A fast networking method, system and device based on ship-to-ship communication and a storage medium

Abstract

The application provides a ship-ship communication-based rapid networking method, system, device and storage medium, and the method comprises the following steps: a ship collects channel state and ship state data through a shipborne terminal, dynamically configures networking parameters and generates a communication configuration table; networking invitation information is generated according to the communication configuration table and is sent in parallel through a dual-mode broadcast channel; after receiving an access request of a responding ship, the identity information of the responding ship is verified, an access confirmation packet is generated after the verification is passed, and the access confirmation packet is sent through an optimal confirmation channel; after receiving a network access completion packet, identity credentials and key information are verified, and the responding ship is connected to the network after the verification is passed. Through parameter preconfiguration, the number of dynamic negotiation rounds in the networking process is reduced, the invitation discovery time is shortened through parallel sending in dual modes, and the number of interactive round trips is reduced through the combination of identity verification and channel confirmation, so that rapid networking is realized in a dynamic ship moving environment, and the real-time requirement of communication for maritime cooperative operation is met.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a rapid networking method, system, device and storage medium based on ship-to-ship communication. Background Technology

[0002] Ship-to-ship communication is a core support for maritime operations, fleet coordination, and emergency rescue. Traditional ship-to-ship communication relies on VHF radios, satellite communication, and other methods. However, when introducing HarmonyOS distributed soft bus, traditional ship-to-ship networking requires manual configuration of communication parameters. The standard HarmonyOS soft bus process (multi-turn handshake, centralized authentication) has poor adaptability. In dynamic maritime scenarios (ship movement, distance changes), networking takes ≥5 seconds, which cannot meet the needs of emergency coordination. Summary of the Invention

[0003] This application provides a rapid networking method, system, device, and storage medium based on ship-to-ship communication, which solves the problem that existing technologies cannot meet emergency collaboration needs when introducing HarmonyOS distributed soft bus.

[0004] The first aspect of this application provides a rapid networking method based on ship-to-ship communication, the rapid networking method based on ship-to-ship communication comprising: The shipborne terminal collects channel status data and ship status data between the initiating vessel and surrounding vessels, dynamically configures network parameters based on the channel status data and ship status data, and generates a communication configuration table that matches the current maritime scenario. Generate networking invitation information according to the communication configuration table, and send networking invitations to the surrounding vessels through a dual-mode broadcast channel; After receiving the access request sent by the responding ship based on the networking invitation, the identity information of the responding ship is verified. After the identity information is verified, an access confirmation packet is generated and sent to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel. After receiving the network access completion packet returned by the responding vessel within the preset confirmation waiting time, the identity credentials and key confirmation information in the network access completion packet are verified. After successful verification, the responding vessel is connected to the network for normal communication.

[0005] Optionally, in a first implementation of the first aspect of this application, the step of generating network invitation information based on the communication configuration table and sending the network invitation to the surrounding vessels through a dual-mode broadcast channel includes: Based on the channel configuration parameters in the communication configuration table, a first network invitation message and a second network invitation message are generated respectively; wherein, the first network invitation message is generated by embedding network extension information in the broadcast message of the AIS device, and the second network invitation message is generated by constructing a network discovery call through the VHF-DSC channel, or the second network invitation message is constructed as a low-power beacon in the LoRa maritime band. Based on the transmission power parameters in the communication configuration table, the first network invitation message is broadcast via the AIS channel in the VHF band. Based on the near-field discovery channel parameters in the communication configuration table, the second network invitation message is broadcast via VHF-DSC channel or LoRa maritime band, and the first network invitation message and the second network invitation message are controlled to be sent in parallel in the time domain.

[0006] Optionally, in the second implementation of the first aspect of this application, the step of verifying the identity information of the responding vessel after receiving the access request sent by the responding vessel based on the networking invitation includes: Upon receiving an access request sent by the responding ship based on the networking invitation, the responding ship identifier and the anti-replay random number sequence generated by the responding ship are extracted from the access request. The responding vessel identifier will be compared byte by byte with the list of trusted vessel identifiers pre-stored by the receiving vessel; When the responding vessel identification code exists in the trusted vessel identification code list, the difference between the anti-replay random number sequence and each historical random number in the locally recorded historical random number set is calculated. When the difference between the anti-replay random number sequence and all historical random numbers is not zero, the access request message is confirmed as a valid request.

[0007] Optionally, in the third implementation of the first aspect of this application, the step of generating an access confirmation packet after the identity information verification is successful, and sending the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel, includes: The channel configuration parameters of the responding ship are matched with the channel configuration parameters in the communication configuration table to determine the optimal acknowledgment channel and corresponding channel parameters between the initiating ship and the responding ship. Based on the responding vessel identification code, retrieve the responding vessel's public key from the locally stored maritime safety certificate database; The session key generated by the initiating ship is encrypted using the public key of the responding ship to obtain an encryption key and a key fragment of the encryption key at a preset key position is obtained. The node number of the responding ship is determined based on the number of nodes in the current network topology; The key fragment, the node number, and the current network topology version number are padded with bytes of a fixed length to generate an access confirmation packet.

[0008] Optionally, in the fourth implementation of the first aspect of this application, the step of verifying the identity credentials and key confirmation information in the network access completion packet includes: Extract the identity credential digest and key confirmation hash value of the responding vessel from the network access completion packet; wherein, the identity credential digest is the first N bytes of the hash value corresponding to the maritime security certificate of the responding vessel, and the key confirmation hash value is the first M bytes of the hash value of the session key obtained by the responding vessel from decrypting the key fragment; The identity credential digest is matched byte by byte with the first N bytes of each certificate hash value in the maritime security certificate database. When the identity credential digest matches any certificate hash value, the first M bytes of the key confirmation hash value are compared bit by bit with the hash value corresponding to the session key. When the first M bytes of the key confirmation hash value are consistent with the first M bytes of the hash value corresponding to the session key, verify the rationality of the network entry completion timestamp in the network entry completion packet; When the absolute value of the difference between the network access completion timestamp and the local time is less than or equal to a preset time threshold, the network access completion packet is confirmed as a valid completion packet.

[0009] Optionally, in the fifth implementation of the first aspect of this application, the method further includes: Collect the heartbeat status value of the communication module corresponding to the current channel; When the heartbeat status value is invalid within a preset monitoring period, a device fault status message is sent to the master node in the network, and the master node is controlled to match the node address of at least one neighboring ship in the network according to the fault node in the device fault status message. Each task item in the communication task list corresponding to the faulty node is sent sequentially to the node address of the neighboring ship.

[0010] A second aspect of this application provides a rapid networking system based on ship-to-ship communication, wherein the rapid networking system based on ship-to-ship communication is used to implement a rapid networking method based on ship-to-ship communication, and the rapid networking system based on ship-to-ship communication includes: The configuration module is used to collect channel status data and ship status data between the initiating vessel and surrounding vessels through the shipborne terminal, dynamically configure networking parameters based on the channel status data and ship status data, and generate a communication configuration table that matches the current maritime scenario. The sending module is used to generate networking invitation information according to the communication configuration table and send the networking invitation to the surrounding ships through a dual-mode broadcast channel; The verification module is used to verify the identity information of the responding ship after receiving the access request sent by the responding ship based on the networking invitation, generate an access confirmation packet after the identity information is verified, and send the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel. The communication module is used to verify the identity credentials and key confirmation information in the network access completion packet after receiving the network access completion packet returned by the responding vessel within a preset confirmation waiting time. After successful verification, the responding vessel is connected to the network for normal communication.

[0011] Optionally, in the first implementation of the second aspect of this application, the recovery module is used to collect the heartbeat status value of the communication module corresponding to the current channel; when the heartbeat status value is invalid within a preset monitoring period, it sends a device fault status message to the master node in the network, and controls the master node to match at least one neighboring ship node address in the network according to the fault node in the device fault status message; and sequentially sends each task item in the communication task list corresponding to the fault node to the node address of the neighboring ship.

[0012] A third aspect of this application provides an electronic device, including a memory and a processor, wherein the processor is configured to execute a computer program stored in the memory, and when the processor executes the computer program, it implements the steps of the rapid networking method based on ship-to-ship communication provided in the first aspect of this application.

[0013] The fourth aspect of this application provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, it implements the steps of the rapid networking method based on ship-to-ship communication provided in the first aspect of this application.

[0014] In summary, according to the rapid networking method, system, equipment and storage medium based on ship-to-ship communication provided in this application, this application reduces the number of dynamic negotiation rounds in the networking process by pre-configuring parameters, shortens the invitation discovery time by sending messages in parallel with dual modes, and reduces the number of round trips by merging authentication and channel confirmation, thereby achieving rapid networking in the dynamic mobile environment of ships and meeting the real-time communication requirements of maritime collaborative operations. Attached Figure Description

[0015] Figure 1 A flowchart illustrating the rapid networking method based on ship-to-ship communication provided in this application embodiment; Figure 2A flowchart illustrating a rapid networking method based on ship-to-ship communication for a response vessel, provided in an embodiment of this application; Figure 3 A schematic diagram of the HarmonyOS distributed soft bus technology architecture for a ship-to-ship communication system provided in this application embodiment; Figure 4 A schematic diagram of the service interaction timing of the rapid networking method based on ship-to-ship communication provided in the embodiments of this application; Figure 5 A schematic diagram of the program modules of a rapid networking system based on ship-to-ship communication provided in an embodiment of this application; Figure 6 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0016] To make the inventive objectives, features, and advantages of this application more apparent and understandable, the technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0017] To address the issue that existing technologies cannot meet emergency collaboration requirements when introducing HarmonyOS distributed soft bus, this application provides a rapid networking method based on ship-to-ship communication, such as... Figure 1 This is a flowchart illustrating a rapid networking method based on ship-to-ship communication for initiating a network invitation, as provided in this embodiment. The rapid networking method based on ship-to-ship communication includes the following steps: Step 110: Collect channel status data and ship status data between the initiating vessel and surrounding vessels through the shipborne terminal, dynamically configure networking parameters based on the channel status data and ship status data, and generate a communication configuration table that matches the current maritime scenario.

[0018] Specifically, the shipborne terminal jointly collects information on the communication environment and the ship's motion status, and judges the collection results according to the preset parameter mapping rules. It maps different channel quality levels and the ship's relative position to the pre-stored parameter templates, thereby automatically determining the channel type, transmission power, modulation method, frame structure and retransmission control parameters required for communication, and combining the selected parameters to generate a unified communication configuration table.

[0019] Step 120: Generate network invitation information based on the communication configuration table, and send the network invitation to surrounding ships through the dual-mode broadcast channel.

[0020] Specifically, the broadcast content required for network formation is constructed based on the generated communication configuration table. Key identification information and parameter summaries are embedded in long-distance broadcast messages. At the same time, broadcast signals suitable for short-range detection are generated, and transmission control is performed on the corresponding channels according to the channel type and transmission parameters set in the configuration table. By coordinating the transmission timing of different broadcast contents, the two types of signals are made to form a parallel or alternating relationship in time, thereby realizing the diffusion of network information in different coverage areas and improving the reception probability of surrounding nodes.

[0021] Step 130: After receiving the access request sent by the responding ship based on the networking invitation, verify the identity information of the responding ship. After the identity information is verified, generate an access confirmation packet and send the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel.

[0022] Specifically, upon receiving an access request, the system processes the identification information and random data contained therein. The identification information is matched against a locally stored set of valid identifiers to confirm its source legitimacy, and the random data is validated to exclude duplicate requests. After completing the above verification, the system matches the channel capabilities supported by both parties with the parameters in the current configuration table to select a suitable channel for communication between the two parties. At the same time, the generated session key is encrypted, and the corresponding fragments are extracted and encapsulated together with the assigned node number and current network status information into data content in a fixed format, which is then sent to the other party through the selected channel.

[0023] Step 140: After receiving the network access completion packet returned by the responding vessel within the preset confirmation waiting time, verify the identity credentials and key confirmation information in the network access completion packet. After successful verification, connect the responding vessel to the network for normal communication.

[0024] Specifically, upon receiving the returned information, the consistency of the identity credential digest and key confirmation data is verified. The identity credential digest is matched with local certificate information to confirm its validity. Simultaneously, the correspondence of key-related data is verified to confirm the consistency of the negotiation results. The validity of the time data in the returned information is also judged. When all the above verification results meet preset conditions, the access process is confirmed as complete. After access confirmation, the corresponding node is incorporated into the current network structure, and a data transmission relationship is established based on the determined communication parameters and the negotiated key. During operation, data interaction is performed according to predetermined parameters, while maintaining the updating and synchronization of network status information to support continuous network operation and normal communication.

[0025] In one optional implementation, the step of generating network invitation information according to a communication configuration table and sending the network invitation to surrounding vessels via a dual-mode broadcast channel includes: generating a first network invitation message and a second network invitation message according to the channel configuration parameters in the communication configuration table; wherein, the first network invitation message is generated by embedding network extension information in the broadcast message of the AIS device, and the second network invitation message is generated by constructing a network discovery call via a VHF-DSC channel, or the second network invitation message is constructed as a low-power beacon in the LoRa maritime band; the first network invitation message is broadcast in the form of a VHF band AIS channel according to the transmission power parameters in the communication configuration table, and the second network invitation message is broadcast in the form of a VHF-DSC channel or a LoRa maritime band according to the near-field discovery channel parameters in the communication configuration table, and the first network invitation message and the second network invitation message are controlled to be sent in parallel in the time domain.

[0026] In this embodiment, after the communication configuration table is determined, the network invitation information is structured according to the channel configuration parameters therein. The first network invitation message is formed by embedding extended information in the AIS broadcast message. AIS, or Automatic Identification System for Ships, essentially transmits standardized messages periodically on the VHF band to achieve the sharing of ship identity and location. Based on this, the data fields of the AIS message are extended to encode the ship identification, communication capability summary, and parameter index required for networking into reserved or custom fields. The encoded data is then concatenated bit by bit so that it can be sent along with the original AIS message, thereby achieving long-distance dissemination of networking information without changing the original communication mechanism. Meanwhile, the second network invitation message is constructed based on the near-range discovery channel parameters in the communication configuration table. When the VHF-DSC channel is selected, a network discovery call is generated through a digital selective calling mechanism. VHF-DSC is a selective calling technology based on digital coding, which achieves directional or broadcast calls by transmitting data frames containing target identification codes and call types on a specific channel. Therefore, network identification and response indications can be added to the call content to guide the receiving vessel into the communication process. When the LoRa maritime band is selected, the network information is encapsulated into low-power beacon data frames. LoRa is a long-range low-speed communication technology based on spread spectrum modulation. It improves anti-interference capabilities by expanding signal bandwidth. Therefore, when constructing the beacon, key fields are compressed and encoded and embedded in a fixed-length data payload to adapt to its lower data rate and ensure transmission reliability. After generating the two types of messages, the first network invitation message is transmitted according to the transmission power parameters in the communication configuration table. It is broadcast via the AIS channel in the VHF band. The transmission power parameters limit the energy of the transmitted signal, thus controlling signal interference while ensuring coverage. In the specific implementation, the power amplifier of the transmission module is adjusted according to the configuration value to ensure sufficient signal reception strength within the predetermined coverage radius. Simultaneously, the second network invitation message is broadcast via the corresponding channel selected based on the proximity discovery channel parameters. When using the VHF-DSC channel, the constructed call data frame is loaded into the corresponding channel and a broadcast call is executed. When using the LoRa band, beacon data is transmitted according to the set spreading factor and bandwidth parameters, thereby achieving rapid wake-up of nearby vessels.To improve detection efficiency across different distances, the transmission times of the two types of messages are coordinated and controlled to create a parallel relationship in the time domain. Time-domain parallelism refers to scheduling the transmission behavior of different channels along the time axis, ensuring that the two types of signals are transmitted within overlapping or interleaved time windows. This avoids the waiting delays caused by single-channel transmission. In specific implementations, by setting transmission periods and offset times, AIS broadcasts and proximity beacons are transmitted in adjacent or partially overlapping time periods. This ensures that distant vessels can continuously receive extended AIS information, while nearby vessels can receive the detection signal in a shorter time. Taking a near-shore operation scenario as an example, after completing communication configuration, a command vessel continuously broadcasts messages embedding network information through the AIS channel, enabling operating vessels within a range of several nautical miles to receive the relevant information. Simultaneously, within short time intervals, it sends network calls via VHF-DSC or sends low-power beacons via LoRa, allowing nearby operating vessels to quickly enter the response process upon receiving the signal. This achieves simultaneous network triggering at different distance levels, improving overall network efficiency and success rate.

[0027] In one optional implementation, the step of verifying the identity information of the responding ship after receiving an access request sent by the responding ship based on a network invitation includes: after receiving the access request sent by the responding ship based on a network invitation, extracting the responding ship identifier code and the anti-replay random number sequence generated by the responding ship from the access request; comparing the responding ship identifier code with a list of trusted ship identifier codes pre-stored by the receiving ship byte by byte; when the responding ship identifier code exists in the list of trusted ship identifier codes, calculating the difference between the anti-replay random number sequence and each historical random number in the locally recorded historical random number set; when the difference between the anti-replay random number sequence and all historical random numbers is not zero, confirming that the access request message is a valid request.

[0028] In this embodiment, upon receiving an access request from the responding vessel, the request data frame is parsed. The responding vessel identifier and an anti-replay random number sequence are extracted from a fixed-format data structure. The responding vessel identifier uniquely identifies the vessel initiating access; it is generated by hashing the vessel's registration number or device identity information, thus ensuring uniqueness while reducing the risk of exposing the original identifier. The anti-replay random number sequence is a randomly generated sequence of values ​​that the responding vessel dynamically generates when sending the request. Essentially, it prevents the reuse of old data by introducing unpredictable data. After field extraction, the responding vessel identifier is compared byte-by-byte with a locally pre-stored list of trusted vessel identifiers. This byte-by-byte comparison means performing consistency checks one by one according to the byte order in storage, starting from the first byte. A match is considered successful only when all corresponding bytes are completely identical. This method avoids misjudgments due to partial field matching and improves the accuracy of identifier identification. After confirming that the identifier exists in the trusted list, the validity of the anti-replay random number sequence is further determined. This process relies on a locally maintained historical random number set, which records received and verified random number sequences. Its purpose is to detect whether there is any reuse, thereby preventing attackers from forging legitimate requests by repeatedly sending historical data packets. In specific implementation, the difference between the currently received random number sequence and each random number in the historical set is calculated. The difference calculation involves subtracting the two values ​​bit by bit or as a whole and checking if the result is zero. When the result is zero, it means that the two are exactly the same, and when the result is not zero, it means that there is a difference. By comparing it with all records in the historical set in turn, if any difference is zero, it means that the current random number has been used before, and the request should be judged as duplicate data and discarded. Conversely, when the difference with all historical random numbers is not zero, it means that the random number has appeared for the first time, and the request can be considered fresh. In the above determination process, to ensure comparison efficiency and storage rationality, time window management can be implemented for the historical random number set. That is, only random number records within a certain time range are retained to avoid the infinite growth of the set size affecting processing efficiency, while ensuring that replay behavior within the valid time range can be detected. In the context of near-shore operations, when a command vessel receives an access request from a nearby operating vessel, it first parses its identifier code and completes the matching in its local trusted list. Then, it compares the random number sequence carried in the request one by one. For example, if the current random number is "8F3A2C10", and the historical set has recorded values ​​such as "7A1B9D22" and "3C4E5F66", and the differences are calculated one by one to confirm that they are all different, it means that the request has not been reused, and the access request is finally confirmed as a valid request.

[0029] In one optional embodiment, the steps of generating an access confirmation packet after successful identity verification and sending the access confirmation packet to the responding vessel according to the optimal confirmation channel of the dual-mode broadcast channel include: matching the channel configuration parameters of the responding vessel with the channel configuration parameters in the communication configuration table to determine the optimal confirmation channel and corresponding channel parameters between the initiating vessel and the responding vessel; obtaining the responding vessel's public key from a locally pre-stored maritime safety certificate database based on the responding vessel's identifier code; encrypting the session key generated by the initiating vessel based on the responding vessel's public key to obtain an encryption key and obtaining a key fragment of the encryption key at a preset key position; determining the responding vessel's node number based on the number of nodes in the current network topology; and padding the key fragment, node number, and current network topology version number with bytes of a fixed length to generate the access confirmation packet.

[0030] In this embodiment, after confirming the validity of the access request, the channel configuration parameters reported by the responding vessel are matched with the corresponding parameters in the local communication configuration table. The channel configuration parameters include available channel types, supported modulation schemes, tolerable bandwidth range, and transmission and reception capabilities. By intersecting and filtering the parameter sets from both ends, channel types not supported by either party are eliminated. From the remaining available channels, candidate channels are ranked based on the current channel quality indicators, thus selecting the channel with a better balance between stability and transmission efficiency as the confirmation channel. Simultaneously, the specific parameters corresponding to this channel are extracted as the basis for communication. For example, in near-shore operations, if the responding vessel supports both VHF and satellite links, and the current channel quality indicates higher stability for the VHF signal, VHF is preferentially selected as the confirmation channel, and its modulation and rate parameters are determined. After channel selection, the corresponding certificate record is retrieved from the locally pre-stored maritime safety certificate database based on the responding vessel's identification code, and the responding vessel's public key information is extracted. The public key is a public key used for encrypting data; its corresponding private key is held only by the responding vessel. Data encrypted with the public key can only be decrypted with the corresponding private key, thus ensuring the security of the key transmission process. The initiating ship then generates a session key, which is used for symmetric encryption of data communication. This session key is characterized by its fixed length and randomness. The obtained public key is then used to encrypt this session key, forming encrypted key data. To reduce transmission load and adapt to the fixed data structure, a continuous byte segment is extracted from the encryption result at a preset position as the key fragment. The preset position refers to a fixed offset interval within the encrypted data. This fixed-position extraction ensures that the receiving end can restore the data according to the same rules. Node numbers are assigned to the responding ship based on the number of nodes in the current network topology. Node numbers are used to identify the unique logical address of each device in the network. They are generated by incrementally processing the existing number of nodes. For example, if there are already 3 nodes in the current network, the newly added node is assigned the number 4, thus ensuring that the numbers are not duplicated and facilitating management. Simultaneously, a version number is generated based on the current network topology status. The network topology version number is used to identify changes in the current network structure and is updated whenever a node joins or leaves, allowing each node to determine if the topology has changed. After the above information is prepared, the key fragment, node number, and network topology version number are encapsulated according to a preset data structure. Fixed-length byte padding means allocating a fixed number of bytes to each field. For example, the key fragment occupies 16 bytes, the node number occupies 2 bytes, and the topology version number occupies 4 bytes. When the actual data length is insufficient, it is padded with specific bytes to form a data structure with consistent length. This process enables the receiving end to not need to additionally judge the field boundaries during parsing, thereby improving parsing efficiency and reliability.In a near-shore operation scenario, when a command vessel generates access confirmation information for a newly joined operation vessel, it first determines the VHF channel supported by both parties and selects it as the confirmation link. Then, it retrieves the public key corresponding to the operation vessel from the certificate store, encrypts the generated session key, and extracts 16 bytes at a specified position as a key fragment. Next, it assigns a new node number to the operation vessel and appends the current topology version number. Finally, it fills each field with a fixed length and combines them into a complete data packet, which is then sent to the responding vessel to complete the access process.

[0031] In one optional implementation, the step of verifying the identity credential and key confirmation information in the network access completion packet includes: extracting the identity credential digest and key confirmation hash value of the responding vessel from the network access completion packet; wherein, the identity credential digest is the first N bytes of the hash value corresponding to the maritime security certificate of the responding vessel, and the key confirmation hash value is the first M bytes of the hash value of the session key obtained by decrypting the key fragment of the responding vessel; matching the identity credential digest with the first N bytes of the hash values ​​of each certificate in the maritime security certificate database byte by byte; when the identity credential digest matches any certificate hash value successfully, comparing the first M bytes of the key confirmation hash value with the hash value corresponding to the session key bit by bit; when the first M bytes of the key confirmation hash value match the hash value corresponding to the session key, verifying the rationality of the network access completion timestamp in the network access completion packet; when the absolute value of the difference between the network access completion timestamp and the local time is less than or equal to a preset time threshold, confirming the network access completion packet as a valid completion packet.

[0032] In this embodiment, after receiving the network access completion packet, the data content is parsed, and the identity credential digest and key confirmation hash value are extracted from the data fields with a fixed structure. The identity credential digest is the first N bytes of the result obtained by hashing the maritime safety certificate held by the responding vessel. The hash value is a fixed-length data segment obtained by performing a one-way compression calculation on the original data. Its characteristic is that different inputs correspond to different outputs and the original content cannot be deduced from the result. By truncating the first N bytes, sufficient distinguishability can be retained while reducing the data length. The key confirmation hash value is formed by the responding vessel performing the same hashing process on the obtained session key after receiving and decrypting the key fragment, and truncating the first M bytes. It is used to prove that the responding vessel has correctly obtained the session key. After field extraction, the identity credential digest is matched against the hash values ​​of each certificate in the local maritime security certificate database. Specifically, a complete hash value is pre-calculated for each certificate record in the certificate database, and the first N bytes are extracted during the matching process. This hash value is then compared byte-by-byte with the received identity credential digest. This byte-by-byte comparison checks whether the data at corresponding positions is completely identical, and a match is considered successful only when all corresponding bytes are identical. This process ensures the uniqueness and accuracy of the matching results. When any certificate record matches successfully, it confirms that the identity credential submitted by the responding vessel is within the local trusted range. After identity verification, the key confirmation hash value undergoes a consistency check. It is compared bit-by-bit with the first M bytes of the hash value corresponding to the session key stored locally on the initiating vessel. This bit-by-bit comparison ensures that each binary digit is compared individually to guarantee complete data consistency, thereby verifying that the session key calculated by the responding vessel is consistent with the locally generated session key. This process confirms that the key has not been erroneous or tampered with during transmission and decryption. After completing the key consistency verification, the timestamp in the network entry completion packet is judged for reasonableness. The timestamp is a numerical identifier that records the time when the data was generated. By calculating the difference between this time value and the local current time, it is determined whether the absolute value is within a preset time threshold range. If the difference is too large, it indicates that the data may be delayed or replayed data, and is therefore unacceptable. If the difference is within the allowable range, it indicates that the data is timely. If all the above checks pass, the network entry completion packet is finally confirmed as a valid completion packet, thus allowing the responding vessel to officially join the network. In the context of near-shore operations, after a command vessel receives the network entry completion information returned by a working vessel, it parses the identity credential digest and key confirmation hash value. The digest is compared with the first N bytes of the corresponding vessel certificate hash value recorded in the local certificate store to confirm its legitimacy. Then, the key confirmation hash value is checked bit by bit with the hash result of the local session key to confirm that the keys of both parties are consistent. Finally, the difference between the timestamp and the current time is compared to confirm that the data has not expired, thus completing the final confirmation of the working vessel's network entry status.

[0033] In one optional implementation, the heartbeat status value of the communication module corresponding to the current channel is collected; when the heartbeat status value is invalid within a preset monitoring period, a device fault status message is sent to the master node in the network, and the master node is controlled to match at least one neighboring ship node address in the network according to the fault node in the device fault status message; and each task item in the communication task list corresponding to the fault node is sent to the neighboring ship node address in sequence.

[0034] In this embodiment, during communication operation, heartbeat status values ​​are continuously collected from the communication module corresponding to the current channel. Heartbeat status values ​​are periodic identifiers reflecting the operational status of the communication module. They are generated by the communication module sending a short-format status signal to the local network or local machine at fixed time intervals. This signal includes a flag indicating whether the module is working properly and time information. By recording the reception of this signal, it can be determined whether the communication link is available. In the specific implementation, an independent status recording area is established for each communication module to store heartbeat status values ​​for multiple consecutive periods in chronological order, and a corresponding time window is maintained locally. During continuous collection, all heartbeat status values ​​within a preset monitoring period are uniformly judged. When all heartbeat status values ​​within the time window are marked as invalid, the current communication module is considered to be malfunctioning. An invalid state refers to not receiving a heartbeat signal within a predetermined time or an abnormal heartbeat signal flag. Judging multiple consecutive periods avoids misjudgments caused by momentary interference. After confirming the anomaly, a device fault status message is constructed and sent to the master node in the network. This message is a data structure containing a fault node identifier, a fault type flag, and the current time, used to clearly indicate the location and status of the node experiencing the anomaly to the master node. Upon receiving the message, the master node locates the corresponding node in the current network topology based on the fault node identifier carried in the message. Combining this with the maintained node location information and link connectivity, it filters out at least one node address that is spatially or verbally adjacent to the fault node. The address of a neighboring node refers to a node identifier in the communication topology that has direct communication capability or low transmission cost with the fault node. This filtering process comprehensively assesses the distance between nodes, channel quality, and current load conditions to determine a suitable node to undertake the replacement task. After identifying neighboring nodes, the communication task list corresponding to the failed node is scheduled. This list describes the data transmission or collaborative tasks currently undertaken by the node, with each task containing information such as the target address, data type, and priority. During execution, tasks are retrieved sequentially from the list, and their content is repackaged into a data format executable by neighboring nodes. This repackaged data is then sent over the network to the selected node address, allowing it to take over the communication tasks of the previously failed node. To ensure task continuity, each task is appended with identification information during transmission, enabling the receiving node to recognize the task's origin and correctly continue execution.In a near-shore operation scenario, if a work vessel's communication module malfunctions and stops sending heartbeat signals during operation, the command vessel will generate and send a fault status message after failing to receive a valid heartbeat for several consecutive monitoring cycles. The master node will determine the location of the work vessel based on the message and select another work vessel with normal communication status in the vicinity as a replacement node. Subsequently, the work instruction transmission task and position synchronization task originally undertaken by the faulty vessel will be sent to the neighboring vessel in sequence, so that the relevant tasks can continue to be executed, thereby ensuring that the entire communication network maintains operational continuity even in the event of a single node failure.

[0035] Optionally, the signal-to-noise ratio (SNR) and consecutive frame loss count of the current channel, as well as the corresponding ship's roll amplitude, are collected. When the SNR is lower than a first preset threshold, the communication link is switched from the current channel to the channel corresponding to the backup channel frequency by switching the frequency of the current channel to the backup channel frequency in the communication configuration table. When the consecutive frame loss count exceeds a second preset threshold, the current channel and the backup channel are transmitted in parallel, so that the same data frame is transmitted simultaneously through the current channel and the backup channel. When the roll amplitude exceeds a third preset threshold, the service data frame to be transmitted is fragmented, the upper limit of the retransmission count of the fragmented service data frame is dynamically increased from the default value to a fourth preset threshold, and the fragmented service data frames are transmitted sequentially.

[0036] In this embodiment, during communication operation, the current channel state and the ship's motion state are jointly collected. The signal-to-noise ratio (SNR) value represents the ratio between the effective signal strength and the environmental noise. The lower the value, the more severe the interference during signal transmission. The consecutive frame loss count value represents the number of data frames that have not been successfully received and acknowledged in consecutive transmissions. This count is generated by recording the transmission results of each frame and incrementing it when there are consecutive failures. The roll amplitude value characterizes the degree of attitude change of the ship on the sea surface. It comes from the acquisition of roll or pitch angles by the ship's attitude measurement device. By synchronously acquiring the above three types of parameters, a comprehensive description of the communication link quality and the physical environment state can be formed. Based on this, the real-time signal-to-noise ratio (SNR) value is compared with a first preset threshold. When the SNR value is lower than this threshold, it indicates that the signal quality of the current channel is insufficient to support stable communication. At this time, according to the backup channel frequency pre-recorded in the communication configuration table, the operating frequency of the communication module is adjusted, switching it from the current frequency to the backup frequency, thereby migrating the communication link to the new channel environment. This switching process is achieved by reconfiguring the frequency control register of the radio frequency unit, so that both transmission and reception are carried out within the new frequency range, thereby avoiding interference sources in the original channel. In addition to channel switching, when the consecutive frame loss count exceeds a second preset threshold, it indicates that data transmission has experienced continuous failures, and relying solely on a single channel cannot guarantee reliable data delivery. At this time, the current channel and the backup channel are simultaneously activated for parallel transmission control. The same data frame is copied and loaded onto both channels for transmission, allowing the receiver to obtain complete data from either channel, thereby increasing the probability of successful reception. During the transmission process, by attaching unified identification information to the data frame, the receiver can identify duplicate data from different channels and perform deduplication, avoiding resource consumption caused by repeated parsing. This parallel transmission method does not replace channel switching, but rather improves communication reliability by adding transmission paths when the channel is unstable but not completely failed. Simultaneously, the ship's roll amplitude is continuously monitored. When this value exceeds a third preset threshold, it indicates that the ship is in a state of significant dynamic change. Such a state affects the stability of communication equipment and the direction of signal transmission, thus increasing the uncertainty of data transmission. Under this condition, the service data frame to be transmitted is fragmented, breaking the original data into multiple smaller data units. Each data unit is appended with sequence identification information for reassembly by the receiver. At the same time, the maximum number of retransmissions for each data unit is increased from the default value to a fourth preset threshold. This maximum number of retransmissions controls the maximum number of retransmissions allowed after a data transmission failure. By increasing this value, each fragment has more recovery opportunities during transmission, thereby reducing the overall risk of data loss.In the context of near-shore operations, when a vessel is in increasing wind and waves, the first sign of a decrease in signal-to-noise ratio is the switching of the communication frequency to a backup channel with less interference. When further signal fluctuations cause continuous data frame transmission failures, dual-channel transmission is activated simultaneously to ensure that critical data can be received by another vessel. As the hull roll amplitude continues to increase, the original data is split into multiple fragments and the number of retransmissions is increased, enabling the receiving end to gradually acquire complete data and reassemble it, thereby maintaining the continuity of the communication link and the reliability of data transmission even under complex sea conditions.

[0037] In one optional implementation, during network operation, channel status parameters, device operating status parameters, and communication load parameters of each node are periodically collected; a comprehensive evaluation value is generated for each node based on the channel status parameters, device operating status parameters, and communication load parameters, and the validity of the current master node is determined according to the comprehensive evaluation value; when the comprehensive evaluation value of the current master node is lower than a preset threshold, the node with the highest comprehensive evaluation value is selected from other nodes in the network as a candidate master node; a role switching notification message is sent to the candidate master node, and the current network topology information and communication configuration parameters are synchronized; after the candidate master node completes the synchronization of topology information and communication configuration parameters, the candidate master node is switched to the new master node, and the master node identifier of each node in the network is updated.

[0038] In this embodiment, during network operation, dynamic evaluation of network operation quality is achieved through continuous collection of status information from each node. Channel status parameters reflect the current communication link quality of the node, including indicators such as signal strength and channel stability. Device operation status parameters characterize the node's own operational capabilities, such as processing capacity utilization and communication module operation status. Communication load parameters describe the data processing and forwarding pressure currently borne by the node. By uniformly collecting and storing these multiple parameters in a local status record area, basic data is provided for subsequent node capability evaluation. Based on this, the multi-dimensional status data of each node is normalized to enable unified comparison of data with different dimensions. Then, the indicators are weighted and superimposed according to preset weights to generate a comprehensive evaluation value for the corresponding node. This evaluation value represents the node's overall carrying capacity and stability in the current network. After calculating the evaluation value, the validity of the current master node's status is determined. When the master node's comprehensive evaluation value is lower than a preset threshold, it indicates that the node can no longer stably assume the master node's responsibilities in terms of channel quality, equipment status, or load pressure. In this case, a node with a higher comprehensive evaluation value is selected from other nodes in the network as a candidate master node. This selection process is achieved by sorting the evaluation values ​​of all nodes and prioritizing nodes that perform better in terms of channel quality and equipment status, thereby ensuring that the network control capability is not reduced after the switch. After determining the candidate master node, a role switch notification message is sent to it. The notification message contains a description of the current network topology and communication configuration parameters. The network topology description is used to represent the connection relationships and node distribution between the current nodes, and the communication configuration parameters are used to ensure the consistency of the communication strategy after the switch. Upon receiving the notification, the candidate node loads and stores the above information, enabling it to possess the network management capabilities required for a master node. After completing information synchronization, the candidate node is marked as the new master node, and the master node update information is broadcast to other nodes in the network, causing all nodes to update their local master node identifiers, thereby completing the role switch process. In the context of near-shore operations, as a command vessel operates continuously, its comprehensive evaluation value gradually decreases due to increased communication load and deteriorating channel quality. When it falls below a set threshold, the system selects a vessel with a stable channel and low load from the remaining vessels as a candidate node and sends it data containing the current network structure and communication parameters. This allows the vessel to quickly take over network control functions, and the master node identifier is then switched to that node. The remaining vessels simultaneously update their control node information, thereby completing the transfer of control without affecting overall communication and ensuring the continuity and stability of network operation.

[0039] In one optional implementation, during network communication, the signal-to-noise ratio (SNR), bit error rate (BER), and link stability parameters of the current channel are collected in real time; the security level identifier of the current channel is determined based on the SNR, BER, and link stability parameters; based on the security level identifier, a corresponding security processing strategy is selected from a preset multi-level security strategy set; based on the security processing strategy, corresponding data encryption strength control, integrity verification strength control, and authentication frequency control are performed on the communication data, and these are dynamically adjusted during the communication process.

[0040] In this embodiment, during communication operation, the current channel status is continuously collected, and a comprehensive description of channel quality is formed based on signal-to-noise ratio (SNR), bit error rate (BER), and link stability parameters. The SNR reflects the strength relationship between the effective signal and noise; a higher SNR value indicates a clearer signal. The BER represents the probability of data errors during transmission, and the link stability parameter reflects channel fluctuations over a period of time. By uniformly processing these parameters, the overall performance of the current channel in terms of reliability and stability can be obtained. Based on this, the collected parameters are matched with preset classification intervals to generate corresponding security level identifiers. These identifiers are used to classify the current communication environment, for example, dividing the channel status into high stability, medium stability, and low stability levels, so that different security processing strategies can be selected subsequently. After the security level is determined, the corresponding processing strategy is selected from a pre-configured multi-level security policy set based on the identifier. The security policy set predefines security control rules for different levels, including data encryption strength, integrity verification strength, and authentication execution frequency. Data encryption strength describes the degree of protection for communication data, such as improving data resistance to cracking by changing the key length or the number of encryption rounds. Integrity verification strength describes the ability to verify the correctness of data, such as improving error detection capability by increasing the length of the check bits. Authentication frequency controls the time interval or triggering conditions for authentication between the communicating parties, thereby achieving a balance between security and performance under different channel conditions. After the strategy is selected, the communication process is controlled according to the corresponding security processing rules. When the channel quality is high, lower-strength encryption and lower-frequency authentication are used to reduce computation and transmission overhead. When the channel quality deteriorates, the encryption and verification strengths are increased, and the authentication interval is shortened to enhance the protection against data tampering and unauthorized access. During execution, the parameters of the encryption and verification units of the communication module are adjusted to ensure that they process data according to the current strategy. At the same time, the channel state is continuously monitored during communication. Once a change in the channel state is detected, the security level is redefined and the corresponding strategy is switched, thereby achieving dynamic coupling between the security mechanism and the channel state. In the context of near-shore operations, when a command vessel communicates with multiple operating vessels, the system adopts a lower-strength security strategy to improve data transmission efficiency when the sea conditions are good and the signal is stable. However, when the wind and waves increase, causing signal fluctuations and a rise in the bit error rate, the system automatically increases the encryption strength and adds verification data, while shortening the authentication interval. This ensures that the communication process can still guarantee the security and integrity of the data even when the channel quality deteriorates, thus achieving coordinated adaptation between communication security and channel state.

[0041] like Figure 2This is a flowchart illustrating the rapid networking method based on ship-to-ship communication for a responding vessel provided in this embodiment. The rapid networking method based on ship-to-ship communication includes the following steps: Step 210: After receiving the networking invitation information sent by the initiating ship through the dual-mode broadcast channel, parse the networking invitation information and extract the initiating ship identification information and communication configuration parameters. Step 220: Construct an access request message based on the communication configuration parameters and send the access request to the initiating vessel. The access request message includes the responding vessel identifier and an anti-replay random number sequence. Step 230: After receiving the access confirmation packet sent by the initiating ship, parse the key fragment, node number and network topology information in the access confirmation packet, and verify the source of the access confirmation packet; Step 240: After the access confirmation packet is verified, a network access completion packet is generated, which includes identity credentials and key confirmation information; Step 250: Send the network access completion packet to the initiating vessel so that the initiating vessel can verify the network access completion packet and complete the access.

[0042] Specifically, upon receiving the network invitation information sent by the initiating vessel through a dual-mode broadcast channel, the received data is parsed to extract the initiating vessel's identification information and a communication configuration parameter summary. The communication configuration parameter summary is a compressed identifier from the initiating vessel's communication configuration table, indicating the combination of communication parameters used in the current network. After parsing, this summary is matched or recorded locally, enabling the responding vessel to identify the communication environment and parameter conditions corresponding to the current network. Simultaneously, the initiating vessel's identification information is saved as a target identifier for subsequent interactions. After parsing, an access request message is constructed based on the communication configuration parameter summary. The access request message is encapsulated in a preset format, including a responding vessel identifier and an anti-replay random number sequence. The responding vessel identifier uniquely identifies the vessel currently sending the request, while the anti-replay random number sequence is a locally generated random data segment designed to ensure the uniqueness of the request, ensuring that the same request has different identifiers at different times, thus preventing reuse. After construction, the access request message is sent to the initiating vessel through the channel corresponding to the network invitation to trigger the subsequent access process. After sending the access request, the system receives the access confirmation packet returned by the initiating vessel and parses the data within it to extract key fragments, node numbers, and network topology information. The key fragments are data generated and encapsulated by the initiating vessel, the node numbers identify the logical position of the responding vessel in the network, and the network topology information describes the current network structure. After field extraction, the source of the access confirmation packet is verified. This verification process checks the consistency of the identification information and related verification content in the data packet to confirm that the data packet was indeed generated by the initiating vessel and that no anomalies occurred during transmission. After the access confirmation packet verification is successful, a network entry completion packet is generated based on the parsed data. The network entry completion packet contains an identity credential digest and a key confirmation hash value. The identity credential digest represents the responding vessel's identity information, and the key confirmation hash value represents the confirmation result of the key data in the access confirmation packet. By encapsulating the above data according to a preset format, data content is formed for feedback to the initiating vessel. After constructing the network access completion packet, this data is sent to the initiating vessel, enabling it to verify the identity credential digest and key confirmation hash value within the packet. This verifies the identity validity and data consistency of the responding vessel. Once the initiating vessel completes the verification, the responding vessel's access process is confirmed to be complete. According to the rapid networking method based on ship-to-ship communication provided in this application, the number of dynamic negotiation rounds during the networking process is reduced by pre-configuring parameters, the invitation discovery time is shortened by sending messages in parallel with dual modes, and the number of round trips is reduced by merging authentication and channel confirmation. Thus, rapid networking can be achieved in the dynamic moving environment of ships, meeting the real-time communication requirements of maritime collaborative operations.

[0043] Figure 3This is a layered schematic diagram of the HarmonyOS distributed soft bus technology architecture in a ship-to-ship communication system provided in this application embodiment. The architecture includes, from top to bottom, a business application layer, a recovery and protection layer, a communication and transmission layer, an adaptation and networking engine layer, and a perception layer. The adaptation and networking engine layer also integrates a three-round handshake access control sub-process.

[0044] Figure 4 This application provides a schematic diagram of the service interaction timing between the initiating ship and the responding ship in a rapid networking method based on ship-to-ship communication. It shows the complete interaction process of channel and ship status awareness, dual-mode networking invitation, three-round handshake access authentication, dynamic key update during normal communication, and communication recovery processing under special circumstances such as channel interruption, equipment failure, and extreme sea conditions.

[0045] Figure 5 This application provides a rapid networking system based on ship-to-ship communication, which can be used to implement the rapid networking method based on ship-to-ship communication applied to the initiating ship for network invitation in the aforementioned embodiments. For example... Figure 5 As shown, this rapid networking system based on ship-to-ship communication mainly includes: Configuration module 10 is used to collect channel status data and ship status data between the initiating vessel and surrounding vessels through the shipborne terminal, dynamically configure networking parameters based on the channel status data and ship status data, and generate a communication configuration table that matches the current maritime scenario. The sending module 20 is used to generate networking invitation information according to the communication configuration table and send networking invitations to surrounding ships through a dual-mode broadcast channel; The verification module 30 is used to verify the identity information of the responding ship after receiving the access request sent by the responding ship based on the networking invitation. After the identity information is verified, it generates an access confirmation packet and sends the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel. The communication module 40 is used to verify the identity credentials and key confirmation information in the network access completion packet after receiving the network access completion packet returned by the responding ship within a preset confirmation waiting time. After successful verification, the responding ship is connected to the network for normal communication.

[0046] In one optional implementation of this embodiment, the sending module is specifically used to: generate a first network invitation message and a second network invitation message according to the channel configuration parameters in the communication configuration table; wherein, the first network invitation message is generated by embedding network extension information in the broadcast message of the AIS device, and the second network invitation message is generated by constructing a network discovery call through the VHF-DSC channel, or the second network invitation message is constructed as a low-power beacon in the LoRa maritime band; according to the transmission power parameters in the communication configuration table, the first network invitation message is broadcast through the AIS channel in the VHF band, and according to the near-field discovery channel parameters in the communication configuration table, the second network invitation message is broadcast through the VHF-DSC channel or the LoRa maritime band, and the first network invitation message and the second network invitation message are controlled to be sent in parallel in the time domain.

[0047] In an optional implementation of this embodiment, the verification module is specifically used to: after receiving an access request sent by the responding ship based on a network invitation, extract the responding ship identifier and the anti-replay random number sequence generated by the responding ship from the access request; compare the responding ship identifier with the list of trusted ship identifiers pre-stored by the receiving ship byte by byte; when the responding ship identifier exists in the list of trusted ship identifiers, calculate the difference between the anti-replay random number sequence and each historical random number in the locally recorded historical random number set; when the difference between the anti-replay random number sequence and all historical random numbers is not zero, confirm that the access request message is a valid request.

[0048] In an optional implementation of this embodiment, the verification module is further configured to: match the channel configuration parameters of the responding vessel with the channel configuration parameters in the communication configuration table to determine the optimal acknowledgment channel and corresponding channel parameters between the initiating vessel and the responding vessel; obtain the responding vessel's public key from a locally pre-stored maritime safety certificate database based on the responding vessel's identifier code; encrypt the session key generated by the initiating vessel based on the responding vessel's public key to obtain an encryption key and obtain the key fragment of the encryption key at a preset key position; determine the responding vessel's node number based on the number of nodes in the current network topology; and generate an access confirmation packet by byte-padding the key fragment, node number, and current network topology version number to a fixed length.

[0049] In an optional implementation of this embodiment, the communication module is further configured to: extract the identity credential digest and key confirmation hash value of the responding vessel from the network access completion packet; wherein, the identity credential digest is the first N bytes of the hash value corresponding to the maritime safety certificate of the responding vessel, and the key confirmation hash value is the first M bytes of the hash value of the session key obtained by decrypting the key fragment of the responding vessel; perform byte-by-byte matching of the identity credential digest with the first N bytes of the hash values ​​of each certificate in the maritime safety certificate database; when the identity credential digest matches any certificate hash value, perform bit-by-bit comparison of the first M bytes of the key confirmation hash value with the hash value corresponding to the session key; when the first M bytes of the key confirmation hash value match the hash value corresponding to the session key, verify the rationality of the network access completion timestamp in the network access completion packet; when the absolute value of the difference between the network access completion timestamp and the local time is less than or equal to a preset time threshold, confirm that the network access completion packet is a valid completion packet.

[0050] The recovery module is used to collect the heartbeat status value of the communication module corresponding to the current channel. When the heartbeat status value is invalid within a preset monitoring period, it sends a device fault status message to the master node in the network and controls the master node to match at least one neighboring ship node address in the network according to the faulty node in the device fault status message. It then sends each task item in the communication task list corresponding to the faulty node to the neighboring ship node address in sequence.

[0051] According to the rapid networking system based on ship-to-ship communication provided in this application, the number of dynamic negotiation rounds during the networking process is reduced by pre-configuring parameters, the invitation discovery time is shortened by sending messages in parallel with dual modes, and the number of round trips is reduced by merging authentication and channel confirmation. Thus, rapid networking can be achieved in the dynamic mobile environment of ships, meeting the real-time communication requirements of maritime collaborative operations.

[0052] According to the scheme provided in this application Figure 6 An electronic device is provided as an embodiment of this application. This electronic device can be used to implement the rapid networking method based on ship-to-ship communication in the foregoing embodiments, and mainly includes: The system includes a memory 401, a processor 402, and a computer program 403 stored on the memory 401 and executable on the processor 402. The memory 401 and the processor 402 are communicatively connected. When the processor 402 executes the computer program 403, it implements the rapid networking method based on ship-to-ship communication described in the foregoing embodiments. The number of processors can be one or more.

[0053] The memory 401 can be a high-speed random access memory (RAM) or a non-volatile memory, such as a disk storage device. The memory 401 is used to store executable program code, and the processor 402 is coupled to the memory 401.

[0054] Furthermore, embodiments of this application also provide a computer-readable storage medium, which may be disposed in the electronic device described in the above embodiments, and the computer-readable storage medium may be as described above. Figure 6 The memory in the illustrated embodiment.

[0055] The computer-readable storage medium stores a computer program that, when executed by a processor, implements the rapid networking method based on ship-to-ship communication described in the foregoing embodiments. Furthermore, the computer-readable storage medium can also be a USB flash drive, external hard drive, read-only memory (ROM), RAM, magnetic disk, or optical disk, or any other medium capable of storing program code.

[0056] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0057] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0058] The above-described embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A rapid networking method based on ship-to-ship communication, applied to the initiating ship of a networking invitation, characterized in that, include: The shipborne terminal collects channel status data and ship status data between the initiating vessel and surrounding vessels, dynamically configures network parameters based on the channel status data and ship status data, and generates a communication configuration table that matches the current maritime scenario. Generate networking invitation information according to the communication configuration table, and send networking invitations to the surrounding vessels through a dual-mode broadcast channel; After receiving the access request sent by the responding ship based on the networking invitation, the identity information of the responding ship is verified. After the identity information is verified, an access confirmation packet is generated and sent to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel. After receiving the network access completion packet returned by the responding vessel within the preset confirmation waiting time, the identity credentials and key confirmation information in the network access completion packet are verified. After successful verification, the responding vessel is connected to the network for normal communication.

2. The rapid networking method based on ship-to-ship communication according to claim 1, characterized in that, The step of generating network invitation information based on the communication configuration table and sending the network invitation to the surrounding vessels through a dual-mode broadcast channel includes: Based on the channel configuration parameters in the communication configuration table, a first network invitation message and a second network invitation message are generated respectively; wherein, the first network invitation message is generated by embedding network extension information in the broadcast message of the AIS device, and the second network invitation message is generated by constructing a network discovery call through the VHF-DSC channel, or the second network invitation message is constructed as a low-power beacon in the LoRa maritime band. Based on the transmission power parameters in the communication configuration table, the first network invitation message is broadcast via the AIS channel in the VHF band. Based on the near-field discovery channel parameters in the communication configuration table, the second network invitation message is broadcast via VHF-DSC channel or LoRa maritime band, and the first network invitation message and the second network invitation message are controlled to be sent in parallel in the time domain.

3. The rapid networking method based on ship-to-ship communication according to claim 1, characterized in that, The step of verifying the identity information of the responding vessel after receiving the access request sent by the responding vessel based on the networking invitation includes: Upon receiving an access request sent by the responding ship based on the networking invitation, the responding ship identifier and the anti-replay random number sequence generated by the responding ship are extracted from the access request. The responding vessel identifier will be compared byte by byte with the list of trusted vessel identifiers pre-stored by the receiving vessel; When the responding vessel identification code exists in the trusted vessel identification code list, the difference between the anti-replay random number sequence and each historical random number in the locally recorded historical random number set is calculated. When the difference between the anti-replay random number sequence and all historical random numbers is not zero, the access request message is confirmed as a valid request.

4. The rapid networking method based on ship-to-ship communication according to claim 1, characterized in that, The step of generating an access confirmation packet after the identity information verification is successful, and sending the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel, includes: The channel configuration parameters of the responding ship are matched with the channel configuration parameters in the communication configuration table to determine the optimal acknowledgment channel and corresponding channel parameters between the initiating ship and the responding ship. Based on the responding vessel identification code, retrieve the responding vessel's public key from the locally stored maritime safety certificate database; The session key generated by the initiating ship is encrypted using the public key of the responding ship to obtain an encryption key and a key fragment of the encryption key at a preset key position is obtained. The node number of the responding ship is determined based on the number of nodes in the current network topology; The key fragment, the node number, and the current network topology version number are padded with bytes of a fixed length to generate an access confirmation packet.

5. The rapid networking method based on ship-to-ship communication according to claim 4, characterized in that, The step of verifying the identity credentials and key confirmation information in the network access completion packet includes: Extract the identity credential digest and key confirmation hash value of the responding vessel from the network access completion packet; wherein, the identity credential digest is the first N bytes of the hash value corresponding to the maritime security certificate of the responding vessel, and the key confirmation hash value is the first M bytes of the hash value of the session key obtained by the responding vessel from decrypting the key fragment; The identity credential digest is matched byte by byte with the first N bytes of each certificate hash value in the maritime security certificate database. When the identity credential digest matches any certificate hash value, the first M bytes of the key confirmation hash value are compared bit by bit with the hash value corresponding to the session key. When the first M bytes of the key confirmation hash value are consistent with the first M bytes of the hash value corresponding to the session key, verify the rationality of the network entry completion timestamp in the network entry completion packet; When the absolute value of the difference between the network access completion timestamp and the local time is less than or equal to a preset time threshold, the network access completion packet is confirmed as a valid completion packet.

6. The rapid networking method based on ship-to-ship communication according to claim 1, characterized in that, The method further includes: Collect the heartbeat status value of the communication module corresponding to the current channel; When the heartbeat status value is invalid within a preset monitoring period, a device fault status message is sent to the master node in the network, and the master node is controlled to match the node address of at least one neighboring ship in the network according to the fault node in the device fault status message. Each task item in the communication task list corresponding to the faulty node is sent sequentially to the node address of the neighboring ship.

7. A rapid networking system based on ship-to-ship communication, characterized in that, The rapid networking system based on ship-to-ship communication is used to implement the rapid networking method based on ship-to-ship communication as described in claim 1, and the rapid networking system based on ship-to-ship communication includes: The configuration module is used to collect channel status data and ship status data between the initiating vessel and surrounding vessels through the shipborne terminal, dynamically configure networking parameters based on the channel status data and ship status data, and generate a communication configuration table that matches the current maritime scenario. The sending module is used to generate networking invitation information according to the communication configuration table and send the networking invitation to the surrounding ships through a dual-mode broadcast channel; The verification module is used to verify the identity information of the responding ship after receiving the access request sent by the responding ship based on the networking invitation, generate an access confirmation packet after the identity information is verified, and send the access confirmation packet to the responding ship according to the optimal confirmation channel of the dual-mode broadcast channel. The communication module is used to verify the identity credentials and key confirmation information in the network access completion packet after receiving the network access completion packet returned by the responding vessel within a preset confirmation waiting time. After successful verification, the responding vessel is connected to the network for normal communication.

8. The rapid networking system based on ship-to-ship communication according to claim 7, characterized in that, The rapid networking system also includes: The recovery module is used to collect the heartbeat status value of the communication module corresponding to the current channel; when the heartbeat status value is invalid within a preset monitoring period, it sends a device fault status message to the master node in the network, and controls the master node to match at least one neighboring ship node address in the network according to the faulty node in the device fault status message; and sequentially sends each task item in the communication task list corresponding to the faulty node to the node address of the neighboring ship.

9. An electronic device, characterized in that, Includes memory and processor, of which: The processor is used to execute computer programs stored in the memory; When the processor executes the computer program, it implements the steps of the rapid networking method based on ship-to-ship communication as described in any one of claims 1 to 6.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the rapid networking method based on ship-to-ship communication as described in any one of claims 1 to 6.

Images