Resource awareness-oriented satellite-ground hybrid cryptographic protocol negotiation method
By dynamically selecting cryptographic protocol modes in satellite-to-ground communication and combining resource awareness and capability awareness mechanisms, the contradiction between security and resource consumption when deploying PQC on resource-constrained devices is resolved, enabling on-demand secure communication protocol negotiation and optimizing resource consumption and communication performance.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-18
- Publication Date
- 2026-04-07
AI Technical Summary
In existing space-to-ground communication scenarios, resource-constrained terminal devices and satellite platforms face challenges in deploying post-quantum cryptography (PQC), including high computational complexity, large communication bandwidth and key size requirements, and dynamic changes in resource status. This makes existing technologies unable to adapt flexibly, resulting in a contradiction between security and resource consumption.
A resource-aware hybrid satellite-ground cryptographic protocol negotiation method is adopted. By exchanging negotiation parameter information in the early stage of communication establishment, the optimal cryptographic protocol mode is dynamically selected. Combined with resource awareness and capability awareness mechanisms, the cryptographic strategy is adaptive.
While ensuring communication security, optimize resource consumption, extend equipment life, adapt to resource changes, and reduce the impact on communication performance.
Smart Images
Figure CN121814162A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of satellite communication, and in particular to a resource-aware satellite-ground hybrid cryptographic protocol negotiation method. BACKGROUND
[0002] With the rapid development of quantum computing technology, the existing traditional public key cryptography system (such as RSA, ECC) based on mathematical problems such as large number factorization and discrete logarithm is facing the potential threat of being cracked. Post-quantum cryptography (PQC) aims to design cryptographic algorithms that can resist quantum computer attacks, and is the inevitable choice for future communication security.
[0003] However, in the satellite-ground communication scenario, the comprehensive deployment of PQC faces great challenges.
[0004] First, the resources of the two communication parties are very different. The ground terminal (such as an Internet of Things sensor or a mobile phone) may have weak computing power and limited power supply; while the satellite platform (especially low-orbit satellites) is also limited by strict power consumption, computing and storage resources. Many PQC algorithms have much higher computational complexity, communication bandwidth and key size than traditional public key cryptography algorithms, which pose a heavy burden on resource-constrained parties.
[0005] In addition, the resource status of satellites and terminals is dynamically changing.
[0006] For example, satellites rely on battery power when flying through the solar shadow area, and the load may increase dramatically; the power of terminal devices is also continuously consumed. A fixed cryptographic protocol cannot adapt to such dynamic changes. In addition, transition compatibility needs to be considered. During the long transition period from traditional public key cryptography algorithms to PQC, interoperability between new and old devices needs to be ensured. The existing technology usually adopts a one-size-fits-all approach, either forcing the use of PQC (which may lead to resource exhaustion) or downgrading to traditional cryptography (which poses a security risk), and lacks a flexible and on-demand selection mechanism.
[0007] Therefore, there is an urgent need in the art for an intelligent negotiation mechanism that can make the optimal trade-off between security and resource consumption when establishing a communication connection according to the real-time status of both parties. SUMMARY
[0008] To solve the technical problems existing in the prior art, the purpose of the present application is to provide a resource-aware satellite-ground hybrid cryptographic protocol negotiation method, which can combine resource awareness and capability awareness mechanisms to achieve dynamic adaptation of cryptographic protocols, so that the cryptographic strategy can dynamically adapt to the changing resource status of satellites and terminals.
[0009] To achieve the above-mentioned objectives, this invention provides a resource-aware satellite-ground hybrid cryptographic protocol negotiation method, the method comprising:
[0010] When initiating a secure communication connection, the communication initiator and the communication responder exchange their respective negotiation parameter information; the negotiation parameter information includes cryptographic algorithm support information and real-time resource status information; the cryptographic algorithm support information refers to the cryptographic algorithms supported by the communication initiator / responder.
[0011] Both the communication initiator and the communication responder determine a suggested cryptographic protocol mode locally based on the cryptographic algorithm supported by both parties and their own and each other's real-time resource status information.
[0012] The communication initiator and the communication responder exchange their respective suggested cipher protocol modes and compare the locally determined suggested cipher protocol mode with the received suggested cipher protocol mode.
[0013] If the comparison results match, a secure communication connection is established between the communication initiator and the communication responder based on the proposed cryptographic protocol pattern.
[0014] According to one technical solution of the present invention, the cryptographic algorithm supports information including:
[0015] Traditional public-key cryptography algorithms and their corresponding security parameters; the security parameters include key length or elliptic curve name;
[0016] And, a post-quantum cryptography algorithm, and a parameter set corresponding to the post-quantum cryptography algorithm; the parameter set includes an algorithm security level identifier.
[0017] The real-time resource status information includes:
[0018] At least one of computing power status, power status, and load status.
[0019] According to one technical solution of the present invention, the proposed cryptographic protocol mode includes:
[0020] Post-quantum cryptography mode; under the post-quantum cryptography mode, the communication initiator and the communication responder use a post-quantum cryptography algorithm to establish a secure communication connection;
[0021] Hybrid cryptography mode; In the hybrid cryptography mode, the communication initiator and the communication responder simultaneously use post-quantum cryptography and traditional public-key cryptography to establish a secure communication connection;
[0022] Traditional public-key cryptography mode; under the traditional public-key cryptography mode, the communication initiator and the communication responder use traditional public-key cryptography algorithms to establish a secure communication connection.
[0023] According to one technical solution of the present invention, it further includes:
[0024] If the comparison results are inconsistent, the final password pattern will be determined according to the preset conflict resolution rules.
[0025] The conflict resolution rules include:
[0026] Choose a cryptographic mode with a higher security level; the post-quantum cryptographic mode has a higher security level than the hybrid cryptographic mode, and the hybrid cryptographic mode has a higher security level than the traditional public-key cryptographic mode.
[0027] Alternatively, a cryptographic mode with lower resource consumption can be selected; the resource consumption of the traditional public-key cryptographic mode is lower than that of the hybrid cryptographic mode, and the resource consumption of the hybrid cryptographic mode is lower than or equal to that of the post-quantum cryptographic mode.
[0028] According to a technical solution of the present invention, a proposed cryptographic protocol mode is determined locally, specifically including:
[0029] By comparing the computing power status, power status, and load status with the preset corresponding real-time resource status thresholds, the real-time resource status of the communication initiator and the communication responder are divided into good level, tense level, and critical level, respectively, and then the following suggested cryptographic protocol mode determination process is executed.
[0030] a. When the real-time resource status of either the communication initiator or the communication responder is at a critical level, determine whether both parties support the same traditional public-key cryptography algorithm.
[0031] If supported, the local recommended cryptographic protocol mode is determined to be traditional public-key cryptography; otherwise, the establishment of a secure communication connection is terminated.
[0032] b. When the real-time resource status of either the communication initiator or the communication responder is at the tense level, and neither of them is at the critical level, determine whether both parties support the same hybrid cryptographic algorithm; the same hybrid cryptographic algorithm means that both parties use the same traditional public-key cryptographic algorithm and the same post-quantum cryptographic algorithm.
[0033] If supported, the local proposed cryptographic protocol mode is determined to be a hybrid cryptographic mode; otherwise, it is determined whether both parties support the same post-quantum cryptographic algorithm.
[0034] If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm.
[0035] If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode;
[0036] c. When the real-time resource status of both the communication initiator and the communication responder is at a good level, first determine whether both parties support the same post-quantum cryptography algorithm;
[0037] If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm.
[0038] If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode.
[0039] According to one technical solution of the present invention, the emergency level is: power level < first power threshold or load > first load threshold;
[0040] The stress level is: first power threshold ≤ power < second power threshold, or first load threshold ≥ load > second load threshold.
[0041] According to one technical solution of the present invention, it further includes:
[0042] When the initiator or responder determines the proposed cryptographic protocol mode locally, if it finds that there is no cryptographic algorithm supported by both parties, it will send an indication of negotiation failure to the other party and terminate the establishment of the secure communication connection.
[0043] According to one technical solution of the present invention, the communication initiator and the communication responder are respectively ground-based equipment and spaceborne equipment.
[0044] This invention provides a resource-aware satellite-ground hybrid cryptographic protocol negotiation method. In the initial stage of communication establishment, based on the real-time resource status and security capabilities of both communicating parties (satellite and terminal), it dynamically negotiates and selects the optimal cryptographic protocol suite, offering the following advantages:
[0045] 1. This invention abandons fixed cryptographic protocols and introduces resource awareness and capability awareness mechanisms, realizing dynamic adaptation of cryptographic protocols. This enables cryptographic strategies to dynamically adapt to the constantly changing resource status of satellites and terminals, achieving on-demand security.
[0046] 2. While ensuring basic communication security, it effectively optimizes the energy consumption, computing and storage resource consumption of resource-constrained devices (especially satellites and IoT terminals), extending their service life. For example, when resources are scarce, it can intelligently downgrade to traditional cryptographic modes to ensure connectivity; when resources are abundant, it can upgrade to PQC or hybrid modes to improve security levels.
[0047] 3. The negotiation process itself is lightweight, requiring only a small signaling interaction and local computing overhead when the connection is established, which has a negligible impact on the overall communication performance, making it very suitable for high-latency and resource-sensitive scenarios such as satellite-to-ground communication. Attached Figure Description
[0048] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly described below. Obviously, the drawings described below are merely some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without creative effort.
[0049] Figure 1 A flowchart illustrating a resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to an embodiment of the present invention;
[0050] Figure 2 The diagram illustrates a flowchart of the negotiation decision process in a resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to an embodiment of the present invention. Detailed Implementation
[0051] The description of the embodiments in this specification should be taken in conjunction with the accompanying drawings, which should form part of the complete specification. In the drawings, the shape or thickness of the embodiments may be exaggerated and may be indicated in a simplified or convenient manner. Furthermore, parts of the various structures in the drawings will be described separately; it is worth noting that elements not shown in the figures or not described in words are in a form known to those skilled in the art.
[0052] The descriptions of the embodiments herein, including any references to directions and orientations, are for ease of description only and should not be construed as limiting the scope of the invention. The following description of preferred embodiments involves combinations of features, which may exist independently or in combination; the invention is not particularly limited to the preferred embodiments. The scope of the invention is defined by the claims. Figures 1-2 As shown; Specific Implementation Method 1
[0054] This embodiment provides a resource-aware satellite-ground hybrid cryptographic protocol negotiation method, the method comprising:
[0055] When initiating a secure communication connection, the communication initiator and the communication responder exchange their respective negotiation parameter information. The negotiation parameter information includes cryptographic algorithm support information and real-time resource status information. The cryptographic algorithm support information refers to the cryptographic algorithms supported by the communication initiator / responder.
[0056] Both the initiator and responder of the communication determine a suggested cryptographic protocol mode locally based on the cryptographic algorithm supported by both parties and their own and each other's real-time resource status information.
[0057] The initiator and responder exchange their respective suggested cryptographic protocol patterns and compare their locally determined suggested cryptographic protocol patterns with the received suggested cryptographic protocol patterns.
[0058] If the comparison results match, a secure communication connection is established between the communication initiator and the communication responder based on the suggested cryptographic protocol pattern.
[0059] In this embodiment, such as Figure 1 As shown, it includes:
[0060] Step S1: At the initial stage of establishing a secure connection, the two communicating parties exchange their respective negotiation parameter information (capability list). The negotiation parameter information includes at least cryptographic algorithm support information and real-time resource status information.
[0061] Specifically, during the initial establishment of a secure transport layer connection, the communication initiator (denoted as A, such as a ground terminal) and the communication responder (denoted as B, such as a satellite) initiate a handshake request using TLS 1.3 or a similar security protocol to exchange their respective "negotiation parameter information." The negotiation parameter information includes at least the following:
[0062] Cryptographic algorithm support information: a list of supported traditional public-key cryptographic algorithms (such as RSA and ECC) and their corresponding key lengths; a list of supported post-quantum cryptographic algorithms (such as PQC algorithms based on lattice, encoding, and hashing) and their corresponding parameters.
[0063] Real-time resource status information: current available computing power, remaining battery power (for terminals) or current load (for satellites), and available memory. Computing power can be expressed as a relative performance index (such as the approximate time taken for a benchmark signature operation) or a percentage of available CPU cycles;
[0064] It can also include an optional security preference level to indicate the local preference for security strength (e.g., high, medium, low). This parameter is essentially the local party's preference for the security risk versus performance loss trade-off curve. Quantifying it numerically (e.g., 1-5) facilitates calculation. A "high" security preference level means a willingness to accept greater performance overhead for marginal security gains, which directly affects the negotiation strategy's decision-making in critical situations.
[0065] Step S2: After receiving the negotiation parameter information from the other party, both communicating parties independently calculate and generate a proposed cryptographic protocol mode based on their local preset negotiation strategy and the negotiation parameter information of both parties. This step is the core of the invention, and its key lies in a multi-factor weighted decision negotiation strategy F with cryptographic security awareness.
[0066] Specifically, in the ClientHello and ServerHello messages, or through custom extended fields, the communication initiator and the communication responder exchange their respective negotiation parameter information.
[0067] Step S3: After receiving the negotiation parameter information from each other, both communicating parties independently execute the same negotiation strategy F. The input to the negotiation strategy F is the local negotiation parameter information L_local and the other party's negotiation parameter information L_remote, and the output is the cryptographic protocol mode recommended for this communication.
[0068] Step S4: The two communicating parties exchange suggested cryptographic protocol modes, determine the final cryptographic protocol mode after negotiation, and establish a secure channel based on the mode.
[0069] The two parties exchange their chosen cryptographic protocol modes via the next handshake message (such as a Certificate Request). For example, both parties may use the same cryptographic protocol mode, namely a mixed cryptographic mode.
[0070] Both parties confirm the use of a hybrid cryptographic mode. Subsequently, during the key exchange phase, the initiating and responding parties will generate and exchange key materials using the ECCsecp256r1 and Kyber1024 algorithms respectively, ultimately fusing them to generate the session key. A similar double-signature approach can also be used for the authentication process. A secure channel is established, and subsequent application data is transmitted encrypted over this channel.
[0071] The proposed handshake patterns exchanged by both parties should not contain sensitive information, but they need to be protected against downgrade attacks (i.e., attackers tamper with messages to force both parties to use weaker patterns). Therefore, in subsequent handshake messages, both parties must include and digitally sign the entire handshake process (including the exchanged negotiation parameters and the negotiated patterns). In this way, any tampering with the negotiation process will be detected by the final authentication step.
[0072] This implementation allows both parties to dynamically and flexibly negotiate and determine the cryptographic protocol mode to be used in the current communication session based on their own and each other's real-time resource status and security capabilities during the connection establishment phase, thereby achieving the best balance between security and efficiency. Specific Implementation Method Two
[0074] This embodiment is a further explanation of embodiment one. In this embodiment, the cryptographic algorithm supports the following information:
[0075] Traditional public-key cryptography algorithms and their corresponding security parameters; security parameters include key length or elliptic curve name;
[0076] In addition, the post-quantum cryptography algorithm and the corresponding parameter set; the parameter set includes the algorithm security level identifier.
[0077] Real-time resource status information includes:
[0078] At least one of computing power status, power status, and load status.
[0079] In this embodiment, the data structure for the negotiation parameter information is as follows:
[0080] Negotiation parameter information (capability list) of the communication initiator:
[0081] Supports PQC (such as Kyber1024) and traditional public-key cryptography algorithms (such as ECCsecp256r1).
[0082] Current battery level: 35% (low);
[0083] Computational ability: Weak;
[0084] Safety preference level: High;
[0085] Negotiation parameter information (capability list) of the communication responder:
[0086] Supports PQC (such as Kyber1024, Dilithium5) and traditional public-key cryptography algorithms (ECCsecp256r1).
[0087] Current load: 85% (high);
[0088] Computational ability: High;
[0089] Security preference level: Medium. Specific Implementation Method 3
[0091] This embodiment is a further explanation of embodiment two. In this embodiment, the suggested cryptographic protocol mode includes:
[0092] Post-quantum cryptography mode; In post-quantum cryptography mode, the initiator and responder of a communication use post-quantum cryptography algorithms to establish a secure communication connection;
[0093] Hybrid cryptography mode; In hybrid cryptography mode, the initiator and responder of a communication connection simultaneously use post-quantum cryptography and traditional public-key cryptography to establish a secure communication connection.
[0094] Traditional public-key cryptography mode: In traditional public-key cryptography mode, the initiator and responder of a communication use traditional public-key cryptographic algorithms to establish a secure communication connection.
[0095] In this embodiment, the specific cryptographic protocol modes are as follows:
[0096] Mode 1 (Pure Post-Quantum Cryptography): Communication key exchange and authentication use a post-quantum cryptographic algorithm based entirely on mutual consensus. This mode offers the highest security but may also consume the most resources.
[0097] Mode 2 (Hybrid Cryptography Mode): Communication key exchange and authentication use both traditional public-key cryptography algorithms and post-quantum cryptography algorithms (e.g., generating both a traditional key and a post-quantum key simultaneously). This mode provides dual security guarantees during the transition period, with resource consumption between Mode 1 and Mode 3.
[0098] Mode 3 (Traditional Public-Key Cryptography): Communication key exchange and authentication use only traditional public-key cryptographic algorithms. This mode consumes the least resources, but also has the lowest security. Specific Implementation Method Four
[0100] This embodiment is a further explanation of embodiment three. This embodiment also includes:
[0101] If the comparison results are inconsistent, the final password pattern will be determined according to the preset conflict resolution rules.
[0102] Conflict resolution rules include:
[0103] Choose a cryptographic mode with a higher security level; the security level of post-quantum cryptography is higher than that of hybrid cryptography, and the security level of hybrid cryptography is higher than that of traditional public-key cryptography.
[0104] Alternatively, choose a cryptographic mode with lower resource consumption; traditional public-key cryptography consumes less resources than hybrid cryptography, and hybrid cryptography consumes less than or equal to post-quantum cryptography.
[0105] This embodiment involves a solution to the problem of inconsistent suggested cryptographic protocol modes proposed by both parties in step S4.
[0106] The communicating parties exchange and compare their locally calculated suggested cryptographic protocol patterns. If the suggested cryptographic protocol patterns of both parties are consistent, this pattern is determined as the final session cryptographic pattern; if the suggested cryptographic protocol patterns of both parties are inconsistent, the final pattern is determined according to predefined conflict resolution rules (e.g., always choosing the pattern with a higher security level, or always choosing the pattern with lower resource consumption). After determining the final pattern, both parties select a specific cryptographic algorithm suite under this pattern from the list of mutually supported algorithms, and complete the subsequent key exchange and authentication process to establish a secure communication channel.
[0107] Predefined conflict resolution rules include:
[0108] The "security first" principle: always choose the mode with the highest security level. This reflects the "failure-security" principle in cryptography, prioritizing confidentiality and integrity, which may sacrifice some performance. This is generally the more recommended security strategy.
[0109] The "efficiency first" principle: always choose the mode with lower resource consumption. This applies to special scenarios where availability is paramount (such as emergency beacons). Detailed Implementation Method Five
[0111] This embodiment is a further explanation of one of embodiments one through four. In this embodiment, a suggested cryptographic protocol mode is determined locally for each embodiment, specifically including:
[0112] By comparing the computing power status, power status, and load status with the preset corresponding real-time resource status thresholds, the real-time resource status of the communication initiator and the communication responder are divided into good level, tense level, and critical level, respectively, and then the following suggested cryptographic protocol mode determination process is executed.
[0113] a. When the real-time resource status of either the communication initiator or the communication responder is at a critical level, determine whether both parties support the same traditional public-key cryptography algorithm.
[0114] If supported, the local recommended cryptographic protocol mode is determined to be traditional public-key cryptography; otherwise, the establishment of a secure communication connection is terminated.
[0115] b. When the real-time resource status of either the communication initiator or the communication responder is at the tense level, and neither of them is at the critical level, determine whether both parties support the same hybrid cryptographic algorithm; the same hybrid cryptographic algorithm means that both parties use the same traditional public-key cryptographic algorithm and the same post-quantum cryptographic algorithm.
[0116] If supported, the local proposed cryptographic protocol mode is determined to be a hybrid cryptographic mode; otherwise, it is determined whether both parties support the same post-quantum cryptographic algorithm.
[0117] If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm.
[0118] If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode;
[0119] c. When the real-time resource status of both the communication initiator and the communication responder is at a good level, first determine whether both parties support the same post-quantum cryptography algorithm;
[0120] If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm.
[0121] If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode.
[0122] In this implementation, the negotiation strategy F is a decision logic whose input is the negotiation parameter information of the local party and the other party. It performs matching based on predefined rules, which consider one or more of the following factors:
[0123] A set of cryptographic algorithms jointly supported by both parties;
[0124] The comparison results of the real-time resource status of this party and the other party with the preset threshold;
[0125] For example, if the user's power consumption is below threshold X, or the other party's load is above threshold Y, the user tends to choose the mode with lower resource consumption.
[0126] Security preference levels of both parties.
[0127] The specific process of implementing the above negotiation strategy F.
[0128] Decision-making logic such as Figure 2 As shown, its predefined rules can be:
[0129] Rule 1: If either party's battery / load status is "critical" (e.g., battery <10% or load >90%), and both parties support the same traditional algorithm, then mode 3 is recommended.
[0130] Rule 2: If neither party is in a critical state, but either party is in a "tense" state (e.g., battery level <40% or load >75%), and both support the same hybrid algorithm, then mode 2 is recommended.
[0131] Rule 3: If both parties are in a "good" state and support the same PQC algorithm, then mode 1 is recommended first.
[0132] Rule 4: Safety preference levels are used to break ties or fine-tune decisions.
[0133] According to this rule, both the communication initiator (35% battery, under pressure) and the communication responder (85% load, under pressure) will independently calculate the suggested mode as Mode 2 (mixed cipher). Specific Implementation Method Six
[0135] This embodiment is a further explanation of embodiment five. In this embodiment, the hazard level is: power level < first power threshold or load > first load threshold.
[0136] The stress level is: first power threshold ≤ power < second power threshold, or first load threshold ≥ load > second load threshold.
[0137] In this embodiment, the emergency level can be divided into: power consumption <10% or load >90%;
[0138] The stress level can be divided into: 10% ≤ battery power < 40% or 90% ≥ load > 75%.
[0139] Among them, power consumption is mainly for ground terminals or low-orbit small satellites; load is for onboard processors; in actual systems, it can be expanded to various indicators (such as memory and bandwidth).
[0140] Except for the critical and tense levels, all other situations are classified as good. Detailed Implementation Method Seven
[0142] This embodiment is a further explanation of embodiment five. This embodiment also includes:
[0143] When the initiator or responder determines the proposed cryptographic protocol mode locally, if it finds that there is no cryptographic algorithm supported by both parties, it will send an indication of negotiation failure to the other party and terminate the establishment of the secure communication connection. Detailed Implementation Method Eight
[0145] This embodiment is a further explanation of one of embodiments one through four and six through seven. In this embodiment, the communication initiator and the communication responder are ground-based equipment and spaceborne equipment, respectively.
[0146] In this embodiment, the ground terminal equipment includes any one of the following: user terminal, ground station, mobile base station, drone, or IoT gateway;
[0147] Spaceborne equipment includes any of the following: low-Earth orbit communication satellites, medium-Earth orbit navigation satellites, geostationary orbit satellites, or inter-satellite relay nodes.
[0148] The present invention discloses a resource-aware satellite-ground hybrid cryptographic protocol negotiation method, comprising: when initiating a secure communication connection, a communication initiator and a communication responder exchange their respective negotiation parameter information; the negotiation parameter information includes cryptographic algorithm support information and real-time resource status information; the cryptographic algorithm support information refers to the cryptographic algorithms supported by the communication initiator / responder; each communication initiator and responder, based on the cryptographic algorithms supported by both parties and their own and each other's real-time resource status information, determines a proposed cryptographic protocol mode locally; the communication initiator and the communication responder exchange their respective proposed cryptographic protocol modes and compare their locally determined proposed cryptographic protocol mode with the received proposed cryptographic protocol mode; if the comparison results are consistent, a secure communication connection is established between the communication initiator and the communication responder based on the proposed cryptographic protocol mode.
[0149] Furthermore, it should be noted that the present invention can be provided as a method, apparatus, or computer program product. Therefore, embodiments of the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, embodiments of the present invention can take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program code.
[0150] Embodiments of the present invention are described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0151] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1The functions specified in one or more boxes. These computer program instructions may also be loaded onto a computer or other programmable data processing terminal equipment to cause a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.
[0152] It should also be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.
[0153] Finally, it should be noted that the above description represents a preferred embodiment of the present invention. It should be pointed out that although preferred embodiments have been described, those skilled in the art, once they understand the basic inventive concept of the present invention, can make various improvements and modifications without departing from the principles described herein. These improvements and modifications should also be considered within the scope of protection of the present invention. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and all changes and modifications falling within the scope of the embodiments of the present invention.
Claims
1. A resource-aware satellite-ground hybrid cryptographic protocol negotiation method, characterized in that, The methods include: When initiating a secure communication connection, the communication initiator and the communication responder exchange their respective negotiation parameter information. The negotiation parameter information includes cryptographic algorithm support information and real-time resource status information; The cryptographic algorithm support information refers to the cryptographic algorithms supported by the communication initiator / responder. Both the communication initiator and the communication responder determine a suggested cryptographic protocol mode locally based on the cryptographic algorithm supported by both parties and their own and each other's real-time resource status information. The communication initiator and the communication responder exchange their respective suggested cipher protocol modes and compare the locally determined suggested cipher protocol mode with the received suggested cipher protocol mode. If the comparison results match, a secure communication connection is established between the communication initiator and the communication responder based on the proposed cryptographic protocol pattern.
2. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to claim 1, characterized in that, The cryptographic algorithm supports the following information: Traditional public-key cryptography algorithms and their corresponding security parameters; the security parameters include key length or elliptic curve name; And, a post-quantum cryptography algorithm, and a parameter set corresponding to the post-quantum cryptography algorithm; the parameter set includes an algorithm security level identifier. The real-time resource status information includes: At least one of computing power status, power status, and load status.
3. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to claim 2, characterized in that, Recommended cryptographic protocol models include: Post-quantum cryptography mode; under the post-quantum cryptography mode, the communication initiator and the communication responder use a post-quantum cryptography algorithm to establish a secure communication connection; Hybrid cryptography mode; In the hybrid cryptography mode, the communication initiator and the communication responder simultaneously use post-quantum cryptography and traditional public-key cryptography to establish a secure communication connection; Traditional public-key cryptography mode; under the traditional public-key cryptography mode, the communication initiator and the communication responder use traditional public-key cryptography algorithms to establish a secure communication connection.
4. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to claim 3, characterized in that, Also includes: If the comparison results are inconsistent, the final password pattern will be determined according to the preset conflict resolution rules. The conflict resolution rules include: Choose a password mode with a higher level of security; The security level of the post-quantum cryptography mode is higher than that of the hybrid cryptography mode, and the security level of the hybrid cryptography mode is higher than that of the traditional public-key cryptography mode. Alternatively, a cryptographic mode with lower resource consumption can be selected; the resource consumption of the traditional public-key cryptographic mode is lower than that of the hybrid cryptographic mode, and the resource consumption of the hybrid cryptographic mode is lower than or equal to that of the post-quantum cryptographic mode.
5. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to any one of claims 1 to 4, characterized in that, Each locality should determine a suggested cryptographic protocol pattern, specifically including: By comparing the computing power status, power status, and load status with the preset corresponding real-time resource status thresholds, the real-time resource status of the communication initiator and the communication responder are divided into good level, tense level, and critical level, respectively, and then the following suggested cryptographic protocol mode determination process is executed. a. When the real-time resource status of either the communication initiator or the communication responder is at a critical level, determine whether both parties support the same traditional public-key cryptography algorithm. If supported, the local recommended cryptographic protocol mode is determined to be traditional public-key cryptography; otherwise, the establishment of a secure communication connection is terminated. b. When the real-time resource status of either the communication initiator or the communication responder is at the tense level, and neither of them is at the critical level, determine whether both parties support the same hybrid cryptographic algorithm; the same hybrid cryptographic algorithm means that both parties use the same traditional public-key cryptographic algorithm and the same post-quantum cryptographic algorithm. If supported, the local proposed cryptographic protocol mode is determined to be a hybrid cryptographic mode; otherwise, it is determined whether both parties support the same post-quantum cryptographic algorithm. If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm. If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode; c. When the real-time resource status of both the communication initiator and the communication responder is at a good level, first determine whether both parties support the same post-quantum cryptography algorithm; If supported, the local proposed cryptographic protocol mode is determined to be post-quantum cryptography; otherwise, it is determined whether both parties support the same traditional public-key cryptography algorithm. If supported, the local recommended cryptographic protocol mode is determined to be the traditional public-key cryptography mode.
6. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to claim 5, characterized in that, The emergency level is: battery level < first battery threshold or load > first load threshold; The stress level is: first power threshold ≤ power < second power threshold, or first load threshold ≥ load > second load threshold.
7. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to claim 5, characterized in that, Also includes: When the initiator or responder determines the proposed cryptographic protocol mode locally, if it finds that there is no cryptographic algorithm supported by both parties, it will send an indication of negotiation failure to the other party and terminate the establishment of the secure communication connection.
8. The resource-aware satellite-ground hybrid cryptographic protocol negotiation method according to any one of claims 1-4 and 6-7, characterized in that, The communication initiator and the communication responder are ground-based equipment and spaceborne equipment, respectively.