应用CCSDS空间数据链路安全协议的卫星遥控安全方案探讨  

Discussion of Satellite TC Security Scheme Using CCSDS Space Data Link Security Protocol

作　　者：陈杰 熊晓将[1] 陈亮亮[1] 齐海铭 CHEN Jie;XIONG Xiaojiang;CHEN Liangliang;QI Haiming(Institute of Telecommunication Satellite,China Academy of Space Technology,Beiing 100094,China)

机构地区：[1]中国空间技术研究院通信卫星事业部,北京100094

出　　处：《航天器工程》2020年第2期73-79,共7页Spacecraft Engineering

基　　金：国家重大科技专项工程(2017ZX01013101-003)。

摘　　要：针对国内卫星遥控体制国际化的需求,结合已有的空间数据系统咨询委员会(CCSDS)遥控协议体系架构,设计了应用CCSDS空间数据链路安全协议(SDLS)的遥控安全方案。该方案选用认证和加密认证2种业务,并针对不同的遥控安全业务,分别设计了定制遥控帧格式、安全关联、算法管理及密钥管理业务。以目标机为核心搭建验证系统,通过2个典型应用场景验证遥控安全方案的可行性,结果表明:该方案可提高遥控安全系统的灵活性、可扩展性,并且能够有效保护密钥强度,延长密钥生命周期。遥控安全方案的设计及其在遥控单元中的实现,可为我国卫星遥控体制与国际接轨提供参考。Aiming at the internationalization of Chinese satellite TC system, a TC security scheme is proposed using CCSDS SDLS(space data link security protocol), according to the existing CCSDS TC protocol architecture. Authentication and authenticated encryption are selected as security services in this TC security scheme, and customized TC frame format, security association management, algorithm management as well as key management are designed regarding to diffe￣rent security services. A demonstration system is constructed with target machine as the core, and then two typical application scenarios are designed to verify the feasibility of this TC security scheme. The results show that the TC security scheme enhances the flexibility of TC security system and expands the scalability of TC security system. Meanwhile this TC security scheme protects key strength effectively and extends the key life cycle. The design and implementation of this scheme within TC unit can be as a reference for globalization of Chinese satellite TC system.

关 键 词：卫星遥控安全 空间数据链路安全协议 遥控帧格式 安全关联 密钥管理 

分 类 号：V446[航空宇航科学与技术—飞行器设计]