Constellation communication method, apparatus, device, medium and program product

Abstract

The application provides a constellation communication method, device, equipment, medium and program product, relates to the technical field of communication, and is used for connecting different constellations through one satellite terminal. The specific technical scheme is as follows: in the case that the satellite terminal is powered on and in an offline state, an access verification activation code is acquired; the verification activation code is verified offline by using a public key certificate; in the case that the offline verification is passed and the satellite terminal is in an online state, a terminal access request is sent to a satellite-ground fusion server; a session token sent by the satellite-ground fusion server is received, and a first session is established with the satellite-ground fusion server based on the session token. The application is applied to the scene of executing user tasks through multiple constellations.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a constellation communication method, apparatus, device, medium, and program product. Background Technology

[0002] Currently, in order to achieve communication between satellite terminals and constellations, satellite terminals are all customized dedicated satellite terminals that are matched with the corresponding constellations. That is, the dedicated satellite terminal and the corresponding constellation have a communication link set up in advance, and the satellite terminal can only connect to the fixed constellation after being powered on.

[0003] However, with the continuous development of multi-satellite systems, in order to avoid redundant investment, solve the problem of coverage blind spots of a single constellation, and meet the diverse needs of different services for satellite communication bandwidth, latency, and pricing, there is an urgent need for satellite terminals that can be used across constellations to achieve the integration of access and communication capabilities between different constellations. Therefore, how to connect different constellations through a single satellite terminal is a pressing technical problem that needs to be solved. Summary of the Invention

[0004] This application provides a constellation communication method, apparatus, device, medium, and program product for enabling connection to different constellations through a single satellite terminal.

[0005] In a first aspect, embodiments of this application provide a constellation communication method applied to a satellite terminal. The method includes: when the satellite terminal is powered on and offline, obtaining an access verification activation code, the verification activation code being used to indicate the legitimacy of the satellite terminal; using a public key certificate to perform offline verification of the verification activation code; when the offline verification passes and the satellite terminal is online, sending a terminal access request to a satellite-ground fusion server, the terminal access request carrying the verification activation code, the satellite-ground fusion server corresponding to N constellations, where N is a positive integer; receiving a session token sent by the satellite-ground fusion server, and initiating a first session with the satellite-ground fusion server based on the session token; wherein, based on the session content of the first session, the satellite-ground fusion server determines M constellations from the N constellations that match the session content, and controls the M constellations to perform operations corresponding to the session content, where M is an integer less than or equal to N.

[0006] The technical solution provided in this application brings at least the following beneficial effects: Since the satellite-ground fusion server can correspond to multiple constellations, when a satellite terminal connects to the satellite-ground fusion server, the satellite-ground fusion server can control M of the N constellations to perform the operations corresponding to the session content according to the session content of the first session. In this way, different constellations can be connected through one satellite terminal; and the offline self-check verification of the activation code by the satellite terminal ensures the legitimacy of the satellite terminal and improves the security of constellation communication.

[0007] One possible implementation method for obtaining the access verification activation code includes: if a verification activation code is detected in the verification file, obtaining the verification activation code from the verification file; wherein, the verification file stores the device fingerprint of the satellite terminal, the user's phone number corresponding to the satellite terminal, and the verification activation code.

[0008] Another possible implementation, the above-mentioned method of obtaining the access verification activation code, includes: if the verification activation code is not found in the verification file, obtaining the user's phone number and the satellite terminal's device fingerprint; sending a verification activation code generation request to the satellite-ground fusion server, the verification activation code generation request carrying the user's phone number and device fingerprint, the verification activation code generation request being used to instruct the satellite-ground fusion server to generate a verification activation code based on the user's phone number and device fingerprint; and receiving a verification activation code response message sent by the satellite-ground fusion server, the verification activation code response message carrying the verification activation code.

[0009] Another possible implementation, before receiving the session token sent by the satellite-terrestrial fusion server, further includes: receiving an access response message sent by the satellite-terrestrial fusion server, the access response message carrying an authentication random number, the authentication random number being generated by the satellite-terrestrial fusion server based on the device fingerprint, the user's phone number, and the verification activation code; encrypting the authentication random number, the device fingerprint, and the user's phone number to obtain a first session key; and sending an authentication request to the satellite-terrestrial fusion service, the authentication request carrying the first session key, the authentication request being used to instruct the satellite-terrestrial fusion service to perform access authentication.

[0010] Secondly, embodiments of this application provide a constellation communication device applied to a satellite terminal, comprising: an acquisition module, a verification module, a sending module, a receiving module, and a communication module. The acquisition module is used to acquire an access verification activation code when the satellite terminal is powered on and offline. The verification activation code is used to indicate the legitimacy of the satellite terminal. The verification module is used to perform offline verification of the verification activation code using a public key certificate. The sending module is used to send a terminal access request to a satellite-ground fusion server when the offline verification is successful and the satellite terminal is online. The terminal access request carries the verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. The receiving module is used to receive a session token sent by the satellite-ground fusion server. The communication module is used to initiate a first session with the satellite-ground fusion server based on the session token; wherein, based on the session content of the first session, the satellite-ground fusion server determines M constellations from the N constellations that match the session content and controls the M constellations to perform operations corresponding to the session content, where M is an integer less than or equal to N.

[0011] One possible implementation is that the aforementioned acquisition module is specifically used to obtain the verification activation code from the verification file when the existence of the verification activation code is detected in the verification file; wherein, the verification file stores the device fingerprint of the satellite terminal, the user's phone number corresponding to the satellite terminal, and the verification activation code.

[0012] Another possible implementation involves the acquisition module, specifically used to acquire the user's phone number and the satellite terminal's device fingerprint when a verification activation code is detected not to exist in the verification file. The sending module is specifically used to send a verification activation code generation request to the satellite-ground fusion server. This request carries the user's phone number and device fingerprint, instructing the satellite-ground fusion server to generate a verification activation code based on the user's phone number and device fingerprint. The receiving module is specifically used to receive a verification activation code response message sent by the satellite-ground fusion server, the response message carrying the verification activation code.

[0013] In another possible implementation, the aforementioned constellation communication device further includes a processing module. The receiving module is further configured to receive an access response message sent by the satellite-to-ground fusion server before receiving the session token sent by the satellite-to-ground fusion server. The access response message carries an authentication random number, which is generated by the satellite-to-ground fusion server based on the device fingerprint, user phone number, and verification activation code. The processing module is configured to encrypt the authentication random number, device fingerprint, and user phone number to obtain a first session key. The sending module is further configured to send an authentication request to the satellite-to-ground fusion service. The authentication request carries the first session key and is used to instruct the satellite-to-ground fusion service to perform access authentication.

[0014] Thirdly, embodiments of this application provide a constellation communication method applied to a satellite-ground fusion server. The method includes: receiving a terminal access request sent by a satellite terminal, the terminal access request carrying a verification activation code, the satellite-ground fusion server corresponding to N constellations, where N is a positive integer; performing access authentication on the satellite terminal based on the verification activation code; if the access authentication is successful, sending a session token to the satellite terminal, and initiating a first session with the satellite terminal based on the session token; wherein, based on the session content of the first session, the satellite-ground fusion server determines M constellations from the N constellations that match the session content, and controls the M constellations to perform operations corresponding to the session content, where M is an integer less than or equal to N.

[0015] The technical solution provided in this application brings at least the following beneficial effects: Since the satellite-ground fusion server can correspond to multiple constellations, when a satellite terminal is connected to the satellite-ground fusion server, the satellite-ground fusion server can control M of the N constellations to perform the operations corresponding to the session content according to the session content of the first session. In this way, different constellations can be connected through one satellite terminal.

[0016] In one possible implementation, before receiving the terminal access request sent by the satellite terminal, the method further includes: receiving a verification activation code generation request sent by the satellite terminal, the verification activation code generation request carrying the user's phone number corresponding to the satellite terminal and the device fingerprint of the satellite terminal; generating a verification activation code based on the user's phone number and the device fingerprint; and sending a verification activation code response message to the satellite terminal, the verification activation code response message carrying the verification activation code.

[0017] In another possible implementation, the terminal access request also carries the user's phone number and device fingerprint. Before authenticating the satellite terminal based on the verification activation code, the method further includes: generating an authentication random number based on the user's phone number, device fingerprint, and verification activation code; generating a second session key based on the user's phone number, device fingerprint, and authentication random number; sending an access response message to the satellite terminal, the access response message carrying the authentication random number; receiving an authentication request sent by the satellite terminal, the authentication request carrying a first session key, the first session key being generated by the satellite terminal based on the authentication random number, device fingerprint, and user's phone number; the aforementioned authentication of the satellite terminal based on the verification activation code includes: determining that the satellite terminal has passed access authentication if the first session key and the second session key are consistent.

[0018] Fourthly, this application provides a constellation communication device applied to a satellite-ground fusion server. The device includes a receiving module, an authentication module, a sending module, and a communication module. The receiving module receives a terminal access request sent by a satellite terminal. The terminal access request carries a verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. The authentication module authenticates the satellite terminal based on the verification activation code. The sending module sends a session token to the satellite terminal if the access authentication is successful. The communication module initiates a first session with the satellite terminal based on the session token. The satellite-ground fusion server, based on the session content of the first session, determines M constellations from the N constellations that match the session content and controls the M constellations to perform operations corresponding to the session content, where M is an integer less than or equal to N.

[0019] In one possible implementation, the constellation communication device further includes a processing module; the receiving module is further configured to receive a verification activation code generation request sent by the satellite terminal before receiving a terminal access request sent by the satellite terminal, the verification activation code generation request carrying the user's phone number corresponding to the satellite terminal and the device fingerprint of the satellite terminal. The processing module is configured to generate a verification activation code based on the user's phone number and the device fingerprint. The sending module is further configured to send a verification activation code response message to the satellite terminal, the verification activation code response message carrying the verification activation code.

[0020] In another possible implementation, the constellation communication device further includes a processing module; the aforementioned terminal access request also carries the user's phone number and device fingerprint; the processing module is used to generate an authentication random number based on the user's phone number, device fingerprint, and authentication activation code before authenticating the satellite terminal based on the verification activation code, and to generate a second session key based on the user's phone number, device fingerprint, and authentication random number. The sending module is also used to send an access response message to the satellite terminal, the access response message carrying the authentication random number. The receiving module is also used to receive the authentication request sent by the satellite terminal, the authentication request carrying a first session key, the first session key being generated by the satellite terminal based on the authentication random number, device fingerprint, and user's phone number. Specifically, the processing module is used to determine that the satellite terminal has passed access authentication if the first session key and the second session key are consistent.

[0021] Fifthly, this application provides an electronic device, which can be the aforementioned satellite terminal or satellite-ground fusion server. The electronic device includes a processor and a memory; the memory stores programs or instructions that can run on the processor, and when the programs or instructions are executed by the processor, they implement the method of the first aspect or the method of the third aspect.

[0022] In a sixth aspect, this application provides a readable storage medium on which a program or instructions are stored, which, when executed by a computer, implement the method of the first aspect or the method of the third aspect.

[0023] In a seventh aspect, this application provides a computer program product that is stored in a storage medium and, when executed by a computer, implements the method of the first aspect or the method of the third aspect described above.

[0024] Eighthly, embodiments of this application provide a chip including a processor and a communication interface, the communication interface being coupled to the processor, the processor being used to run programs or instructions to implement the method described in the first aspect or the method described in the third aspect above.

[0025] The beneficial effects of aspects five through eight above are described in the corresponding description of aspect one, and will not be repeated here. Attached Figure Description

[0026] Figure 1 A schematic diagram of a network architecture for an application of a constellation communication method provided in this application embodiment;

[0027] Figure 2 A flowchart illustrating a constellation communication method provided in an embodiment of this application;

[0028] Figure 3A flowchart illustrating another constellation communication method provided in an embodiment of this application;

[0029] Figure 4 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0030] Figure 5 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0031] Figure 6 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0032] Figure 7 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0033] Figure 8 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0034] Figure 9 A flowchart illustrating yet another constellation communication method provided in an embodiment of this application;

[0035] Figure 10 This is a schematic diagram of the structure of a constellation communication system provided in an embodiment of this application;

[0036] Figure 11 This is a schematic diagram of the structure of a constellation communication device provided in an embodiment of this application;

[0037] Figure 12 This is a schematic diagram of another constellation communication device provided in an embodiment of this application;

[0038] Figure 13 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0039] The technical solutions of the embodiments of this application will be clearly described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0040] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such use of data can be interchanged where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class and the number of objects is not limited; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0041] The terms "at least one," "at least one of," etc., used in the specification and claims of this application refer to any one, any two, or a combination of two or more of the included items. For example, at least one of a, b, and c can mean: "a," "b," "c," "a and b," "a and c," "b and c," and "a, b, and c," where a, b, and c can be single or multiple. Similarly, "at least two" refers to two or more items, and its meaning is similar to that of "at least one."

[0042] In the description of this application, unless otherwise stated, "a plurality of" means two or more.

[0043] The technical terms used in the embodiments of this application will be explained in detail below.

[0044] Device fingerprint (HID): Collect hardware parameters such as the serial number of the central processing unit (CPU), the address of the media access control (MAC), and the ID of the embedded multimedia card (EMMC) in the satellite terminal, and generate a unique hardware fingerprint by de-identifying it using the SM3 or SHA256 algorithm.

[0045] Activation Code: The satellite-ground fusion server uses its private key to sign the HID and the user's mobile phone number, generating a digital signature, which is the activation code.

[0046] The constellation communication method, apparatus, device, medium, and program product provided in this application embodiment can be applied to scenarios where user tasks are performed through multiple constellations.

[0047] Currently, existing satellite terminals are all dedicated satellite terminals customized to match specific satellite systems. After being powered on, these terminals can only access fixed satellite systems (also referred to as "constellations"). With the continuous development of multiple satellite systems both domestically and internationally, in order to avoid redundant investment, solve the problem of coverage blind spots in single constellations, and meet the diverse needs of different services for bandwidth, latency, and pricing in satellite communication, there is an urgent need for converged satellite terminals and corresponding systems that can operate across constellations, enabling the integration of access and communication capabilities between different private constellations.

[0048] To address the aforementioned technical issues, this application provides a constellation communication method, apparatus, device, medium, and program product. Since a satellite-to-ground fusion server can correspond to multiple constellations, when a satellite terminal connects to the satellite-to-ground fusion server, the server can control M out of N constellations to perform operations corresponding to the session content based on the session content of the first session. In this way, different constellations can be connected through a single satellite terminal. Furthermore, the offline self-check verification of the activation code by the satellite terminal ensures the legitimacy of the satellite terminal and improves the security of constellation communication.

[0049] The constellation communication method, apparatus, device, medium, and program products provided in this application will be described in detail below with reference to the accompanying drawings.

[0050] Figure 1 This illustration shows a network architecture for a constellation communication method application provided in an embodiment of this application. For example... Figure 1 As shown, the network architecture includes a satellite-ground fusion server 101 and a satellite terminal 102. The satellite-ground fusion server 101 and the satellite terminal 102 are interconnected.

[0051] In some embodiments, the space-ground fusion server 101 may be a server, a computer, or a processor or processing unit within a server or computer. The server may be a single server or a server cluster consisting of multiple servers. It should be noted that the specific device form of the space-ground fusion server 101 is not limited in the embodiments of this application. Figure 1 The example shown is the satellite-ground fusion server 101, which is a single server.

[0052] In some embodiments, the satellite terminal may be a mobile phone, tablet computer, laptop computer, handheld computer, in-vehicle electronic device, mobile internet device (MID), augmented reality (AR) / virtual reality (VR) device, robot, wearable device, personal computer (PC), ultra-mobile personal computer (UMPC), netbook, or personal digital assistant (PDA), etc., and the embodiments of this application do not specifically limit it. Figure 1 The example shown is a mobile phone using a satellite terminal 102.

[0053] In some embodiments, when the satellite terminal 102 is powered on and offline, the satellite terminal 102 obtains an access verification activation code; it uses a public key certificate to perform offline verification of the verification activation code; if the offline verification passes and the satellite terminal is online, the satellite terminal 102 sends a terminal access request to the satellite-ground fusion server 101; the satellite-ground fusion server 101 receives the terminal access request sent by the satellite terminal 102; and performs access authentication for the satellite terminal 102 based on the verification activation code; if the access authentication passes, the satellite-ground fusion server 101 sends a session token to the satellite terminal and initiates a first session with the satellite terminal 102 based on the session token.

[0054] It should be noted that the network architecture described in the embodiments of this application is for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and does not constitute a limitation on the technical solutions provided in the embodiments of this application. As network architectures evolve, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0055] See Figure 2 This is a flowchart illustrating a constellation communication method provided in an embodiment of this application. Figure 2 As shown, the constellation communication method provided in this application embodiment can be implemented through the above-mentioned satellite terminal, specifically including the following steps 201 to 204.

[0056] Step 201: When the satellite terminal is powered on and offline, the satellite terminal obtains the access verification activation code.

[0057] In some embodiments, the aforementioned verification activation code is used to indicate the legitimacy of the satellite terminal.

[0058] In some embodiments, the aforementioned verification activation code can be used to determine the network access license of the satellite terminal, that is, to ensure that the satellite terminal device has obtained the network access license of the relevant management department or operator's satellite network.

[0059] In some embodiments, the aforementioned verification activation code can also be used to indicate service activation and operation management. That is, from the perspective of operator operation management, offline license verification is required to realize the lifecycle management of operator satellite service access control and operation process.

[0060] For example, the above lifecycle management may include at least one of the following: business access management and renewal management, etc. The specific details can be determined based on actual usage needs, and this application embodiment does not impose any limitations.

[0061] In some embodiments, combined with Figure 2 ,like Figure 3 As shown, step 201 above can be specifically implemented through step 201a below.

[0062] Step 201a: When the satellite terminal is powered on and offline, and when a verification activation code is detected in the verification file, the satellite terminal obtains the verification activation code from the verification file.

[0063] In some embodiments, the verification file stores the satellite terminal's device fingerprint, the user's phone number corresponding to the satellite terminal, and the verification activation code.

[0064] In some embodiments, the aforementioned verification file may be stored in the satellite terminal or in a satellite-to-ground fusion server. The specific method can be determined based on actual usage requirements, and this application does not impose any limitations.

[0065] For example, the verification file mentioned above can be a license file.

[0066] In this embodiment, the satellite terminal can obtain the verification activation code from the verification file, which improves the flexibility of the satellite terminal in obtaining the verification activation code. Furthermore, by verifying the activation code offline, the legitimacy of the satellite terminal is guaranteed, and the security of constellation communication is improved.

[0067] In some embodiments, combined with Figure 2 ,like Figure 4 As shown, step 201 can be implemented through steps 301 to 303 as described below.

[0068] Step 301: When the satellite terminal is powered on and offline, and when the verification activation code is not detected in the verification file, the satellite terminal obtains the user's phone number and the satellite terminal's device fingerprint.

[0069] In some embodiments, the satellite terminal can obtain the user's phone number and device fingerprint from the license file.

[0070] In some embodiments, the satellite terminal may prompt the user to enter the mobile phone number used to activate the satellite service through an activation interface, and prompt the user to enter the hardware fingerprint HID printed on the surface of the satellite terminal device, so as to obtain the user's phone number and the device fingerprint of the satellite terminal.

[0071] In some embodiments, users can obtain an HID using other electronic devices, activate services online, and obtain a device activation code. They then return to the satellite terminal and manually enter the activation code. In this way, the satellite terminal can perform offline verification locally using a pre-set public key even without an internet connection. Thus, the satellite terminal device can complete service processing, device activation, and offline verification without any internet connection whatsoever.

[0072] Step 302: The satellite terminal sends a verification activation code generation request to the satellite-ground fusion server.

[0073] In some embodiments, the above-mentioned verification activation code generation request carries the user's phone number and device fingerprint, and the verification activation code generation request is used to instruct the satellite-ground fusion server to generate a verification activation code based on the user's phone number and device fingerprint.

[0074] In some embodiments, the satellite terminal may send a verification activation code generation request to the satellite-ground fusion server via Wireless Fidelity (WiFi) or a mobile network.

[0075] Step 303: The satellite terminal receives the verification activation code response message sent by the satellite-ground fusion server.

[0076] In some embodiments, the above-mentioned activation code verification response message carries an activation code verification.

[0077] In this embodiment, if the verification activation code is not found in the verification file, the satellite terminal can obtain the verification activation code through the satellite-ground fusion server, which improves the flexibility of the satellite terminal in obtaining the verification activation code. Furthermore, by verifying the activation code offline by the satellite terminal, the legitimacy of the satellite terminal is guaranteed, and the security of constellation communication is improved.

[0078] Step 202: The satellite terminal uses a public key certificate to perform offline verification of the activation code.

[0079] In some embodiments, the aforementioned public key certificate may be a satellite-ground fusion public key certificate pre-installed when the satellite terminal leaves the factory.

[0080] In some embodiments, the satellite terminal uses a public key certificate to perform offline verification of the user's phone number, device fingerprint, and verification activation code.

[0081] It should be noted that the specific process of the above offline verification can be found in the description of relevant technologies, and will not be repeated here to avoid duplication.

[0082] Step 203: If the offline verification is successful and the satellite terminal is online, the satellite terminal sends a terminal access request to the satellite-ground fusion server.

[0083] In some embodiments, the terminal access request carries a verification activation code, and the satellite-ground fusion server corresponds to N constellations, where N is a positive integer.

[0084] In some embodiments, if the offline verification fails, the satellite terminal may display a prompt message.

[0085] For example, the above prompt message is used to notify the user that the license has expired or that the license file verification has failed.

[0086] In some embodiments, if the offline verification fails, the satellite terminal may prompt the user to re-enter the user's phone number and device fingerprint.

[0087] Step 204: The satellite terminal receives the session token sent by the satellite-ground fusion server and initiates the first session with the satellite-ground fusion server based on the session token.

[0088] In some embodiments, the aforementioned satellite-ground fusion server determines M constellations from N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

[0089] In some embodiments, the aforementioned session token may correspond to a first session, that is, one session corresponds to one session token.

[0090] In the constellation communication method provided in this application embodiment, when the satellite terminal is powered on and in an offline state, an access verification activation code is obtained, which is used to indicate the legitimacy of the satellite terminal; a public key certificate is used to perform offline verification of the verification activation code; when the offline verification is successful and the satellite terminal is in an online state, a terminal access request is sent to the satellite-ground fusion server, which carries the verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer; a session token is received from the satellite-ground fusion server, and a first session is initiated with the satellite-ground fusion server based on the session token; wherein, based on the session content of the first session, the satellite-ground fusion server determines M constellations from the N constellations that match the session content, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N. In this solution, since the satellite-to-ground fusion server can correspond to multiple constellations, when a satellite terminal connects to the satellite-to-ground fusion server, the server can control M out of N constellations to perform operations corresponding to the session content based on the session content of the first session. In this way, different constellations can be connected through a single satellite terminal. Furthermore, the activation code is verified offline by the satellite terminal, ensuring the legitimacy of the satellite terminal and improving the security of constellation communication.

[0091] In some embodiments, combined with Figure 2 ,like Figure 5 As shown, prior to step 204 above, the constellation communication method provided in this application embodiment further includes steps 401 to 403 as described below.

[0092] Step 401: The satellite terminal receives the access response message sent by the satellite-ground fusion server.

[0093] In some embodiments, the access response message carries an authentication random number, which is generated by the satellite-ground fusion server based on the device fingerprint, user phone number, and verification activation code.

[0094] Step 402: The satellite terminal encrypts the authentication random number, device fingerprint, and user phone number to obtain the first session key.

[0095] In some embodiments, the satellite terminal may encrypt the authentication random number, device fingerprint, and user phone number using symmetric encryption to obtain the first session key.

[0096] It should be noted that the above encryption process can be found in the description of relevant technologies. To avoid repetition, it will not be repeated here. Also, the satellite terminal does not store the first session key, but dynamically calculates the first session key in memory each time.

[0097] Step 403: The satellite terminal sends an authentication request to the satellite-ground fusion service.

[0098] In some embodiments, the authentication request carries a first session key and is used to instruct the satellite-ground fusion service to perform access authentication.

[0099] In this embodiment, since the hardware architecture and environment of the satellite terminal are unpredictable, an authentication scheme based on asymmetric encryption that relies on the terminal's built-in hardware security chip cannot be used. Instead, a symmetric authentication scheme based on hardware fingerprint derived keys is adopted on the basis of the previous offline activation and verification scheme for the terminal, thereby improving the security of authentication.

[0100] See Figure 6 This is a flowchart illustrating a constellation communication method provided in an embodiment of this application. Figure 6 As shown, the constellation communication method provided in this application embodiment can be implemented through the above-mentioned satellite-ground fusion server, specifically including the following steps 501 to 503.

[0101] Step 501: The satellite-ground fusion server receives the terminal access request sent by the satellite terminal.

[0102] In some embodiments, the terminal access request carries a verification activation code, and the satellite-ground fusion server corresponds to N constellations, where N is a positive integer.

[0103] In some embodiments, the satellite-ground fusion server can receive terminal access requests sent by satellite terminals via WiFi or mobile communication networks.

[0104] Step 502: The satellite-ground fusion server authenticates the satellite terminal based on the verification activation code.

[0105] It should be noted that the specific implementation process of step 502 above can be found in the following embodiments, and will not be repeated here to avoid repetition.

[0106] Step 503: If access authentication is successful, the satellite-ground fusion server sends a session token to the satellite terminal and initiates the first session with the satellite terminal based on the session token.

[0107] In some embodiments, the aforementioned satellite-ground fusion server determines M constellations from N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

[0108] It is understandable that the satellite-ground fusion server can determine the user's required function based on the content of the first session, and select M constellations from N constellations that match the function, thereby controlling the M constellations to perform the operation corresponding to the function.

[0109] In some embodiments, the satellite terminal can locally cache session tokens so that when the satellite signal is frequently interrupted due to obstruction and the link is restored in a short time, it can directly attempt to reconnect quickly through the token without having to perform full access authentication again.

[0110] In the constellation communication method provided in this application embodiment, a terminal access request sent by a satellite terminal is received. The terminal access request carries a verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. Based on the verification activation code, access authentication is performed on the satellite terminal. If the access authentication is successful, a session token is sent to the satellite terminal, and a first session is initiated with the satellite terminal based on the session token. The satellite-ground fusion server, based on the session content of the first session, determines M constellations from the N constellations that match the session content, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N. In this scheme, since the satellite-ground fusion server can correspond to multiple constellations, when a satellite terminal accesses the satellite-ground fusion server, the satellite-ground fusion server can control the M constellations from the N constellations to perform the operations corresponding to the session content according to the session content of the first session. Thus, different constellations can be connected through a single satellite terminal.

[0111] In some embodiments, combined with Figure 6 ,like Figure 7 As shown, prior to step 501 above, the constellation communication method provided in this application embodiment further includes steps 601 to 603 as described below.

[0112] Step 601: The satellite-ground fusion server receives the verification activation code generation request sent by the satellite terminal.

[0113] In some embodiments, the above-mentioned verification activation code generation request carries the user's phone number corresponding to the satellite terminal and the device fingerprint of the satellite terminal.

[0114] Step 602: The satellite-ground fusion server generates a verification activation code based on the user's phone number and device fingerprint.

[0115] In some embodiments, the satellite-ground fusion server can generate a verification activation code based on the user's phone number and device fingerprint using a hash algorithm.

[0116] Step 603: The satellite-ground fusion server sends a verification activation code response message to the satellite terminal.

[0117] In some embodiments, the above-mentioned activation code verification response message carries an activation code verification.

[0118] In this embodiment, the satellite-ground fusion server can generate a verification activation code based on the verification activation code generation request from the satellite terminal, thereby improving the flexibility of obtaining the verification activation code.

[0119] In some embodiments, the terminal access request may also carry the user's phone number and device fingerprint.

[0120] For example, combined Figure 6 ,like Figure 8 As shown, before step 502 above, the constellation communication method provided in this application embodiment further includes steps 701 to 703 below, and step 502 above can be specifically implemented by step 502a below.

[0121] Step 701: The satellite-ground fusion server generates an authentication random number based on the user's phone number, device fingerprint, and verification activation code, and generates a second session key based on the user's phone number, device fingerprint, and authentication random number.

[0122] In some embodiments, the satellite-ground fusion server can generate authentication random numbers based on the user's phone number, device fingerprint, and verification activation code using a random number generation algorithm.

[0123] In some embodiments, the satellite-ground fusion server can generate a second session key using a hash algorithm based on the user's phone number, device fingerprint, and authentication random number.

[0124] In some embodiments, the satellite-ground fusion server can bind a second session key to a device fingerprint.

[0125] Step 702: The satellite-ground fusion server sends an access response message to the satellite terminal.

[0126] In some embodiments, the access response message carries an authentication random number.

[0127] In some embodiments, the satellite-ground fusion server can send an access response message to the satellite terminal via WiFi.

[0128] Step 703: The satellite-ground fusion server receives the authentication request sent by the satellite terminal.

[0129] In some embodiments, the authentication request carries a first session key, which is generated by the satellite terminal based on an authentication random number, a device fingerprint, and a user's phone number.

[0130] Step 502a: If the first session key and the second session key are consistent, the satellite-ground fusion server determines that the satellite terminal has passed access authentication.

[0131] In some embodiments, the satellite-ground fusion server can perform string matching on the first session key and the second session key to determine whether the first session key and the second session key are consistent.

[0132] In some embodiments, the satellite-ground fusion server can maintain a mapping table, as shown in Table 1, to achieve accurate and unique identification of user identities.

[0133] Table 1

[0134]

[0135] Because HID is strongly bound to hardware, even if the software is cloned to other terminals, the backend will refuse access due to HID mismatch. Moreover, the satellite-ground convergence server automatically associates the user's existing real-name authentication information with the operator after authentication through the user's phone number. In addition, the satellite-ground convergence server can realize the lifecycle management of relevant users and services by storing fields such as activation status, activation time, and license time of the storage device.

[0136] In this embodiment of the application, by generating random numbers and implementing a challenge-response mechanism, it is ensured that even if communication is intercepted, the same authentication information cannot be replayed on the next access, thus guaranteeing the security of the session.

[0137] The constellation communication method of this application will be described below through specific interactive examples.

[0138] like Figure 9 As shown, the implementation process of the constellation communication method provided in this application includes the following S1 to S7.

[0139] S1. When the satellite terminal is powered on and offline, the satellite terminal obtains the access verification activation code.

[0140] S2. The satellite terminal uses a public key certificate to perform offline verification of the activation code.

[0141] S3. If the offline verification is successful and the satellite terminal is online, the satellite terminal sends a terminal access request to the satellite-ground fusion server.

[0142] S4. The satellite-ground fusion server receives terminal access requests sent by satellite terminals.

[0143] The S5 satellite-ground fusion server authenticates satellite terminals for access based on the verification activation code.

[0144] S6. If access authentication is successful, the satellite-ground fusion server sends a session token to the satellite terminal.

[0145] S7. The satellite terminal receives the session token sent by the satellite-ground fusion server and initiates the first session with the satellite-ground fusion server based on the session token.

[0146] It should be noted that the descriptions of each step S1 to S7 in this embodiment can be found in the descriptions in the above embodiments, and will not be repeated here.

[0147] It should be noted that the above-described method embodiments, or the various possible implementations of the method embodiments, can be executed individually, or, provided there is no conflict, they can be combined with each other. The specific implementation can be determined according to actual usage requirements, and this application embodiment does not impose any restrictions on this.

[0148] Figure 10 This is a schematic diagram of a constellation communication system provided in an embodiment of this application. Figure 10 As shown, the constellation communication system 800 may include: a fusion satellite terminal access control program 801, a license file 802, and a satellite-ground fusion system 803.

[0149] The integrated satellite terminal access control program 801 is used to: 1) receive the user's input mobile phone number and activation code, read the satellite terminal's hardware fingerprint HID, and create a license file (License file) by combining the user's input mobile phone number and activation code; and, as needed, read the local License file 802, perform offline verification of the License using the satellite-ground fusion system public key; and interact with the operator's satellite-ground fusion system 803 to complete satellite terminal access control and related request and response interactions.

[0150] License file 802 is used to store and verify activation codes, user phone numbers, and device fingerprints.

[0151] The Satellite-Ground Fusion System 803 is used to generate an activation code by signing the HID and user's phone number using the platform's private key certificate. It also records the binding relationship between the four elements: HID, user's phone number, activation code, and validity period, thereby managing the lifecycle of the device and user-related services. It is also responsible for user authentication and related service management when the terminal sends a service request.

[0152] It should be noted that for a detailed explanation of the steps performed by each module and their beneficial effects, please refer to the description in the above embodiments, which will not be repeated here.

[0153] As can be seen, the above mainly describes the solutions provided by the embodiments of this application from a methodological perspective. To achieve the above functions, the embodiments of this application provide corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, in conjunction with the modules and algorithm steps of the various examples described in the embodiments disclosed herein, the embodiments of this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0154] In some embodiments, this application also provides a constellation communication device. The constellation communication device may include one or more functional modules for implementing the constellation communication method of the above method embodiments.

[0155] For example, Figure 11 This is a schematic diagram of a constellation communication device provided in an embodiment of this application, applied to a satellite terminal. Figure 11 As shown, the constellation communication device 900 includes: an acquisition module 901, a verification module 902, a transmission module 903, a receiving module 904, and a communication module 905.

[0156] The system comprises the following modules: Acquisition module 901 acquires an access verification activation code when the satellite terminal is powered on and offline; the activation code indicates the legitimacy of the satellite terminal. Verification module 902 performs offline verification of the activation code using a public key certificate. Sending module 903 sends a terminal access request to the satellite-ground fusion server, carrying the verification activation code, when the offline verification is successful and the satellite terminal is online. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. Receiving module 904 receives a session token sent by the satellite-ground fusion server. Communication module 902 initiates a first session with the satellite-ground fusion server based on the session token; the satellite-ground fusion server, based on the session content of the first session, determines M constellations from the N constellations that match the session content and controls these M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

[0157] In the constellation communication device provided in this application embodiment, since the satellite-ground fusion server can correspond to multiple constellations, when a satellite terminal accesses the satellite-ground fusion server, the satellite-ground fusion server can control M of the N constellations to perform operations corresponding to the session content according to the session content of the first session. In this way, different constellations can be connected through one satellite terminal. Furthermore, the legality of the satellite terminal is ensured by verifying the activation code through offline self-testing of the satellite terminal, thereby improving the security of constellation communication.

[0158] In some embodiments, the acquisition module 901 is specifically used to acquire the verification activation code from the verification file when the existence of the verification activation code in the verification file is detected; wherein, the verification file stores the device fingerprint of the satellite terminal, the user's phone number corresponding to the satellite terminal, and the verification activation code.

[0159] In other embodiments, the acquisition module 901 is specifically used to acquire the user's phone number and the satellite terminal's device fingerprint when a verification activation code is detected not to exist in the verification file. The sending module 903 is specifically used to send a verification activation code generation request to the satellite-ground fusion server. The verification activation code generation request carries the user's phone number and device fingerprint, and is used to instruct the satellite-ground fusion server to generate a verification activation code based on the user's phone number and device fingerprint. The receiving module 904 is specifically used to receive a verification activation code response message sent by the satellite-ground fusion server, the verification activation code response message carrying the verification activation code.

[0160] In some embodiments, the constellation communication device 900 further includes a processing module. The receiving module 904 is further configured to receive an access response message sent by the satellite-ground fusion server before receiving the session token sent by the satellite-ground fusion server. The access response message carries an authentication random number, which is generated by the satellite-ground fusion server based on the device fingerprint, user phone number, and verification activation code. The processing module is configured to encrypt the authentication random number, device fingerprint, and user phone number to obtain a first session key. The sending module 903 is further configured to send an authentication request to the satellite-ground fusion service. The authentication request carries the first session key and is used to instruct the satellite-ground fusion service to perform access authentication.

[0161] In some embodiments, this application also provides another constellation communication device. This constellation communication device may include one or more functional modules for implementing the constellation communication method of the above method embodiments.

[0162] For example, Figure 12 This is a schematic diagram of a constellation communication device provided in an embodiment of this application, applied to a satellite-ground fusion server. For example... Figure 12As shown, the constellation communication device 100 includes: a receiving module 1001, an authentication module 1002, a transmitting module 1003, and a communication module 1004.

[0163] The system comprises the following modules: a receiving module 1001, which receives a terminal access request from a satellite terminal, carrying a verification activation code; and a satellite-ground fusion server corresponding to N constellations, where N is a positive integer. An authentication module 1002, which authenticates the satellite terminal based on the verification activation code. A sending module 1003, which sends a session token to the satellite terminal upon successful authentication. A communication module 1004, which initiates a first session with the satellite terminal based on the session token; wherein, based on the session content of the first session, the satellite-ground fusion server determines M constellations from the N constellations that match the session content, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

[0164] In the constellation communication device provided in this application embodiment, since the satellite-ground fusion server can correspond to multiple constellations, when a satellite terminal accesses the satellite-ground fusion server, the satellite-ground fusion server can control M of the N constellations to perform operations corresponding to the session content according to the session content of the first session. In this way, different constellations can be connected through one satellite terminal.

[0165] In some embodiments, the constellation communication device 100 further includes a processing module; the receiving module 1001 is further configured to receive a verification activation code generation request sent by the satellite terminal before receiving a terminal access request sent by the satellite terminal, the verification activation code generation request carrying the user's phone number corresponding to the satellite terminal and the device fingerprint of the satellite terminal. The processing module is configured to generate a verification activation code based on the user's phone number and the device fingerprint. The sending module 1003 is further configured to send a verification activation code response message to the satellite terminal, the verification activation code response message carrying the verification activation code.

[0166] In other embodiments, the aforementioned constellation communication device 100 further includes a processing module; the terminal access request also carries a user's phone number and a device fingerprint; the processing module is configured to generate an authentication random number based on the user's phone number, device fingerprint, and authentication activation code before authenticating access to the satellite terminal based on the verification activation code, and to generate a second session key based on the user's phone number, device fingerprint, and authentication random number. The sending module 1003 is further configured to send an access response message to the satellite terminal, the access response message carrying the authentication random number. The receiving module 1001 is further configured to receive an authentication request sent by the satellite terminal, the authentication request carrying a first session key, the first session key being generated by the satellite terminal based on the authentication random number, device fingerprint, and user's phone number. Specifically, the processing module is configured to determine that the satellite terminal has passed access authentication if the first session key and the second session key are consistent.

[0167] It should be noted that the constellation communication device can implement all the processes implemented in the above method embodiments and achieve the same beneficial effects. To avoid repetition, it will not be described again here.

[0168] In the case where the functions of the integrated modules described above are implemented in hardware, this application provides a possible structural schematic diagram of the electronic device involved in the above embodiments. For example... Figure 13 As shown, the electronic device 90 includes: a processor 92, a communication interface 93, and a bus 94. Optionally, the electronic device 90 may also include a memory 91.

[0169] Processor 92 may implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. Processor 92 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It may implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. Processor 92 may also be a combination that implements computational functions, such as including one or more microprocessor combinations, a combination of a DSP and a microprocessor, etc.

[0170] Communication interface 93 is used to connect with other devices via a communication network. This communication network can be Ethernet, wireless access network, wireless local area network (WLAN), etc.

[0171] The memory 91 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but is not limited thereto.

[0172] As one possible implementation, the memory 91 can exist independently of the processor 92. The memory 91 can be connected to the processor 92 via a bus 94 and is used to store instructions or program code. When the processor 92 calls and executes the instructions or program code stored in the memory 91, it can implement the constellation communication method provided in the embodiments of this application.

[0173] In another possible implementation, memory 91 can also be integrated with processor 92.

[0174] Bus 94 can be an Extended Industry Standard Architecture (EISA) bus, etc. Bus 94 can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 13 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0175] Through the above description of the implementation methods, those skilled in the art can clearly understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the service calling device can be divided into different functional modules to complete all or part of the functions described above.

[0176] This application embodiment also provides a chip, which includes a processor and a communication interface. The communication interface is coupled to the processor. The processor is used to run programs or instructions to implement the various processes of the above-described constellation communication method embodiments and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0177] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0178] This application also provides a readable storage medium storing a program or instructions that, when executed by a computer, implement the constellation communication method provided in the above embodiments. It is understood that all or part of the processes in the above method embodiments can be executed by computer instructions instructing related hardware; the readable storage medium can be any of the foregoing embodiments or memory; the readable storage medium can also be an external storage device of the service invocation device, such as a pluggable hard disk, smart media card (SMC), secure digital (SD) card, flash card, etc., equipped on the service invocation device. Further, the readable storage medium can include both internal storage units of the service invocation device and external storage devices. The readable storage medium is used to store the computer program and other programs and data required by the service invocation device. The readable storage medium can also be used to temporarily store data that has been output or will be output.

[0179] This application also provides a computer program product, which is stored in a storage medium and implements the constellation communication method provided in the above embodiments when the computer program product is executed by a computer.

[0180] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0181] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a computer software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0182] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A constellation communication method, characterized in that, Applied to satellite terminals, including: When the satellite terminal is powered on and offline, an access verification activation code is obtained, which is used to indicate the legitimacy of the satellite terminal. The activation code is verified offline using a public key certificate. If the offline verification passes and the satellite terminal is online, a terminal access request is sent to the satellite-ground fusion server. The terminal access request carries the verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. Receive the session token sent by the satellite-ground fusion server, and initiate the first session with the satellite-ground fusion server based on the session token; The satellite-ground fusion server determines M constellations from the N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

2. The constellation communication method according to claim 1, characterized in that, The process of obtaining the access verification activation code includes: If a verification activation code is detected in the verification file, the verification activation code is obtained from the verification file. The verification file stores the device fingerprint of the satellite terminal, the user's phone number corresponding to the satellite terminal, and the verification activation code.

3. The constellation communication method according to claim 1, characterized in that, The process of obtaining the access verification activation code includes: If the verification activation code is not found in the verification file, obtain the user's phone number and the device fingerprint of the satellite terminal; Send a verification activation code generation request to the satellite-ground fusion server. The verification activation code generation request carries the user's phone number and the device fingerprint. The verification activation code generation request is used to instruct the satellite-ground fusion server to generate the verification activation code based on the user's phone number and the device fingerprint. The system receives a verification activation code response message sent by the satellite-ground fusion server, the verification activation code response message carrying the verification activation code.

4. The constellation communication method according to any one of claims 1 to 3, characterized in that, Before receiving the session token sent by the satellite-ground fusion server, the method further includes: The system receives an access response message sent by the satellite-ground fusion server. The access response message carries an authentication random number, which is generated by the satellite-ground fusion server based on the device fingerprint, the user's phone number, and the verification activation code. The authentication random number, the device fingerprint, and the user's phone number are encrypted to obtain the first session key; An authentication request is sent to the satellite-ground fusion service. The authentication request carries the first session key and is used to instruct the satellite-ground fusion service to perform access authentication.

5. A constellation communication method, characterized in that, Applications in satellite-ground fusion servers include: The system receives terminal access requests sent by satellite terminals, the terminal access requests carrying a verification activation code, and the satellite-ground fusion server corresponds to N constellations, where N is a positive integer. Based on the verification activation code, the satellite terminal is authenticated for access. If the access authentication is successful, a session token is sent to the satellite terminal, and a first session is initiated with the satellite terminal based on the session token; The satellite-ground fusion server determines M constellations from the N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

6. The constellation communication method according to claim 5, characterized in that, Before receiving the terminal access request sent by the satellite terminal, the method further includes: Receive a verification activation code generation request sent by the satellite terminal, wherein the verification activation code generation request carries the user's phone number corresponding to the satellite terminal and the device fingerprint of the satellite terminal; The verification activation code is generated based on the user's phone number and the device fingerprint; A verification activation code response message is sent to the satellite terminal, the verification activation code being carried in the verification activation code response message.

7. The constellation communication method according to claim 5, characterized in that, The terminal access request also carries the user's phone number and device fingerprint; Before performing access authentication on the satellite terminal based on the verification activation code, the method further includes: Based on the user's phone number, the device fingerprint, and the verification activation code, an authentication random number is generated, and based on the user's phone number, the device fingerprint, and the authentication random number, a second session key is generated; Send an access response message to the satellite terminal, the access response message carrying the authentication random number; The system receives an authentication request sent by the satellite terminal, the authentication request carrying a first session key, which is generated by the satellite terminal based on the authentication random number, the device fingerprint, and the user's phone number. The access authentication of the satellite terminal based on the verification activation code includes: If the first session key and the second session key are consistent, it is determined that the satellite terminal has passed access authentication.

8. A constellation communication device, characterized in that, Applied to satellite terminals, it includes: an acquisition module, a verification module, a transmission module, a receiving module, and a communication module; The acquisition module is used to acquire an access verification activation code when the satellite terminal is powered on and offline. The verification activation code is used to indicate the legitimacy of the satellite terminal. The verification module is used to perform offline verification of the verification activation code using a public key certificate; The sending module is used to send a terminal access request to the satellite-ground fusion server when the offline verification is passed and the satellite terminal is online. The terminal access request carries the verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. The receiving module is used to receive the session token sent by the satellite-ground fusion server; The communication module is used to initiate a first session with the satellite-ground fusion server based on the session token; The satellite-ground fusion server determines M constellations from the N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

9. A constellation communication device, characterized in that, It is used in satellite-ground fusion servers and includes: a receiving module, an authentication module, a sending module, and a communication module; The receiving module is used to receive terminal access requests sent by satellite terminals. The terminal access requests carry a verification activation code. The satellite-ground fusion server corresponds to N constellations, where N is a positive integer. The authentication module is used to perform access authentication on the satellite terminal based on the verification activation code; The sending module is used to send a session token to the satellite terminal when the access authentication is successful; The communication module is used to conduct a first session with the satellite terminal based on the session token; The satellite-ground fusion server determines M constellations from the N constellations that match the session content based on the session content of the first session, and controls the M constellations to perform the operations corresponding to the session content, where M is an integer less than or equal to N.

10. An electronic device, characterized in that, It includes a processor and a memory, the memory storing programs or instructions that can run on the processor, the programs or instructions being executed by the processor to implement the constellation communication method as described in any one of claims 1-4 or to implement the constellation communication method as described in any one of claims 5-7.

11. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a computer, implement the constellation communication method as described in any one of claims 1-4 or as described in any one of claims 5-7.

12. A computer program product, characterized in that, The computer program product is stored in a storage medium, and when executed by a computer, the computer program product implements the constellation communication method as described in any one of claims 1-4 or as described in any one of claims 5-7.

Images