A method and system for shipborne digital wireless ad hoc networking

Abstract

This invention relates to the field of wireless networking technology, specifically to a shipborne digital wireless ad hoc network method and system, comprising the following steps: acquiring ship communication equipment information and constructing a hierarchical tagging matrix; generating a node role identifier set; monitoring response delay to determine connection relationships and establish a communication topology; optimizing spectrum allocation based on interference ratio and overlap coefficient; completing channel matching and path completion; executing AES encryption to encapsulate data frames; and having the receiving end decrypt and verify the delay record of valid data frames according to the key index. This invention improves the accuracy of connection priority and hierarchical mapping between nodes by combining node equipment information with hierarchical tagging established based on communication roles. It enhances the stability of communication paths and channel utilization through dual detection of channel interference ratio and spectrum overlap coefficient. It ensures network integrity by completing path breakpoints during node link matching and embedding a security header field using the key index and channel number. Finally, it improves the security level of encrypted data transmission.

Description

Technical Field

[0001] This invention relates to the field of wireless networking technology, and in particular to a method and system for shipborne digital wireless self-organizing networks. Background Technology

[0002] Wireless networking technology encompasses a set of technologies for establishing data communication connections between multiple nodes via wireless channels, covering physical layer communication, media access control, routing protocol design, network topology control, link maintenance mechanisms, and resource allocation strategies. This field includes, but is not limited to, various network types such as wireless sensor networks, wireless mesh networks, ad hoc networks, vehicular networks, and unmanned aerial vehicle (UAV) networks. Wireless networking emphasizes achieving dynamic networking, link reconstruction, data forwarding, and route maintenance through inter-node collaboration in scenarios without fixed infrastructure support, exhibiting characteristics such as high scalability, flexible deployment, and strong resilience. Technological development focuses on high spectrum utilization, low latency, robust routing, cross-layer optimization, and ensuring communication reliability in highly dynamic topology environments.

[0003] Among them, the shipborne digital wireless ad hoc network method is a method for building wireless communication networks between mobile platforms such as fleets. Based on ad hoc network technology, it enables rapid connection and dynamic routing between shipborne nodes in the absence of fixed communication infrastructure. By deploying nodes with wireless communication capabilities on each ship, the method achieves automatic network discovery, link establishment and maintenance, thereby supporting data interoperability, command distribution, collaborative control and situational awareness sharing between ships, and improving the autonomy and real-time performance of communication between shipborne systems.

[0004] Traditional networking methods lack a communication role differentiation mechanism for node identification, resulting in unclear node role attributes in broadcast information. This can easily lead to networking conflicts or chaotic connection sequences in dense node environments. Furthermore, the lack of judgment on connection order or node hierarchical relationships during communication link establishment can result in unclear connection priorities and decreased communication efficiency. The channel selection process lacks a comprehensive assessment of interference ratio and spectrum overlap, posing risks of uneven channel resource utilization or severe link interference. Finally, data security processing relies solely on basic data exchange between nodes without dynamic key indexing and channel feature binding, making communication data susceptible to tampering or interception in complex environments. Overall, these methods exhibit insufficient anti-interference capabilities, low networking efficiency, and limited information security assurance capabilities. Summary of the Invention

[0005] To address the technical problems existing in the prior art, this invention provides a shipborne digital wireless self-organizing network method, which has strong anti-interference capabilities, high networking efficiency, and good information security capabilities.

[0006] To achieve the above objectives, the present invention adopts the following technical solution: a shipborne digital wireless ad hoc network method, comprising the following steps:

[0007] S1: Obtain information on the wireless communication equipment deployed on the ship, combine the ship number and communication purpose classification, establish a hierarchical marking matrix of network nodes according to the differences in the identifiers between equipment nodes, and inject it into the node broadcast information to generate a set of shipborne node role identifiers;

[0008] S2: Based on the shipborne node role identifier set, determine whether the connection order and hierarchical mapping between nodes meet the peer-to-peer networking conditions, record the connection relationship between nodes that meet the conditions, arrange the connection path structure according to priority, and generate an initial communication topology table.

[0009] S3: Call the frequency allocation record of the node pair in the initial communication topology table, detect the carrier interference ratio and spectrum overlap coefficient of the channel, select the channel with the smallest spectrum overlap coefficient as the priority candidate frequency band, re-perform node link matching and channel number allocation, and generate a link spectrum allocation mapping set.

[0010] S4: Call the MAC address number of the communication node pair in the link in the link spectrum allocation mapping set, perform AES-256 encryption on the application layer data field in the node data packet according to the key corresponding to the index value, insert the security header field structure in combination with the channel number and encapsulate it into a data frame to generate a set of encrypted communication data frames;

[0011] S5: Call the security header field in the encrypted communication data frame set to read the key index value, load the matching key according to the local key management unit of the receiving node, decrypt the payload field with AES, compare it with the channel number path mapping recorded in the link spectrum allocation mapping set, and compare it with the local reception time to determine whether it is less than the communication delay tolerance. If the condition is met, the data frame is recorded as valid, and a valid decrypted communication record set is generated.

[0012] As a further embodiment of the present invention, the shipborne node role identifier set includes a unique node number, a node role level label, and a broadcast channel identifier; the initial communication topology table includes node connection path numbers, node link priority sequences, and connection delay statistics; the link spectrum allocation mapping set includes a channel number allocation table, spectrum occupancy ratio records, and a link reconstruction path index; the encrypted communication data frame set includes a data frame header information area, an AES encryption payload area, and a key index field group; and the effective decryption communication record set includes a link number mapping table, a communication delay record table, and a decryption data buffer area.

[0013] As a further aspect of the present invention, the specific steps of S1 are as follows:

[0014] S101: Obtain information on wireless communication equipment deployed on the ship, including equipment identification number, communication unit frequency band configuration value and role setting parameters. Perform uniqueness verification based on the equipment identification number, extract the center frequency, bandwidth parameters and modulation mode parameters from the frequency band configuration value, and classify the equipment type in combination with the role setting parameters. Aggregate the parameter fields into structural units according to the equipment identification number to generate a set of ship equipment configuration parameters.

[0015] S102: Based on the ship equipment configuration parameter set, extract the center frequency of the communication unit frequency band and the role setting category of the equipment, call the ship number and the communication purpose classification result for corresponding index matching, and make a similarity judgment on the center frequency of the frequency band, filter the node group with communication interaction capability, establish the equipment communication capability mapping table, and generate the node communication mapping result set;

[0016] S103: Based on the interactive capability field of the node group in the node communication mapping result set, distinguish the master node and slave node according to the communication role setting category, combine the channel number and carrier information in the node broadcast information to construct the bidirectional identification path matrix between nodes, and establish a role hierarchy structure table according to the node role, inject it into the node broadcast control field, and generate the shipborne node role identification set.

[0017] As a further aspect of the present invention, the specific steps of S2 are as follows:

[0018] S201: Based on the shipborne node role identification set, call the broadcast receiving unit in the communication node to monitor the reception response delay corresponding to each broadcast channel, extract the source node identification number and target node identification number carried in the reception delay data frame, calculate the round-trip delay value between nodes by parsing the broadcast reception time field, compare the round-trip delay with the preset peer connection delay threshold, filter the node pairs that meet the connection delay conditions, and generate a set of low-latency node connection pairs;

[0019] S202: Based on the set of low-latency connection pairs of nodes, extract the role numbers of the source node and the target node of the connection pair, and call the node role mapping table to obtain the role level correspondence between each pair of nodes. Determine whether they are peers or of the same level, filter out connection pairs with unequal levels and mark valid peer paths, organize them into a role peer connection path list according to the node number order, and generate a node role mapping path sequence.

[0020] S203: Based on the node role mapping path sequence, extract the connection node pair numbers in each path group, arrange the connection path priorities from low to high according to the response delay value, and reorganize the path numbers in the case of intersection nodes between paths. After reorganization, construct a complete path structure table and store it in the link control unit to generate an initial communication topology table.

[0021] As a further aspect of the present invention, the specific steps of S3 are as follows:

[0022] S301: Call the node pair frequency allocation parameters recorded in the initial communication topology table, collect the working frequency band and signal strength value of the corresponding channel, calculate the current carrier interference ratio of each link, compare the carrier interference ratio of the channel with the interference judgment threshold, mark the channel below the interference judgment threshold as the interference over-limit channel and record the removal link information, and generate an interference channel removal list.

[0023] S302: Based on the channel frequency band information retained in the interference channel elimination list, extract the corresponding frequency boundary value, calculate the spectral overlap coefficient between frequency bands, sort them in ascending order from low to high according to the spectral overlap coefficient, select the frequency band with the lowest spectral overlap coefficient as the priority candidate frequency band, establish a replacement relationship mapping table for the link according to the frequency band priority, and generate a priority frequency band replacement index table.

[0024] S303: Based on the priority frequency band replacement index table, rematch the interconnection paths of the nodes with interrupted links, and redistribute the channel numbers according to the combination of node pairs and candidate frequency bands. Bind the number allocation relationship with the alternative link path structure and write it into the scheduling control unit to establish a link spectrum allocation mapping set.

[0025] As a further aspect of the present invention, the process of comparing the carrier-to-interference ratio of the channel with the interference judgment threshold specifically involves: calculating the carrier-to-interference ratio of the channel based on the signal strength value corresponding to each channel and the interference strength value of the adjacent channel, and setting the interference judgment threshold as a weighted sum of the average value and standard deviation of the carrier-to-interference ratio;

[0026] The process of calculating the spectral overlap coefficient between frequency bands is as follows: based on the frequency boundary value corresponding to the channel, the bandwidth ratio of the overlapping part of the spectrum of adjacent channels is calculated as the spectral overlap coefficient and sorted, and the frequency band with the lowest spectral overlap coefficient is selected as the priority candidate frequency band.

[0027] As a further aspect of the present invention, the specific steps of S4 are as follows:

[0028] S401: Call the MAC address number of each communication node corresponding to each group of communication links in the link spectrum allocation mapping set, retrieve the corresponding key index in the local key management unit according to the node MAC address, extract the AES-256 key group corresponding to the key index, and bind the node pair with the key index to establish a node key index mapping table.

[0029] S402: Based on the node key index mapping table, extract the application layer data field of the data packet of each node, call the binding key to perform AES-256 encryption, and combine the encrypted data field with the original data frame control information to generate an encrypted data payload structure. Generate a set of encrypted frame content structures for each group of node links to obtain the encrypted data field integration result.

[0030] S403: Based on the integration result of the encrypted data fields, extract the channel number corresponding to each group of encrypted data frames, construct the channel identifier field and insert it together with the security header field in the data frame into the data frame header. After the combination is completed, re-encapsulate the complete frame structure according to the link allocation order, and archive the data frames according to the link number to generate a set of encrypted communication data frames.

[0031] As a further aspect of the present invention, the specific steps of S5 are as follows:

[0032] S501: Call each frame of data in the encrypted communication data frame set, read the key index value recorded in the security header field, load the AES-256 key corresponding to the index value in the local key management unit of the receiving node, perform symmetric decryption operation on the data frame payload field, extract the decrypted payload data and archive it according to the node number, and establish a data frame decryption result set;

[0033] S502: Based on the data frame content recorded in the data frame decryption result set, extract the channel number field and time identifier field of each frame data, and call the channel number path index of the corresponding link in the link spectrum allocation mapping set to determine whether the channel number in the decrypted data is consistent with the path index, filter out data frames with inconsistent numbers, and generate a channel mapping verification result set.

[0034] S503: Based on the data frames retained in the channel mapping verification result set, extract the time identifier field and calculate the difference with the reception time recorded by the receiving node. Compare the time difference with the set communication delay tolerance threshold, filter data frames with a time difference less than the tolerance threshold as valid data, and record the structure content uniformly to generate a valid decryption communication record set.

[0035] As a further embodiment of the present invention, the communication delay tolerance threshold is set as follows: the time difference between the receiving time recorded by the receiving node within a preset time period and the corresponding time identifier field is statistically analyzed, and the sum of the mean and standard deviation of the time difference set is calculated as the communication delay tolerance threshold.

[0036] The specific process of filtering the time difference is as follows: the time difference is compared frame by frame with the communication delay tolerance threshold. If the time difference is less than the communication delay tolerance threshold, the corresponding data frame is marked as a valid data frame and written into the index item of the valid decrypted communication record set.

[0037] The present invention also provides a shipborne digital wireless ad hoc network system, comprising:

[0038] The shipborne node analysis module is used to obtain information on wireless communication equipment deployed on the ship. Combining the ship number and communication purpose classification, it establishes a hierarchical labeling matrix for network nodes according to the differences in identifiers between equipment nodes, and injects it into the node broadcast information to generate a set of shipborne node role identifiers.

[0039] The communication topology analysis module is used to determine whether the connection order and hierarchical mapping between nodes meet the peer-to-peer networking conditions based on the shipborne node role identifier set, record the connection relationship between nodes that meet the conditions, arrange the connection path structure according to priority, and generate an initial communication topology structure table.

[0040] The link spectrum analysis module is used to call the frequency allocation records of node pairs in the initial communication topology table, detect the carrier interference ratio and spectrum overlap coefficient of the channel, select the channel with the smallest spectrum overlap coefficient as the priority candidate frequency band, re-perform node link matching and channel number allocation, and generate a link spectrum allocation mapping set.

[0041] The encrypted communication processing module is used to call the MAC address numbers of the communication node pairs in the link spectrum allocation mapping set, perform AES-256 encryption on the application layer data field in the node data packet according to the key corresponding to the index value, insert the channel number into the security header field structure and encapsulate it into a data frame to generate a set of encrypted communication data frames.

[0042] The valid communication record module is used to call the security header field in the encrypted communication data frame set to read the key index value, load the matching key according to the local key management unit of the receiving node, decrypt the payload field using AES, compare it with the channel number path mapping recorded in the link spectrum allocation mapping set, and compare it with the local reception time to determine whether it is less than the communication delay tolerance. If the condition is met, the data frame is recorded as valid, and a valid decrypted communication record set is generated.

[0043] Compared with the prior art, the advantages and positive effects of the present invention are as follows:

[0044] This invention enhances node identification and role differentiation capabilities of broadcast content by establishing hierarchical tags that combine node device information and communication roles, improving the accuracy of connection priority and hierarchical mapping between nodes. It filters node connection order based on received response delay and role mapping records, effectively avoiding communication path redundancy and conflicting connections. Through dual detection of channel interference ratio and spectral overlap coefficient, it eliminates high-interference channels and selects low-overlap frequency bands, improving communication path stability and channel utilization. It fills in path breakpoints during node link matching to ensure network integrity. By embedding a security header field with key index and channel number, it enhances the security level of encrypted data transmission. Finally, it verifies communication validity through joint verification of channel number and time stamp, ensuring the timeliness and integrity of received data. Overall, it improves the stability, security, and dynamic response capabilities of the communication link. Attached Figure Description

[0045] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0046] Figure 1 This is a schematic diagram of the steps of the present invention;

[0047] Figure 2 This is a detailed schematic diagram of S1 of the present invention;

[0048] Figure 3 This is a detailed schematic diagram of S2 of the present invention;

[0049] Figure 4 This is a detailed schematic diagram of S3 of the present invention;

[0050] Figure 5 This is a detailed schematic diagram of S4 of the present invention;

[0051] Figure 6 This is a detailed schematic diagram of S5 of the present invention;

[0052] Figure 7 This is a system module diagram of the present invention. Detailed Implementation

[0053] The technical solution of the present invention will now be described with reference to the accompanying drawings.

[0054] In embodiments of the present invention, words such as "exemplarily," "for example," etc., are used to indicate that something is an example, illustration, or description. Any embodiment or design described as "exemplary" in the present invention should not be construed as being more preferred or advantageous than other embodiments or designs. Specifically, the use of the word "exemplary" is intended to present the concept in a concrete manner. Furthermore, in embodiments of the present invention, the meaning expressed by "and / or" can be both, or either one.

[0055] In the embodiments of this invention, the terms "image" and "picture" may sometimes be used interchangeably. It should be noted that, without emphasizing the distinction between them, they convey the same meaning. Similarly, the terms "of," "corresponding (relevant)," and "corresponding" may sometimes be used interchangeably. It should be noted that, without emphasizing the distinction between them, they convey the same meaning.

[0056] In this embodiment of the invention, sometimes a subscript such as W1 may be written in a non-subscript form such as W1. When the difference is not emphasized, the meaning they express is the same.

[0057] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0058] Please see Figure 1 This invention provides a method for shipborne digital wireless ad hoc network, comprising the following steps:

[0059] S1: Obtain information on the wireless communication equipment deployed on the ship, including equipment identification number, communication unit frequency band configuration value and role setting parameters. Combine the ship number and communication purpose classification, establish a hierarchical marking matrix of network nodes according to the identification differences between equipment nodes, and inject it into the node broadcast information to generate a set of shipborne node role identifiers.

[0060] S2: Based on the shipborne node role identifier set, call the neighbor discovery mechanism in the communication node to listen to the broadcast channel's reception response delay and node role mapping record, determine whether the connection order and hierarchical mapping between nodes meet the peer-to-peer networking conditions, record the connection relationship between nodes that meet the conditions, arrange the connection path structure according to priority, and generate the initial communication topology table.

[0061] S3: Call the frequency allocation record of the node pair in the initial communication topology table, detect the carrier interference ratio and spectrum overlap coefficient of the channel, perform channel elimination processing according to whether the carrier interference ratio is lower than the carrier interference ratio threshold, and select the channel with the smallest spectrum overlap coefficient as the priority candidate frequency band. Re-match the node link and allocate the channel number, and complete the node path structure that was broken due to elimination, and generate the link spectrum allocation mapping set.

[0062] S4: Call the MAC address number of the communication node pair in the link spectrum allocation mapping set, query the AES-256 key index bound in the local key management unit, perform AES-256 encryption on the application layer data field in the node data packet according to the key corresponding to the index value, insert it into the security header field structure in combination with the channel number and encapsulate it into a data frame to generate a set of encrypted communication data frames.

[0063] S5: Call the security header field in the encrypted communication data frame set to read the key index value, load the matching key according to the local key management unit of the receiving node, decrypt the payload field with AES, extract the channel number and time identifier fields in the data frame, compare it with the channel number path mapping recorded in the link spectrum allocation mapping set, and compare it with the local reception time to determine whether it is less than the communication delay tolerance. If the condition is met, the data frame is recorded as valid, and a valid decrypted communication record set is generated.

[0064] The shipborne node role identifier set includes a unique node number, a node role level label, and a broadcast channel identifier. The initial communication topology table includes node connection path numbers, node link priority sequences, and connection delay statistics. The link spectrum allocation mapping set includes a channel number allocation table, spectrum occupancy ratio records, and a link reconstruction path index. The encrypted communication data frame set includes a data frame header information area, an AES encryption payload area, and a key index field group. The effective decryption communication record set includes a link number mapping table, a communication delay record table, and a decryption data buffer area.

[0065] Please see Figure 2 The specific steps of S1 are as follows:

[0066] S101: Obtain information on wireless communication equipment deployed on the ship, including equipment identification number, communication unit frequency band configuration value and role setting parameters. Perform uniqueness verification based on the equipment identification number, extract the center frequency, bandwidth parameters and modulation mode parameters from the frequency band configuration value, and classify the equipment type in combination with the role setting parameters. Aggregate the parameter fields into structural units according to the equipment identification number to generate a set of ship equipment configuration parameters.

[0067] Each device contains a unique device identifier, such as "SN-VSAT-001", a communication unit frequency band configuration value, such as "center frequency 4120MHz - bandwidth 20MHz - modulation method QPSK", and role setting parameters, such as "master node". First, a uniqueness check is performed on all acquired device identifiers. Specifically, an empty device identifier checklist is created, and the device identifier of each device is read one by one. The first read identifier, "SN-VSAT-001", is stored in the checklist. Next, the next device identifier, "SN-RADAR-002", is read and compared character by character with the existing "SN-VSAT-001" in the checklist. If they do not match, "SN-RADAR-002" is stored in the checklist. This process is repeated. When a new device identifier is read, it is compared with all stored identifiers in the checklist. If an identical identifier is found, the duplicate identifier is marked as invalid, its source information is recorded, and no further processing is performed. After verification, the verification list stores the unique identifiers of all devices that passed the uniqueness verification. Then, for each device identifier that passed verification, its corresponding communication unit frequency band configuration value is extracted. For example, for device "SN-VSAT-001", its frequency band configuration value is "center frequency 4120MHz - bandwidth 20MHz - modulation method QPSK". By parsing this configuration value string, using a preset "-" as the separator, the center frequency parameter "4120MHz", the bandwidth parameter "20MHz", and the modulation method parameter "QPSK" are extracted. This parsing process is applied to all devices to obtain their respective communication parameters. Next, device type classification is implemented based on role setting parameters. Role setting parameters are predefined codes, such as "01" representing "master control node", "02" representing "data aggregation node", and "03" representing "end sensor node". When the role setting parameter of device "SN-VSAT-001" is read as "master control node", the built-in role parameter and device type mapping table is queried to classify the device as a "command and control device". If the role setting parameter of another device "SN-AIS-001" is "data aggregation node", it is classified as "navigation and communication device". This classification operation is based on a pre-established mapping table, which strictly binds different role setting parameters with specific device types according to the functional requirements of the ship's communication network. Finally, all the above-processed parameter fields are aggregated by device identification number. For device "SN-VSAT-001", its aggregated structural unit is {device identification number: "SN-VSAT-001", center frequency: "4120MHz", bandwidth: "20MHz", modulation method: "QPSK", device type: "command and control device"}.This aggregation operation is performed on all devices that pass the verification, ultimately generating a set containing all device structural units, which is the ship equipment configuration parameter set.

[0068] S102: Based on the ship equipment configuration parameter set, extract the center frequency of the communication unit frequency band and the role setting category of the equipment, call the ship number and the communication purpose classification results for corresponding index matching, and make similarity judgment on the center frequency of the frequency band, filter the node group with communication interaction capability, establish the equipment communication capability mapping table, and generate the node communication mapping result set;

[0069] The center frequency "4120MHz" and the role category "Master Control Node" were extracted from the structural units of device "SN-VSAT-001". Simultaneously, a ship number was matched against a communication purpose classification result. This classification result predefines the allowed frequency band ranges for different communication purposes; for example, the frequency band range for "satellite communication purpose" is 4000MHz to 4200MHz, and the frequency band range for "radar navigation purpose" is 9300MHz to 9500MHz. The center frequency "4120MHz" of device "SN-VSAT-001" was compared with these predetermined ranges. Since "4120MHz" falls within the "satellite communication purpose" range, the communication purpose of this device was determined. Next, a similarity judgment was performed on the center frequencies of different devices. This judgment aims to identify pairs of devices that can operate in similar frequency bands. For example, there is another device, "SN-SATCOM-002," with a center frequency of "4130MHz". To determine the frequency band similarity between the two devices, the absolute value of the difference between their center frequencies needs to be calculated, i.e., |4130-4120| = 10MHz. This difference will be compared with a preset frequency band similarity judgment threshold. This threshold is set based on the smaller communication bandwidth of the two devices involved. For example, if the bandwidth of "SN-VSAT-001" is 20MHz and the bandwidth of "SN-SATCOM-002" is 25MHz, then the smaller 20MHz is taken. The threshold is set to half of this smaller bandwidth, i.e., 10MHz. The specific setting process is as follows: In a laboratory environment, various communication devices with typical bandwidths are selected, and their success rate in establishing effective communication is tested at different frequency intervals. Through a large amount of experimental data, it was found that when the frequency interval is less than half of the device bandwidth, the communication success rate is significantly improved. Therefore, the frequency band similarity judgment threshold is set to half of the smaller bandwidth value of the two devices being compared. In this example, the calculated frequency difference of 10MHz is no greater than the threshold of 10MHz, therefore, devices "SN-VSAT-001" and "SN-SATCOM-002" are determined to have similar frequency bands. Based on this judgment, and combined with the results of communication purpose matching, node groups with communication interoperability are selected. A node group consists of two or more devices that are compatible in communication purpose and have similar frequency bands. For example, if both "SN-VSAT-001" and "SN-SATCOM-002" are determined to be for "satellite communication purposes," and their center frequencies are determined to be similar, then they are considered to form a node group {"SN-VSAT-001", "SN-SATCOM-002"} with communication interoperability. This matching and judgment process is repeated for all device pairs, and all node groups that meet the conditions are recorded to establish a device communication capability mapping table. This mapping table details which other devices each device can communicate directly with, ultimately generating a node communication mapping result set.

[0070] S103: Based on the interactive capability field of the node group in the node communication mapping result set, distinguish the master node and the slave node according to the communication role setting category, combine the channel number and carrier information in the node broadcast information, construct the bidirectional identification path matrix between nodes, and establish a role hierarchy structure table according to the node role, inject it into the node broadcast control field, and generate the shipborne node role identification set.

[0071] Within a node group {"SN-VSAT-001", "SN-AIS-001"}, querying the ship's equipment configuration parameter set reveals that "SN-VSAT-001" is classified as a "master node," while "SN-AIS-001" is a "data aggregation node." According to the preset role hierarchy definition, the "master node" is at a higher level than the "data aggregation node." Therefore, in this node group, "SN-VSAT-001" is identified as the master node, and "SN-AIS-001" as the slave node. This distinction process applies to all node groups. Next, combining the channel number and carrier information from the node broadcast information, a bidirectional identification path matrix between nodes is constructed. Node broadcast information consists of periodically emitted status data packets from the equipment, containing information such as the equipment's own identification number, the currently used channel number, and the carrier frequency. By monitoring these broadcast messages in the network, the actual connection status between nodes can be determined. For example, when "SN-AIS-001" successfully receives a broadcast from "SN-VSAT-001" on channel 5, and simultaneously receives a response broadcast from "SN-AIS-001" on channel 5, a marker is placed at the corresponding position in an N×N path matrix (where N is the total number of nodes in the network), indicating that a bidirectional path based on channel 5 exists between "SN-VSAT-001" and "SN-AIS-001". The row and column indices of the matrix correspond to the node identification numbers, and the values ​​in the matrix can be channel numbers, representing the channel used for the connection. This process is performed on all interactive node pairs in the network, ultimately filling in the complete bidirectional identification path matrix. Then, a role hierarchy table is established based on node roles. This table clarifies the hierarchical relationships between different roles. For example, a structure table is established where "Master Node" is at the highest level (Level 1), "Data Summarizer Node" is at the next highest level (Level 2), and "End Sensor Node" is at the lowest level (Level 3). Each node's identifier is bound to its corresponding role level. Finally, the role level information is injected into the broadcast control field of each node. Specifically, each node fills its own role level number into a specific field of the broadcast data packet it sends. For example, the broadcast packet for "SN-VSAT-001" will contain the field "Role Level: 1", and the broadcast packet for "SN-AIS-001" will contain the field "Role Level: 2". Other nodes in the network, upon receiving the broadcast packet, can parse the sender's role level and generate a set of shipborne node role identifiers.

[0072] Please see Figure 3 The specific steps of S2 are as follows:

[0073] S201: Based on the shipborne node role identification set, call the broadcast receiving unit in the communication node to monitor the reception response delay corresponding to each broadcast channel, extract the source node identification number and target node identification number carried in the reception delay data frame, calculate the round-trip delay value between nodes by parsing the broadcast reception time field, compare the round-trip delay with the preset peer connection delay threshold, filter the node pairs that meet the connection delay conditions, and generate a set of low-latency node connection pairs;

[0074] The broadcast receiving section of the communication node is invoked to monitor each currently used broadcast channel and record its reception response delay. Specifically, when a source node, such as "SN-VSAT-001", sends a broadcast probe packet, it records the current transmission time in the timestamp field of this packet. All target nodes in the network capable of receiving this packet, such as "SN-AIS-001", will immediately send back a response packet upon receipt. The response packet also contains the target node's reception time and response transmission time. The source node "SN-VSAT-001" records the reception response time after receiving the response packet. By parsing the received response packet data frame, the source node identifier "SN-VSAT-001" and the target node identifier "SN-AIS-001", as well as the timestamp recorded by the target node, are extracted. The time difference between the initial probe packet transmission time recorded by the source node and the final response packet reception time is calculated; this difference is the round-trip time between nodes "SN-VSAT-001" and "SN-AIS-001". For example, if the source node sends a probe at time T1, the target node receives it at time T2 and immediately replies at time T3, and the source node receives the reply at time T4, then the round-trip time is (T4-T1). This process is performed periodically between all interactive node pairs. The calculated round-trip time is then compared with a preset peer-to-peer connection latency threshold. The peer-to-peer connection latency threshold is set based on the quality of service requirements for specific communication services. For example, for services requiring real-time control, the latency requirements are extremely high. To set this threshold, the following experiment is conducted: In a simulated ship environment, a standard communication network is deployed, running various critical communication services such as remote control and video backhaul. The artificial latency in the network is gradually increased, and the network round-trip time is recorded when the performance of each service significantly degrades (e.g., the control command response error rate exceeds 1%, and the video stuttering rate exceeds 5%). After collecting a large number of experimental data points, the minimum value among all latency values ​​that cause significant performance degradation is taken as the peer-to-peer connection latency threshold. For example, experimental results show that when the round-trip latency exceeds 15 milliseconds, the reliability of remote control services cannot meet the requirements. Therefore, the peer-to-peer connection latency threshold is set to 15 milliseconds. The calculated round-trip latency value for each node pair is compared with 15 milliseconds. If a node pair, such as "SN-VSAT-001" and "SN-AIS-001", has a calculated round-trip latency of 12 milliseconds, which is less than 15 milliseconds, then this node pair is considered to meet the connection latency condition. Conversely, if the round-trip latency of another node pair is 20 milliseconds, then the condition is not met. All node pairs that meet the connection latency condition are selected, and the information of these node pairs (including the identifiers of the source and target nodes) is collected to generate a set of low-latency node connection pairs.

[0075] S202: Based on the set of low-latency connection pairs, extract the role numbers of the source and target nodes of the connection pairs, and call the node role mapping table to obtain the role hierarchy correspondence between each pair of nodes. Determine whether they are peers or of the same level, filter out connection pairs with unequal levels and mark valid peer paths, organize them into a role peer connection path list in the order of node numbers, and generate a node role mapping path sequence.

[0076] From a connection pair {"SN-VSAT-001", "SN-AIS-001"}, the source node "SN-VSAT-001" and the target node "SN-AIS-001" are extracted. Next, a pre-built node role mapping table is invoked to obtain the role hierarchy correspondence between the two nodes. This mapping table records in detail the role hierarchy corresponding to each node identifier number; for example, the role hierarchy of "SN-VSAT-001" is 1 (master node), and the role hierarchy of "SN-AIS-001" is 2 (data aggregation node). Then, it is determined whether the relationship between this pair of nodes is peer-to-peer or at the same level. The criterion for judgment is comparing the role hierarchy numbers of the two nodes. If the role hierarchy numbers of the two nodes are exactly the same, they are considered to be at the same level. If a network design defines that certain roles at different levels can establish peer-to-peer communication (e.g., cross-level collaboration under a specific task), this relationship is also considered peer-to-peer. In this example, "SN-VSAT-001" has a level of 1, and "SN-AIS-001" has a level of 2. Their level numbers are unequal, and no pre-defined cross-level peering rules apply to them. Therefore, this connection is determined to be level-asymmetric. Accordingly, this connection is removed from the candidate paths. Conversely, if another low-latency connection pair {"SN-RADAR-002", "SN-GYRO-003"} exists, a query of the node role mapping table reveals that both have a role level of 3 (end-point sensor node). Therefore, their role level relationship is determined to be at the same level, belonging to a peer-to-peer relationship. This connection will be marked as a valid peer-to-peer path. This filtering process traverses all connection pairs in the set of low-latency node connection pairs, removing all connections with unequal levels. After filtering, all connections marked as valid peer-to-peer paths are organized into a list according to a specific order of node numbers (e.g., alphabetical or numerical order). For example, if valid peer-to-peer paths {"SN-RADAR-002", "SN-GYRO-003"} and {"SN-AIS-001", "SN-AIS-002"} exist, they are organized into an ordered list. This list is the node role mapping path sequence, which clearly describes all communication paths in the network that satisfy low latency and role peering.

[0077] S203: Based on the node role mapping path sequence, extract the connection node pair numbers in each path group, arrange the connection path priority from low to high according to the response delay value, and reorganize the path numbers in the case of intersection nodes between paths. After reorganization, construct a complete path structure table and store it in the link control unit to generate the initial communication topology table.

[0078] The node pairs for the first path are extracted from the sequence as {"SN-AIS-001", "SN-AIS-002"}, and the node pairs for the second path are {"SN-RADAR-002", "SN-GYRO-003"}. Simultaneously, the response delay values ​​measured in step S201 are obtained for these paths; for example, the delay for the first path is 8 milliseconds, and the delay for the second path is 11 milliseconds. Based on the response delay values, these connection paths are prioritized from lowest to highest. In this example, since 8 milliseconds is less than 11 milliseconds, the priority of paths {"SN-AIS-001", "SN-AIS-002"} is set higher than that of paths {"SN-RADAR-002", "SN-GYRO-003"}. This sorting operation is applied to all valid peer paths. Next, path numbering is reorganized for paths with intersecting nodes. An intersecting node is a node that appears in multiple different connection paths simultaneously. For example, if a path {"SN-AIS-001", "SN-GPS-004"} still exists, then node "SN-AIS-001" is a crossover node. Path number reorganization aims to avoid resource conflicts and scheduling chaos. The reorganization process is as follows: First, all crossover nodes are identified. For each crossover node, all associated connection paths are checked. Based on the sorted path priorities, the highest priority path is retained as the primary path, and resources or numbers are reassigned to other paths involving this crossover node. For example, for crossover node "SN-AIS-001", the paths {"SN-AIS-001", "SN-AIS-002"} have the highest priority, so their path numbers are retained. For another lower priority path {"SN-AIS-001", "SN-GPS-004"}, the system will assign it a new path number and may plan a backup channel for it in subsequent resource allocations to distinguish it from the primary path. After reorganization, each communication path has a unique, conflict-free number. Finally, based on the reorganized path numbers and node connections, a complete path structure table is constructed. This table records detailed information for each communication path in a structured format, including the path's unique number, source node identifier, destination node identifier, path priority, and allocated channel information. For example, a record in the table might be: {Path Number: P001, Source Node: "SN-AIS-001", Destination Node: "SN-AIS-002", Priority: 1, Channel: 7}. This constructed path structure table is stored in the dedicated storage area of ​​the link control section as the basis for network routing and data scheduling, thereby generating the initial communication topology table.

[0079] Please see Figure 4 The specific steps of S3 are as follows:

[0080] S301: Call the node pair frequency allocation parameters recorded in the initial communication topology table, collect the working frequency band and signal strength value of the corresponding channel, calculate the current carrier interference ratio of each link, compare the carrier interference ratio of the channel with the interference judgment threshold, mark the channel below the interference judgment threshold as the interference over-limit channel and record the removal link information, and generate the interference channel removal list.

[0081] For path P001 (connecting nodes “SN-AIS-001” and “SN-AIS-002”), its assigned channel is 7, with a center frequency of 161.975MHz. The communication receiving hardware actively acquires the current operating frequency band signal of channel 7 and measures its actual signal strength. Simultaneously, it scans the signal strength of adjacent physical channels (channels 6 and 8) to obtain the interference strength values ​​of neighboring channels. For example, the measured signal strength of channel 7 is -85dBm, while the average interference signal strength on channels 6 and 8 is -105dBm. Based on these two measurements, the carrier-to-interference ratio (CTR) of the current link of path P001 is calculated. The calculation process is to subtract the signal strength value from the interference strength value of the neighboring channels (in logarithmic units of dBm), i.e., -85dBm - (-105dBm) = 20dB. Therefore, the CTR of path P001 is 20dB. This calculation process will be applied to each link in the initial communication topology table. Next, the carrier-to-interference ratio (CRI) calculated for each channel is compared with the interference judgment threshold. The process for setting the interference judgment threshold is as follows: First, during a stable period of network operation, the CRI of all active links is continuously calculated and recorded to form a dataset. Then, the arithmetic mean and standard deviation of this dataset are calculated. For example, statistically, the average CRI of all links is 22 dB, and the standard deviation is 4 dB. The threshold is set as the weighted sum of the average and standard deviation. The weights are selected based on the requirements for network stability. To ensure communication quality, a certain weight is assigned to the volatility (standard deviation). For example, through experimental verification, when the weights are set to an average weight of 0.8 and a standard deviation weight of 0.2, potential link quality problems can be effectively identified. The specific experimental process is to compare the false alarm rate and false negative rate of the interfering channel under different weight configurations and select the weight combination with the best overall performance. Therefore, the interference judgment threshold = 22 dB * 0.8 + 4 dB * 0.2 = 17.6 dB + 0.8 dB = 18.4 dB. The carrier-to-interference ratio (CRI) of path P001, 20 dB, is compared to the threshold of 18.4 dB. Since 20 dB is higher than 18.4 dB, this channel is not marked. If the CRI of another path, P002, is 17 dB, which is lower than 18.4 dB, the channel used by this path is marked as an interference-exceeding channel. Simultaneously, the information of this link to be removed is recorded, including its path number P002, the involved node pairs, and the current CRI. After traversing all links, all channels marked as interference-exceeding and their link information are summarized to generate an interference channel removal list.

[0082] S302: Based on the channel frequency band information retained in the interference channel elimination list, extract the corresponding frequency boundary values, calculate the spectral overlap coefficient between frequency bands, sort them in ascending order from low to high according to the spectral overlap coefficient, select the frequency band with the lowest spectral overlap coefficient as the priority candidate frequency band, establish a replacement relationship mapping table for the link according to the frequency band priority, and generate a priority frequency band replacement index table.

[0083] The process of comparing the carrier-to-interference ratio (CTR) of a channel with the interference judgment threshold is as follows: based on the signal strength value corresponding to each channel and the interference strength value of neighboring channels, the CTR of the channel is calculated, and the interference judgment threshold is set as the weighted sum of the average value and standard deviation of the CTR.

[0084] The process of calculating the spectral overlap coefficient between frequency bands is as follows: based on the frequency boundary value corresponding to the channel, the bandwidth ratio of the overlapping part of the spectrum of adjacent channels is calculated as the spectral overlap coefficient and sorted. The frequency band with the lowest spectral overlap coefficient is selected as the priority candidate frequency band.

[0085] The reserved channel has a center frequency of 162.000MHz and a bandwidth of 25kHz, so its frequency boundary values ​​are 161.9875MHz (lower boundary) and 162.0125MHz (upper boundary). Next, the spectral overlap coefficient between these reserved channel frequency bands is calculated. The calculation process is as follows: take any two adjacent reserved channels, such as channel A and channel B, and find the overlap between their frequency boundaries. The spectral overlap coefficient is defined as the proportion of the bandwidth of the overlapping part to the bandwidth of its own channel. Specifically, based on the frequency boundary values ​​corresponding to the channels, the proportion of the bandwidth occupied by the overlapping part of the adjacent channel spectrum is calculated as the spectral overlap coefficient. For example, if the frequency range of channel A is [f1, f2] and the frequency range of channel B is [f3, f4], if f3 is between f1 and f2, and f2 is between f3 and f4, then the overlap bandwidth is f2-f3. The overlap coefficient of channel A with respect to channel B is (f2-f3) / (f2-f1), and the overlap coefficient of channel B with respect to channel A is (f2-f3) / (f4-f3). The larger of these two values ​​is taken as the spectral overlap coefficient between the two channels. This calculation is performed on all adjacent retained channel pairs. Then, the calculated spectral overlap coefficient values ​​are sorted in ascending order from low to high. After sorting, the frequency band with the lowest spectral overlap coefficient (i.e., the frequency band with the lowest probability of interference with other channels) is selected as the priority candidate frequency band. For example, if the overlap coefficient of channel pair (A, B) is calculated to be 0.05 and the overlap coefficient of channel pair (C, D) is 0.12, then the frequency band containing channel A or B will have a higher replacement priority than the frequency band containing C or D. Based on this sorting result, a replacement relationship mapping table is established for the links eliminated in S301. This table associates each eliminated link with one or more priority candidate frequency bands and sorts them according to the priority of the candidate frequency bands. For example, the replacement frequency band list for the removed link P002 might be {candidate frequency band 1 (high priority), candidate frequency band 2 (medium priority), ...}. Finally, this mapping table is compiled into a file to generate a priority frequency band replacement index table for use in subsequent link reconstruction.

[0086] S303: Based on the priority frequency band replacement index table, rematch the interconnection paths of the nodes with broken links, and redistribute the channel numbers according to the combination of node pairs and candidate frequency bands. Bind the numbering and allocation relationship with the alternative link path structure and write it into the scheduling and control unit to establish a link spectrum allocation mapping set.

[0087] The process extracts the node pair whose link was interrupted, such as nodes "SN-RADAR-002" and "SN-GYRO-003". Then, it searches the priority band replacement index table for a list of candidate frequency bands pre-set for this link. It attempts to allocate frequency bands one by one from highest to lowest priority in the list. The candidate frequency band with the highest current priority is selected, for example, a channel with a center frequency of 162.025MHz, and a new channel number, such as channel 10, is reassigned to the node pair based on this new frequency band. Next, the new channel number allocation relationship is bound to the path structure of the replacement link. This means that the connection information between nodes "SN-RADAR-002" and "SN-GYRO-003" is updated in the link control information, indicating that they now communicate through channel 10. This binding operation ensures the consistency of network topology information. This updated path information, including the new path number, node pair, and new channel number, is written into the memory of the scheduling control section. The scheduling control section is responsible for managing the scheduling of all data transmissions in the network. By repeating this process, connections are re-established for all eliminated links, and interference-free or low-interference channels are allocated, ultimately forming an updated network connectivity and spectrum resource allocation scheme. This scheme is organized into a structured dataset, namely the link spectrum allocation map set. This map set is dynamic and is periodically updated as the network environment changes (such as the emergence of new interference sources).

[0088] Please see Figure 5 The specific steps of S4 are as follows:

[0089] S401: Call the MAC address number of each communication node corresponding to each group of communication links in the link spectrum allocation mapping set, retrieve the corresponding key index in the local key management unit according to the node MAC address, extract the AES-256 key group corresponding to the key index, and bind the node pair with the key index to establish a node key index mapping table.

[0090] For a newly established link connecting nodes “SN-RADAR-002” and “SN-GYRO-003”, their MAC addresses are obtained from the device information database as “00:0A:95:9D:68:16” and “00:0A:95:9D:68:17”, respectively. Next, a search is performed in the local key management unit based on these two MAC addresses. The key management unit is a secure storage area that maintains a mapping table between MAC addresses and key indices. For example, searching for the MAC address “00:0A:95:9D:68:16” yields the corresponding key index “IDX-2025-A7B3” in the table. Similarly, the corresponding key index “IDX-2025-C9D1” is found for “00:0A:95:9D:68:17”. Subsequently, based on the retrieved key index "IDX-2025-A7B3", the corresponding AES-256 key set is extracted from the key repository. A key set contains the symmetric keys used for encryption and decryption. This extraction process is subject to strict access control. After obtaining the key, the node pair and key index binding mapping process is performed. Specifically, a new mapping relationship is created, binding the communication node pair {"SN-RADAR-002", "SN-GYRO-003"} to a shared key index (or a pair of key indices). In symmetric encryption scenarios, this pair of nodes will share the same key for communication, so they will be bound to the same key index. For example, a new shared key index "SHARED-IDX-LINK-015" is assigned to the communication link of this pair of nodes. This binding relationship is recorded. This retrieval, extraction, and binding process is repeated for all communication links in the link spectrum allocation mapping set, ultimately building a complete node key index mapping table. This table clearly indicates the encryption key index used by each pair of communicating nodes in the network.

[0091] S402: Based on the node key index mapping table, extract the application layer data field of each node's data packet, call the binding key to perform AES-256 encryption, and combine the encrypted data field with the original data frame control information to generate an encrypted data payload structure. Generate a set of encrypted frame content structures for each group of node links to obtain the encrypted data field integration result.

[0092] Node "SN-RADAR-002" prepares to send data containing radar detection azimuth information to "SN-GYRO-003," where "azimuth: 135.7 degrees" is the application layer data field. Next, it calls the key index "SHARED-IDX-LINK-015" bound to this link {"SN-RADAR-002", "SN-GYRO-003"}. Based on this index, it retrieves the corresponding AES-256 key from the keystore. Using this key, it performs AES-256 encryption on the "azimuth: 135.7 degrees" data field. The encryption algorithm converts the original plaintext data into a ciphertext string that cannot be directly deciphered, such as "x8A...E3". After encryption, this encrypted data field is combined with the control information of the original data frame. The control information of the original data frame includes header information that is not involved in encryption, such as the source MAC address, destination MAC address, and frame type. The combination process involves replacing the plaintext application layer data portion of the original data frame with encrypted data to form a new encrypted data payload structure. This structure retains necessary unencrypted control information while protecting the core data content. This encryption and combination operation is performed on each set of data to be transmitted through this link, generating a set of encrypted frame content structures. The same processing procedure is applied to data transmission on all nodes in the network, ultimately yielding the integrated encrypted data fields, which is a collection of encrypted payloads containing all data frames to be sent.

[0093] S403: Based on the integration result of the encrypted data fields, extract the channel number corresponding to each group of encrypted data frames, construct the channel identifier field and insert it together with the security header field in the data frame into the data frame header. After the combination is completed, re-encapsulate the complete frame structure according to the link allocation order, and archive the data frames according to the link number to generate a set of encrypted communication data frames.

[0094] For an encrypted frame sent from node "SN-RADAR-002" to "SN-GYRO-003", the currently used channel number is determined to be 10 from the link spectrum allocation map. Based on this channel number, a channel identifier field is constructed. This field is added to the header of the data frame for fast channel verification at the receiving end. Then, this channel identifier field, along with a dedicated security header field, is inserted into the header of the data frame. The security header field records the key index used to encrypt the data frame, namely "SHARED-IDX-LINK-015". Thus, upon receiving the data frame, the receiver can directly obtain the key index required for decryption from the security header and confirm the correctness of the source channel of the data frame from the channel identifier field. After combination, the frames are re-encapsulated into a complete frame structure according to the link allocation order. The encapsulation process includes calculating a new Frame Check Sequence (FCS) and appending it to the frame tail. Finally, all encapsulated data frames are archived according to their respective link numbers. For example, all frames transmitted on link P001 are grouped into one category, and all frames transmitted on link P002 are grouped into another. This archiving facilitates subsequent transmission scheduling and traffic management. After processing all encrypted data frames, a complete set of encrypted communication data frames to be sent is finally generated.

[0095] Please see Figure 6 The specific steps of S5 are as follows:

[0096] S501: Call each frame of data in the encrypted communication data frame set, read the key index value recorded in the security header field, load the AES-256 key corresponding to the index value in the local key management unit of the receiving node, perform symmetric decryption operation on the data frame payload field, extract the decrypted payload data and archive it according to the node number, and establish a data frame decryption result set;

[0097] The received data frame's security header records the index value "SHARED-IDX-LINK-015". The receiving node "SN-GYRO-003" then uses this index value "SHARED-IDX-LINK-015" to search its local key management unit and loads the corresponding AES-256 key. After loading the key, a symmetric decryption operation is performed on the encrypted payload field of the data frame. Decryption is the reverse process of encryption, using the same key to restore the ciphertext data to the original plaintext data. For example, decrypting the ciphertext "x8A...E3" yields the original payload data "azimuth: 135.7 degrees". After successful decryption, the extracted payload data is archived according to its source node number. In this example, the source MAC address of the data frame corresponds to node "SN-RADAR-002", therefore the decrypted data is archived in the data record from "SN-RADAR-002". Repeat this decryption and archiving process for all received encrypted data frames to create a data frame decryption result set, which contains all successfully decrypted data content.

[0098] S502: Based on the data frame content recorded in the data frame decryption result set, extract the channel number field and time identifier field of each frame data, and call the channel number path index of the corresponding link in the link spectrum allocation mapping set to determine whether the channel number in the decrypted data is consistent with the path index, filter out data frames with inconsistent numbers, and generate a channel mapping verification result set.

[0099] From a decrypted data frame record, the channel number 10 carried in the frame header and the timestamp added by the sender, which records the original generation time of the data frame, are extracted. Next, the locally stored link spectrum allocation map set is called to find the path index of the channel number corresponding to the link currently connected to the sender (e.g., "SN-RADAR-002"). For example, the map set shows that the currently allocated channel number for the communication path between "SN-GYRO-003" and "SN-RADAR-002" is indeed 10. Then, it is determined whether the channel number extracted from the decrypted data matches the channel number in the path index. In this example, the channel number 10 carried by the data frame matches the channel number 10 recorded in the map set, therefore the data frame passes the channel mapping verification. If another received data frame carries a channel number of 11, but the corresponding path recorded in the map table should use channel 10, it is determined to be a mismatch. All data frames with mismatched numbers are marked as invalid or potentially malicious data and filtered out from subsequent processing. After verifying all decrypted data frames, all data frames that pass verification are collected to generate a channel mapping verification result set.

[0100] S503: Based on the data frames retained in the channel mapping verification result set, extract the time identifier field and calculate the difference with the reception time recorded by the receiving node. Compare the time difference with the set communication delay tolerance threshold, filter data frames with a time difference less than the tolerance threshold as valid data, and record the structure content uniformly to generate a valid decryption communication record set.

[0101] The communication delay tolerance threshold is set as follows: the time difference between the receiving time recorded by the receiving node within a preset time period and the corresponding time identifier field is statistically analyzed, and the sum of the mean and standard deviation of the time difference set is used as the communication delay tolerance threshold.

[0102] The specific process of filtering time differences is as follows: the time difference is compared frame by frame with the communication delay tolerance threshold. If the time difference is less than the communication delay tolerance threshold, the corresponding data frame is marked as a valid data frame and written into the index item of the valid decryption communication record set.

[0103] The timestamp field of a data frame records the sending time as T_send, and the local time at which the receiving node receives the frame at the physical layer is T_receive. The time difference is then T_receive - T_send. This time difference represents the transmission latency of the data frame in the network. Next, the calculated time difference is compared with a dynamically set communication latency tolerance threshold. The communication latency tolerance threshold is set as follows: the receiving node continuously counts the time differences of all successfully received data frames within a preset time period (e.g., the past 5 minutes), forming a set of time difference values. Then, the arithmetic mean and standard deviation of this set are calculated. The threshold is then set as the sum of these two values. For example, if the average latency of received data frames in the past 5 minutes is 12 milliseconds and the standard deviation is 3 milliseconds, then the communication latency tolerance threshold is set to 12 + 3 = 15 milliseconds. This threshold is dynamically adjusted according to changes in network conditions. The process of determining whether the time difference is less than the communication latency tolerance threshold is performed frame by frame. For a data frame, if its calculated time difference (e.g., 11 milliseconds) is less than the currently set communication delay tolerance threshold (15 milliseconds), then the data frame is marked as a valid data frame. If the time difference of another data frame is 18 milliseconds, which is greater than the threshold, then the frame is considered timed out or invalid data. The complete structural content of all data frames marked as valid, including the decrypted data, source node information, timestamps, etc., is recorded uniformly to form the final valid decryption communication record set.

[0104] Please see Figure 7 A shipborne digital wireless self-organizing network system, comprising:

[0105] The shipborne node analysis module is used to obtain information on wireless communication equipment deployed on the ship. Combining the ship number and communication purpose classification, it establishes a hierarchical labeling matrix for network nodes according to the differences in identifiers between equipment nodes, and injects it into the node broadcast information to generate a set of shipborne node role identifiers.

[0106] The communication topology analysis module is used to determine whether the connection order and hierarchical mapping between nodes meet the peer-to-peer networking conditions based on the shipborne node role identifier set, record the connection relationship between nodes that meet the conditions, arrange the connection path structure according to priority, and generate an initial communication topology structure table.

[0107] The link spectrum analysis module is used to call the frequency allocation records of node pairs in the initial communication topology table, detect the carrier interference ratio and spectrum overlap coefficient of the channel, select the channel with the smallest spectrum overlap coefficient as the priority candidate frequency band, re-perform node link matching and channel number allocation, and generate a link spectrum allocation mapping set.

[0108] The encrypted communication processing module is used to call the MAC address numbers of communication node pairs in the link spectrum allocation mapping set, perform AES-256 encryption on the application layer data field in the node data packet according to the key corresponding to the index value, insert it into the security header field structure in combination with the channel number and encapsulate it into a data frame to generate a set of encrypted communication data frames.

[0109] The valid communication record module is used to read the key index value from the security header field in the encrypted communication data frame set, load the matching key according to the local key management unit of the receiving node, decrypt the payload field using AES, compare it with the channel number path mapping recorded in the link spectrum allocation mapping set, and compare it with the local reception time to determine whether it is less than the communication delay tolerance. If the condition is met, the data frame is recorded as valid, and a valid decrypted communication record set is generated.

[0110] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for a shipboard digital wireless ad hoc network, characterized by The method comprises the following steps: S1: Obtain the information of wireless communication equipment deployed on the ship, combine the ship number and the communication purpose classification, establish a networking node hierarchical marking matrix according to the difference between the equipment node identifiers, and inject the node broadcast information to generate a set of shipborne node role identifiers; S2: Based on the set of shipborne node role identifiers, determine whether the connection order and the hierarchical mapping between nodes meet the peer networking condition, record the connection relationship between nodes meeting the condition, arrange the connection path structure according to the priority, and generate an initial communication topology structure table; S3: Call the frequency allocation record of the node pair in the initial communication topology structure table, detect the carrier-to-interference ratio and the spectrum overlap coefficient corresponding to the channel, select the channel with the smallest spectrum overlap coefficient as the priority candidate frequency band, re-perform node link matching and channel number allocation, and generate a link spectrum allocation mapping set; S4: Call the MAC address number of the communication node pair in the link spectrum allocation mapping set, perform AES-256 encryption on the application layer data field in the node data packet according to the index value corresponding key, insert the security header field structure into the channel number, and encapsulate it into a data frame to generate an encrypted communication data frame set; S5: Call the security header field in the encrypted communication data frame set to read the key index value, load the matching key according to the local key management unit of the receiving node, perform AES decryption on the payload field, compare it with the channel number path mapping recorded in the link spectrum allocation mapping set, and compare it with the local receiving time to determine whether it is less than the communication time delay tolerance. If the condition is met, record the valid data frame and generate a valid decryption communication record set.

2. The shipboard digital wireless ad hoc networking method according to claim 1, characterized by, The set of shipborne node role identifiers includes a node unique number, a node role hierarchical label, and a broadcast channel identifier. The initial communication topology structure table includes a node connection path number, a node link priority sequence, and a connection delay statistical value. The link spectrum allocation mapping set includes a channel number allocation table, a spectrum occupation proportion record, and a link reconstruction path index. The encrypted communication data frame set includes a data frame header information area, an AES encrypted payload area, and a key index field group. The valid decryption communication record set includes a link number mapping table, a communication time delay record table, and a decryption data buffer area.

3. The shipboard digital wireless ad hoc networking method of claim 1, wherein, The specific steps of S1 are as follows: S101: Obtain the information of wireless communication equipment deployed on the ship, including the equipment identifier number, the communication unit frequency band configuration value, and the role setting parameter, perform uniqueness verification according to the equipment identifier number, extract the center frequency, the bandwidth parameter, and the modulation mode parameter in the frequency band configuration value, and implement equipment type classification combined with the role setting parameter, aggregate the parameter fields into a structure unit according to the equipment identifier number, and generate a ship equipment configuration parameter set; S102: Based on the ship equipment configuration parameter set, extract the communication unit frequency band center frequency and the role setting category of the equipment, call the ship number and the communication purpose classification result for corresponding index matching, and perform similarity judgment on the frequency band center frequency, select a node group with communication interactive capability, establish a device communication capability mapping table, and generate a node communication mapping result set; S103: According to the node group interaction capability field in the node communication mapping result set, the master node and the slave node are distinguished by the communication role setting category, the node interconnection path matrix is constructed by combining the channel number and the carrier information in the node broadcast information, and the role hierarchy table is established according to the node role, which is injected into the node broadcast control field to generate the shipborne node role identification set.

4. The shipboard digital wireless ad hoc networking method of claim 1, wherein, The specific steps of S2 are: S201: Based on the shipborne node role identification set, the broadcast receiving unit in the communication node is called to monitor the receiving response time delay of each broadcast channel, the source node identification number and the target node identification number carried in the receiving time delay data frame are extracted, the round-trip time delay value between nodes is calculated by analyzing the broadcast receiving time field, and the round-trip time delay is compared with the preset peer-to-peer connection delay threshold to screen the node pairs that meet the connection delay condition to generate the node low-time-delay connection pair set; S202: According to the node low-time-delay connection pair set, the role number of the source node and the target node of the connection pair is extracted, and the node role mapping table is called to obtain the role hierarchy corresponding relationship between each pair of nodes, whether it is peer or same level relationship is judged, the connection pairs with non-equivalent hierarchy are screened out and marked as valid peer-to-peer path, and the role peer-to-peer connection path list is organized in the order of node number to generate the node role mapping path sequence; S203: According to the node role mapping path sequence, the connection node pair number in each path group is extracted, the connection path priority is arranged from low to high according to the response time delay value, and the path number is reorganized in the case of cross nodes between paths. After reorganization, a complete path structure table is constructed and stored in the link control unit to generate an initial communication topology structure table.

5. The shipboard digital wireless ad hoc networking method of claim 1, wherein, The specific steps of S3 are: S301: The node pair frequency allocation parameters recorded in the initial communication topology structure table are called to collect the working frequency band and the signal strength value of the corresponding channel, calculate the current carrier-to-interference ratio of each link, and compare the carrier-to-interference ratio value of the channel with the interference judgment threshold value. The channels below the interference judgment threshold value are marked as interference exceeding channels and the link information is recorded to generate an interference channel elimination list; S302: According to the channel frequency band information retained in the interference channel elimination list, the corresponding frequency boundary value is extracted, the frequency spectrum overlap coefficient between frequency bands is calculated, and the frequency spectrum overlap coefficient is sorted in ascending order from low to high. The frequency band with the lowest frequency spectrum overlap coefficient is selected as the priority candidate frequency band, and the replacement relationship mapping table is established by assigning priority to the link according to the frequency band to generate a priority frequency band replacement index table; S303: According to the priority frequency band replacement index table, the interconnection path of the interrupted node in the eliminated link is re-matched, and the channel number is re-allocated according to the combination mode of the node pair and the candidate frequency band. The number allocation relationship and the alternative link path structure are bound and written into the scheduling control unit to establish the link frequency spectrum allocation mapping set.

6. The shipboard digital wireless ad hoc network method according to claim 5, characterized in that, The process of comparing the carrier-to-interference ratio of the channel with the interference judgment threshold value specifically comprises: calculating the carrier-to-interference ratio of the channel based on the signal strength value corresponding to each channel and the interference strength value of the adjacent channel, and setting the interference judgment threshold value as the weighted sum of the average value and the standard deviation of the carrier-to-interference ratio; The process of calculating the spectrum overlap coefficient between the frequency bands specifically comprises: calculating the bandwidth proportion of the spectrum overlap part of the adjacent channels as the spectrum overlap coefficient based on the frequency boundary value corresponding to the channel, sorting the spectrum overlap coefficients, and selecting the frequency band with the lowest spectrum overlap coefficient as the priority candidate frequency band.

7. The shipboard digital wireless ad hoc networking method of claim 1, wherein, The specific steps of S4 are: S401: Call the MAC address number of the communication node corresponding to each group of communication links in the link spectrum allocation mapping set, retrieve the corresponding key index in the local key management unit according to the node MAC address, extract the AES-256 key group corresponding to the key index, and bind and map the node pair with the key index to establish a node key index mapping table; S402: Based on the node key index mapping table, extract the data packet application layer data field of each node, call the binding key to perform AES-256 encryption, combine the encrypted data field with the original data frame control information, generate an encrypted data payload structure, generate a set of encrypted frame content structures for each group of node links, and obtain an integrated result of the encrypted data field; S403: According to the integrated result of the encrypted data field, extract the channel number corresponding to each group of encrypted data frames, construct a channel identification field and insert it into the data frame header together with the security header field in the data frame, re-encapsulate the complete frame structure in the link allocation order after the combination is completed, and archive the data frames according to the link number to generate an encrypted communication data frame set.

8. The shipborne digital wireless ad hoc network method of claim 1, and the specific steps of S5 are: S501: Call each frame of data in the encrypted communication data frame set, read the key index value recorded in the security header field, load the AES-256 key corresponding to the index value in the local key management unit of the receiving node, perform symmetric decryption operation on the data frame payload field, extract the decrypted payload data and archive it according to the node number to establish a data frame decryption result set; S502: Based on the data frame content recorded in the data frame decryption result set, extract the channel number field and time identification field of each frame of data, and call the channel number path index of the corresponding link in the link spectrum allocation mapping set to judge whether the channel number in the decrypted data is consistent with the path index, and exclude the data frames with inconsistent numbers to generate a channel mapping verification result set; S503: According to the data frames retained in the channel mapping verification result set, extract the time identification field and calculate the difference value with the receiving time recorded by the receiving node, compare the time difference with the set communication time delay tolerance threshold, select the data frames with a time difference value less than the tolerance threshold as valid data, and record the structure content uniformly to generate a valid decryption communication record set.

9. The shipboard digital wireless ad hoc network method according to claim 8, characterized in that, The communication delay tolerance threshold is set by counting the time difference between the receiving time recorded by the receiving node within a preset time period and the corresponding time identifier field, calculating the sum of the mean and standard deviation of the time difference value set as the communication delay tolerance threshold; The filtering process of the time difference value is specifically: comparing the time difference value with the communication delay tolerance threshold frame by frame, if the time difference value is less than the communication delay tolerance threshold, the corresponding data frame is marked as a valid data frame, and the index item of the valid decryption communication record set is written.

10. A shipboard digital wireless ad hoc network system characterized by comprising: The system is used to realize the shipboard digital wireless ad hoc network method of any one of claims 1-9, and the system comprises: A shipboard node analysis module is configured to obtain wireless communication device information deployed on a ship, combine a ship number and a communication purpose classification, establish a networking node hierarchical marking matrix according to the difference between device node identifiers, and inject node broadcast information to generate a shipboard node role identifier set; A communication topology analysis module is configured to determine whether the connection order and hierarchical mapping between nodes meet the peer networking condition based on the shipboard node role identifier set, record the connection relationship between nodes meeting the condition, arrange the connection path structure according to priority, and generate an initial communication topology structure table; A link spectrum analysis module is configured to call the frequency allocation record of a node pair in the initial communication topology structure table, detect the carrier-to-interference ratio and spectrum overlap coefficient corresponding to the channel, select the channel with the smallest spectrum overlap coefficient as a priority candidate frequency band, and perform node link matching and channel number allocation again to generate a link spectrum allocation mapping set; An encrypted communication processing module is configured to call the MAC address number of a communication node pair in the link spectrum allocation mapping set, perform AES-256 encryption on the application layer data field in the node data packet according to the index value corresponding key, insert a security header field structure and encapsulate it into a data frame, and generate an encrypted communication data frame set; An effective communication record module is configured to call the security header field in the encrypted communication data frame set to read the key index value, load a matching key according to a local key management unit of a receiving node, perform AES decryption on the payload field, compare the channel number path mapping recorded in the link spectrum allocation mapping set, and compare the local receiving time to determine whether it is less than the communication delay tolerance, and if the condition is met, record the data frame as valid to generate an effective decryption communication record set.

Images