Satellite common view and portable shift clock-based time synchronization timing system and method

Abstract

The invention relates to the technical field of information security and time service, in particular to a satellite common-view and portable moving clock time synchronization time service system and method, which thoroughly avoids a network transmission path and realizes end-to-end physical isolation by introducing a physical carrying mechanism and a hardware-level one-way isolation module of a portable time service clock. And digital signature and verification are carried out on the time data in combination with a national secret SM2 / SM3 algorithm, so that the integrity, tamper resistance and identity authentication of the data are ensured, the security is fundamentally improved, and security vulnerabilities caused by network dependence in the prior art are effectively eliminated. In terms of deployment flexibility, the portable design overcomes the dependence on a fixed monitoring station in the prior art, and supports rapid deployment in a dynamic environment and a remote area. The beneficial effects jointly solve the defects of insufficient precision, high security risk, complex deployment and the like in the prior art, and provide reliable support for secret-related networks with high security requirements.

Description

Technical Field

[0001] This invention relates to the fields of information security and time synchronization technology, specifically a time synchronization system and method based on satellite co-view and portable clock shifting. Background Technology

[0002] In the field of time synchronization technology, time synchronization systems ensure the orderly operation of nodes and the consistency of log data in a distributed system by aligning local device clocks with authoritative standard time sources. The basic principle is to use a high-precision clock source as a reference, transmit time information through wired or wireless channels, and use specific protocols such as NTP or PTP for synchronization.

[0003] Meanwhile, due to the sensitivity of the information carried, classified networks employ complete physical isolation security measures from satellite (or internet) communications. While this ensures the security of the internal network, it also prevents them from utilizing public time synchronization resources. Classified networks often consist of heterogeneous devices such as various operating systems, servers, firewalls, and intrusion detection systems. In the event of a security incident, investigators must extract logs from each system for correlation analysis. If the times of these systems are not calibrated and differ, it will significantly increase the complexity of log analysis, affecting the accuracy and efficiency of security incident tracing, and may even lead to erroneous conclusions.

[0004] Existing technologies for secure time synchronization offer two main solutions. One typical approach is the satellite co-viewing scheme, which uses a weighted average method with virtual reference stations to correct ephemeris errors and ionospheric delays, achieving a time synchronization accuracy of approximately 2ns. However, this method relies on multiple fixed monitoring stations, making deployment complex and costly, and it has poor adaptability in remote or dynamic environments. Furthermore, this scheme lacks physical isolation mechanisms; time synchronization data is transmitted via communication satellites or networks, making it susceptible to signal interference or malicious attacks, posing security risks. On the other hand, the high deployment costs and poor adaptability to dynamic environments mean that some areas cannot effectively co-view due to satellite distribution limitations, resulting in insufficient accuracy and stability. More seriously, in terms of security, existing technologies lack physical isolation mechanisms. Co-viewing data is transmitted via the internet or communication satellites, making it vulnerable to signal interference, malicious attacks, or tampering. For example, time stamp data may be stolen or forged during transmission, leading to time stamp errors, abnormal output, and the inability to achieve time source traceability and closed-loop management, posing serious risks in classified scenarios. Furthermore, existing solutions suffer from high computational complexity. For example, the shared-view virtual algorithm requires processing massive amounts of data, introducing latency and impacting real-time performance. Additionally, deployment relies on ground infrastructure, resulting in insufficient flexibility. These shortcomings collectively limit the application of existing technologies in high-security, high-precision scenarios, necessitating innovative solutions to address these accuracy and security bottlenecks. Summary of the Invention

[0005] The purpose of this invention is to provide a time synchronization system and method based on satellite co-view and portable clock shifting, addressing the aforementioned problems.

[0006] The technical solution adopted in this invention is as follows: a time synchronization and timing system based on satellite common-view and portable clock shifting, including a satellite common-view acquisition module, a portable clock synchronization module, a one-way isolation module, a secure timekeeping processing module, and a reliable time distribution module;

[0007] The satellite common-view acquisition module is located on a non-classified external network terminal. It is used to receive signals from multiple satellite systems in parallel, calculate the time deviation through a dynamic weighted common-view algorithm, and output optimized time data to a portable clock module.

[0008] The portable clock module is located on a non-classified external network terminal. It has a built-in high-precision atomic clock and a trusted cryptographic submodule. It is used to receive time data from the satellite common-view acquisition module, perform local discipline and timekeeping, and is moved to the classified internal network terminal by physical transport.

[0009] The unidirectional isolation module uses fiber optic unidirectional transmission technology to connect the portable clock module and the secure timekeeping processing module, ensuring that time data flows only unidirectionally from the non-classified end to the classified end.

[0010] The secure timekeeping processing module is located on the classified intranet end. It is used to receive decrypted time data sent by the one-way isolation module, perform secondary verification on the time data, and provide the verified secure timekeeping time signal to the trusted time distribution module.

[0011] The trusted time distribution module is located on the classified intranet and is used to convert the time signal output by the secure timekeeping processing module into NTP / PTP protocol messages and distribute them to the classified intranet devices.

[0012] Optionally, the satellite common-view acquisition module receives signals from multiple satellite systems including BeiDou, GPS, and SBAS, and selects the nearest virtual monitoring station based on the user's location and satellite geometric distribution. It then performs a weighted average correction for ephemeris errors and ionospheric delay, as shown in the following formula:

[0013] ;

[0014] Among them, T u The time delay difference is caused by the ephemeris error of the virtual reference station at the location of the satellite common-view acquisition module;

[0015] i is an index variable, with a value from 1 to 3, representing the three monitoring stations closest to the satellite common-view acquisition module;

[0016] r i Let be the geometric distance between the location of the satellite common-view acquisition module and the i-th monitoring station;

[0017] T i Let be the time delay difference caused by ephemeris error measured at the i-th monitoring station.

[0018] Optionally, the satellite common-view acquisition module acquires satellite pseudorange and phase observations, establishes a trust relationship between the receiver and the satellite using a proof-of-stake algorithm, selects a virtual common-view reference satellite to correct the observations, and finally eliminates the Doppler effect and ionospheric delay using a weighted least squares method.

[0019] Optionally, the portable clock module signs the time data using the national cryptographic SM2 algorithm and compensates for clock drift during transport using an atomic clock timekeeping algorithm.

[0020] Optionally, the portable clock module has a built-in Trusted Cryptography (TCM) submodule for securely generating and storing an SM2 key pair, a private key d and a public key P. The private key d is never exported, and the public key P is pre-set in the secure timekeeping processing module on the classified intranet for verification.

[0021] Furthermore, the portable clock module has a built-in atomic clock, which outputs a 10MHz frequency signal and a 1PPS signal.

[0022] Optionally, the unidirectional isolation module includes an optical unidirectional transmitting module and an optical unidirectional receiving module;

[0023] The optical one-way transmitting module is located on a non-classified external network terminal, used to receive time data sent by the portable clock module, perform encryption, encoding and modulation processing, and transmit it unidirectionally to the optical one-way receiving module;

[0024] The optical one-way receiving module is located on the classified intranet and is used to decrypt the time data sent by the optical one-way transmitting module and transmit it unidirectionally to the secure timekeeping processing module.

[0025] Optionally, the secure timekeeping processing module receives verified integrity and trusted source time data from the optical one-way receiving module, and performs timekeeping and secondary security processing on this basis. The timekeeping and secondary security processing includes trusted execution environment isolation protection and SM2-based asymmetric key negotiation.

[0026] Optionally, the trusted execution environment isolation protection divides the confidential intranet where the secure timekeeping processing module is located into a secure part and a normal part. The secure part contains the decrypted raw time data received by the secure timekeeping processing module, the timekeeping discipline core algorithm, and the driver and control program. The normal part contains the management interface of the secure timekeeping processing module. When the timekeeping algorithm needs to be executed, the application in the normal part calls the instruction through the predefined security monitor to pass the request and parameters to the secure part. After the secure part finishes processing, it returns the result through the same channel.

[0027] The SM2-based asymmetric key negotiation establishes a secure channel between the secure timekeeping processing module and the time distribution module for synchronous transmission of keys or sensitive instructions. The secure timekeeping processing module has a built-in key that matches the trusted cryptographic submodule TCM, and the secure timekeeping processing module can provide the public key to the trusted time distribution module.

[0028] This application provides a time synchronization system based on satellite common-view and portable clock shifting, and also offers a method for time synchronization based on satellite common-view and portable clock shifting, including the following steps:

[0029] S1. Satellite common-view acquisition: The satellite common-view acquisition module receives signals from multiple satellites in parallel, calculates the time deviation through a dynamic weighted common-view algorithm, and outputs optimized time data to the portable clock module.

[0030] S2. Portable clock taming and transportation: After the portable clock taming module tames the atomic clock, it is physically transported to the classified intranet terminal.

[0031] S3. Unidirectional isolation transmission: The unidirectional isolation module encrypts the time data into an optical signal and transmits it unidirectionally to the secure timekeeping processing module.

[0032] S4. Secure Timekeeping and Distribution: The secure timekeeping processing module decrypts and verifies the time data, performs timekeeping compensation, and then distributes it to intranet devices by the trusted time distribution module.

[0033] The beneficial effects of the present invention include at least one of the following;

[0034] 1. By using multi-source satellite co-viewing, such as parallel reception of BeiDou / GPS / SBAS and dynamic weighting algorithms, ephemeris and ionospheric errors are corrected in real time, and the cumulative error is controlled to ≤1 second / year, with local accuracy reaching the sub-nanosecond level.

[0035] 2. A portable clock module is introduced, which is calibrated in a non-classified area and then physically transported to a classified area. Combined with a one-way isolation module such as fiber optic transmission and national cryptographic SM2 / SM3 algorithm signature verification, network attacks are prevented. The trusted cryptographic module ensures an end-to-end trusted time chain, meeting the requirements of a classified environment.

[0036] 3. The portable clock module has a built-in atomic clock, requiring no fixed infrastructure and can be manually moved, supporting remote or mobile scenarios. The satellite co-view acquisition module dynamically selects virtual monitoring stations, overcoming the limitations of satellite distribution in existing solutions and reducing deployment complexity. Attached Figure Description

[0037] Figure 1 This is a schematic diagram of a time synchronization system based on satellite common-view and portable clock shifting;

[0038] Figure 2 A flowchart of a time synchronization method based on satellite common view and portable clock shifting;

[0039] Figure 3 This is an electronic frame diagram;

[0040] Figure 4 This is an example diagram of a time synchronization system based on satellite common-view and portable clock shifting.

[0041] Figure 5 This is a schematic diagram of the structure of an electronic device. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0043] Therefore, the following detailed description of the embodiments of the invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the invention without inventive effort are within the scope of protection of the invention.

[0044] It should be noted that, unless otherwise specified, the embodiments and features described in this invention can be combined with each other.

[0045] like Figure 1 As shown, a time synchronization and timing system based on satellite common-view and portable clock shifting includes a satellite common-view acquisition module, a portable clock synchronization module, a one-way isolation module, a secure timekeeping processing module, and a reliable time distribution module.

[0046] The satellite common-view acquisition module is located on a non-classified external network terminal. It is used to receive signals from multiple satellite systems in parallel, calculate the time deviation through a dynamic weighted common-view algorithm, and output optimized time data to a portable clock module.

[0047] The portable clock module is located on a non-classified external network terminal. It has a built-in high-precision atomic clock and a trusted cryptographic submodule. It is used to receive time data from the satellite common-view acquisition module, perform local discipline and timekeeping, and is moved to the classified internal network terminal by physical transport.

[0048] The unidirectional isolation module uses fiber optic unidirectional transmission technology to connect the portable clock module and the secure timekeeping processing module, ensuring that time data flows only unidirectionally from the non-classified end to the classified end.

[0049] The secure timekeeping processing module is located on the classified intranet end. It is used to receive decrypted time data sent by the one-way isolation module, perform secondary verification on the time data, and provide the verified secure timekeeping time signal to the trusted time distribution module.

[0050] The trusted time distribution module is located on the classified intranet and is used to convert the time signal output by the secure timekeeping processing module into NTP / PTP protocol messages and distribute them to the classified intranet devices.

[0051] Simultaneously, the satellite common-view acquisition module receives signal inputs from multiple satellite systems including BeiDou, GPS, and SBAS. Based on the user's location and the geometric distribution of satellites, it selects the nearest virtual monitoring station and performs a weighted average correction for ephemeris errors and ionospheric delays, as shown in the following formula:

[0052] ;

[0053] Among them, T u The time delay difference is caused by the ephemeris error of the virtual reference station at the location of the satellite common-view acquisition module;

[0054] i is an index variable, with a value from 1 to 3, representing the three monitoring stations closest to the satellite common-view acquisition module;

[0055] r i Let be the geometric distance between the location of the satellite common-view acquisition module and the i-th monitoring station;

[0056] T i Let be the time delay difference caused by ephemeris error measured at the i-th monitoring station.

[0057] Meanwhile, the satellite common-view acquisition module acquires satellite pseudorange and phase observations, establishes a trust relationship between the receiver and the satellite using a proof-of-stake algorithm, selects a virtual common-view reference satellite to correct the observations, and finally eliminates the Doppler effect and ionospheric delay using a weighted least squares method.

[0058] The purpose of this design is to correct ephemeris and ionospheric errors in real time through multi-source satellite co-viewing, such as parallel reception of BeiDou / GPS / SBAS, and dynamic weighting algorithms, controlling the cumulative error to ≤1 second / year, with local accuracy reaching the sub-nanosecond level. A portable clock module is introduced, calibrated in non-classified areas and then physically transported to classified areas. Combined with unidirectional isolation modules such as fiber optic transmission and national cryptographic SM2 / SM3 algorithm signature verification, network attacks are prevented. A trusted cryptographic module ensures an end-to-end trusted time chain, meeting the requirements of classified environments.

[0059] Meanwhile, in this embodiment, the portable clock module signs the time data using the national cryptographic SM2 algorithm and compensates for clock drift using the atomic clock timekeeping algorithm during transportation.

[0060] Furthermore, the portable clock module has a built-in Trusted Cryptography (TCM) submodule for securely generating and storing SM2 key pairs, private key d and public key P. Private key d is never exported, and public key P is pre-set in the secure timekeeping processing module on the classified intranet for verification.

[0061] Furthermore, the portable clock module has a built-in atomic clock, which outputs a 10MHz frequency signal and a 1PPS signal.

[0062] The purpose of this design is that the portable clock module has a built-in atomic clock, eliminating the need for fixed infrastructure and enabling manual "clock relocation," thus supporting remote or mobile scenarios. The satellite co-view acquisition module dynamically selects virtual monitoring stations, overcoming the limitations of satellite distribution in existing solutions and reducing deployment complexity.

[0063] Meanwhile, in this embodiment, the one-way isolation module includes an optical one-way transmitting module and an optical one-way receiving module;

[0064] The optical one-way transmitting module is located on a non-classified external network terminal, used to receive time data sent by the portable clock module, perform encryption, encoding and modulation processing, and transmit it unidirectionally to the optical one-way receiving module;

[0065] The optical one-way receiving module is located on the classified intranet and is used to decrypt the time data sent by the optical one-way transmitting module and transmit it unidirectionally to the secure timekeeping processing module.

[0066] Furthermore, the secure timekeeping processing module receives verified integrity and trusted source time data from the optical one-way receiving module, and performs timekeeping and secondary security processing on this basis. The timekeeping and secondary security processing includes trusted execution environment isolation protection and SM2-based asymmetric key negotiation. The trusted execution environment isolation protection divides the confidential intranet where the secure timekeeping processing module is located into a secure part and a normal part. The secure part contains the decrypted raw time data received by the secure timekeeping processing module, the timekeeping discipline core algorithm, and the driver and control program. The normal part contains the management interface of the secure timekeeping processing module. When the timekeeping algorithm needs to be executed, the application of the normal part calls the instruction through the predefined security monitor, and passes the request and parameters to the secure part. After the secure part completes the processing, it returns the result through the same channel.

[0067] The SM2-based asymmetric key negotiation establishes a secure channel between the secure timekeeping processing module and the time distribution module for synchronous transmission of keys or sensitive instructions. The secure timekeeping processing module has a built-in key that matches the trusted cryptographic submodule TCM, and the secure timekeeping processing module can provide the public key to the trusted time distribution module.

[0068] like Figure 3 and Figure 4 As shown, this embodiment provides a hardware architecture and specific application scenario for a time synchronization system based on satellite co-view and portable clock shifting. It includes a one-way isolated secure time synchronization device and a secure time synchronization server set in a classified intranet. In this scenario, the two complete one-way time synchronization through a portable clock.

[0069] In the secure time synchronization device section, a standard time source is obtained through BeiDou satellite communication. The device's dedicated synchronization software and discipline algorithm are used to perform high-precision time synchronization and atomic clock discipline on the embedded portable time synchronization clock. Its main functions in the classified network's dedicated time synchronization system are acquiring the standard time source, managing the entire lifecycle of one-way authentication keys, and high-precision atomic clock discipline. It also enables secure timekeeping and operation through the physical transport of the portable time synchronization clock. Furthermore, it is designed based on the domestically developed Loongson 2K2000 CPU. The Beidou antenna provides satellite signal reception for the Beidou timing module; the main function of the Beidou timing module is to acquire a high-precision time source; the 2K main control board reads the time information of the Beidou satellite through the serial port, and also provides a user interface for the device; the LED light board provides various function status indicators for the safety time synchronization instrument, and the current working status of the device can be clearly known through the status of the LED lights, controlled by the 2K main control board; the function key board provides a human-machine input interface for the device; the LCD screen is the user display interface, which can display more detailed and comprehensive related functions and time information; the power module and power filter provide a stable and reliable DC12V (20W) input to power the device.

[0070] The secure time synchronization server is a high-precision, high-concurrency, and multifunctional secure standard time synchronization device that can be deployed in classified network systems as a standard time synchronization source. It supports multiple time synchronization protocols, including NTP, PTP, 1PPS, and PTOD output. The high-precision time source of the time synchronization server is obtained solely from a dedicated portable time synchronization clock for classified networks through one-way isolated secure time synchronization. The secure time synchronization server uses a high-precision atomic clock for secure timekeeping, ensuring high-precision time synchronization of all devices within the classified network, and supports two 10 / 100 / 1000M adaptive Ethernet ports. The time synchronization server has a web interface for management, allowing users to view and configure the device status via the web interface. The secure time synchronization server utilizes a built-in trusted cryptographic module to securely receive one-way isolated time synchronization, maintain secure timekeeping, and synchronize trusted and secure standard time with various devices in the classified intranet using the NTP / PTP protocol. Its 2K main control board can provide standard time to various terminal devices interconnected with the secure time synchronization server via the NTP / PTP protocol, ensuring time synchronization among all devices. The server clock board serves as the reference time source for the secure time synchronization server. The one-way isolation module ensures the one-way nature of the standard time input to the secure time synchronization server, and, in conjunction with a proprietary protocol, protects against external malicious attacks. The LED light board, function key board, and LCD screen are all human-machine interface input / output modules for the secure time synchronization server. The power module and power filter provide a stable and reliable DC12V (30W) input to power the device.

[0071] like Figure 2 As shown, in this embodiment, a method for time synchronization based on satellite common-view and portable clock shifting is also provided, including the following steps:

[0072] S1. Satellite common-view acquisition: The satellite common-view acquisition module receives signals from multiple satellites in parallel, calculates the time deviation through a dynamic weighted common-view algorithm, and outputs optimized time data to the portable clock module.

[0073] S2. Portable clock taming and transportation: After the portable clock taming module tames the atomic clock, it is physically transported to the classified intranet terminal.

[0074] S3. Unidirectional isolation transmission: The unidirectional isolation module encrypts the time data into an optical signal and transmits it unidirectionally to the secure timekeeping processing module.

[0075] S4. Secure Timekeeping and Distribution: The secure timekeeping processing module decrypts and verifies the time data, performs timekeeping compensation, and then distributes it to intranet devices by the trusted time distribution module.

[0076] The purpose of this design is to reduce the processing time for massive amounts of data by employing distributed acceleration algorithms and lightweight equity-sharing virtual algorithms. The atomic clock timekeeping algorithm compensates for drift during data transfer, ensuring continuous and reliable time synchronization.

[0077] In one embodiment of this application, the electronic device further includes a bus and a computer program stored in the memory and executable on the processor, such as a satellite co-view and portable clock-shifting time synchronization program.

[0078] Figure 5 Only an electronic device with memory and processor is shown. Those skilled in the art will understand that the structure shown does not constitute a limitation on the electronic device and may include fewer or more components than shown, or combine certain components, or have different component arrangements.

[0079] Combination Figure 5 The memory in the electronic device stores multiple computer-readable instructions to implement a satellite co-view and portable clock-shifting time synchronization method, and the processor can execute the multiple instructions to implement it.

[0080] Specifically, the processor's implementation method for the above instructions can be found in the description of the relevant steps in the corresponding embodiment of the figure, and will not be repeated here.

[0081] Those skilled in the art will understand that the schematic diagram is merely an example of an electronic device and does not constitute a limitation on the electronic device. The electronic device may be a bus-type structure or a star-type structure. The electronic device may also include more or fewer other hardware or software than shown in the diagram, or different component arrangements. For example, the electronic device may also include input / output devices, network access devices, etc.

[0082] It should be noted that electronic devices are merely examples. Other existing or future electronic products that are suitable for this application should also be included within the scope of protection of this application and are incorporated herein by reference.

[0083] The memory includes at least one type of readable storage medium, which can be non-volatile or volatile. The readable storage medium includes flash memory, portable hard drives, multimedia cards, card-type memory (e.g., SD or DX memory), magnetic storage, magnetic disks, optical disks, etc. In some embodiments, the memory can be an internal storage unit of an electronic device, such as a portable hard drive. In other embodiments, the memory can be an external storage device of the electronic device, such as a plug-in portable hard drive, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. The memory can be used not only to store application software and various types of data installed on the electronic device, such as code for satellite synchronization and portable clock time shifting, but also to temporarily store data that has been output or will be output.

[0084] In some embodiments, a processor can be composed of integrated circuits, such as a single packaged integrated circuit or multiple integrated circuits packaged with the same or different functions. This includes combinations of one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and various control chips. The processor is the control unit of the electronic device, connecting various components of the device through various interfaces and lines. It executes programs or modules stored in the memory (e.g., executing satellite co-viewing and portable clock-shifting time synchronization programs) and calls data stored in the memory to perform various functions and process data within the electronic device.

[0085] The processor executes the operating system of the electronic device and various installed applications. The processor executes the applications to implement the steps in the above-described embodiments of the satellite co-viewing and portable clock-shifting time synchronization methods, such as the steps shown in the figure.

[0086] For example, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to complete this application. The one or more modules / units may be a series of computer-readable instruction segments capable of performing a specific function, which describe the execution process of the computer program in an electronic device. For example, the computer program may be divided into a receiving module, a preprocessing module, a projection module, and a determining module.

[0087] The integrated unit implemented as a software functional module described above can be stored in a computer-readable storage medium. This software functional module, stored in a storage medium, includes several instructions to cause a computer device (which may be a personal computer, computer equipment, or network device, etc.) or processor to execute portions of the satellite co-viewing and portable clock-shifting time synchronization method described in the various embodiments of this application.

[0088] When modules / units integrated into an electronic device are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can also be implemented by a computer program instructing related hardware devices. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above.

[0089] This application provides a method for synchronizing time between satellite co-view and portable clock shifting, which can be applied to one or more electronic devices. An electronic device is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions. Its hardware includes, but is not limited to, microprocessors, application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), digital signal processors (DSPs), embedded devices, etc.

[0090] The computer program includes computer program code, which may be in the form of source code, object code, executable file, or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording media, USB flash drive, portable hard drive, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory, and other memory.

[0091] Furthermore, the computer-readable storage medium may primarily include a stored program area and a stored data area, wherein the stored program area may store the operating system, an application program required for at least one function, etc.; and the stored data area may store data created based on the use of blockchain nodes, etc.

[0092] The bus can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one arrow is used in the diagram, but this does not mean that there is only one bus or one type of bus. The bus is configured to implement the connection and communication between the memory and at least one processor, etc.

[0093] This application also provides a computer-readable storage medium (not shown), which stores computer-readable instructions. These computer-readable instructions are executed by a processor in an electronic device to implement the satellite co-view and portable clock shifting time synchronization method described in any of the above embodiments.

[0094] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and other division methods may be used in actual implementation.

[0095] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0096] Furthermore, the functional modules in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional modules.

[0097] Furthermore, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices described in the specification may also be implemented by a single unit or device through software or hardware. Terms such as "first," "second," etc., are used to indicate names and do not indicate any specific order.

[0098] Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A time synchronization system based on satellite co-viewing and portable clock shifting, characterized in that, It includes a satellite common-view acquisition module, a portable clock signaling module, a one-way isolation module, a secure timekeeping processing module, and a trusted time distribution module; The satellite common-view acquisition module is located on a non-classified external network terminal. It is used to receive signals from multiple satellite systems in parallel, calculate the time deviation through a dynamic weighted common-view algorithm, and output optimized time data to a portable clock module. The portable clock module is located on a non-classified external network terminal. It has a built-in high-precision atomic clock and a trusted cryptographic submodule. It is used to receive time data from the satellite common-view acquisition module, perform local discipline and timekeeping, and is moved to the classified internal network terminal by physical means. The unidirectional isolation module uses fiber optic unidirectional transmission technology to connect the portable clock module and the secure timekeeping processing module, ensuring that time data flows only unidirectionally from the non-classified end to the classified end. The secure timekeeping processing module is located on the classified intranet end. It is used to receive decrypted time data sent by the one-way isolation module, perform secondary verification of the time data, and provide the verified secure timekeeping signal to the trusted time distribution module. The trusted time distribution module is located on the classified intranet and is used to convert the time signal output by the secure timekeeping processing module into NTP / PTP protocol messages and distribute them to the classified intranet devices.

2. The time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 1, characterized in that, The satellite common-view acquisition module receives signals from multiple satellite systems, including BeiDou, GPS, and SBAS. Based on the user's location and the geometric distribution of the satellites, it selects the nearest virtual monitoring station and performs a weighted average correction for ephemeris errors and ionospheric delay, as shown in the following formula: ； Among them, T u The time delay difference is caused by the ephemeris error of the virtual reference station at the location of the satellite common-view acquisition module; i is an index variable, with a value from 1 to 3, representing the three monitoring stations closest to the satellite common-view acquisition module; r i Let be the geometric distance between the location of the satellite common-view acquisition module and the i-th monitoring station; T i Let be the time delay difference caused by ephemeris error measured at the i-th monitoring station.

3. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 1, characterized in that, The satellite common-view acquisition module acquires satellite pseudorange and phase observations, establishes a trust relationship between the receiver and the satellite using a proof-of-stake algorithm, selects a virtual common-view reference satellite to correct the observations, and finally eliminates the Doppler effect and ionospheric delay using a weighted least squares method.

4. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 1, characterized in that, The portable clock module signs the time data using the national cryptographic SM2 algorithm and compensates for clock drift during transport using an atomic clock timekeeping algorithm.

5. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 4, characterized in that, The portable clock module has a built-in Trusted Cryptography (TCM) submodule for securely generating and storing SM2 key pairs, private key d and public key P. Private key d is never exported, and public key P is pre-set in the secure timekeeping processing module on the classified intranet for verification.

6. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 4, characterized in that, The portable clock module has a built-in atomic clock, which outputs a 10MHz frequency signal and a 1PPS signal.

7. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 1, characterized in that, The unidirectional isolation module includes an optical unidirectional transmitting module and an optical unidirectional receiving module; The optical one-way transmitting module is located on a non-classified external network terminal, used to receive time data sent by the portable clock module, perform encryption, encoding and modulation processing, and transmit it unidirectionally to the optical one-way receiving module; The optical one-way receiving module is located on the classified intranet and is used to decrypt the time data sent by the optical one-way transmitting module and transmit it unidirectionally to the secure timekeeping processing module.

8. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 7, characterized in that, The secure timekeeping processing module receives verified integrity and reliable source time data from the optical one-way receiving module, and performs timekeeping and secondary security processing on this basis. The timekeeping and secondary security processing includes trusted execution environment isolation protection and SM2-based asymmetric key negotiation.

9. A time synchronization system based on satellite co-viewing and portable clock shifting as described in claim 8, characterized in that, The trusted execution environment isolation protection divides the classified intranet where the secure timekeeping processing module is located into a secure part and a normal part. The secure part contains the decrypted raw time data received by the secure timekeeping processing module, the timekeeping discipline core algorithm, and the driver and control program. The normal part contains the management interface of the secure timekeeping processing module. When the timekeeping algorithm needs to be executed, the application in the normal part calls the instruction through the predefined security monitor, and passes the request and parameters to the secure part. After the secure part completes the processing, it returns the result through the same channel. The SM2-based asymmetric key negotiation establishes a secure channel between the secure timekeeping processing module and the time distribution module for synchronous transmission of keys or sensitive instructions. The secure timekeeping processing module has a built-in key that matches the trusted cryptographic submodule TCM, and the secure timekeeping processing module can provide the public key to the trusted time distribution module.

10. A time synchronization method based on satellite common-view and portable clock shifting, implemented based on the time synchronization system based on satellite common-view and portable clock shifting as described in any one of claims 1 to 9, characterized in that, Includes the following steps: S1. Satellite common-view acquisition: The satellite common-view acquisition module receives signals from multiple satellites in parallel, calculates the time deviation through a dynamic weighted common-view algorithm, and outputs optimized time data to the portable clock module. S2. Portable clock taming and transportation: After the portable clock taming module tames the atomic clock, it is physically transported to the classified intranet terminal. S3. Unidirectional isolation transmission: The unidirectional isolation module encrypts the time data into an optical signal and transmits it unidirectionally to the secure timekeeping processing module. S4. Secure Timekeeping and Distribution: The secure timekeeping processing module decrypts and verifies the time data, performs timekeeping compensation, and then distributes it to intranet devices by the trusted time distribution module.

Images