Mobile station communication methods, satellite communication methods and satellite communication systems

Abstract

This application discloses a mobile station communication method, a satellite communication method, and a satellite communication system. The communication process includes: the mobile station sending an initial direct transmission message to a satellite network, wherein the initial direct transmission message carries a mobile station capability identification element, which indicates at least one encryption algorithm supported by the mobile station; the satellite network determining a first encryption algorithm from the encryption algorithms supported by the mobile station and sending a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries encryption activation parameters and the first encryption algorithm; the mobile station sending a first encryption mode completion message encrypted with the first encryption algorithm to the satellite network; and the satellite network continuing to conduct signaling or data transmission with the mobile station, wherein all transmitted signaling or data is encrypted with the first encryption algorithm. This application solves the technical problem of the difficulty in efficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios.

Description

Technical Field

[0001] This application relates to the field of satellite communication technology, and more specifically, to a mobile station communication method, a satellite communication method, and a satellite communication system. Background Technology

[0002] In current GMR (Geostationary Earth Orbit Mobile Radio Interface) communication systems, the negotiation and selection of encryption algorithms is a crucial step in ensuring communication security. According to the GMR protocol, when a terminal initiates a location update request to the network while idle, the initial negotiation of the encryption algorithm is completed through the "Mobile Station Classmark 1" information element in the uplink "Location Update Request" message. However, this information element only contains support information for the A5 / 1 encryption algorithm, while the GMR system can actually be configured with seven encryption algorithms, from A5 / 1 to A5 / 7. This limitation means that in the initial stage, the system can only default to using the A5 / 1 algorithm for encryption. If the network needs to switch to other encryption algorithms, such as A5 / 3 or A5 / 5, it must complete the query and update of terminal capabilities through additional "Classmark Query (CLASSMARK ENQUIRY)" and "Classmark Change (CLASSMARK CHANGE)" signaling interactions. This undoubtedly increases the complexity of network communication and the overhead of air interface signaling.

[0003] Furthermore, if the network intends to change the encryption algorithm when encryption mode is already enabled, according to the existing GMR protocol, sending a "Cipher ModeCommand" message carrying the new algorithm and the "Start Ciphering" parameter will be considered invalid, and the terminal will directly discard such commands. This prevents the network from dynamically adjusting the encryption algorithm in the encrypted state, thereby limiting the system's flexibility in adjusting security policies.

[0004] There is currently no effective solution to the above problems. Summary of the Invention

[0005] This application provides a mobile station communication method, a satellite communication method, and a satellite communication system to at least solve the technical problem of difficulty in efficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios.

[0006] According to one aspect of the embodiments of this application, a mobile station communication method is provided, comprising: sending an initial direct transmission message to a satellite network, wherein the satellite network is a geostationary orbit satellite network, the initial direct transmission message carrying a mobile station capability identification element, the mobile station capability identification element being used to indicate at least one encryption algorithm supported by the mobile station; receiving a first encryption mode command message sent by the satellite network, wherein the first encryption mode command message carrying activation encryption parameters and a first encryption algorithm, the first encryption algorithm being an encryption algorithm supported by the mobile station; sending a first encryption mode completion message encrypted by the first encryption algorithm to the satellite network; and continuing to perform signaling or data transmission with the satellite network, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0007] Optionally, the mobile station capability identifier cell includes: an extended mobile station category marker 1 cell, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0008] Optionally, continuing signaling or data transmission with the satellite network includes: receiving a second encryption mode command message encrypted with a first encryption algorithm sent by the satellite network, wherein the second encryption mode command message carries activation encryption parameters and a second encryption algorithm, the second encryption algorithm being another encryption algorithm supported by the mobile station besides the first encryption algorithm; sending a second encryption mode completion message encrypted with the second encryption algorithm to the satellite network; and continuing signaling or data transmission with the satellite network, wherein all transmitted signaling or data is encrypted with the second encryption algorithm.

[0009] Optionally, before sending the initial direct transmission message to the satellite network, the method further includes: sending a radio resource control connection request message to the satellite network in an idle state; receiving a radio resource control connection establishment message sent by the satellite network based on the established signal radio bearer; and sending a radio resource control connection establishment completion message to the satellite network based on the signal radio bearer.

[0010] Optionally, sending an initial direct transmission message to the satellite network includes: sending an initial direct transmission message to the satellite network that includes a location update request message, wherein the location update request message carries a mobile station capability identifier information element.

[0011] Optionally, after sending the initial direct transmission message carrying a location update request message to the satellite network, the method further includes: receiving an identification request message sent by the satellite network; sending an identification response message carrying a mobile station identifier to the satellite network; receiving an authentication request message carrying an authentication random number sent by the satellite network; and sending an authentication response message carrying a signature response to the satellite network.

[0012] Optionally, signaling or data transmission with the satellite network continues, including: receiving a location update acceptance message carrying a temporary mobile subscriber identifier (TMI) encrypted by a first encryption algorithm from the satellite network; and sending a TMI reallocation completion message encrypted by the first encryption algorithm to the satellite network.

[0013] Optionally, the method further includes: receiving a radio resource control connection release message encrypted with a first encryption algorithm sent by the satellite network; sending a radio resource control connection release completion message encrypted with the first encryption algorithm to the satellite network, and entering an idle state.

[0014] According to another aspect of the embodiments of this application, a satellite communication method is also provided, applied to a geostationary orbit satellite network, comprising: receiving an initial direct transmission message sent by a mobile station, wherein the initial direct transmission message carries a mobile station capability identification element, the mobile station capability identification element being used to indicate at least one encryption algorithm supported by the mobile station; determining a first encryption algorithm from the encryption algorithms supported by the mobile station, and sending a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries encryption start parameters and the first encryption algorithm; receiving a first encryption mode completion message sent by the mobile station, which is encrypted by the first encryption algorithm; and continuing to perform signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0015] Optionally, the mobile station capability identifier cell includes: an extended mobile station category marker 1 cell, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0016] Optionally, continuing signaling or data transmission with the mobile station includes: in response to an encryption algorithm switching instruction, determining a second encryption algorithm other than the first encryption algorithm from the encryption algorithms supported by the mobile station; sending a second encryption mode command message encrypted with the first encryption algorithm to the mobile station, wherein the second encryption mode command message carries encryption start parameters and the second encryption algorithm; receiving a second encryption mode completion message encrypted with the second encryption algorithm sent by the mobile station; and continuing signaling or data transmission with the mobile station, wherein all transmitted signaling or data is encrypted with the second encryption algorithm.

[0017] According to another aspect of the embodiments of this application, a satellite communication system is also provided, including: a mobile station and a satellite network, wherein the satellite network is a geostationary orbit satellite network, wherein the mobile station is configured to send an initial direct transmission message to the satellite network, wherein the initial direct transmission message carries a mobile station capability identification element, the mobile station capability identification element being used to indicate at least one encryption algorithm supported by the mobile station; the satellite network is configured to determine a first encryption algorithm from the encryption algorithms supported by the mobile station and send a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries encryption start parameters and the first encryption algorithm; the mobile station is further configured to send a first encryption mode completion message encrypted by the first encryption algorithm to the satellite network; the satellite network is further configured to continue signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0018] Optionally, the mobile station capability identifier cell includes: an extended mobile station category marker 1 cell, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0019] Optionally, the satellite network is further configured to respond to an encryption algorithm switching command, determine a second encryption algorithm other than the first encryption algorithm from the encryption algorithms supported by the mobile station, and send a second encryption mode command message encrypted with the first encryption algorithm to the mobile station, wherein the second encryption mode command message carries encryption start parameters and the second encryption algorithm; the mobile station is further configured to send a second encryption mode completion message encrypted with the second encryption algorithm to the satellite network; the satellite network is further configured to continue signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted with the second encryption algorithm.

[0020] According to another aspect of the embodiments of this application, a computer program product is also provided, the computer program product comprising: a computer program, wherein the computer program, when executed by a processor, implements the above-described mobile station communication method or satellite communication method.

[0021] According to another aspect of the embodiments of this application, an electronic device is also provided, the electronic device including: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the above-described mobile station communication method or satellite communication method through the computer program.

[0022] In this embodiment, by carrying a mobile station capability identifier element in the initial direct transmission message, the satellite network can understand the encryption algorithms supported by the mobile station and intelligently select the encryption algorithm for communication. This method not only improves communication security but also enhances system flexibility, enabling dynamic selection of encryption strategies based on network requirements and mobile station capabilities. Furthermore, the dynamic switching mechanism for encryption algorithms allows the mobile station to promptly respond to the satellite network's instructions to switch encryption algorithms and update its own, effectively addressing potential security threats and improving the overall security performance of the system. This solves the technical problem of efficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios. Attached Figure Description

[0023] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0024] Figure 1 This is a schematic diagram of an optional satellite communication system according to an embodiment of this application;

[0025] Figure 2 This is an interactive flowchart of a satellite communication system's negotiated encryption algorithm based on relevant technologies;

[0026] Figure 3 This is an interactive flowchart of an optional optimized satellite communication system negotiation encryption algorithm according to an embodiment of this application;

[0027] Figure 4 It is a flowchart illustrating the switching of encryption algorithms in a satellite communication system based on relevant technologies;

[0028] Figure 5 This is a flowchart illustrating an optional optimized satellite communication system handover encryption algorithm according to an embodiment of this application.

[0029] Figure 6 This is a schematic diagram of the interaction process of various modules of an optional complete satellite communication system according to an embodiment of this application;

[0030] Figure 7 This is a flowchart illustrating an optional mobile station communication method according to an embodiment of this application;

[0031] Figure 8 This is a flowchart illustrating an optional satellite communication method according to an embodiment of this application;

[0032] Figure 9 This is a schematic diagram of the structure of an optional electronic device according to an embodiment of this application. Detailed Implementation

[0033] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0034] It should be noted that the terms "first," "second," etc., used in the specification, claims, and drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0035] To better understand the embodiments of this application, the following is a translation and explanation of some nouns or terms that appear in the description of the embodiments of this application:

[0036] Geosynchronous orbit satellite networks are satellite communication systems that utilize geosynchronous orbits. In geosynchronous orbit, satellites orbit the Earth at the same speed as the Earth's rotation, keeping the satellites stationary relative to a specific point on the Earth's surface, thus providing continuous communication coverage to that area. Geosynchronous orbit satellite networks are widely used in broadcasting, television transmission, long-distance communication, and mobile communication.

[0037] Mobile Station Classmark 1 (MSCM1) or simply the full name is a parameter used in mobile communication systems to describe the functions and capabilities of mobile devices (such as mobile phones and data terminals). It includes several key attributes of the device, such as revision level, encryption algorithm, radio frequency power capability, and other capabilities. Specifically: Revision level: indicates the terminal's software version or feature set; Enhanced Full Rate: indicates whether the terminal supports enhanced full rate voice coding; Encryption algorithm: indicates the encryption algorithm supported by the terminal; for example, A5 / 1 is the most common encryption standard in global mobile communication systems; Radio frequency power capability: describes the terminal's maximum transmit power at different frequencies and operating modes; Other capabilities: may include support for specific services or functions, such as data transmission rate, frequency range, and network access technology.

[0038] Example 1

[0039] According to an embodiment of this application, a satellite communication system is provided, such as... Figure 1 As shown, the mobile station communication system includes at least: a mobile station 11 and a satellite network 12, wherein:

[0040] Mobile station 11 can send an initial direct transmission message to the satellite network, wherein the initial direct transmission message carries a mobile station capability identification cell, which is used to indicate at least one encryption algorithm supported by the mobile station.

[0041] Satellite network 12 can determine a first encryption algorithm from the encryption algorithms supported by the mobile station and send a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries encryption start parameters and the first encryption algorithm;

[0042] Mobile station 11 can also send a first encryption mode completion message encrypted with a first encryption algorithm to the satellite network;

[0043] Satellite network 12 can also continue to conduct signaling or data transmission with mobile stations, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0044] The satellite network is a geostationary orbit satellite network, and the mobile station can be a vehicle-mounted communication device, a mobile phone, or a portable wireless terminal, etc., that can communicate through the geostationary orbit satellite network. The scheme in this application is mainly based on the GMR protocol for interaction, and some intermediate interaction processes have been optimized accordingly. The following describes the functions of each module of the satellite communication system in conjunction with the specific implementation process.

[0045] Figure 2 The diagram shows an interactive flowchart of a negotiated encryption algorithm for a satellite communication system, such as... Figure 2As shown, the encryption algorithm negotiated between the mobile station and the satellite network is mainly implemented through steps S1 to S5.

[0046] Step S1: The mobile station sends an initial direct transmission message to the satellite network (mobile station category label 1).

[0047] First, the mobile station sends an initial direct transmission message with the mobile station category marker 1 to the satellite network. The initial direct transmission message contains the mobile station category marker 1, which includes indication information on whether the A5 / 1 encryption algorithm is supported. Specifically, the structure of the mobile station category marker 1 identifier is shown in Table 1.

[0048] Table 1 Mobile Station Category Label 1 Identifier

[0049]

[0050] As shown in the table above, the mobile station category marker 1 only carries a flag indicating whether A5 / 1 is supported, while the A5 series encryption algorithms itself include 7 encryption algorithms from A5 / 1 to A5 / 7.

[0051] Step S2: The satellite network sends a category flag query message to the mobile station.

[0052] Due to the characteristics of the mobile station category marker 1 identifier, it is impossible to indicate whether the terminal supports encryption algorithms other than A5 / 1. Suppose that after the satellite network receives the initial direct transmission message, it wants to instruct the mobile station to perform encryption using the A5 / 3 algorithm, but it is unclear whether the mobile terminal supports it. Therefore, it needs to send a category marker query message to the mobile station.

[0053] Step S3: The mobile station sends a category flag change message (mobile station category flag 2) to the satellite network.

[0054] When the mobile station receives a category identifier query message from the satellite network, it sends a category identifier change message to the satellite network, carrying the mobile station category identifier 2, which indicates whether the A5 / 3 encryption algorithm is supported. If the category identifier change message received by the satellite network reflects that the terminal supports the A5 / 3 algorithm, then proceed to step S4.

[0055] Step S4: The satellite network sends an encryption mode command message to the mobile station.

[0056] The satellite network sends an encryption mode command message to the mobile station. This message carries encryption activation parameters and the A5 / 3 encryption algorithm. Upon receiving the encryption mode command message, the mobile station enters A5 / 3 encryption mode according to the A5 / 3 encryption algorithm indicated in the message, and proceeds to step S5.

[0057] Step S5: The mobile station sends an encryption mode completion message to the satellite network.

[0058] The mobile station sends an encryption mode completion message to the satellite network to complete the encryption algorithm negotiation. The A5 / 3 algorithm will be used to encrypt subsequent information.

[0059] In the above steps, since the mobile station category marker 1 cannot indicate whether the terminal supports encryption algorithms other than A5 / 1, if the satellite network wants to use the A5 / 3 encryption algorithm, the satellite network needs to send an additional category marker query message to the mobile station, and the terminal needs to additionally use a category marker change message carrying the mobile station category marker 2 to indicate whether it supports the A5 / 3 algorithm. This undoubtedly increases the resource consumption of the network interaction process. Based on this problem, this application optimizes the content of the mobile station category marker 1.

[0060] As an optional implementation, the mobile station capability identification element includes: an extended mobile station category marker 1 element, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0061] Specifically, Table 3 shows the extended mobile station category marker 1 identifier.

[0062] Table 3 Extended Mobile Station Category Marker 1 Identifier

[0063]

[0064] As listed in Table 3, the extended mobile station category marker 1 identifier carries not only the A5 / 1 encryption algorithm, but also the A5 / 2 to A5 / 7 encryption algorithms. The third byte of the extended identifier is filled according to the terminal's support for the encryption algorithm. If the terminal does not support the A5 / 6 encryption algorithm, the A5 / 6 encryption algorithm is not reflected in the third byte.

[0065] Based on the extended mobile station category marker 1 identifier described above, Figure 3 An interactive flowchart of an optimized satellite communication system negotiation encryption algorithm is shown.

[0066] Step S1: The mobile station sends an initial direct transmission message (extended mobile station category label 1) to the satellite network.

[0067] In the optimized process, the Mobile Station Category Mark 1 information element is expanded to include more encryption algorithm identifiers, such as any combination of A5 / 2 to A5 / 7. In this way, by carrying the expanded Mobile Station Category Mark 1 in the initial direct transmission message, the terminal can declare its encryption algorithm capabilities to the target satellite network from the outset using this information element, without requiring additional signaling interaction to determine the terminal's encryption algorithm support.

[0068] Step S2: The satellite network sends an encrypted mode command message to the mobile station.

[0069] The satellite network determines the encryption algorithm to be used from the encryption algorithms supported by the terminal and sends an encryption mode command message to the mobile station. This message contains the network's specified encryption algorithm (e.g., A5 / 3) and an encryption activation instruction. By directly including the encryption algorithm information in the encryption mode command message, the network can directly command the terminal to activate a specific encryption algorithm and begin encrypted communication.

[0070] Step S3: The mobile station sends an encryption mode completion message to the satellite network.

[0071] Once the terminal receives the encryption mode command message from the satellite network and successfully applies the specified encryption algorithm, it will respond with an encryption mode completion message, informing the network that it is ready to begin communication using the selected encryption algorithm. At this point, all subsequent control signaling and user data will be transmitted using the agreed-upon encryption method to protect communication from unauthorized eavesdropping and interference.

[0072] The steps S1 to S3 above demonstrate how to negotiate and activate encryption algorithms more efficiently and securely in the encryption algorithm negotiation process based on the GMR protocol. By including the encryption algorithm declaration in the initial direct transmission message and activating encryption by sending encryption mode commands directly on the network side, the entire process becomes smoother and more reliable.

[0073] In practice, switching encryption algorithms may be involved during communication between the mobile station and the satellite network. Figure 4 A flowchart illustrating the switching of encryption algorithms in a satellite communication system is shown.

[0074] When a mobile station uses the A5 / 3 encryption algorithm for subsequent data transmission or signaling interaction, and the satellite network requires switching the encryption algorithm based on the configuration policy, the following steps should be performed.

[0075] Step S1: The satellite network sends an encryption mode command message (carrying the A5 / 5 algorithm) to the mobile station.

[0076] The encryption mode command message is intended to instruct the mobile station of the terminal to switch the encryption algorithm from A5 / 3 to A5 / 5. However, since the terminal is already running in encryption mode of the A5 / 3 algorithm, it does not actually perform the algorithm switch. Instead, it directly discards and ignores the encryption mode command message sent by the satellite network and continues to use A5 / 3 encryption.

[0077] Step S2: The terminal sends a management service request message to the satellite network.

[0078] The terminal can continue to use the A5 / 3 encryption algorithm to continue previous services or establish new service connections.

[0079] In the above process, once the terminal starts encryption, it can only use the same encryption algorithm, whether it is for location updates, receiving message allocation, or continuing to make calls or data or other services. The encryption algorithm switching expected by the network side does not occur, resulting in a potential insecure state or reducing the encryption quality of the service.

[0080] Based on the above problems, this application proposes an optimized encryption algorithm switching mechanism, which can be implemented in the following way: the satellite network responds to the encryption algorithm switching command, determines a second encryption algorithm other than the first encryption algorithm from the encryption algorithms supported by the mobile station, and sends a second encryption mode command message encrypted with the first encryption algorithm to the mobile station, wherein the second encryption mode command message carries the encryption start parameters and the second encryption algorithm; the mobile station sends a second encryption mode completion message encrypted with the second encryption algorithm to the satellite network; the satellite network continues to conduct signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the second encryption algorithm.

[0081] In the above process, by introducing a dynamic switching mechanism for encryption algorithms, the satellite network can adjust the encryption algorithm in real time during communication as needed or as the threat model changes. For example, when a potential security threat is detected, the satellite network can send a second encryption mode command message, instructing the mobile station to switch to a higher-level encryption algorithm, such as switching from A5 / 3 to A5 / 5. After receiving the command, the mobile station uses the new encryption algorithm (i.e., the second encryption algorithm) to encrypt subsequent communication data, ensuring that communication data is fully protected even in harsh security environments. This mechanism overcomes the limitation of fixed encryption algorithms in traditional satellite communication, improving the system's resistance to attacks and its adaptability.

[0082] Specifically, Figure 5 A schematic diagram illustrating the interactive process of switching encryption algorithms in an optimized satellite communication system is shown, such as... Figure 5 As shown,

[0083] Step S1: The satellite network sends an encryption mode command message (carrying the A5 / 5 algorithm) to the mobile station.

[0084] Different from Figure 4 In the interactive process, even in encrypted mode, the terminal can receive and process encryption mode command messages carrying the activation of encryption mode. The terminal updates the security context and enables the new encryption algorithm. It directly updates its own encryption mode from the A5 / 3 encryption algorithm to the A5 / 5 encryption algorithm, that is, responding to the switching instruction from the network side.

[0085] Step S2: The mobile station sends an encryption mode completion message (updated to A5 / 5 algorithm) to the satellite network.

[0086] After the mobile station updates its internal encryption algorithm settings and switches to A5 / 5, it needs to reply to the network side with an encryption mode completion message, indicating that it has completed the algorithm switch as instructed, and now all communications will be encrypted using A5 / 5.

[0087] Step S3, manage service request message (using A5 / 5 algorithm).

[0088] The terminal uses the newly switched encryption algorithm to continue the previous service or establish a new service connection.

[0089] In steps S1 to S2 above, the limitation of the original GMR protocol, which states that once the terminal is in encrypted mode, it will no longer respond to any messages carrying commands to start encryption and the encryption mode, is broken. By adding an encryption algorithm switching mechanism, the network can still flexibly change encryption algorithms even in encrypted mode, further improving the security and performance of the GMR system.

[0090] Based on the aforementioned extended mobile station category label 1 and encryption algorithm switching mechanism, the embodiments of this application in... Figure 6 The diagram shows a more complete interaction flow of various modules in a satellite communication system. The specific interaction process is shown in steps S1 to S15.

[0091] Step S1: In the idle state, the mobile station sends a Radio Resource Control (RRC) request message ConectionRquest to the satellite network based on RACH (Random Access Channel). The request message carries S-RNTI (Secondary Cell Radio Network Temporary Identifier).

[0092] Step S2: The satellite network sends an Immediate Assignment message to the mobile station based on RACH, carrying an S-RNTI for terminal identification, and establishes SRB2 (Signalling Radio Bearer 2).

[0093] Step S3: The satellite network sends a Radio Resource Control Connection Establishment (RRC Connection) message to the mobile station based on the established signal radio bearer SRB2.

[0094] Step S4: The mobile station sends a Connection Setup Complete message to the satellite network based on the established signal radio bearer SRB2.

[0095] Step S5: The mobile station sends an initial direct transmission message to the satellite network, which includes a Location Updating Request message. The Location Updating Request message carries a mobile station capability identifier information element. This is the first uplink message from the mobile management layer.

[0096] Step S6: The satellite network sends an identification request message to the mobile station;

[0097] Step S7: The mobile station sends an identification response message carrying the mobile station's identifier to the satellite network;

[0098] Step S8: The satellite network sends an authentication request message with an authentication random number to the mobile station.

[0099] Step S9: The mobile station sends an authentication response message carrying a signed response to the satellite network;

[0100] Step S10: The satellite network sends an encryption mode command message to the mobile station;

[0101] Step S11: The mobile station sends an encryption mode completion message to the satellite network;

[0102] Step S12: The satellite network sends a location update reception message containing a temporary mobile user identifier, encrypted with the first encryption algorithm, to the mobile station;

[0103] In step S13, the mobile station sends a Temporary Mobile Subscriber Identity (TMSI) reallocation completion message encrypted with the first encryption algorithm to the satellite network.

[0104] Step S14: The satellite network sends a radio resource control connection release message encrypted with the first encryption algorithm to the mobile station;

[0105] In step S15, the mobile station sends a radio resource control connection release completion message encrypted with the first encryption algorithm to the satellite network and enters the idle state to complete the location update process.

[0106] In the process described above, the mobile station in the satellite communication system carries an extended mobile station capability identifier (MVI) in the initial direct transmission message, enabling the satellite network to understand the encryption algorithms supported by the mobile station and intelligently select the appropriate encryption algorithm for communication. This method not only improves communication security but also enhances system flexibility, allowing for dynamic selection of encryption strategies based on network requirements and mobile station capabilities. Furthermore, the proposed dynamic encryption algorithm switching mechanism allows the mobile station to respond in real-time to the satellite network's switching instructions, ensuring that its current mode is switched to the encryption algorithm most suitable for the network transmission state. This improves the security of information transmission during system interaction and solves the technical problem of efficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios.

[0107] Example 2

[0108] According to an embodiment of this application, a mobile station communication method is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0109] Figure 7 This is a flowchart illustrating a mobile station communication method according to an embodiment of this application, as shown below. Figure 7 As shown, the method includes the following steps:

[0110] Step S702: Send an initial direct transmission message to the satellite network, wherein the satellite network is a geostationary orbit satellite network, and the initial direct transmission message carries a mobile station capability identifier information element, which is used to indicate at least one encryption algorithm supported by the mobile station.

[0111] Step S704: Receive a first encryption mode command message sent by the satellite network, wherein the first encryption mode command message carries encryption start parameters and a first encryption algorithm, and the first encryption algorithm is an encryption algorithm supported by the mobile station.

[0112] Step S706: Send a first encryption mode completion message encrypted with the first encryption algorithm to the satellite network;

[0113] Step S708: Continue to conduct signaling or data transmission with the satellite network, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0114] The following describes each step of the mobile station communication method in conjunction with the specific implementation process.

[0115] As an optional implementation, the mobile station capability identification element includes: an extended mobile station category marker 1 element, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0116] As an optional implementation, the mobile station continues to conduct signaling or data transmission with the satellite network, which can be achieved in the following ways: receiving a second encryption mode command message encrypted with a first encryption algorithm sent by the satellite network, wherein the second encryption mode command message carries activation encryption parameters and a second encryption algorithm, the second encryption algorithm being another encryption algorithm supported by the mobile station besides the first encryption algorithm; sending a second encryption mode completion message encrypted with the second encryption algorithm to the satellite network; and continuing to conduct signaling or data transmission with the satellite network, wherein all transmitted signaling or data is encrypted with the second encryption algorithm.

[0117] Figure 6 The diagram shows a more complete interaction flow of various modules in a satellite communication system. The specific interaction process is shown in steps S1 to S15.

[0118] Step S1: In the idle state, the mobile station sends a Radio Resource Control (RRC) request message ConectionRquest to the satellite network based on RACH (Random Access Channel). The request message carries S-RNTI (Secondary Cell Radio Network Temporary Identifier).

[0119] Step S2: The mobile station receives an Immediate Assignment message sent by the satellite network based on RACH, carrying an S-RNTI for terminal identification, and establishes SRB2 (Signalling Radio Bearer 2).

[0120] Step S3: The mobile station receives a Radio Resource Control Connection Establishment (RRC Conection) message sent by the satellite network based on the established signal radio bearer SRB2.

[0121] Step S4: The mobile station sends a Connection Setup Complete message to the satellite network based on the established signal radio bearer SRB2.

[0122] Step S5: The mobile station sends an initial direct transmission message to the satellite network, which includes a Location Updating Request message. The Location Updating Request message carries a mobile station capability identifier information element. This is the first uplink message from the mobile management layer.

[0123] Step S6: The mobile station receives an identification request message sent by the satellite network;

[0124] Step S7: The mobile station sends an identification response message carrying the mobile station's identifier to the satellite network;

[0125] Step S8: The mobile station receives an authentication request message with an authentication random number sent by the satellite network.

[0126] Step S9: The mobile station sends an authentication response message carrying a signed response to the satellite network;

[0127] Step S10: The mobile station receives an encrypted mode command message sent by the satellite network;

[0128] Step S11: The mobile station sends an encryption mode completion message to the satellite network;

[0129] Step S12: The mobile station receives a location update reception message sent by the satellite network, which is encrypted with the first encryption algorithm and carries a temporary mobile user identifier.

[0130] In step S13, the mobile station sends a Temporary Mobile Subscriber Identity (TMSI) reallocation completion message encrypted with the first encryption algorithm to the satellite network.

[0131] Step S14: The mobile station receives a radio resource control connection release message encrypted with the first encryption algorithm from the satellite network;

[0132] In step S15, the mobile station sends a radio resource control connection release completion message encrypted with the first encryption algorithm to the satellite network and enters the idle state to complete the location update process.

[0133] Through the steps described above, by including an extended mobile station capability identifier in the initial direct transmission message, the mobile station enables the satellite network to understand the encryption algorithms supported by the mobile station, thereby intelligently selecting the appropriate encryption algorithm for communication. This method not only improves communication security but also enhances system flexibility, allowing for dynamic selection of encryption strategies based on network requirements and mobile station capabilities. Furthermore, the proposed dynamic encryption algorithm switching mechanism allows the mobile station to respond in real-time to the satellite network's switching instructions, ensuring that its current mode is switched to the encryption algorithm most suitable for the network transmission state. This improves the security of information transmission during system interaction, thus solving the technical problem of inefficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios.

[0134] Example 3

[0135] According to an embodiment of this application, a satellite communication method for use in a geosynchronous orbit satellite network is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0136] Figure 8 This is a flowchart illustrating a satellite communication method according to an embodiment of this application, such as... Figure 8 As shown, the method includes the following steps:

[0137] Step S802: Receive an initial direct transmission message sent by the mobile station, wherein the initial direct transmission message carries a mobile station capability identifier information element, and the mobile station capability identifier information element is used to indicate at least one encryption algorithm supported by the mobile station.

[0138] Step S804: Determine the first encryption algorithm from the encryption algorithms supported by the mobile station, and send a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries the encryption start parameters and the first encryption algorithm.

[0139] Step S806: Receive a first encryption mode completion message sent by the mobile station, which is encrypted by the first encryption algorithm;

[0140] Step S808: Continue to send signaling or transmit data with the mobile station, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0141] The following describes each step of the mobile station communication method in conjunction with the specific implementation process.

[0142] As an optional implementation, the mobile station capability identification element includes: an extended mobile station category marker 1 element, which includes an extended third byte used to indicate the mobile station's support status for encryption algorithms other than the A5 / 1 encryption algorithm in the A5 series encryption algorithms.

[0143] As an optional implementation, the satellite network continues to signal or transmit data with the mobile station, which can be achieved in the following ways: in response to an encryption algorithm switching command, a second encryption algorithm other than the first encryption algorithm is determined from the encryption algorithms supported by the mobile station; a second encryption mode command message encrypted with the first encryption algorithm is sent to the mobile station, wherein the second encryption mode command message carries encryption start parameters and the second encryption algorithm; a second encryption mode completion message encrypted with the second encryption algorithm is received from the mobile station; and signaling or data transmission continues with the mobile station, wherein all transmitted signaling or data is encrypted with the second encryption algorithm.

[0144] In practice, the authentication update encryption process based on the GMR protocol can refer to the interaction process in Example 1, which will not be repeated here.

[0145] In the process described above, the receiving mobile station in the satellite network carries an extended mobile station capability identifier (MVI) in the initial direct transmission message, enabling the satellite network to understand the encryption algorithms supported by the mobile station and intelligently select the appropriate encryption algorithm for communication. This method not only improves communication security but also enhances system flexibility, allowing for dynamic selection of encryption strategies based on network requirements and mobile station capabilities. Furthermore, the proposed dynamic encryption algorithm switching mechanism allows the satellite network to issue instructions to the mobile station to switch encryption algorithms according to its own needs, thereby instructing the mobile station to switch from the current encryption mode to the encryption algorithm best suited to the network transmission state. This improves the security of information transmission during system interaction and solves the technical problem of inefficiently negotiating or switching encryption algorithms based on existing protocols in satellite communication scenarios.

[0146] Example 4

[0147] According to an embodiment of this application, a computer program product is also provided, which includes a computer program, wherein when the computer program is executed by a processor, it implements the mobile station communication method in Embodiment 2 or the satellite communication method applied to a geostationary orbit satellite network in Embodiment 3.

[0148] According to an embodiment of this application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device containing the non-volatile storage medium executes the mobile station communication method in Embodiment 2 or the satellite communication method applied to a geosynchronous orbit satellite network in Embodiment 3 by running the computer program.

[0149] According to an embodiment of this application, a processor is also provided for running a computer program, wherein the computer program executes the mobile station communication method in Embodiment 2 or the satellite communication method applied to a geosynchronous orbit satellite network in Embodiment 3.

[0150] According to an embodiment of this application, an electronic device is also provided, comprising: a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the mobile station communication method of Embodiment 2 or the satellite communication method applied to a geostationary orbit satellite network of Embodiment 3 through the computer program.

[0151] Specifically, when the computer program runs, it executes the following steps of the mobile station communication method in Embodiment 2: sending an initial direct transmission message to a satellite network, wherein the satellite network is a geostationary orbit satellite network, and the initial direct transmission message carries a mobile station capability identification element, which is used to indicate at least one encryption algorithm supported by the mobile station; receiving a first encryption mode command message sent by the satellite network, wherein the first encryption mode command message carries an encryption start parameter and a first encryption algorithm, the first encryption algorithm being an encryption algorithm supported by the mobile station; sending a first encryption mode completion message encrypted by the first encryption algorithm to the satellite network; and continuing to conduct signaling or data transmission with the satellite network, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0152] Specifically, when the computer program runs, it executes the following steps of the satellite communication method applied to a geostationary orbit satellite network in Embodiment 3: receiving an initial direct transmission message sent by a mobile station, wherein the initial direct transmission message carries a mobile station capability identification element, which is used to indicate at least one encryption algorithm supported by the mobile station; determining a first encryption algorithm from the encryption algorithms supported by the mobile station, and sending a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries encryption start parameters and the first encryption algorithm; receiving a first encryption mode completion message sent by the mobile station, which is encrypted by the first encryption algorithm; and continuing to perform signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the first encryption algorithm.

[0153] As an alternative implementation, the above-mentioned electronic device may exist in the form of a mobile terminal, a computer terminal, or a similar computing device. Figure 9 A hardware structure block diagram of an electronic device for implementing a mobile station communication method is shown. Figure 9As shown, the electronic device 90 may include one or more processors 902 (shown as 902a, 902b, ..., 902n in the figure) 902 (processor 902 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 904 for storing data, and a transmission device 906 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 9 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, electronic device 90 may also include components that are more... Figure 9 The more or fewer components shown, or having the same Figure 9 The different configurations shown.

[0154] It should be noted that the aforementioned one or more processors 902 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element of the electronic device 90. As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0155] The memory 904 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the mobile station communication method in this embodiment. The processor 902 executes various functional applications and data processing by running the software programs and modules stored in the memory 904, thereby implementing the aforementioned application vulnerability detection method. The memory 904 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 904 may further include memory remotely located relative to the processor 902, and these remote memories can be connected to the electronic device 90 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0156] The transmission device 906 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the electronic device 90. In one example, the transmission device 906 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 906 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0157] The display can be, for example, a touchscreen liquid crystal display (LCD), which allows a user to interact with the user interface of the electronic device 90.

[0158] The sequence numbers of the above embodiments are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0159] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0160] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0161] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0162] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0163] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0164] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A mobile station communication method characterized by, The method comprises the following steps: sending an initial direct transmission message to a satellite network, wherein the satellite network is a geosynchronous satellite network, the initial direct transmission message carries a mobile station capability identification information element, the mobile station capability identification information element comprises an extended mobile station classmark 1 information element, the extended mobile station classmark 1 information element comprises an extended third byte, and the extended third byte is used to indicate the support state of the mobile station for an encryption algorithm other than an A5 / 1 encryption algorithm in an A5 series of encryption algorithms; receiving a first encryption mode command message sent by the satellite network, wherein the first encryption mode command message carries a start encryption parameter and a first encryption algorithm, and the first encryption algorithm is one of the encryption algorithms supported by the mobile station; sending a first encryption mode complete message encrypted by the first encryption algorithm to the satellite network; receiving a second encryption mode command message encrypted by the first encryption algorithm and sent by the satellite network, wherein the second encryption mode command message carries a start encryption parameter and a second encryption algorithm, and the second encryption algorithm is another encryption algorithm supported by the mobile station and different from the first encryption algorithm; sending a second encryption mode complete message encrypted by the second encryption algorithm to the satellite network; continuing signaling or data transmission with the satellite network, wherein the transmitted signaling or data is encrypted by the second encryption algorithm.

2. The method of claim 1, wherein, Before sending the initial direct transmission message to the satellite network, the method further comprises the following steps: sending a radio resource control connection request message to the satellite network in an idle state; receiving a radio resource control connection setup message sent by the satellite network based on a signal radio bearer; sending a radio resource control connection setup complete message to the satellite network based on the signal radio bearer.

3. The method of claim 1, wherein, The method of sending an initial direct transmission message to a satellite network comprises the following steps: sending an initial direct transmission message to the satellite network, wherein the initial direct transmission message comprises a location update request message, and the location update request message carries the mobile station capability identification information element.

4. The method of claim 3, wherein, After sending the initial direct transmission message carrying the location update request message to the satellite network, the method further comprises the following steps: receiving an identity request message sent by the satellite network; sending an identity response message carrying a mobile station identity to the satellite network; receiving an authentication request message carrying an authentication random number sent by the satellite network; sending an authentication response message carrying a signature response to the satellite network.

5. The method of claim 3, wherein, The method of continuing signaling or data transmission with the satellite network comprises the following steps: receiving a location update accept message carrying a temporary mobile user identity and encrypted by the first encryption algorithm and sent by the satellite network; sending a temporary mobile user identity reallocation complete message encrypted by the first encryption algorithm to the satellite network.

6. The method of claim 1, wherein, The method further comprises the following steps: receiving a radio resource control connection release message encrypted by the first encryption algorithm and sent by the satellite network; sending a radio resource control connection release complete message encrypted by the first encryption algorithm to the satellite network, and entering an idle state.

7. A method of satellite communications applied to a geostationary satellite network, characterized in that, The method comprises the following steps: receiving an initial direct transfer message sent by a mobile station, wherein the initial direct transfer message carries a mobile station capability identification information element, and the mobile station capability identification information element comprises an extended mobile station classmark 1 information element, and the extended mobile station classmark 1 information element comprises an extended third byte, and the extended third byte is used to indicate a support state of the mobile station for encryption algorithms in an A5 series except for an A5 / 1 encryption algorithm; determining a first encryption algorithm from the encryption algorithms supported by the mobile station, and sending a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries a start encryption parameter and the first encryption algorithm; receiving a first encryption mode complete message sent by the mobile station and encrypted by the first encryption algorithm; in response to an encryption algorithm switching instruction, determining a second encryption algorithm from the encryption algorithms supported by the mobile station except for the first encryption algorithm; sending a second encryption mode command message to the mobile station, wherein the second encryption mode command message is encrypted by the first encryption algorithm, and carries a start encryption parameter and the second encryption algorithm; receiving a second encryption mode complete message sent by the mobile station and encrypted by the second encryption algorithm; continuing signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the second encryption algorithm.

8. A satellite communication system, characterized by comprise: a mobile station and a satellite network, wherein the satellite network is a geosynchronous orbit satellite network, and the mobile station is configured to send an initial direct transfer message to the satellite network, wherein the initial direct transfer message carries a mobile station capability identification information element, and the mobile station capability identification information element comprises an extended mobile station classmark 1 information element, and the extended mobile station classmark 1 information element comprises an extended third byte, and the extended third byte is used to indicate a support state of the mobile station for encryption algorithms in an A5 series except for an A5 / 1 encryption algorithm; the satellite network is configured to determine a first encryption algorithm from the encryption algorithms supported by the mobile station, and send a first encryption mode command message to the mobile station, wherein the first encryption mode command message carries a start encryption parameter and the first encryption algorithm; the mobile station is further configured to send a first encryption mode complete message to the satellite network, wherein the first encryption mode complete message is encrypted by the first encryption algorithm; the satellite network is further configured to, in response to an encryption algorithm switching instruction, determine a second encryption algorithm from the encryption algorithms supported by the mobile station except for the first encryption algorithm, and send a second encryption mode command message to the mobile station, wherein the second encryption mode command message is encrypted by the first encryption algorithm, and carries a start encryption parameter and the second encryption algorithm; the mobile station is further configured to send a second encryption mode complete message to the satellite network, wherein the second encryption mode complete message is encrypted by the second encryption algorithm; the satellite network is further configured to continue signaling or data transmission with the mobile station, wherein the transmitted signaling or data is encrypted by the second encryption algorithm.

9. A computer program product, characterised in that, comprise: A computer program, wherein the computer program, when executed by a processor, implements the mobile station communication method of any one of claims 1 to 6 or the satellite communication method of claim 7.

10. An electronic device, comprising: comprising: a memory and a processor, wherein the memory has stored therein a computer program, and the processor is configured to execute the computer program to perform the mobile station communication method of any one of claims 1 to 6 or the satellite communication method of claim 7.

Images