A post-quantum cryptographic information security protection device for on-orbit satellite communication systems

Abstract

This invention discloses a post-quantum cryptography information security protection device for an on-orbit satellite communication system, relating to the field of digital information transmission technology. It includes a signal receiving module, a post-quantum cryptography processing module, a signal transmitting module, a power supply module, a radiation protection module, a control module, and an interface module. The signal receiving module, post-quantum cryptography processing module, and signal transmitting module are electrically connected sequentially. The control module is electrically connected to the signal receiving module, post-quantum cryptography processing module, signal transmitting module, and power supply module. The signal receiving module has a built-in anti-interference filtering circuit. The post-quantum cryptography processing module integrates a dedicated radiation-resistant cryptographic chip. This invention employs the aforementioned post-quantum cryptography information security protection device for an on-orbit satellite communication system, integrating a dedicated post-quantum cryptography algorithm, radiation-hardened design, low-power optimized architecture, and a full-process key management scheme to achieve comprehensive security protection for digital information in satellite communication.

Description

Technical Field

[0001] This invention relates to the field of digital information transmission technology, and in particular to a post-quantum cryptography information security protection device for an on-orbit satellite communication system. Background Technology

[0002] On-orbit satellite communication systems are the core infrastructure for cross-regional, wide-coverage digital information transmission. They are widely used in key areas such as meteorological remote sensing, global navigation, defense communications, and cross-border civilian communications. The data they transmit often involves core business information and sensitive classified data. Once information is illegally stolen, maliciously tampered with, or identity is forged, it will not only cause significant economic losses but also trigger systemic security risks. Therefore, the requirements for the security protection of the entire communication link are extremely high.

[0003] Currently, information security protection for on-orbit satellite communication systems generally relies on traditional public-key cryptographic algorithms such as RSA and ECC. The security of these algorithms is built upon classical mathematical problems such as prime factorization of large numbers and elliptic curve discrete logarithms. However, with the rapid breakthroughs and practical application of quantum computing technology, quantum computers with computing power advantages can quickly solve these mathematical problems using Shor's algorithm, directly rendering existing traditional cryptographic protection systems ineffective. On-orbit satellite communications face a severe threat of quantum attacks, and existing protection devices cannot meet the long-term stability and quantum-resistant security requirements. Summary of the Invention

[0004] The purpose of this invention is to provide a post-quantum cryptography information security protection device for on-orbit satellite communication systems. By integrating a dedicated post-quantum cryptography algorithm, radiation-hardened design, low-power optimized architecture, and full-process key management scheme, it achieves comprehensive security protection for digital information in satellite communication.

[0005] This invention provides a post-quantum cryptography information security protection device for an on-orbit satellite communication system, comprising a signal receiving module, a post-quantum cryptography processing module, a signal transmitting module, a power supply module, a radiation protection module, a control module, and an interface module; the signal receiving module, the post-quantum cryptography processing module, and the signal transmitting module are electrically connected sequentially; the control module is electrically connected to the signal receiving module, the post-quantum cryptography processing module, the signal transmitting module, and the power supply module respectively; the signal receiving module has a built-in anti-interference filtering circuit; the post-quantum cryptography processing module integrates a dedicated radiation-resistant cryptographic chip, which has a lattice-based post-quantum cryptography algorithm embedded in it; the signal transmitting module has a built-in power amplification circuit and a modulation circuit; the power supply module includes a solar power supply unit and a battery energy storage unit; the radiation protection module includes a radiation shielding shell and an internal radiation-resistant hardening circuit; the control module has a built-in fault detection unit and a redundant backup circuit.

[0006] Preferably, the post-quantum cryptography processing module also integrates a key management unit, which is electrically connected to a dedicated radiation-resistant cryptographic chip; the key management unit is set up with a three-level hierarchical key storage structure, which is divided into a root key storage area, a session key storage area and a data key storage area.

[0007] Preferably, both the signal receiving module and the signal transmitting module have built-in anti-interference units, which are electrically connected to the main circuits of the signal receiving module and the signal transmitting module, respectively; the anti-interference units have built-in frequency hopping communication circuits and error control coding circuits.

[0008] Preferably, the core controller of the control module is a radiation-resistant FPGA chip.

[0009] Preferably, the interface module is electrically connected to the control module; the interface module integrates an RS422 interface, a CAN interface, and an Ethernet interface.

[0010] Preferably, the radiation shielding shell is made of titanium alloy; the internal radiation-resistant hardening circuit adopts a redundant backup design.

[0011] Preferably, the power supply module also has a built-in power management circuit, which is electrically connected to the solar power supply unit and the battery energy storage unit respectively.

[0012] Preferably, the power amplifier circuit of the signal transmission module is an adaptive power amplifier circuit.

[0013] Therefore, the present invention adopts the above-mentioned post-quantum cryptography information security protection device for an on-orbit satellite communication system, which integrates a dedicated post-quantum cryptography algorithm, radiation hardening design, low power consumption optimized architecture and full-process key management scheme to achieve comprehensive security protection for digital information in satellite communication.

[0014] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. Attached Figure Description

[0015] Figure 1 This is an overall structural block diagram of a post-quantum cryptography information security protection device for an on-orbit satellite communication system according to the present invention; Figure 2 This is a block diagram of the internal structure of the post-quantum cryptography processing module of a post-quantum cryptography information security protection device for an on-orbit satellite communication system according to the present invention. Detailed Implementation

[0016] The technical solution of the present invention will be further described below with reference to the accompanying drawings and embodiments.

[0017] Unless otherwise defined, the technical or scientific terms used in this invention shall have the ordinary meaning as understood by one of ordinary skill in the art to which this invention pertains.

[0018] The terms "first," "second," and similar words used in this invention do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the elements or objects listed after the word and their equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. Terms such as "upper," "lower," "left," and "right" are used only to indicate relative positional relationships; when the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0019] Example 1 like Figures 1-2 As shown, this invention discloses a post-quantum cryptography information security protection device for an on-orbit satellite communication system, comprising a signal receiving module, a post-quantum cryptography processing module, a signal transmitting module, a power supply module, a radiation protection module, a control module, and an interface module. The signal receiving module, post-quantum cryptography processing module, and signal transmitting module are electrically connected sequentially. The control module is electrically connected to the signal receiving module, post-quantum cryptography processing module, signal transmitting module, and power supply module respectively. The signal receiving module has a built-in anti-interference filtering circuit. The post-quantum cryptography processing module integrates a dedicated radiation-resistant cryptographic chip, which has a lattice-based post-quantum cryptography algorithm embedded in it. The signal transmitting module has a built-in power amplification circuit and a modulation circuit. The power supply module includes a solar power supply unit and a battery energy storage unit. The radiation protection module includes a radiation shielding shell and an internal radiation-resistant hardening circuit. The control module has a built-in fault detection unit and a redundant backup circuit.

[0020] The overall design adopts a modular integrated design, with all functional modules integrated on the same aerospace-grade PCB board. The modules are connected to each other through copper traces on the PCB board to achieve a stable electrical connection. The overall structure is compact and lightweight, suitable for the small installation space on satellites. The modules work together to complete the quantum security protection process for the entire process of satellite communication digital information.

[0021] The post-quantum cryptography processing module is further optimized and also integrates a key management unit, which is electrically connected to a dedicated radiation-resistant cryptographic chip. The key management unit is set up with a three-level hierarchical key storage structure, which is divided into a root key storage area, a session key storage area, and a data key storage area.

[0022] The key management unit uses a dedicated hardware encryption chip, which is electrically connected to a dedicated radiation-resistant cryptographic chip via a high-speed parallel data bus. The three-level key storage areas are physically isolated from each other. The root key storage area uses an offline injection method to solidify the core key, which cannot be arbitrarily rewritten on track. The session key storage area supports dynamic updates and erasure on track. The data key storage area is used to temporarily store business encrypted derived keys. The entire process is under closed-loop control to eliminate the risk of key leakage.

[0023] To enhance communication anti-interference capabilities, both the signal receiving and signal transmitting modules incorporate anti-interference units, which are electrically connected to the main circuits of their respective modules. Each anti-interference unit integrates a frequency-hopping communication circuit and an error control coding circuit. The anti-interference unit and the corresponding module's main circuit are directly electrically connected. The frequency-hopping communication circuit is compatible with the conventional operating frequency bands of satellite communication, effectively mitigating space electromagnetic interference. The error control coding circuit corrects bit errors generated during signal transmission, significantly improving the stability and reliability of the communication link.

[0024] The control module uses aerospace-grade core components, with the core controller being a radiation-hardened FPGA chip. This chip is a professional aerospace-grade radiation-hardened model, possessing resistance to total dose radiation in space and single-event upset characteristics. It also features low power consumption and high integration, enabling precise coordination of the timing control and operational status monitoring of each module, perfectly adapting to the extremely complex on-orbit operating environment.

[0025] To achieve seamless integration between the device and external equipment, a supporting interface module is added, which is electrically connected to the control module. The interface module integrates RS422, CAN, and Ethernet interfaces. The interface module is directly electrically connected to the I / O ports of the control module via the control bus. The three types of interfaces correspond to the satellite platform control unit, other onboard payload equipment, and ground station communication terminals, respectively. Installation and integration can be completed without additional hardware modifications, demonstrating strong adaptability.

[0026] The radiation shielding shell is made of titanium alloy; the internal radiation-hardened circuitry employs a redundant backup design, and the radiation resistance level of the electronic components used is no less than 100 klad (Si). The titanium alloy radiation shielding shell meets the required thickness, completely enclosing all internal circuits and components, effectively shielding against high-energy particle radiation in space; the internal core functional circuitry uses dual redundant backup wiring, physically isolated from the main circuitry and serving as backups for each other; all electronic components are selected from aerospace-grade high-radiation-resistant models, meeting the radiation resistance requirements for long-term stable operation of the device in orbit.

[0027] The dedicated radiation-resistant cryptographic chip is embedded with two post-lattice quantum cryptographic algorithms: the CRYSTALS-Kyber key exchange algorithm and the CRYSTALS-Dilithium digital signature algorithm, with a key length of 2048 bits. Both algorithms are hardware-based and programmed into the dedicated radiation-resistant cryptographic chip, allowing for rapid operation without software loading. This approach balances strong resistance to quantum attacks with high processing efficiency, meeting the low-latency transmission requirements of satellite communications.

[0028] To ensure continuous power supply in orbit, the power supply module also has a built-in power management circuit, which is electrically connected to the solar power supply unit and the battery energy storage unit. The power management circuit integrates voltage conversion, overload protection, and intelligent power switching functions, which can achieve seamless switching between the solar power supply unit and the battery energy storage unit, stabilize the operating voltage required by the device, take into account the power supply needs of the sunny area and the shaded area, and ensure the continuous operation of the device around the clock.

[0029] The signal receiving module adapts to various communication scenarios, with a signal reception rate range of 1kbps-100Mbps. It is compatible with satellite communication modulation and demodulation protocols for both satellite-to-ground and inter-satellite links. Wide-rate signal reception is achieved through hardware circuit design, ensuring compatibility with standard protocols for both satellite-to-ground and inter-satellite core communication links. It can be directly integrated into existing satellite communication systems, demonstrating strong versatility.

[0030] The signal transmission module is adapted to the link transmission characteristics. Its power amplifier circuit is an adaptive power amplifier circuit, with an adjustable transmission power range of 1W-10W. The modulation circuit is a QPSK modulation circuit. The adaptive power amplifier circuit can dynamically adjust the transmission power according to the real-time signal-to-noise ratio of the communication link, balancing transmission stability and energy consumption control. The QPSK modulation circuit conforms to common satellite communication standards, ensuring stable transmission of encrypted signals to the target receiver.

[0031] After assembly, the overall operation is smooth and seamless: After the device is powered on, the power supply module provides stable power to each module through the power management circuit, and the control module completes system initialization and self-testing based on the radiation-resistant FPGA chip. Subsequently, the signal receiving module receives satellite communication signals, which are preprocessed by the anti-interference filtering circuit and then transmitted to the post-quantum cryptography processing module. The dedicated radiation-resistant cryptographic chip calls the solidified algorithm and works with the key management unit to complete encryption / decryption and signature / verification processing. The processed signal is transmitted to the signal transmitting module, modulated and amplified, and then transmitted to the communication link. Throughout the operation of the device, the fault detection unit of the control module monitors the status of each module in real time. If an abnormality occurs, the redundant backup circuit is immediately activated. The radiation protection module resists space radiation interference throughout the entire process, realizing full post-quantum security protection for satellite communication.

[0032] Therefore, the present invention adopts the above-mentioned post-quantum cryptography information security protection device for an on-orbit satellite communication system, which integrates a dedicated post-quantum cryptography algorithm, radiation hardening design, low power consumption optimized architecture and full-process key management scheme to achieve comprehensive security protection for digital information in satellite communication.

[0033] The above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the technical solutions of the present invention, and these modifications or equivalent substitutions cannot cause the modified technical solutions to deviate from the spirit and scope of the technical solutions of the present invention.

Claims

1. A post-quantum cryptographic information security protection device for on-orbit satellite communication systems, characterized by, It includes a signal receiving module, a post-quantum cryptography processing module, a signal transmitting module, a power supply module, a radiation protection module, a control module, and an interface module. The signal receiving module, post-quantum cryptography processing module, and signal transmitting module are electrically connected sequentially. The control module is electrically connected to the signal receiving module, post-quantum cryptography processing module, signal transmitting module, and power supply module respectively. The signal receiving module has a built-in anti-interference filtering circuit. The post-quantum cryptography processing module integrates a dedicated radiation-resistant cryptographic chip, which has a lattice-based post-quantum cryptography algorithm embedded in it. The signal transmitting module has a built-in power amplification circuit and a modulation circuit. The power supply module includes a solar power supply unit and a battery energy storage unit. The radiation protection module includes a radiation shielding shell and an internal radiation-resistant hardening circuit. The control module has a built-in fault detection unit and a redundant backup circuit.

2. The post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The post-quantum cryptography processing module also integrates a key management unit, which is electrically connected to a dedicated radiation-resistant cryptographic chip. The key management unit is equipped with a three-level hierarchical key storage structure, which is divided into a root key storage area, a session key storage area, and a data key storage area.

3. The post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, Both the signal receiving module and the signal transmitting module have built-in anti-interference units, which are electrically connected to the main circuits of the signal receiving module and the signal transmitting module, respectively. The anti-interference units have built-in frequency hopping communication circuits and error control coding circuits.

4. The post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The core controller of the control module is a radiation-resistant FPGA chip.

5. A post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The interface module is electrically connected to the control module; the interface module integrates RS422 interface, CAN interface and Ethernet interface.

6. A post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The radiation shielding shell is made of titanium alloy; the internal radiation-resistant hardening circuit adopts a redundant backup design.

7. A post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The power supply module also has a built-in power management circuit, which is electrically connected to the solar power supply unit and the battery energy storage unit.

8. A post-quantum cryptography information security protection device for an on-orbit satellite communication system according to claim 1, characterized in that, The power amplifier circuit of the signal transmission module is an adaptive power amplifier circuit.

Images