Research On Cryptographic Equipment Supervision Strategy And Method Based On The Space-ground Integrated Network

Nowadays,the world is always engaged in wars based on information competition.The space and information fields have become the focus of national defense and military.The space-ground integrated network,which integrates space-based,air-based and ground-based networks,is a comprehensive network with complex network structure and wide industry domains.It is suitable for occupying space,obtaining information and resources.However,due to the large span and wide range of the network,including the infrastructure of all heterogeneous networks in the air,space,sea and land,in order to ensure the information security of each node in the space-ground integrated network,a large number of different kinds of cryptographic devices are needed.The space-ground integrated network has complex topology,high heterogeneity and diversified entity types,including various types of satellite security terminals,gateway terminals,processing modules on satellite,security gateways,security management and control systems,and other network equipments.According to the computing power,storage space and interface type of each device and its cryptographic application requirements,the cryptographic devices in the space-ground integrated network are divided into three types: cryptographic module,cryptographic card and server cryptographic machine,which together provide confidentiality,integrity and authenticated cryptographic services for the spaceground integrated network.This paper conducts research and design of the regulatory model and supervision system for a large number of cryptographic devices.The details are as follows:(1)Study on the composition and characteristics of the space-ground integrated network.The space-ground integrated network for military-civil Joint Construction and Sharing,is composed of a space-based backbone network,a space-based access network,a groundbased node network and existing and planned satellite systems.It has the characteristics of complex topology,satellite node exposure,frequent protocol switching,and a wide range of user groups.(2)Hierarchical and domain-based cryptographic device supervision model.By analyzing the characteristics brought by the space-ground integrated network in cryptographic device supervision,combined with the general supervision model of cryptographic device,the hierarchical and domain-based supervision model and framework for cryptographic devices are established.According the supervision model of cryptographic devices and access control theory,this paper proposes the supervision strategy of cryptographic devices to guide the implementation of the supervision method of cryptographic devices.In addition,the security level is added to the attributes of cryptographic devices and supervision center.This attribute is an important basis for the supervision center to obtain the cryptographic device information,and further improves the cryptographic device supervision strategy.(3)Design the cryptographic device supervision system according to the supervision model.Users using the space-ground integrated network are widely diverse,and multiple service flows are transmitted in the network.For the security of various types of information and the classification of service flows,this paper divides the user domain of cryptographic device supervision into four categories: party and government,military,civil and international.Based on the supervision model and network partition,the architecture of cryptographic device supervision system is designed.The supervision center of this framework has no hierarchical restrictions.The multi-level supervision center forms a tree structure in a nondifferentiated cascade manner,which provides the basis for the system implementation.(4)Implementation of cryptographic device supervision system.According to the design of the cryptographic device supervision model and the supervision system,the cryptographic device supervision system is implemented,so that the system has the basic function of monitoring and managing cryptographic device,such as displaying the information of cryptographic devices,checking the status of cryptographic devices,killing abnormal cryptographic devices,etc.