicating or implying that the device or component must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this application.

[0085] In the description of the present application, the descriptions referring to terms such as "one embodiment", "some embodiments", "in this embodiment", "specific example", or "some examples" mean that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, without contradiction, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of different embodiments or examples.

[0086] As described above, the above is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present application should be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A relay communication system between a satellite terminal and an authentication and charging system, characterized in that, Including: A satellite terminal, which is built-in with a remote user dial authentication client and is configured to: encapsulate the login information into an authentication request message through the remote user dial authentication client when the user logs in to the account, form a charging request message through the remote user dial authentication client after the user successfully logs in to the account, and finally obtain a logout request message through the remote user dial authentication client when the user logs out. And when receiving a remote control command for a specified account, control the corresponding account according to the remote control command through the remote user dial authentication client; A relay server module, which is configured to: convert the authentication request message into a JSON data format to obtain authentication request data; Convert the charging request message into a JSON data format to obtain charging request data; convert the logout request message into a JSON data format to obtain logout request data; relay a remote control command for a specified account to the satellite terminal; An authentication and charging server, which is configured to: authenticate and authorize the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feedback the authentication result to the satellite terminal through the relay server module; perform charging settlement on the corresponding account according to the content of the charging request data and the logout request data; execute and issue a remote control command for a specified account when it is necessary to control a specified account; Wherein, The relay server module communicates with the satellite terminal through a remote user dial authentication protocol interface, and the authentication and charging server communicates with the relay server module through an application programming interface.

2. The relay communication system of the satellite terminal and the authentication and charging system according to claim 1, characterized in that, The login information includes account information, password information, Internet protocol address information, media access control address information, and user datagram service port information.

3. The relay communication system of the satellite terminal and the authentication and charging system according to claim 2, characterized in that, The relay server module includes: A data memory; A remote user dial authentication server, which is configured to: extract an account authentication field, account information, and Internet protocol address information from the authentication request message, and then convert the account authentication field into a JSON data format to obtain the authentication request data, and store the account information and Internet protocol address information in the memory; extract a charging field from the charging request message, and then convert the charging field into a JSON data format to obtain the charging request data; An open source server, which is configured to relay a remote control command for a specified account to the satellite terminal; Wherein, The data memory communicates with the remote user dial authentication server and the open source server at the same time, and the remote user dial authentication server and the open source server communicate with the authentication and charging server through their respective application programming interfaces.

4. The relay communication system between the satellite terminal and the authentication and charging system according to claim 3, characterized in that, The remote user dial authentication server is a FreeRadius server.

5. The relay communication system between the satellite terminal and the authentication and charging system according to claim 3 or 4, characterized in that, The open source server is a WorkerMan micro server.

6. A relay communication method between a satellite terminal and an authentication and charging system, characterized in that, A relay communication system applicable to the satellite terminal and the authentication and charging system according to any one of claims 1-5. The relay communication method includes a service reporting process, and the service reporting process includes the following steps: S1: After the user sends a login authentication request on the access interface of the satellite terminal, the satellite terminal obtains login information according to the login authentication request, and calls the Remote Authentication Dial-In User Service (RADIUS) client to encapsulate the login information into an authentication request message, and then transmits the authentication request message to the relay server module; S2: The relay server module converts the authentication request message into the JSON data format to obtain authentication request data; S3: The authentication and charging server authenticates and authorizes the corresponding account according to the content of the authentication request data to obtain an authentication result, and then feeds back the authentication result to the satellite terminal through the relay server module; S4: The satellite terminal determines whether to grant the user's login authentication request according to the authentication result; If so, proceed to the next step; If not, end the service reporting process; S5: The satellite terminal calls the RADIUS client to form a charging request message, and then transmits the charging request message to the relay server module; S6: The relay server module converts the charging request message into the JSON data format to obtain charging request data, and then transmits the charging request data to the authentication and charging server; S7: The authentication and charging server starts charging the corresponding account according to the content of the charging request data; S8: After the user sends a logout request on the access interface of the satellite terminal, the satellite terminal calls the RADIUS client to obtain a logout request message according to this logout request, and then transmits the logout request message to the relay server module; The content of the logout request message includes account information and the time when the logout request is sent; S9: The relay server module converts the logout request message into the JSON data format to obtain logout request data, and then transmits the logout request data to the authentication and charging server; S10: The authentication and charging server generates a charging result according to the content of the logout request data and the authentication request data.

7. The relay communication method between a satellite terminal and an authentication and charging system according to claim 6, characterized in that, The relay communication method further includes a control command distribution process, and the control command distribution process includes the following steps: R1: The authentication and charging server or an external control terminal sends a remote control command for a specified account to the relay server module; R2: The relay server module relays this remote control command to the satellite terminal; R3: The satellite terminal calls the RADIUS client to control the corresponding account according to the remote control command.

Images