Trusted timestamp service system, method and device based on satellite communication, and storage medium

Abstract

The present application provides a trusted timestamp service system, method and device based on satellite communication, and a storage medium. A satellite NTP server is configured to receive timing time of a satellite signal, start NTP service and provide network timing service; a terminal trusted timestamp server is configured to start NTP synchronization service and acquire timing time; and the terminal trusted timestamp server is configured to provide endorsement service of a trusted timestamp for at least one terminal device in the same local area network, and generate a trusted timestamp credential by means of a trusted timestamp interface. The stability and service efficiency of the trusted timestamp service system can be improved on the basis of satellite communication. The problem that when a trusted timestamp service center provides service for an external program or an operator by means of the Internet, trusted timestamp service cannot be obtained in places where there is no Internet access or the network environment is poor is solved.

Description

Trusted timestamp service system, method, device and storage medium based on satellite communication

[0001] This application claims priority to the Chinese patent application filed with the China Patent Office on June 27, 2023, with application number 202310769098.6 and application name “Trusted timestamp service system, method, device and storage medium based on satellite communication”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present application belongs to the field of communication technology, and specifically relates to a trusted timestamp technology based on satellite communication, and more particularly to a trusted timestamp service system, method, device and storage medium based on satellite communication. Background Art

[0003] With the development of the Internet, electronic data has become an important form of data transmission and dissemination. A trusted timestamp credential is an electronic certificate issued by a trusted timestamp service center. It can prove the existence and content integrity of electronic data without obtaining the content of the electronic data. It is widely used in electronic evidence, electronic contracts, electronic documents, intellectual property rights and other fields.

[0004] However, at present, due to various reasons that lead to unstable network signals and broadband or even network disconnection, some products and services are unable to obtain trusted timestamp services or provide online verification on the Internet when obtaining trusted timestamp credentials.

[0005] Summary of the Invention

[0006] The satellite communication-based trusted timestamp service system, method, device, and storage medium proposed in the present invention improve the stability and service efficiency of the trusted timestamp service system based on satellite communication.

[0007] According to a first aspect of an embodiment of the present application, a trusted timestamp service system based on satellite communication is provided, comprising a connected satellite NTP server and a terminal trusted timestamp server; the satellite NTP server is used to receive the timing time of the satellite signal, start the NTP service and provide the network timing service; the terminal trusted timestamp server is used to start the NTP synchronization service and obtain the timing time; the terminal trusted timestamp server is used to provide a trusted timestamp signing service to at least one terminal device in the same local area network, and generate a trusted timestamp credential through a trusted timestamp interface.

[0008] In some embodiments of the present application, the system also includes a satellite communication terminal and a cloud-based trusted timestamp server; the satellite communication terminal is used to access the Internet based on satellite communication; the terminal trusted timestamp server is used to connect to the cloud-based trusted timestamp server through the satellite communication terminal, and transmit trusted timestamp credentials and endorsement logs; the cloud-based trusted timestamp server is used to store trusted timestamp credentials and endorsement logs, and is used to provide query and verification services for trusted timestamp credentials to at least one Internet user, and generate query and verification results through a query interface.

[0009] In some embodiments of the present application, the system further includes a cloud NTP server; the cloud NTP server is connected to a cloud trusted timestamp server to enable the NTP service and provide network timing services.

[0010] In some embodiments of the present application, the trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server to the outside world based on HTTPS, and the trusted timestamp interface complies with the "GB / T 36631-2018" specification.

[0011] According to the second aspect of the embodiment of the present application, a trusted timestamp service method based on satellite communication is provided, including: receiving the timing time of the satellite signal through the satellite NTP server, starting the NTP service and providing the network timing service; starting the NTP synchronization service and obtaining the timing time through the terminal trusted timestamp server; and providing a trusted timestamp signing service to at least one terminal device in the same local area network as the terminal trusted timestamp server, and generating a trusted timestamp credential through the trusted timestamp interface.

[0012] In some embodiments of the present application, a trusted timestamp endorsement service is provided to at least one terminal device in the same local area network as the terminal trusted timestamp server, and a trusted timestamp credential is generated through a trusted timestamp interface, including: receiving a trusted timestamp credential request from the terminal device, verifying and confirming that the data structure of the trusted timestamp credential request complies with the specification; verifying and confirming that the terminal trusted timestamp server has completed time synchronization with the satellite NTP server; generating a trusted timestamp credential response, and saving the trusted timestamp credential and endorsement log.

[0013] According to the third aspect of the embodiment of the present application, a trusted timestamp service method based on satellite communication is provided, including: the terminal trusted timestamp server connects to the cloud-based trusted timestamp server through the satellite communication terminal, and transmits the trusted timestamp credentials and the endorsement log; the trusted timestamp credentials and the endorsement log are saved by the cloud-based trusted timestamp server, and the query and verification service of the trusted timestamp credentials is provided to at least one Internet user, and the query and verification results are generated through the query interface.

[0014] In some embodiments of the present application, data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on the REST interface of HTTPS, and the data content is a JSON data packet.

[0015] According to a fourth aspect of an embodiment of the present application, a trusted timestamp service device based on satellite communication is provided, comprising: a memory for storing executable instructions; and a processor for connecting to the memory to execute the executable instructions to complete a trusted timestamp service method.

[0016] According to a fifth aspect of an embodiment of the present application, a computer-readable storage medium is provided, on which a computer program is stored; the computer program is executed by a processor to implement a trusted timestamp service method based on satellite communication.

[0017] The satellite communication-based trusted timestamp service system, method, device, and storage medium of this application utilize a satellite NTP server for receiving satellite signal timing, enabling NTP services, and providing network timing services. A terminal trusted timestamp server is used to initiate NTP synchronization services and obtain timing time. The terminal trusted timestamp server is used to provide trusted timestamp endorsement services to at least one terminal device in the same local area network and generate trusted timestamp credentials through a trusted timestamp interface. This improves the stability and service efficiency of the trusted timestamp service system based on satellite communication. This solves the problem of a trusted timestamp service center providing services to external programs or operators via the internet, which can hinder access to trusted timestamp services in areas without internet access or with poor network conditions.

[0018] In addition, the satellite communication terminal and the cloud-based trusted timestamp server enable synchronization of timestamp credentials and logs to the cloud, providing trusted timestamp credential query and verification services to at least one internet user. This solves the problem of being unable to provide online verification when the terminal's trusted timestamp server is offline. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0020] FIG1 shows a schematic structural diagram of a satellite communication-based trusted timestamp service system according to an embodiment of the present application;

[0021] FIG2 shows another schematic structural diagram of a satellite communication-based trusted timestamp service system according to an embodiment of the present application;

[0022] FIG3 shows a schematic diagram of the principle structure of a satellite communication-based trusted timestamp service system according to an embodiment of the present application;

[0023] FIG4 is a schematic diagram showing the steps of a satellite communication-based trusted timestamp service method according to an embodiment of the present application;

[0024] FIG5 is a schematic diagram showing the steps of a satellite communication-based trusted timestamp service method according to an embodiment of the present application;

[0025] FIG6 shows a flow chart of time calibration based on satellite timing according to an embodiment of the present application;

[0026] FIG7 shows a flow chart of trusted timestamp endorsement and verification based on satellite communication according to an embodiment of the present application;

[0027] FIG8 shows a schematic structural diagram of a satellite communication-based trusted timestamp service device according to an embodiment of the present application. DETAILED DESCRIPTION

[0028] Regarding this application, with the development of the Internet, electronic data has become an important form of data transmission and dissemination. A trusted timestamp credential is an electronic certificate issued by a trusted timestamp service center. It can prove the existence and content integrity of electronic data without obtaining the content of the electronic data. It is widely used in electronic evidence, electronic contracts, electronic documents, intellectual property rights and other fields.

[0029] However, there are currently two problems with how products and services obtain trusted timestamp credentials:

[0030] First, the trusted timestamp service center provides services to external programs / operators through the Internet. In places where the Internet cannot reach or where the network environment is very poor, the trusted timestamp service cannot be obtained.

[0031] The second is the offline trusted timestamp server, which cannot provide online verification on the Internet.

[0032] Based on this, the present application discloses a trusted timestamp service system and operation method based on satellite communication, especially a satellite-based NTP server and a satellite network-based trusted timestamp service method, and also includes a method for data synchronization in an unstable network, to solve the above problems to varying degrees.

[0033] Specifically, for problem one: In places where the Internet cannot reach, this application provides a terminal trusted timestamp server, based on local Ethernet, to provide trusted timestamp services for programs / operators of terminal devices; and adopts an NTP server based on satellite timing to provide a trusted time source for the trusted timestamp server.

[0034] Regarding the second issue, the synchronization program monitors the trusted timestamp credentials and logs on the terminal's trusted timestamp server and uploads them to the cloud-based timestamp server via the satellite network. The synchronization program uses an asynchronous upload mechanism, adaptively adjusting the upload speed based on the satellite network's data communication quality and pausing uploads in areas without a network connection. The cloud-based trusted timestamp server stores the synchronized timestamp credentials and logs in a database and provides external query services.

[0035] In summary, the satellite communication-based trusted timestamp service system proposed in this application, in principle, includes five parts: satellite communication terminal, satellite NTP server (Beidou timing), terminal trusted timestamp server, cloud NTP server and cloud trusted timestamp server.

[0036] Among them, the Network Time Protocol (NTP) server is a protocol used to synchronize computer time. It can synchronize computers with their servers or clock sources (such as quartz clocks, GPS, etc.). It can provide high-precision time correction and can prevent malicious protocol attacks through encryption confirmation.

[0037] The operation method of the trusted timestamp service based on satellite communication is divided into two steps in principle:

[0038] The first is a time calibration process based on satellite timing. The satellite NTP server obtains accurate timing by receiving satellite signals, and then starts the NTP service to provide network timing services through Ethernet; the terminal trusted timestamp server connects to the satellite NTP server through Ethernet, starts the NTP synchronization service, and obtains accurate timing.

[0039] The second is a trusted timestamp endorsement and verification flow chart based on satellite communication. After the trusted timestamp server receives the trusted timestamp credential request, it verifies that the data structure of the trusted timestamp credential request complies with the specification, then verifies the requested user name and password, and verifies that the local time has completed synchronization with the NTP server, generates a trusted timestamp credential response, and saves it locally; the background synchronization program monitors the timestamp credentials and logs in real time, and synchronizes the timestamp credentials and logs to the cloud server according to the status of satellite communication; the cloud server saves the timestamp credentials and logs to the database and provides credential query services.

[0040] In summary, the method of the satellite communication-based trusted timestamp service system of the present application includes the following steps:

[0041] 1. Provide satellite NTP server as the time source of the terminal's trusted timestamp server;

[0042] 2. The terminal trusted timestamp server provides trusted timestamp services and saves trusted timestamp credentials and logs;

[0043] 3. The synchronization program in the terminal's trusted timestamp server synchronizes timestamp credentials and logs to the cloud timestamp server via the satellite network;

[0044] 4. The cloud timestamp server saves credentials and logs to the database and provides external timestamp credential query services.

[0045] Specifically, the satellite communication-based trusted timestamp service system, method, device, and storage medium of the present application are used. A satellite NTP server is used to receive the timing time from satellite signals, enable the NTP service, and provide network timing services. A terminal trusted timestamp server is used to initiate the NTP synchronization service and obtain the timing time. The terminal trusted timestamp server is used to provide trusted timestamp endorsement services to at least one terminal device in the same local area network and generate trusted timestamp credentials through a trusted timestamp interface. This improves the stability and service efficiency of the trusted timestamp service system based on satellite communications. This solves the problem of a trusted timestamp service center providing services to external programs or operators via the internet, which can lead to the inability to obtain trusted timestamp services in areas without internet access or with poor network conditions.

[0046] In addition, the satellite communication terminal and the cloud-based trusted timestamp server enable synchronization of timestamp credentials and logs to the cloud, providing trusted timestamp credential query and verification services to at least one internet user. This solves the problem of being unable to provide online verification when the terminal's trusted timestamp server is offline.

[0047] In order to make the technical solutions and advantages of the embodiments of the present application more clearly understood, the exemplary embodiments of the present application are further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, and are not an exhaustive list of all the embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other unless they conflict.

[0048] Example 1

[0049] FIG1 shows a schematic structural diagram of a satellite communication-based trusted timestamp service system according to an embodiment of the present application.

[0050] As shown in FIG1 , the satellite communication-based trusted timestamp service system of an embodiment of the present application includes a satellite NTP server 101 and a terminal trusted timestamp server 102 connected to each other;

[0051] The satellite NTP server 101 is used to receive the time of the satellite signal, start the NTP service and provide network timing service; the terminal trusted timestamp server 102 is used to start the NTP synchronization service and obtain the time; the terminal trusted timestamp server 102 is used to provide a trusted timestamp signing service to at least one terminal device in the same local area network, and generate a trusted timestamp credential through the trusted timestamp interface.

[0052] The satellite NTP server 101 is an NTP server based on satellite timing, which obtains high-precision timing through the Beidou timing satellite 201 and provides NTP services to the outside world through Ethernet.

[0053] In this embodiment, the timing satellite 201 is used to send satellite signals with accurate timing time; the timing satellite 201 is a satellite that provides timing. Satellite timing is the process of using the satellite as a time reference source or forwarding intermediary to recover the original time locally by receiving satellite signals and performing delay compensation.

[0054] Furthermore, satellite communications can be used to improve the stability and service efficiency of the trusted timestamp service system. This solves the problem of being unable to obtain trusted timestamp services in areas without Internet access or with poor network conditions when the trusted timestamp service center provides services to external programs or operators via the Internet.

[0055] FIG2 shows another structural diagram of a satellite communication-based trusted timestamp service system according to an embodiment of the present application.

[0056] As shown in FIG. 2 , in some embodiments of the present application, the system further includes a satellite communication terminal 103 and a cloud-based trusted timestamp server 301 .

[0057] Specifically, the satellite communication terminal 103 is used to access the Internet based on satellite communication; the terminal trusted timestamp server 102 is used to connect to the cloud-based trusted timestamp server 301 through the satellite communication terminal 103, and transmit the trusted timestamp credentials and the endorsement log; the cloud-based trusted timestamp server 301 is used to store the trusted timestamp credentials and the endorsement log, and to provide query and verification services for the trusted timestamp credentials to at least one Internet user, and generate query and verification results through the query interface.

[0058] Here, the satellite communication terminal is connected to the communication satellite and accesses the Internet based on satellite communication; the function of the communication satellite is to use the satellite as a transmission relay for wireless signals to provide Internet access for ground terminals.

[0059] Therefore, the satellite communication terminal 103 and the cloud-based trusted timestamp server 301 can be used to synchronize timestamp credentials and logs to the cloud, and a trusted timestamp credential query and verification service can be provided to at least one Internet user. This solves the problem of being unable to provide online verification on the Internet when the terminal-based trusted timestamp server 102 is offline.

[0060] In some embodiments of the present application, the system further includes a cloud NTP server; the cloud NTP server is connected to the cloud trusted timestamp server 301, and is used to enable the NTP service and provide network timing services.

[0061] In this embodiment, the cloud NTP server is a hardware server that provides NTP services, and is generally timed by satellite, optical fiber, or upper-level NTP.

[0062] In other implementations, the trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server 102 to the outside based on HTTPS, and the trusted timestamp interface complies with the "GB / T 36631-2018" specification.

[0063] FIG3 shows a schematic diagram of the principle structure of a satellite communication-based trusted timestamp service system according to an embodiment of the present application.

[0064] To further illustrate the principle of the satellite communication-based trusted timestamp service system of the embodiment of the present application, a schematic diagram of the trusted timestamp system structure in a specific application scenario is shown in Figure 3, including an NTP server 101, a terminal trusted timestamp server 102, a satellite communication terminal 103, a trusted timestamp interface 104, a timing satellite 201, a communication satellite 202, a cloud-based trusted timestamp server 301, a cloud-based NTP server 302, a query interface 303, a public / supervisor 401, and a program / operator 402.

[0065] Among them, the satellite NTP server 101: an NTP server based on satellite timing, obtains high-precision timing through Beidou timing satellites, and provides NTP services to the outside world through Ethernet.

[0066] Terminal trusted timestamp server 102: The trusted timestamp server deployed in the terminal can use two Ethernets: one provides trusted timestamp signing services for devices in the terminal local area network, and the terminal device uses the HTTPS-based REST interface to generate trusted timestamp credentials; the other connects to the Internet through a satellite communication terminal, synchronizes the signed trusted timestamp credentials and logs to the cloud-based trusted timestamp server, and provides verification services for trusted timestamp credentials for the public / regulators.

[0067] Satellite communication terminal 103: An Internet access terminal device that uses the principle of satellite communication technology to provide Internet access in places without basic Internet coverage. The disadvantages are large transmission delays and unstable data connections.

[0068] Trusted timestamp interface 104: Provides external services based on Ethernet. The service interface complies with GB / T 36631-2018.

[0069] Timing Satellite 201: A satellite that provides timing. Satellite timing is the process of using a satellite as a time reference source or forwarding intermediary to recover the original time locally by receiving satellite signals and performing delay compensation.

[0070] Communication Satellite 202: Satellites are used as transmission relays for wireless signals to provide Internet access for ground terminals.

[0071] Cloud-based trusted timestamp server 301: A trusted timestamp server deployed on the Internet, providing an HTTPS-based REST interface, receiving data from the terminal trusted timestamp server, and saving it to the database; providing the public / regulators with a page for querying and verifying trusted timestamp credentials. Authorized public and regulators can query relevant information of trusted timestamp credentials online through a browser.

[0072] Cloud NTP server 302: a hardware server that provides NTP services, generally using satellite timing, optical fiber timing or upper-level NTP timing.

[0073] Query interface 303: provides a browser-based query interface, and the public / supervisors can query the relevant information of the corresponding trusted timestamp credentials based on the granted permissions, including but not limited to the signing time, signing device, digital fingerprint and other information.

[0074] Public / Supervisor 401: Authorized public and supervisors can query and verify timestamp credentials after logging in with the corresponding login account and password.

[0075] Program / Operator 402: A program or operator that requires a trusted timestamp. A program is typically a standalone hardware device that automatically adds a trusted timestamp to target data during operation. An operator manually adds a trusted timestamp to a specific PDF document.

[0076] In summary, the satellite communication-based trusted timestamp service system of the present application is adopted, and the satellite NTP server is used to receive the timing time of the satellite signal, start the NTP service and provide network timing service; the terminal trusted timestamp server is used to start the NTP synchronization service and obtain the timing time; the terminal trusted timestamp server is used to provide a trusted timestamp signing service to at least one terminal device in the same local area network, and generate a trusted timestamp credential through the trusted timestamp interface.

[0077] The embodiments of the present application can improve the stability and service efficiency of a trusted timestamp service system based on satellite communications. This solves the problem of a trusted timestamp service center providing services to external programs or operators via the internet, which can be difficult to obtain in areas without internet access or with poor network conditions. Furthermore, by synchronizing timestamp credentials and logs with the cloud through a satellite communications terminal and a cloud-based trusted timestamp server, trusted timestamp credential query and verification services can be provided to at least one internet user. This solves the problem of a terminal's trusted timestamp server being unable to provide online verification over the internet when the server is offline.

[0078] Example 2

[0079] This embodiment provides a trusted timestamp service method based on satellite communication. For details not disclosed in the trusted timestamp service method of this embodiment, please refer to the specific implementation content of the trusted timestamp service system in other embodiments.

[0080] FIG4 is a schematic diagram showing the steps of a satellite communication-based trusted timestamp service method according to an embodiment of the present application.

[0081] As shown in FIG4 , the satellite communication-based trusted timestamp service method includes:

[0082] S1: Receives satellite signal timing from the satellite NTP server, starts the NTP service, and provides network timing services.

[0083] S2: Start the NTP synchronization service through the terminal trusted timestamp server and obtain the time; and provide the trusted timestamp signing service to at least one terminal device in the same local area network as the terminal trusted timestamp server, and generate a trusted timestamp credential through the trusted timestamp interface.

[0084] Among them, when providing a trusted timestamp signing service to at least one terminal device in the same local area network as the terminal trusted timestamp server and generating a trusted timestamp credential through the trusted timestamp interface, the specific implementation includes: first, receiving a trusted timestamp credential request from the terminal device, verifying and confirming that the data structure of the trusted timestamp credential request complies with the specification; secondly, verifying and confirming that the terminal trusted timestamp server has completed time synchronization with the satellite NTP server; then, generating a trusted timestamp credential response, and saving the trusted timestamp credential and the signing log.

[0085] FIG5 is a schematic diagram showing the steps of a satellite communication-based trusted timestamp service method according to an embodiment of the present application.

[0086] As shown in FIG5 , another embodiment of the present application further provides a trusted timestamp service method based on satellite communication, including:

[0087] S3: The terminal trusted timestamp server connects to the cloud trusted timestamp server via a satellite communication terminal and transmits the trusted timestamp credentials and the signed log;

[0088] S4: The trusted timestamp credential and the endorsement log are stored in a cloud-based trusted timestamp server, a query and verification service of the trusted timestamp credential is provided to at least one Internet user, and a query and verification result is generated through a query interface.

[0089] In specific implementation, the data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on the REST interface of HTTPS, and the data content is a JSON data packet.

[0090] To further illustrate the principle of the satellite communication-based trusted timestamp service method according to an embodiment of the present application, the following description will be made through a specific application scenario in conjunction with the system structure diagram of FIG3 .

[0091] FIG6 shows a flow chart of time calibration based on satellite timing according to an embodiment of the present application; FIG7 shows a flow chart of trusted timestamp endorsement and verification based on satellite communication according to an embodiment of the present application.

[0092] Based on the satellite communication-based trusted timestamp service system of the embodiment of the present application, its trusted timestamp service method mainly includes two processes: 1. The time calibration process based on satellite timing as shown in Figure 6; 2. The trusted timestamp endorsement and verification process based on satellite communication as shown in Figure 7.

[0093] As shown in Figure 6, satellite timing is used to transmit precise time to a trusted timestamp server, which then provides trusted timestamp services to the outside world. This process includes the following steps:

[0094] 1) On the "Satellite NTP Server", receive / parse satellite signals to obtain accurate time service time as the server system time.

[0095] 2) On the "Satellite NTP Server", start the NTP service program and use the standard NTP synchronization protocol (RFC 5905) to provide time synchronization services on the Internet.

[0096] 3) On the "Terminal Trusted Timestamp Server", start the NTP client to synchronize time with the "Satellite NTP Server" and record the synchronization log and results.

[0097] 4) On the "Terminal Trusted Timestamp Server", wait until NTP synchronization is complete and the time offset is within the set range (generally less than 20ms), start the trusted timestamp service, and provide a REST interface based on HTTPS.

[0098] As shown in Figure 7, in the trusted timestamp signing and verification process based on satellite communication, the "terminal trusted timestamp server" provides trusted timestamp signing services and data synchronization services, and uploads the issued trusted timestamp credentials and logs to the "cloud trusted timestamp server" via satellite communication. On the "cloud trusted timestamp server", the trusted timestamp credential query and verification services are provided.

[0099] The specific process is as follows:

[0100] 5) On the "Terminal Trusted Timestamp Server", the trusted timestamp signing service is specifically started, and the service interface complies with the "GB / T 36631-2018" specification.

[0101] 6) On the "Terminal Trusted Timestamp Server", the trusted timestamp endorsement service saves the endorsement log and the trusted timestamp credentials to the local server.

[0102] 7) On the "Terminal Trusted Timestamp Server", in the data synchronization service, monitor the trusted timestamp credentials and logs, find the trusted timestamp credentials and logs that need to be synchronized, check whether the satellite network communication is normal, and wait until the network is normal.

[0103] 8) On the "Terminal Trusted Timestamp Server", after the satellite network is normal, the trusted timestamp credentials and logs that need to be synchronized are sent to the cloud server. The data transmission is based on the HTTPS REST interface and the content is JSON data packets.

[0104] JSON (JavaScript Object Notation) is a lightweight data exchange format that uses a text format that is completely independent of programming languages ​​to store and represent data.

[0105] During the data transmission process between the terminal trusted timestamp server and the cloud trusted timestamp server, the interface request data format of the terminal trusted timestamp server is shown in Table 1.

[0106] Table 1

[0107] The interface response data format of the cloud-based trusted timestamp server is shown in Table 2.

[0108] Table 2

[0109] 9) On the "Cloud Trusted Timestamp Server," timestamp credentials and logs are stored in a database and query / verification services are provided. The query / verification service is provided by a browser-based webpage, allowing authorized members of the public and regulators to query information related to the trusted timestamp credentials online through a browser.

[0110] In summary, the trusted timestamp service method based on satellite communication in the embodiment of the present application is adopted, and the satellite NTP server is used to receive the timing time of the satellite signal, start the NTP service and provide the network timing service; the terminal trusted timestamp server is used to start the NTP synchronization service and obtain the timing time; the terminal trusted timestamp server is used to provide a trusted timestamp signing service to at least one terminal device in the same local area network, and generate a trusted timestamp credential through the trusted timestamp interface.

[0111] The embodiments of the present application can improve the stability and service efficiency of the trusted timestamp service system based on satellite communications, and solve the problem that when a trusted timestamp service center provides services to external programs or operators via the Internet, the trusted timestamp service cannot be obtained in areas without Internet access or with poor network conditions.

[0112] In addition, the satellite communication terminal and the cloud-based trusted timestamp server enable synchronization of timestamp credentials and logs to the cloud, providing trusted timestamp credential query and verification services to at least one internet user. This solves the problem of being unable to provide online verification when the terminal's trusted timestamp server is offline.

[0113] Example 3

[0114] This embodiment provides a trusted timestamp service device based on satellite communication. For details not disclosed in the trusted timestamp service device based on satellite communication in this embodiment, please refer to the specific implementation content of the trusted timestamp service method or system based on satellite communication in other embodiments.

[0115] FIG8 shows a schematic structural diagram of a satellite communication-based trusted timestamp service device 400 or an image recognition device according to an embodiment of the present application.

[0116] As shown in FIG8 , the satellite communication-based trusted timestamp service device 400 or image recognition device includes:

[0117] Memory 402: used to store executable instructions; and

[0118] Processor 401: configured to connect to memory 402 to execute executable instructions to implement a satellite communication-based trusted timestamp service method or an image recognition method.

[0119] Those skilled in the art will understand that schematic diagram 8 is merely an example of a trusted timestamp service device 400 or an image recognition device based on satellite communication, and does not constitute a limitation on the trusted timestamp service device 400 or the image recognition device based on satellite communication. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, the trusted timestamp service device 400 based on satellite communication may also include input and output devices, network access devices, buses, etc.

[0120] The processor 401 (Central Processing Unit, CPU) may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor 401 may also be any conventional processor, etc. The processor 401 is the control center of the satellite communication-based trusted timestamp service device 400, and utilizes various interfaces and lines to connect various parts of the satellite communication-based trusted timestamp service device 400.

[0121] Memory 402 can be used to store computer-readable instructions. Processor 401 implements various functions of satellite communication-based trusted timestamp service device 400 by running or executing computer-readable instructions or modules stored in memory 402 and accessing data stored in memory 402. Memory 402 may primarily include a program storage area and a data storage area. The program storage area may store an operating system and at least one application required for a function (such as a sound playback function or an image playback function); the data storage area may store data created based on the use of satellite communication-based trusted timestamp service device 400. Furthermore, memory 402 may include a hard disk, internal memory, a plug-in hard disk, a SmartMedia Card (SMC), a Secure Digital (SD) card, a flash card, at least one disk storage device, a flash memory device, a read-only memory (ROM), a random access memory (RAM), or other non-volatile or volatile storage devices.

[0122] If the modules integrated into the satellite communication-based trusted timestamp service device 400 are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the present invention can also implement all or part of the processes in the above-mentioned method embodiments by instructing the relevant hardware through computer-readable instructions. The computer-readable instructions can be stored in a computer-readable storage medium. When executed by a processor, the computer-readable instructions can implement the steps of each of the above-mentioned method embodiments.

[0123] Example 5

[0124] This embodiment provides a computer-readable storage medium having a computer program stored thereon; the computer program is executed by a processor to implement the satellite communication-based trusted timestamp service method in other embodiments.

[0125] The satellite communication-based trusted timestamp service device and storage medium of the embodiment of the present application are used to receive the timing time of satellite signals, start the NTP service and provide network timing services through the satellite NTP server; the terminal trusted timestamp server is used to start the NTP synchronization service and obtain the timing time; the terminal trusted timestamp server is used to provide a trusted timestamp signing service to at least one terminal device in the same local area network, and generate a trusted timestamp credential through a trusted timestamp interface.

[0126] The embodiments of the present application can improve the stability and service efficiency of the trusted timestamp service system based on satellite communications, and solve the problem that when a trusted timestamp service center provides services to external programs or operators via the Internet, the trusted timestamp service cannot be obtained in areas without Internet access or with poor network conditions.

[0127] In addition, the satellite communication terminal and the cloud-based trusted timestamp server enable synchronization of timestamp credentials and logs to the cloud, providing trusted timestamp credential query and verification services to at least one internet user. This solves the problem of being unable to provide online verification when the terminal's trusted timestamp server is offline.

[0128] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0129] The present application is described with reference to the flow chart and / or block diagram of the method, device (system), and computer program product according to the embodiment of the present application. It should be understood that each flow process and / or box in the flow chart and / or block diagram and the combination of the flow process and / or box in the flow chart and / or block diagram can be realized by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processing machine or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for realizing the function specified in one flow chart flow or multiple flows and / or one box or multiple boxes of the block diagram.

[0130] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0131] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0132] The terms used in this invention are for the purpose of describing specific embodiments only and are not intended to limit the invention. The singular forms "a," "the," and "the" used in this invention and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" as used herein refers to and includes any or all possible combinations of one or more of the associated listed items.

[0133] It should be understood that although the terms "first," "second," "third," etc. may be used in the present invention to describe various information, such information should not be limited to these terms. These terms are merely used to distinguish information of the same type from one another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present invention. Depending on the context, the term "if" as used herein may be interpreted as "when," "when," or "in response to determining."

[0134] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present application.

[0135] Obviously, those skilled in the art may make various changes and modifications to this application without departing from the spirit and scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalents, this application is intended to include these modifications and variations.

Claims

1. A trusted timestamp service system based on satellite communication, characterized in that: Including the connected satellite NTP server and the terminal trusted timestamp server; The satellite NTP server is used to receive the timing time of satellite signals, start the NTP service and provide network timing services; The terminal trusted timestamp server is used to start the NTP synchronization service and obtain the time. The terminal trusted timestamp server is used to provide a trusted timestamp endorsement service to at least one terminal device in the same local area network, and to generate a trusted timestamp credential through a trusted timestamp interface.

2. The trusted timestamp service system according to claim 1, characterized in that: The system also includes a satellite communication terminal and a cloud-based trusted timestamp server; The satellite communication terminal is used to access the Internet based on satellite communication; The terminal trusted timestamp server is used to connect to the cloud trusted timestamp server through a satellite communication terminal and transmit the trusted timestamp credentials and the endorsement log; The cloud-based trusted timestamp server is used to store the trusted timestamp credentials and the endorsement log, to provide at least one Internet user with a query and verification service for the trusted timestamp credentials, and to generate a query and verification result through a query interface.

3. The trusted timestamp service system according to claim 2, characterized in that: The system also includes a cloud NTP server; the cloud NTP server is connected to the cloud trusted timestamp server to enable the NTP service and provide network timing service.

4. The trusted timestamp service system according to any one of claims 1 to 3, characterized in that: The trusted timestamp interface is a REST interface provided by the terminal trusted timestamp server to the outside based on HTTPS. The trusted timestamp interface complies with the GB / T 36631-2018 specification.

5. A trusted timestamp service method based on satellite communication, characterized in that: include: Receive the time from satellite signals through the satellite NTP server, start the NTP service and provide network timing services; Start the NTP synchronization service and obtain the time through the terminal trusted timestamp server; A trusted timestamp endorsement service is provided to at least one terminal device in the same local area network as the terminal trusted timestamp server, and a trusted timestamp credential is generated through a trusted timestamp interface.

6. The trusted timestamp service method according to claim 5, characterized in that: The providing of a trusted timestamp endorsement service to at least one terminal device in the same local area network as the terminal trusted timestamp server, and generating a trusted timestamp credential through a trusted timestamp interface, comprises: Receiving a trusted timestamp credential request from a terminal device, verifying and confirming that a data structure of the trusted timestamp credential request complies with the specification; Verify and confirm that the terminal trusted timestamp server has completed time synchronization with the satellite NTP server; Generate a trusted timestamp credential response and save the trusted timestamp credential and the endorsement log.

7. A trusted timestamp service method based on satellite communication, characterized in that: include: The terminal trusted timestamp server connects to the cloud trusted timestamp server through the satellite communication terminal and transmits the trusted timestamp credentials and the endorsement log; The trusted timestamp credential and the endorsement log are stored in a cloud-based trusted timestamp server and sent to at least one Networked users provide query and verification services for trusted timestamp credentials, and generate query and verification results through the query interface.

8. The trusted timestamp service method according to claim 7, characterized in that: The data transmission between the terminal trusted timestamp server and the cloud trusted timestamp server is based on the REST interface of HTTPS, and the data content is a JSON data packet.

9. A trusted timestamp service device based on satellite communication, characterized in that: include: A memory for storing executable instructions; as well as A processor is used to connect to the memory to execute executable instructions to complete the trusted timestamp service method as described in any one of claims 5-8.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon; the computer program is executed by a processor to implement a satellite communication-based trusted timestamp service method as described in any one of claims 5-8.

Images