Satellite terminal access method and power satellite communication system

Abstract

The invention provides a satellite terminal access method and a power satellite communication system. The satellite terminal access method is applied to the power satellite communication system. The power satellite communication system comprises an access management and control platform, an access terminal and a satellite terminal. The method comprises the following steps: the access management and control platform applies to generate a communication key pair of the access terminal based on a first key of the access terminal, and sends the communication key pair to the access terminal; and the access terminal negotiates with the satellite terminal through the communication key pair to obtain a session key used for data encryption transmission, and the access of the access terminal is completed. According to the satellite terminal access method and the power satellite communication system provided by the invention, the flexibility is higher, and the data transmission instantaneity and security can be effectively improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a satellite terminal access method and a power satellite communication system. Background Art

[0002] Power satellite access terminals are a crucial component of the Electric Power Internet of Things (EIoT). These terminals are widely distributed in remote areas and areas without network coverage, providing critical communication and data transmission services for the power grid. However, as the development of the EIoT deepens, the security and real-time requirements for these terminals are increasing. Existing Electrification Satellite Access Terminals mostly use static configuration and fixed access. This access method can lead to communication interruptions or data loss in the event of network congestion, satellite transponder failure, or ground station maintenance, compromising data transmission efficiency and real-time performance, while also compromising security. Summary of the Invention

[0003] In view of this, the purpose of this application is to propose a satellite terminal access method and a power satellite communication system, which can improve the security and real-time performance of data transmission.

[0004] Based on the above objectives, the present application provides a satellite terminal access method, which is applied to a power satellite communication system. The power satellite communication system includes an access control platform, an access terminal, and a satellite terminal. The method includes:

[0005] The access control platform generates a communication key pair for the access terminal based on the first key application of the access terminal, and sends the communication key pair to the access terminal;

[0006] The access terminal negotiates with the satellite end through the communication key pair to obtain a session key for data encryption transmission, thereby completing the access of the access terminal.

[0007] Furthermore, before the access control platform generates a communication key pair for the access terminal based on the first key application of the access terminal, the access control platform further includes:

[0008] The access control platform obtains the device identification information of the access terminal and performs identity authentication on the access terminal based on the device identification information;

[0009] In response to the identity authentication being successful, generating the first key application of the access terminal.

[0010] Furthermore, the method further comprises:

[0011] In response to meeting a preset key update condition, the access control platform issues a key change reminder to the access terminal, so that the access terminal initiates a second key application to the access control platform;

[0012] The access control platform regenerates a new communication key pair based on the second key application and sends it to the access terminal. The access terminal re-negotiates a new session key with the satellite terminal based on the new communication key pair.

[0013] Furthermore, the communication key pair includes a terminal public key and a terminal private key; the access terminal negotiates with the satellite terminal through the communication key pair to obtain a session key for data encryption transmission, including:

[0014] The access terminal sends the terminal public key to the satellite terminal;

[0015] The satellite generates a first random number, encrypts the first random number using the terminal public key to obtain a first ciphertext, and transmits the first ciphertext and the satellite public key to the access terminal;

[0016] The access terminal decrypts the first ciphertext using the terminal private key to obtain a second random number, and signs the second random number using the satellite public key to obtain a first signed data packet;

[0017] The access terminal generates a third random number, encrypts the third random number using the satellite public key to obtain a second ciphertext, and transmits the first signature data packet and the second ciphertext to the satellite end;

[0018] The satellite end decrypts the second ciphertext using a satellite private key corresponding to the satellite public key to obtain a fourth random number;

[0019] The satellite end performs signature verification on the first signed data packet using the first random number and the satellite private key; in response to passing the signature verification, determining that the second random number is identical to the first random number, the satellite end signs the fourth random number using the terminal public key to obtain a second signed data packet, and transmits the second signed data packet to the access terminal;

[0020] The access terminal performs signature verification on the second signed data packet using the third random number and the terminal private key; in response to passing the signature verification, determining that the fourth random number is identical to the third random number, and generating a session key for data encryption transmission based on the second random number and the third random number;

[0021] The satellite generates the same session key as that of the access terminal based on the first random number and the fourth random number.

[0022] Furthermore, the using the satellite public key to sign the second random number to obtain a first signed data packet includes:

[0023] The access terminal calculates a hash value of the second random number using a hash algorithm to obtain a first hash value;

[0024] The access terminal encrypts the first hash value using the satellite public key of the satellite terminal to obtain the first signature data packet.

[0025] Furthermore, the satellite end performs signature verification on the first signed data packet using the first random number and the satellite private key, including:

[0026] The satellite end calculates a hash value of the first random number using a hash algorithm to obtain a second hash value;

[0027] decrypting the first signed data packet using the satellite private key to obtain a third hash value;

[0028] Compare the second hash value with the third hash value to see if they are consistent. If they are consistent, signature verification passes; if they are inconsistent, signature verification fails.

[0029] Furthermore, the satellite uses the terminal public key to sign the fourth random number to obtain a second signed data packet, including:

[0030] The satellite end calculates a hash value of the fourth random number using a hash algorithm to obtain a fourth hash value;

[0031] The satellite end encrypts the fourth hash value using the terminal public key to obtain the second signature data packet.

[0032] Furthermore, the access terminal performs signature verification on the second signature data packet using the third random number and the terminal private key, including:

[0033] The access terminal calculates a hash value of the third random number using a hash algorithm to obtain a fifth hash value;

[0034] The access terminal decrypts the second signature data packet using the terminal private key to obtain a sixth hash value, and compares the fifth hash value with the sixth hash value to see if they are consistent. If they are consistent, signature verification passes; otherwise, signature verification fails.

[0035] Furthermore, the method further comprises:

[0036] The access control platform obtains a deregistration request from the access terminal and deregisters the access terminal;

[0037] And / or, the access management and control platform receives and records the working status message of the access terminal that has been connected, and in response to not receiving the working status information of the access terminal within a preset time period, marks the access terminal as abnormal and issues an abnormal reminder.

[0038] Based on the same inventive concept, the present application also provides a power satellite communication system, which includes an access control platform, an access terminal and a satellite terminal;

[0039] The access control platform is configured to generate a communication key pair of the access terminal based on the first key application of the access terminal, and send the communication key pair to the access terminal;

[0040] The access terminal is configured to negotiate with the satellite end through the communication key pair to obtain a session key for data encryption transmission, thereby completing access of the access terminal.

[0041] As can be seen from the above description, the present application provides a satellite terminal access method and power satellite communication system. When an access terminal wants to access a satellite terminal, it first uses the access control platform to generate a communication key pair for the access terminal. The access terminal then negotiates with the satellite terminal through the communication key pair to obtain a session key for data encryption transmission. The access terminal then uses the session key to encrypt data transmission with the satellite terminal. Compared to the prior art method of accessing with a fixed key, the communication key pair of the present application is generated by the access control platform instead of being directly built into the access terminal, making the configuration more flexible. When the access terminal needs to change the access path due to location changes, network congestion, and other issues, the access control platform can be used to regenerate the communication key pair, allowing the access terminal to access a new satellite terminal using the regenerated communication key pair. This makes the access method more flexible, thereby improving the real-time performance and transmission efficiency of data transmission. When the session key or communication key pair is leaked, the access control platform can also be used to regenerate a new communication key pair, thereby enabling the access terminal to re-access, making the access method more secure and improving the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in this application or related technologies, the following briefly introduces the drawings required for use in the embodiments or related technical descriptions. Obviously, the drawings described below are merely embodiments of this application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0043] Figure 1 A schematic diagram of a satellite terminal access method according to an embodiment of the present application;

[0044] Figure 2This is a schematic diagram of the session key negotiation process between the access terminal and the satellite terminal in an embodiment of the present application;

[0045] Figure 3 This is a schematic diagram of a power satellite communication system according to an embodiment of the present application. DETAILED DESCRIPTION

[0046] In order to make the objectives, technical solutions and advantages of this application more clear, this application is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0047] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present application should have the usual meanings understood by people with ordinary skills in the field to which this application belongs. The "first", "second" and similar words used in the embodiments of the present application do not indicate any order, quantity or importance, but are only used to distinguish different components. "Include" or "comprise" and similar words mean that the elements or objects appearing before the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0048] With the rapid development of smart grids and the power Internet of Things (IoT), power satellite access terminals are playing an increasingly important role in power production, monitoring, and emergency communications. Widely distributed in remote areas and areas without network coverage, these terminals provide critical communication and data transmission services for the power grid. However, as the development of the IoT deepens, the security and real-time requirements for these terminals are increasing. In particular, for the transmission of high-bandwidth, high-throughput data, such as high-definition video and high-quality images, traditional satellite communications and terminal access methods are no longer able to meet the dual security and real-time requirements of power production.

[0049] Most existing power satellite access terminals utilize static configuration and fixed access methods. In a static configuration solution, all necessary parameters, including communication protocols, access frequencies, channel coding methods, and encryption keys, are pre-configured before deployment. For example, a power satellite access terminal is factory-configured to use a specific satellite frequency band and communication protocol (such as Ku-band and TDMA), along with a fixed encryption key for data transmission security. Fixed access, on the other hand, means that after deployment, the access path and method remain fixed. For example, a power satellite access terminal installed in a remote substation may communicate via a specific satellite transponder to a ground station. This access method operates stably under normal circumstances, but can result in communication interruptions or data loss in the event of network congestion, satellite transponder failure, or ground station maintenance. Furthermore, with existing access methods, attacks on terminal devices, leaked encryption keys, or failures are difficult to detect and repair in a timely manner, posing potential security risks to power production and compromising data transmission security. In addition, once the fixed encryption key in the terminal is leaked, the terminal has to be abandoned directly, otherwise it will directly affect the security of data transmission.

[0050] In view of this, the present application provides a satellite terminal access method, which is applied to the power satellite communication system 300 and can improve the security and timeliness of data transmission; Figure 3 As shown, the electric power satellite communication system 300 includes an access control platform 301, an access terminal 302 and a satellite terminal 303; Figure 1 As shown, the method includes:

[0051] S101, the access management and control platform 301 generates a communication key pair of the access terminal 302 based on the first key application of the access terminal 302, and sends the communication key pair to the access terminal 302;

[0052] S102: The access terminal 302 negotiates with the satellite terminal 303 through the communication key pair to obtain a session key for data encryption transmission, thereby completing access of the access terminal 302.

[0053] In this application, when an access terminal 302 wishes to access a satellite 303, it first uses the access control platform 301 to generate a communication key pair for the access terminal 302. The access terminal 302 then uses the communication key pair to negotiate with the satellite 303 to obtain a session key for data encryption transmission. The access terminal 302 then uses the session key to encrypt data transmission with the satellite 303. Compared to the prior art method where the access terminal 302 accesses using a fixed key, the communication key pair in this application is generated by the access control platform 301 rather than being directly built into the access terminal 302, resulting in more flexible configuration. If the access terminal 302 needs to change its access path due to a change in location or network congestion, the access control platform 301 can be used to regenerate the communication key pair, allowing the access terminal to access a new satellite 303 using the regenerated communication key pair. This provides a more flexible access method, thereby improving the real-time nature and efficiency of data transmission. Furthermore, if the session key or communication key pair is leaked, the access control platform 301 can be used to regenerate a new communication key pair, allowing the access terminal 302 to reconnect, making the access method more secure and thus improving data transmission security.

[0054] Power data is a series of data generated during the operation of the power system, including power production data, power consumption data, monitoring data, etc. Its secure and efficient transmission is of great significance to the normal and stable operation of the power system. Access terminal 302 accesses satellite terminal 303 through the method of this application, which provides more flexible access methods. In the event of network congestion, the access path can be changed promptly, effectively ensuring real-time performance. Because the communication key pair can be changed according to actual conditions, the risk of leakage is reduced and security is improved. This can effectively improve the security of power data transmission, ensuring the stable and efficient operation of the power system.

[0055] In some embodiments, before the access control platform 301 generates a communication key pair for the access terminal 302 based on the first key application of the access terminal 302, the access control platform 301 further includes:

[0056] The access control platform 301 obtains the device identification information of the access terminal 302 and performs identity authentication on the access terminal 302 based on the device identification information;

[0057] In response to the identity authentication being successful, the first key application of the access terminal 302 is generated.

[0058] When the access terminal 302 needs to use the access management and control platform 301 to generate a communication key pair, it needs to complete registration on the access management and control platform 301 in advance, that is, enter the device identification information of the access terminal 302 on the access management and control platform 301. The access management and control platform 301 then authenticates the access terminal 302 based on the device identification information. If the identity authentication is successful, it means that the access terminal 302 is a trusted and authorized device. Therefore, a first key application for the access terminal 302 is generated, and then a communication key pair is generated based on the first key application.

[0059] In some embodiments, the method further comprises:

[0060] In response to meeting a preset key update condition, the access control platform 301 issues a key change reminder to the access terminal 302, so that the access terminal 302 initiates a second key application to the access control platform 301;

[0061] The access control platform 301 regenerates a new communication key pair based on the second key application and sends it to the access terminal 302. The access terminal 302 re-negotiates a new session key with the satellite terminal 303 based on the new communication key pair.

[0062] Key update conditions can include a usage duration threshold. When generating a communication key pair, the access control platform 301 records the generation time and calculates the usage duration based on the generation time. When the usage duration reaches the usage duration threshold, a key change reminder is issued to the access terminal 302. Upon receiving the key change reminder, the access terminal 302 initiates a second key request to the access control platform 301. The access control platform 301 then regenerates a new communication key pair based on the second key request, allowing the access terminal 302 to renegotiate a new session key with the satellite 303 using the new communication key pair. Regularly updating the communication key pair effectively reduces the risk of leakage of the communication key pair or session key, thereby further improving the security of data transmission between the access terminal 302 and the satellite 303. Key update conditions can also include detecting key leakage risks or connection failures, enabling management and updating of the communication key pair to ensure that the access terminal 302 always has secure and smooth access to the satellite 303.

[0063] In some embodiments, the communication key pair includes a terminal public key and a terminal private key; the access terminal 302 negotiates with the satellite terminal 303 through the communication key pair to obtain a session key for data encryption transmission, including:

[0064] The access terminal 302 sends the terminal public key to the satellite terminal 303;

[0065] The satellite end 303 generates a first random number, encrypts the first random number using the terminal public key to obtain a first ciphertext, and transmits the first ciphertext and the satellite public key to the access terminal 302;

[0066] The access terminal 302 decrypts the first ciphertext using the terminal private key to obtain a second random number, and signs the second random number using the satellite public key to obtain a first signed data packet;

[0067] The access terminal 302 generates a third random number, encrypts the third random number using the satellite public key to obtain a second ciphertext, and transmits the first signature data packet and the second ciphertext to the satellite 303;

[0068] The satellite end 303 decrypts the second ciphertext using the satellite private key corresponding to the satellite public key to obtain a fourth random number;

[0069] The satellite end 303 performs signature verification on the first signed data packet using the first random number and the satellite private key. In response to the signature verification being successful and determining that the second random number is identical to the first random number, the satellite end 303 signs the fourth random number using the terminal public key to obtain a second signed data packet, and transmits the second signed data packet to the access terminal 302.

[0070] The access terminal 302 performs signature verification on the second signed data packet using the third random number and the terminal private key; in response to passing the signature verification, determining that the fourth random number is identical to the third random number, the access terminal 302 generates a session key for data encryption transmission based on the second random number and the third random number;

[0071] The satellite end 303 generates the same session key as that of the access terminal 302 based on the first random number and the fourth random number.

[0072] Specifically, after receiving the terminal public key and the terminal private key, the access terminal 302 can send the terminal public key to the satellite terminal 303 that needs to be accessed, while the terminal private key is stored in the access terminal 302. The asymmetric encryption and decryption of data are achieved through the terminal public key and the terminal private key.

[0073] For example, the process of negotiating a session key between the access terminal 302 and the satellite terminal 303 is further described by taking the access terminal 302 as the sender S and the satellite terminal 303 as the receiver R as an example. Figure 2As shown, when access terminal 302 wishes to access satellite 303, a session begins and the terminal's public key is sent to satellite 303. Upon receiving the terminal's public key, satellite 303 generates a first random number A and encrypts the first random number using the terminal's public key to obtain a first ciphertext. The satellite terminal has a satellite public key and a satellite private key, which are stored by the satellite terminal and can be transmitted to access terminal 302. The satellite public key is the satellite terminal's public key, and the satellite private key is the satellite terminal's private key. Therefore, when the first ciphertext is returned to sender S, the satellite public key is also sent. After receiving the first ciphertext, sender S uses the stored terminal's private key to decrypt the first ciphertext, obtaining a second random number A'. If the first ciphertext has not been maliciously tampered with, the second random number A' obtained by decryption using the terminal's private key is identical to the first random number A. Therefore, signature verification of the second random number is also required to ensure the authenticity of the data and its source.

[0074] The access terminal 302 signs the second random number using the received satellite public key to obtain a first signature data packet SIGN-A, and sends the first signature data packet SIGN-A to the satellite terminal. The satellite terminal verifies the signature of the first signature data packet SIGN-A using the first random number A and the satellite private key. Successful signature verification indicates that the second random number A' received by the access terminal 302 is identical to the first random number A generated by the satellite terminal 303 and has not been maliciously tampered with.

[0075] After decrypting the second random number A', the receiving terminal generates a third random number B and encrypts it using the satellite terminal's satellite public key. The encrypted second ciphertext is then sent to the satellite terminal along with the first signature data packet SIGN-A. After receiving the second ciphertext, the satellite terminal 303 decrypts it using the satellite private key to obtain a fourth random number B'. If the second ciphertext has not been maliciously tampered with, the fourth random number B' obtained by decryption using the satellite private key is identical to the third random number B. Therefore, signature verification of the fourth random number is also required to ensure the authenticity of the data and its source.

[0076] The satellite terminal 303 signs the fourth random number B' using the terminal public key to obtain a second signature data packet SIGN-B, and transmits the second signature data packet SIGN-B to the access terminal 302. After receiving the second signature data packet SIGN-B, the access terminal 302 performs signature verification on the second signature data packet SIGN-B using the third random number B and the terminal private key. In response to the signature verification being successful, it is determined that the fourth random number B' is identical to the third random number B.

[0077] Because the second random number A' received by the access terminal 302 is the same as the first random number A generated by the satellite 303, and the fourth random number B' received by the satellite 303 is the same as the third random number B generated by the access terminal 302, the session key generated by the access terminal 302 based on the second random number A' and the third random number B is the same as the session key generated by the satellite 303 based on the first random number A and the fourth random number B'. As a result, the access terminal 302 and the satellite 303 can implement data encryption transmission using the session key.

[0078] In the above process, two-way authentication is achieved through the first signature data packet and the second signature data packet, effectively realizing data source and authenticity authentication, ensuring that the first random number and the third random number are not tampered with during the transmission process, and realizing secure and effective negotiation of the session key.

[0079] Satellite terminal 303 includes high-throughput satellites, which have higher communication capacity and lower transmission latency. They can meet the real-time transmission requirements of high-bandwidth, high-throughput data services such as high-definition video and high-quality images in the power production process, and better support the real-time data transmission requirements in the power Internet of Things.

[0080] In some embodiments, the using the satellite public key to sign the second random number to obtain a first signed data packet includes:

[0081] The access terminal 302 calculates a hash value of the second random number using a hash algorithm to obtain a first hash value;

[0082] The access terminal 302 encrypts the first hash value using the satellite public key of the satellite terminal to obtain the first signature data packet.

[0083] Specifically, a hash algorithm is a one-way function that maps input data to a fixed-length output. Common hash algorithms include MD5 (Message-Digest Algorithm 5), Secure Hash Algorithm (SHA), and Cyclic Redundancy Check (CRC32). Using a hash algorithm to calculate a hash value from input data is easy, but deducing the input data from the hash value is computationally infeasible. Even slight changes in the input data will result in significant changes in the output hash value. The irreversibility of hash functions makes it impossible to deducing the original data from the hash value. The same input data can generate the same hash value, while different input data will generate different hash values. Therefore, the first hash value corresponding to the second random number is unique. When the second random number has not been tampered with, its corresponding hash value should be the same as the hash value corresponding to the first random number. However, when the second random number has been maliciously tampered with, even very slight changes will result in a different calculated hash value from the first random number. This allows verification of the second random number and improves data authenticity.

[0084] In some embodiments, the satellite end 303 performs signature verification on the first signed data packet using the first random number and the satellite private key, including:

[0085] The satellite end 303 calculates a hash value of the first random number using a hash algorithm to obtain a second hash value;

[0086] decrypting the first signed data packet using the satellite private key to obtain a third hash value;

[0087] Compare the second hash value with the third hash value to see if they are consistent. If they are consistent, signature verification passes; if they are inconsistent, signature verification fails.

[0088] Specifically, after receiving the first signed data packet, satellite 303 decrypts the first signed data packet using its satellite private key to obtain a third hash value. Simultaneously, a hash algorithm is used to calculate the hash value of the first random number to obtain a second hash value. If the first signed data packet has not been tampered with during transmission, the third hash value should be consistent with the first hash value. If the second random number has not been tampered with during transmission, the first hash value should be consistent with the second hash value. Therefore, if the second hash value and the third hash value are consistent, it indicates that the first hash value and the first random number have not been tampered with during transmission, and the second random number received by access terminal 302 is the same as the first random number, and signature verification succeeds. If the second hash value and the third hash value are inconsistent, it indicates that either the first hash value or the first random number has been tampered with during transmission, meaning that the third hash value received by satellite 303 is tampered with, or the second random number decrypted by access terminal 302 is tampered with. In either case, the data is no longer trustworthy, and signature verification fails. When the signature verification fails, the session key negotiation between the access terminal 302 and the satellite terminal 303 stops, and the session key negotiation is no longer performed based on the current terminal public key and the terminal private key.

[0089] In some embodiments, the satellite 303 signs the fourth random number using the terminal public key to obtain a second signed data packet, including:

[0090] The satellite end 303 calculates a hash value of the fourth random number using a hash algorithm to obtain a fourth hash value;

[0091] The satellite end 303 encrypts the fourth hash value using the terminal public key to obtain the second signature data packet.

[0092] Specifically, when the fourth random number is data that has not been tampered with, its corresponding hash value should be the same as the hash value corresponding to the third random number; and when the fourth random number is data that has been maliciously tampered with, its corresponding hash value is different from the hash value of the third random number, thereby realizing the verification of the fourth random number and improving the authenticity of the data.

[0093] In some embodiments, the access terminal 302 performs signature verification on the second signed data packet using the third random number and the terminal private key, including:

[0094] The access terminal 302 calculates a hash value of the third random number using a hash algorithm to obtain a fifth hash value;

[0095] The access terminal 302 decrypts the second signature data packet using the terminal private key to obtain a sixth hash value, and compares the fifth hash value with the sixth hash value to see if they are consistent. If they are consistent, signature verification passes; otherwise, signature verification fails.

[0096] Specifically, after receiving the second signed data packet, access terminal 302 decrypts the second signed data packet using its stored private key to obtain a sixth hash value. Simultaneously, a hash algorithm is used to calculate the hash value of the third random number to obtain a fifth hash value. If the second signed data packet has not been tampered with during transmission, the sixth hash value should be consistent with the fourth hash value. If the third random number has not been tampered with during transmission, the fourth hash value should be consistent with the fifth hash value. Therefore, if the fifth and sixth hash values ​​are consistent, it indicates that the fourth and third random numbers have not been tampered with during transmission, and the fourth and third random numbers received by satellite 303 are identical, thus passing the signature verification. If the fifth and sixth hash values ​​are inconsistent, it indicates that either the fourth or third random number has been tampered with during transmission. In other words, the sixth hash value decrypted by access terminal 302 is the tampered data, or the fourth random number decrypted by satellite 303 is the tampered data. In either case, the data is no longer trustworthy, and signature verification fails. When the signature verification fails, the session key negotiation between the access terminal 302 and the satellite terminal 303 stops, and the session key negotiation is no longer based on the current terminal public key and the terminal private key. At this time, a key application can be sent to the access control platform 301 again to generate a new communication key pair. The access terminal 302 and the satellite terminal 303 renegotiate the session key through the new communication key pair.

[0097] In some embodiments, the method further comprises:

[0098] The access control platform 301 associates and stores the device identification information of the access terminal 302 with the corresponding communication key pair. Specifically, the access control platform 301 manages the communication key pair of the access terminal 302 by associating and storing the device identification information of the access terminal 302 with the corresponding communication key pair.

[0099] In some embodiments, the method further includes: the access control platform 301 obtaining a deregistration request from the access terminal 302, and deregistering the access terminal 302. When the access terminal 302 needs to be deregistered, information about the access terminal 302 to be deregistered, such as device identification information, is entered into the access control platform 301, and a deregistration request is generated. The access control platform 301 then deregisters the access terminal 302 based on the deregistration request, such as by deleting all information about the access terminal 302 to be deregistered from the access control platform 301.

[0100] In some embodiments, the method further includes: the access management and control platform 301 receives and records the working status message of the access terminal 302 that has been connected, and in response to not receiving the working status information of the access terminal 302 within a preset time period, marks the access terminal 302 as abnormal and issues an abnormal reminder.

[0101] Specifically, after access terminal 302 completes access to satellite terminal 303, access control platform 301 can also continuously monitor the operating status messages of access terminal 302. If no operating status information from access terminal 302 is received within a preset period of time, it indicates that access terminal 302 may have experienced a fault or anomaly. Therefore, access terminal 302 is marked as abnormal and an abnormality reminder is issued. Optionally, a user for receiving abnormality reminders can be preset in access control platform 301. When no operating status information from access terminal 302 is received within a preset period of time, an abnormality reminder is sent to the preset receiving user to remind the user to promptly check access terminal 302, implement online monitoring of access terminal 302, ensure the stable operation of access terminal 302, and thus ensure the efficient and stable transmission of power data.

[0102] The access control platform 301 may include a terminal identification management module, a key management module, a service interface and other interfaces. The terminal identification management module can realize device registration management, device status management, device binding management, device deregistration management, device query management and device authentication function management. The key management module can realize key generation, key management, domain key management, audit management, log management and authorization management functions; the service interface is used to communicate with the access terminal 302, and other interfaces are used to connect with other related systems or modules.

[0103] The functions of the key management module are briefly described as follows:

[0104] (1) Key generation: The access management and control platform 301 may generate a communication key pair based on the first key application or the second key application, and call a service interface to send the communication key pair to the access terminal 302 .

[0105] (2) Key management: The communication key pair is associated with the device identification information of the access terminal 302 and stored, and the communication key pair is managed throughout its life cycle, including storage, backup, and recovery of the communication key pair.

[0106] (3) Domain key management: managing the communication key pairs corresponding to the access terminals 302 in different domains or regions to ensure the isolation and security of the communication key pairs.

[0107] (4) Authorization management: Authorization management of the use of communication key pairs to ensure that only authorized users or devices can use the communication key pairs.

[0108] (5) Log management: Record all key management operation logs to facilitate auditing and tracking.

[0109] (6) Audit management: Corresponding information can be generated based on audit requirements to facilitate auditing.

[0110] The functions of the terminal identification management module are briefly described as follows:

[0111] (1) Device registration management: The access control platform 301 provides an information entry window, in which the user can enter the device identification information and other relevant information of the access terminal 302, thereby initiating the registration process.

[0112] (2) Device Status Management: Receive and record the working status information of the connected access terminal 302. In response to not receiving the working status information of the access terminal 302 within a preset period of time, mark the access terminal 302 as abnormal and issue an abnormality reminder. When the access terminal 302 is offline or faulty, it can be marked as abnormal. When it is online, it is directly marked as online, indicating that the access terminal 302 is operating normally.

[0113] (3) Device binding management: The access terminal 302 can be bound to a specific user or account to ensure the legality and security of the use of the access terminal 302.

[0114] (4) Device deregistration management: The access control platform 301 provides a deregistration application initiation window. When the access terminal 302 is no longer in use, a deregistration application is initiated through the deregistration application initiation window. After the application is approved, a deregistration request is generated. The access control platform 301 deregisters the access terminal 302 based on the received deregistration request, for example, deleting its corresponding message from the access control platform 301, or marking it as deregistered, and terminating communication with it.

[0115] (5) Device query function: The access control platform 301 provides a device query window. Authorized users can generate a query request for the access terminal 302 by entering identification information, such as a device number, in the device query window. After receiving the query request from the access terminal 302, the access control platform 301 retrieves the corresponding information of the access terminal 302 and displays it to the authorized user.

[0116] (6) Device identification function: After the access control platform 301 initiates the registration process, it authenticates the access terminal 302 based on the relevant device identification information. If the authentication is successful, it generates a first key application for the access terminal 302 and sends the first key application to the key management module.

[0117] The service interface utilizes the SM2, SM3, and SM4 algorithms and protocols, providing encryption algorithms and protocols that comply with national cryptographic standards to ensure the platform's security and compliance. SM2 is a public key cryptography algorithm based on elliptic curve cryptography, used for digital signatures, key exchange, and public key encryption; SM3 is a cryptographic hash algorithm used to generate data hash values ​​to ensure data integrity; and SM4 is a block cipher algorithm used for data encryption and decryption.

[0118] The access control platform 301 also has a user management module that stores and manages the user accounts, user passwords and user permissions of the access users to ensure the security and compliance of the platform use.

[0119] Access Control Platform 301 uses Java, a language known for its high security, scalability, and comprehensive framework technology, as its development language. Utilizing the Spring Boot framework, Access Control Platform 301 is developed in layers, with clear logical separation between layers. Interfaces are provided between layers to facilitate business and data communication, making the system highly scalable. Based on distributed technology, Access Control Platform 301 encapsulates system changes within microservices and provides external remote call methods.

[0120] The technical architecture design of the access control platform 301 has strong adaptability and can handle both synchronous and asynchronous operations. It can meet the needs of both fast-responding businesses and large-scale, complex, asynchronous businesses. The implementation of its technical architecture is independent of the OS, middleware platform, and database system, and has good scalability. Microservices make it easy to expand the access control platform 301 in both vertical and horizontal directions: on the one hand, the access control platform 301 can be upgraded to a larger and more powerful platform, and on the other hand, the scale can be appropriately increased to enhance the processing capabilities of the access control platform 301. When expanding or modifying functions, the stability of the original structure will basically not be destroyed. The technical architecture of the entire access control platform 301 uses a cluster-deployed redis cache system to provide stable and high-performance cache services.

[0121] It should be noted that the method of the embodiment of the present application can be performed by a single device, such as a computer or server. The method of this embodiment can also be applied in a distributed scenario and performed by multiple devices working together. In such a distributed scenario, one of the multiple devices may only perform one or more steps of the method of the embodiment of the present application, and the multiple devices will interact with each other to complete the method.

[0122] It should be noted that the above description is limited to some embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in an order different from that described in the above embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order or sequential order shown to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0123] Based on the same inventive concept, the present application also provides a power satellite communication system 300, such as Figure 3 As shown, the electric power satellite communication system 300 includes an access control platform 301, an access terminal 302 and a satellite terminal 303;

[0124] The access control platform 301 is configured to generate a communication key pair of the access terminal 302 based on the first key application of the access terminal 302, and send the communication key pair to the access terminal 302;

[0125] The access terminal 302 is configured to negotiate with the satellite terminal 303 through the communication key pair to obtain a session key for data encryption transmission, thereby completing the access of the access terminal 302.

[0126] The system of the above embodiment can implement the corresponding satellite terminal access method in any of the above embodiments and has the beneficial effects of the corresponding method embodiments, which will not be described in detail here.

[0127] It is understandable that before using the technical solutions of each embodiment of the present disclosure, the type, scope of use, usage scenarios, etc. of the personal information involved will be informed to the user in an appropriate manner, and the user's authorization will be obtained.

[0128] For example, in response to a user's active request, a prompt message is sent to the user to clearly inform the user that the requested operation will require the acquisition and use of the user's personal information. This allows the user to independently choose whether to provide personal information to the electronic device, application, server, storage medium, or other software or hardware that performs the operation of the disclosed technical solution based on the prompt message.

[0129] As an optional but non-limiting implementation, in response to a user's active request, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. Furthermore, the pop-up window may also contain a selection control for the user to select "agree" or "disagree" to provide personal information to the electronic device.

[0130] It is understandable that the above notification and user authorization process are merely illustrative and do not constitute a limitation on the implementation of the present disclosure. Other methods that comply with relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0131] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application is limited to these examples. In line with the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0132] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power supply / ground connection with the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. Where specific details (e.g., circuits) are described to describe exemplary embodiments of the present application, it will be apparent to those skilled in the art that the embodiments of the present application may be implemented without these specific details or with variations in these specific details. Therefore, these descriptions should be considered illustrative rather than restrictive.

[0133] Although the present invention has been described in conjunction with specific embodiments thereof, many alternatives, modifications, and variations of these embodiments will be apparent to those skilled in the art based on the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may utilize the embodiments discussed.

[0134] The embodiments of the present application are intended to cover all such substitutions, modifications, and variations that fall within the broad scope of the present application. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the scope of protection of the present application.

Claims

1. A satellite terminal access method, characterized in that: Applied to a power satellite communication system, the power satellite communication system includes an access control platform, an access terminal and a satellite terminal; the method includes: The access control platform generates a communication key pair for the access terminal based on the first key application of the access terminal, and sends the communication key pair to the access terminal; The access terminal negotiates with the satellite end through the communication key pair to obtain a session key for data encryption transmission, thereby completing the access of the access terminal.

2. A satellite terminal access method according to claim 1, characterized in that: Before the access control platform applies for generating a communication key pair for the access terminal based on the first key of the access terminal, the method further includes: The access control platform obtains the device identification information of the access terminal and performs identity authentication on the access terminal based on the device identification information; In response to the identity authentication being successful, generating the first key application of the access terminal.

3. A satellite terminal access method according to claim 1, characterized in that: The method further comprises: In response to meeting a preset key update condition, the access control platform issues a key change reminder to the access terminal, so that the access terminal initiates a second key application to the access control platform; The access control platform regenerates a new communication key pair based on the second key application and sends it to the access terminal. The access terminal re-negotiates a new session key with the satellite terminal based on the new communication key pair.

4. A satellite terminal access method according to claim 1, characterized in that: The communication key pair includes a terminal public key and a terminal private key; The access terminal negotiates with the satellite terminal through the communication key pair to obtain a session key for data encryption transmission, including: The access terminal sends the terminal public key to the satellite terminal; The satellite generates a first random number, encrypts the first random number using the terminal public key to obtain a first ciphertext, and transmits the first ciphertext and the satellite public key to the access terminal; The access terminal decrypts the first ciphertext using the terminal private key to obtain a second random number, and signs the second random number using the satellite public key to obtain a first signed data packet; The access terminal generates a third random number, encrypts the third random number using the satellite public key to obtain a second ciphertext, and transmits the first signature data packet and the second ciphertext to the satellite end; The satellite end decrypts the second ciphertext using a satellite private key corresponding to the satellite public key to obtain a fourth random number; The satellite end performs signature verification on the first signed data packet using the first random number and the satellite private key; in response to passing the signature verification, determining that the second random number is identical to the first random number, the satellite end signs the fourth random number using the terminal public key to obtain a second signed data packet, and transmits the second signed data packet to the access terminal; The access terminal performs signature verification on the second signed data packet using the third random number and the terminal private key; in response to passing the signature verification, determining that the fourth random number is identical to the third random number, and generating a session key for data encryption transmission based on the second random number and the third random number; The satellite generates the same session key as that of the access terminal based on the first random number and the fourth random number.

5. A satellite terminal access method according to claim 4, characterized in that: The step of signing the second random number using the satellite public key to obtain a first signed data packet includes: The access terminal calculates a hash value of the second random number using a hash algorithm to obtain a first hash value; The access terminal encrypts the first hash value using the satellite public key of the satellite terminal to obtain the first signature data packet.

6. A satellite terminal access method according to claim 4, characterized in that: The satellite end performs signature verification on the first signed data packet using the first random number and the satellite private key, including: The satellite end calculates a hash value of the first random number using a hash algorithm to obtain a second hash value; decrypting the first signed data packet using the satellite private key to obtain a third hash value; Compare the second hash value with the third hash value to see if they are consistent. If they are consistent, signature verification passes; if they are inconsistent, signature verification fails.

7. A satellite terminal access method according to claim 4, characterized in that: The satellite end signs the fourth random number using the terminal public key to obtain a second signed data packet, including: The satellite end calculates a hash value of the fourth random number using a hash algorithm to obtain a fourth hash value; The satellite end encrypts the fourth hash value using the terminal public key to obtain the second signature data packet.

8. A satellite terminal access method according to claim 4, characterized in that: The access terminal performs signature verification on the second signature data packet using the third random number and the terminal private key, including: The access terminal calculates a hash value of the third random number using a hash algorithm to obtain a fifth hash value; The access terminal decrypts the second signature data packet using the terminal private key to obtain a sixth hash value, and compares the fifth hash value with the sixth hash value to see if they are consistent. If they are consistent, signature verification passes; otherwise, signature verification fails.

9. A satellite terminal access method according to any one of claims 1 to 8, characterized in that: The method further comprises: The access control platform obtains a deregistration request from the access terminal and deregisters the access terminal; And / or, the access management and control platform receives and records the working status message of the access terminal that has been connected, and in response to not receiving the working status information of the access terminal within a preset time period, marks the access terminal as abnormal and issues an abnormal reminder.

10. A power satellite communication system, characterized in that: The electric power satellite communication system includes an access control platform, an access terminal and a satellite terminal; The access control platform is configured to generate a communication key pair of the access terminal based on the first key application of the access terminal, and send the communication key pair to the access terminal; The access terminal is configured to negotiate with the satellite end through the communication key pair to obtain a session key for data encryption transmission, thereby completing access of the access terminal.

Images