[go: up one dir, main page]

CN101552992B - A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security - Google Patents

A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security Download PDF

Info

Publication number
CN101552992B
CN101552992B CN2009100249738A CN200910024973A CN101552992B CN 101552992 B CN101552992 B CN 101552992B CN 2009100249738 A CN2009100249738 A CN 2009100249738A CN 200910024973 A CN200910024973 A CN 200910024973A CN 101552992 B CN101552992 B CN 101552992B
Authority
CN
China
Prior art keywords
satellite
satellites
subnet
central
center
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN2009100249738A
Other languages
Chinese (zh)
Other versions
CN101552992A (en
Inventor
王汝传
史文雯
饶元
徐小龙
郑彦
孙力娟
张登银
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nanjing Post and Telecommunication University
Original Assignee
Nanjing Post and Telecommunication University
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nanjing Post and Telecommunication University filed Critical Nanjing Post and Telecommunication University
Priority to CN2009100249738A priority Critical patent/CN101552992B/en
Publication of CN101552992A publication Critical patent/CN101552992A/en
Application granted granted Critical
Publication of CN101552992B publication Critical patent/CN101552992B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

基于移动代理安全的卫星网动态路由方法是一种能够适用于卫星网络的动态路由方法,在其中加入移动代理技术,通过移动代理在网络中的迁移来遍历网络收集信息,进行信息的传送。本发明中将卫星网络划分为若干个区域子网,通过中心卫星来进行子网管理,子网内的卫星之间可以直接进行相互通信。子网之间通过发送TestDataAgent,在虚拟区域中运行检测的方法来保障代理在网络中的迁移安全。同时子网内的中心卫星可以交替轮流,避免因中心卫星处的信息量过大而形成网络拥塞,使得网络性能的下降。

Figure 200910024973

The satellite network dynamic routing method based on mobile agent security is a dynamic routing method suitable for satellite networks, adding mobile agent technology to it, and traversing the network to collect information and transmit information through the migration of mobile agents in the network. In the present invention, the satellite network is divided into several regional sub-networks, the sub-networks are managed through the central satellite, and the satellites in the sub-networks can directly communicate with each other. The method of sending TestDataAgent between subnets and running detection in the virtual area ensures the security of agent migration in the network. At the same time, the central satellites in the subnet can alternately take turns to avoid network congestion caused by excessive information volume at the central satellites, resulting in a decrease in network performance.

Figure 200910024973

Description

一种基于移动代理安全的卫星网动态路由方法 A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security

技术领域technical field

本发明是一种基于移动代理技术的动态路由方法,主要用于解决在卫星网络中使用移动代理技术来实现数据安全传送的动态路由算法的实现问题,属于网络协议设计领域。The invention is a dynamic routing method based on the mobile agent technology, which is mainly used to solve the problem of realizing the dynamic routing algorithm of the safe transmission of data by using the mobile agent technology in the satellite network, and belongs to the field of network protocol design.

背景技术Background technique

卫星网络是由航天器组成的,按照空间信息资源的最大有效综合利用的原则,通过星间无线通信链路互联互通,有机构成的太空无线通信体系。与地面通信设施相比,卫星网络通信具有覆盖范围广,尤其是可以覆盖地面网络难以铺设的广大地区(如海洋、沙漠、极地区域),不受地面自然灾害影响,通信费用与距离无关等特点,可以满足用户对高清晰电视、会议电视、高数据传输、可视电话、图像点播和远程教育等业务不断增加的需求。对卫星网络技术的研究,已经逐渐成为研究领域的一个热点。The satellite network is composed of spacecraft. According to the principle of maximum effective comprehensive utilization of space information resources, it is an organic space wireless communication system that is interconnected through inter-satellite wireless communication links. Compared with terrestrial communication facilities, satellite network communication has a wide coverage, especially can cover vast areas (such as oceans, deserts, and polar regions) where ground networks are difficult to lay, is not affected by natural disasters on the ground, and communication costs have nothing to do with distance. , which can meet the increasing demand of users for services such as high-definition television, conference television, high-speed data transmission, videophone, image-on-demand and distance education. The research on satellite network technology has gradually become a hot spot in the research field.

移动代理技术是一种新兴的技术,在大型网络中可以有效地简化分布式系统的设计、实现和维护,在现阶段被广泛应用于电子商务,信息收集与发布,网络即时监控等领域。Agent是一种能在特定环境下连续和自主地运作的软件实体,移动代理可以自动从一个节点移动到另一个节点,代表用户执行不同任务。Agent一般具有以下特征:Mobile agent technology is a new technology that can effectively simplify the design, implementation and maintenance of distributed systems in large networks. It is widely used in e-commerce, information collection and release, real-time network monitoring and other fields at this stage. Agent is a software entity that can operate continuously and autonomously in a specific environment. A mobile agent can automatically move from one node to another to perform different tasks on behalf of the user. Agents generally have the following characteristics:

1)反应性:一种有选择的感知和行动能力。1) Reactivity: an ability to perceive and act selectively.

2)自治性:自主控制自身行为和内部状态的能力。2) Autonomy: the ability to autonomously control one's own behavior and internal state.

3)合作性:与其他Agent协调合作以达到共同目标。3) Cooperative: coordinate and cooperate with other Agents to achieve common goals.

4)自学习能力:自身具备一定知识,且可在与用户和其他Agent的交互中学习新知识。4) Self-learning ability: It has certain knowledge itself, and can learn new knowledge in the interaction with users and other Agents.

由于移动代理是在开放性网络中进行信息传送,当Agent程序在网络中漫游时,它的程序码和数据都是不安全的,数据传递和通信链接中可能存在有很大的安全威胁。一般来说,移动代理的安全问题主要分为两种:一种是保护主机不受其它移动代理的攻击;另一种是保护移动移动代理不受其它主机的攻击。对此,人们想出了各种机制来提高移动代理的安全性能,如对移动代理进行加密,对网络中的主机进行限制等。Because the mobile agent transmits information in the open network, when the Agent program roams in the network, its program code and data are not safe, and there may be great security threats in data transmission and communication links. Generally speaking, the security problems of mobile agents are mainly divided into two types: one is to protect the host from other mobile agents' attacks; the other is to protect mobile agents from other hosts' attacks. In this regard, people have come up with various mechanisms to improve the security performance of mobile agents, such as encrypting mobile agents, restricting hosts in the network, and so on.

路由算法是支撑网络传输的关键技术。目前的路由算法有很多,总的来说分为两类:静态路由算法和动态路由算法,针对不同类型的需要,各有其优缺点。静态路由是一种非凡的路由,它是由治理员手工设定的,算法复杂度比较简单,但具有局限性,在网络拓扑发生变化之后,不会自动改变;动态算法是由路由器自动计算出路由,可以比较好地适应拓扑结构容易变化的网络。随着网络规模的发展和新业务开发,传统的动态路由选择算法已逐渐成为集中处理机制的瓶颈。解决这个问题的一个重要方面是对路由算法进行重新设计。Routing algorithm is the key technology supporting network transmission. There are many routing algorithms at present, which are generally divided into two categories: static routing algorithms and dynamic routing algorithms, each with its own advantages and disadvantages for different types of needs. Static routing is a special routing, it is manually set by the administrator, the algorithm complexity is relatively simple, but has limitations, after the network topology changes, it will not change automatically; dynamic algorithm is automatically calculated by the router Routing can better adapt to the network whose topology is easy to change. With the development of network scale and the development of new services, the traditional dynamic routing algorithm has gradually become the bottleneck of the centralized processing mechanism. An important aspect to solve this problem is to redesign the routing algorithm.

由于移动代理具备移动性等种种优点,可以通过路由节点发出的多个路由移动代理遍历网络收集信息,对路由算法进行改进。同时,现有的提高移动代理安全性能的方法虽然可以从一定程度上对Agent加以保护,但都存在有缺陷。因此,需要提出一种基于移动代理安全的卫星网动态路由算法,进一步深入对卫星网络的研究。Because mobile agents have various advantages such as mobility, multiple routing mobile agents sent by routing nodes can traverse the network to collect information and improve routing algorithms. At the same time, although the existing methods of improving the security performance of mobile agents can protect the Agent to a certain extent, they all have defects. Therefore, it is necessary to propose a dynamic routing algorithm for satellite networks based on mobile agent security, and to further in-depth research on satellite networks.

发明内容Contents of the invention

技术问题:本发明的目的是为了提出一种能够适用于卫星网络的动态路由方法,在其中加入移动移动代理技术,通过移动移动代理在网络中的迁移来遍历网络收集信息,进行信息的传送。同时,针对移动代理在网络中会遇到的安全威胁,采用提出了一种新的方法来保障移动代理的安全问题。Technical problem: the purpose of this invention is to propose a dynamic routing method applicable to satellite networks, adding mobile mobile agent technology to it, and traversing the network to collect information and transmit information through the migration of mobile mobile agents in the network. At the same time, aiming at the security threats that mobile agents will encounter in the network, a new method is proposed to ensure the security of mobile agents.

技术方案:本发明的方法是将整个卫星网的节点集S划分为若干个区域子网N1,N2,…Nm( S ⋐ N 1 ∪ N 2 ∪ N 3 . . . ∪ Nm ),每个子网有一个中心卫星,子网内的其他卫星称为普通卫星,中心卫星负责管理子网内的所有卫星节点。每一个卫星节点都有一个sub属性和一张邻居表Nlist(Net List),sub属性记录了卫星所在的子网号,Nlist邻居表记录了卫星到达子网内其他卫星的路由选择。中心卫星节点的Nlist除了记录到达本子网的卫星节点的路由选择,还记录有到达其他子网中心卫星的路径。中心卫星具有一张信任表Tlist(TrustList),记载了哪些子网是被信任的,可以直接进行数据通信。Technical scheme: the method of the present invention is that the node collection S of whole satellite network is divided into several regional subnetworks N1, N2, ... Nm( S ⋐ N 1 ∪ N 2 ∪ N 3 . . . ∪ N m ), each subnet has a central satellite, other satellites in the subnet are called ordinary satellites, and the central satellite is responsible for managing all satellite nodes in the subnet. Each satellite node has a sub attribute and a neighbor table Nlist (Net List). The sub attribute records the subnet number where the satellite is located, and the Nlist neighbor table records the route selection for the satellite to reach other satellites in the subnet. The Nlist of the central satellite node not only records the route selection to the satellite nodes of this subnet, but also records the paths to the central satellites of other subnets. The central satellite has a trust table Tlist (TrustList), which records which subnets are trusted and can directly carry out data communication.

中心卫星管理子网内的所有卫星节点,对普通卫星的行为负责,定时检测各个普通卫星,保证子网内的卫星节点都是安全的,不会做出恶意行为。同一个子网内的普通卫星之间是相互信任的,对于中心卫星是绝对信任的,因此相同子网的卫星之间可以直接进行信息传输,而不用担心传送数据的数据代理被恶意节点攻击或恶意访问节点。同时,中心卫星也负责与其他子网的卫星进行通信交流和通信安全的判定。每个子网的中心卫星会定时发送测试数据代理给其他子网区域的中心卫星,接收子网的中心卫星收到后,划分出一块虚拟区域供TestDataAgent运行,并记录测试数据代理的动作,若测试数据代理运行完成后没有记录到恶意行为,则给予测试数据代理一个允许访问的授权,表示接收子网的中心卫星信任发送子网的中心卫星。测试数据代理迁移回发送子网的中心卫星后,检查它的一些重要资源、属性是否被修改,若没有被篡改,且得到了访问授权,则该发送子网的中心卫星信任接收子网的中心卫星。当子网P的中心卫星信任了子网Q的中心卫星,也就意味着子网P的所有卫星节点信任子网Q的卫星,两个子网间的卫星就可以安全地进行数据交换,而不用担心存在有安全问题。The central satellite manages all satellite nodes in the subnet, is responsible for the behavior of ordinary satellites, regularly detects each ordinary satellite, and ensures that the satellite nodes in the subnet are safe and will not engage in malicious behavior. Ordinary satellites in the same subnet trust each other, and absolutely trust the central satellite, so satellites in the same subnet can directly transmit information without worrying about the data agent transmitting data being attacked by malicious nodes or malicious access node. At the same time, the central satellite is also responsible for communicating with satellites in other subnets and judging communication security. The central satellite of each subnet will regularly send the test data agent to the central satellites in other subnet regions. After the central satellite of the receiving subnet receives it, it will divide a virtual area for TestDataAgent to run, and record the action of the test data agent. If the test If no malicious behavior is recorded after the data agent runs, the test data agent is given an authorization to allow access, indicating that the central satellite of the receiving subnet trusts the central satellite of the sending subnet. After the test data agent migrates back to the central satellite of the sending subnet, check whether some of its important resources and attributes have been modified. If it has not been tampered with and has obtained access authorization, the central satellite of the sending subnet trusts the center of the receiving subnet satellite. When the central satellite of subnetwork P trusts the central satellite of subnetwork Q, it means that all satellite nodes of subnetwork P trust the satellites of subnetwork Q, and the satellites between the two subnetworks can safely exchange data without Worry about safety issues.

卫星之间进行数据传递时,如果源卫星和目的卫星处于同一个子网,则可以直接进行两者间的数据交换;如果源卫星和目的卫星处于不同子网,则源卫星先将数据发送给所在子网的中心卫星,再由中心卫星将数据发送给目的卫星所在子网的中心卫星,然后再转发给目的卫星。When transmitting data between satellites, if the source satellite and the destination satellite are in the same subnet, the data exchange between the two can be performed directly; if the source satellite and the destination satellite are in different subnets, the source satellite will first send the data to the The central satellite of the subnet, and then the central satellite sends the data to the central satellite of the subnet where the destination satellite is located, and then forwards the data to the destination satellite.

中心卫星的任务很多,既需要负责管理本子网区域,与子网内的卫星进行通信,更新子网内的路由表,检测普通卫星的行为动作,处理普通卫星间的通信问题,同时又要和其他子网进行通信,更新子网之间的路由表,负责与其他子网进行通信的安全保障。如果始终由一颗卫星作为中心卫星,很可能会因为中心卫星处的信息量过大而在中心卫星处出现拥塞,成为整个网络的瓶颈,造成网络的性能下降。为此,可以设定一个阀值Ef,当中心卫星的信息量大于Ef时,就在该区域内重新选择一颗中心卫星,原来的中心卫星则变为普通卫星。The central satellite has many tasks. It is not only responsible for managing the subnet area, communicating with the satellites in the subnet, updating the routing table in the subnet, detecting the behavior of ordinary satellites, and dealing with communication problems between ordinary satellites. Communicate with other subnets, update the routing table between subnets, and be responsible for the security of communication with other subnets. If one satellite is always used as the central satellite, it is likely that congestion will occur at the central satellite due to the excessive amount of information at the central satellite, which will become the bottleneck of the entire network and cause network performance degradation. For this reason, a threshold Ef can be set. When the information amount of the center satellite is greater than Ef, a new center satellite is selected in this area, and the original center satellite becomes an ordinary satellite.

本发明的路由算法为动态路由算法,能够根据卫星网络的拓扑结构变化自主更新卫星节点的路由选择。卫星节点之间通过定时发送路径代理来探测路径,更新路由表。普通卫星只向本子网内的卫星发送路径代理,更新自身的Nlist;中心卫星除了要更新本子网的路由选择,还要定时发送路径代理给其他子网的中心卫星,更新到其他子网卫星的路由选择。The routing algorithm of the present invention is a dynamic routing algorithm, which can automatically update the routing selection of the satellite nodes according to the change of the topology structure of the satellite network. Satellite nodes send path agents regularly to detect paths and update routing tables. Ordinary satellites only send path agents to the satellites in this subnet to update their own Nlist; in addition to updating the routing selection of this subnet, the central satellite also regularly sends path agents to the center satellites of other subnets to update the Nlist of other subnet satellites. Routing.

本发明基于移动代理安全的卫星网动态路由方法将整个网络划分为若干个小子网,通过移动代理的移动性特点,来遍历网络进行数据的传送,同时采用虚拟空间的方法,保障移动代理在网络中的安全,其中,The present invention divides the entire network into several small subnets based on the satellite network dynamic routing method of mobile agent security, traverses the network for data transmission through the mobility characteristics of the mobile agent, and adopts a virtual space method to ensure that the mobile agent is in the network security in which,

子网的划分步骤如下:The subnet division steps are as follows:

1.1.卫星i具有centeri,coveri,subi三个属性,置centeri和coveri为假,subi=100表示卫星i既不是中心卫星,也没有加入任何子网,1.1. Satellite i has three attributes: center i , cover i , and sub i . Set center i and cover i as false, and sub i = 100 means that satellite i is neither a center satellite nor joined any subnet.

1.2.以概率p=2向卫星i的邻居卫星广播消息msg(Di),其中α为卫星i的邻居数,1.2. Broadcast message msg(D i ) to neighbor satellites of satellite i with probability p=2 , where α is the number of neighbors of satellite i,

1.3.若信息msg(Di)发送成功,则置centeri为真,subi=i,表示卫星i成为子网i的中心卫星,转步骤1.5,1.3. If the information msg(D i ) is sent successfully, set center i as true, sub i =i, indicating that satellite i becomes the center satellite of subnet i, and turn to step 1.5,

1.4.经过V个时间片后,检测centeri和coveri属性,若都为假,将概率p加倍后,向邻居卫星广播消息msg(Di),转步骤1.3,1.4. After V time slices, detect center i and cover i attributes, if both are false, double the probability p, broadcast message msg(D i ) to neighboring satellites, go to step 1.3,

1.5.当卫星j收到消息msg(Di)时,先判断自己是否已成为中心卫星,或已加入某个子网;若centerj,coverj均为假,表明卫星j既不是中心卫星,也没有加入某个子网成为普通卫星;回送一条消息msg(BDj)给卫星i,表示卫星j加入子网i,成为子网i的普通卫星,置coverj为真,subj=i,否则丢弃msg(Di),1.5. When satellite j receives the message msg(D i ), it first judges whether it has become a center satellite or has joined a certain subnet; if center j and cover j are both false, it indicates that satellite j is neither a center satellite nor a center satellite. Become a common satellite without joining a certain subnet; return a message msg(BD j ) to satellite i, indicating that satellite j joins subnet i and becomes a common satellite of subnet i, set cover j as true, sub j = i, otherwise discard msg(D i ),

1.6.卫星i收到msg(BDj)后,将卫星j列为本子网的普通卫星;1.6. After satellite i receives msg(BD j ), it lists satellite j as an ordinary satellite of this subnet;

子网划分完成后,每个子网都包括一个中心卫星和若干个普通卫星,中心卫星负责将本子网的卫星成员通知各个普通卫星,然后进行路由的更新和信息传送:After the subnet division is completed, each subnet includes a central satellite and several ordinary satellites. The central satellite is responsible for notifying each ordinary satellite of the satellite members of this subnet, and then performing routing update and information transmission:

2.1.卫星定时发送路由移动代理t给周围卫星,更新自身的路由选择,2.1. The satellite regularly sends the routing mobile agent t to the surrounding satellites to update its own routing selection,

2.1.1.普通卫星以本子网的卫星为目的卫星依次发送路由移动代理,2.1.1. Ordinary satellites use the satellites of this subnet as the destination satellites to send routing mobile agents in sequence,

2.1.2.中心卫星将本子网卫星和其他子网的中心卫星分别列为目的卫星依次发送路由移动代理,2.1.2. The central satellite lists the satellites of this subnet and the central satellites of other subnets as the destination satellites and sends routing mobile agents in turn,

2.1.3.当路由移动代理从目的卫星迁移回来后,发送卫星根据其经过路径,更新自身的路由表;2.1.3. When the routing mobile agent migrates back from the destination satellite, the sending satellite updates its own routing table according to its passing path;

2.2.中心卫星定时发送检测信息给普通卫星,监督普通卫星的动作,防止出现恶意行为,检查普通卫星的网络状况和资源使用情况,对普通卫星的不当行为进行处理,2.2. The central satellite regularly sends detection information to ordinary satellites, supervises the actions of ordinary satellites, prevents malicious behavior, checks the network status and resource usage of ordinary satellites, and handles improper behavior of ordinary satellites.

2.2.1.中心卫星定时向子网内的普通卫星发送检测信息,2.2.1. The central satellite regularly sends detection information to ordinary satellites in the subnet,

2.2.2.检测信息达到普通卫星后,记录卫星节点的行为动作、网络状况和资源使用情况,返回中心卫星,2.2.2. After the detection information reaches the ordinary satellite, record the behavior of the satellite node, network status and resource usage, and return to the central satellite.

2.2.3.若检测信息记录到了被检测卫星实施不允许的操作或网络资源状况出现异常,中心卫星对其进行处理,保证正常运行,2.2.3. If the detection information records the operation that is not allowed by the detected satellite or the network resource status is abnormal, the central satellite will process it to ensure normal operation,

2.2.4.普通卫星间如果出现问题,则将问题提交给中心卫星,由其进行处理;2.2.4. If there is a problem between ordinary satellites, the problem will be submitted to the central satellite for processing;

2.3.不同子网的中心卫星之间定时发送TestDataAgent,检测移动Agent在子网间传递信息的安全性,相互之间的检测过程如下:2.3. The central satellites of different subnets regularly send TestDataAgent to detect the security of the mobile Agent transmitting information between subnets. The mutual detection process is as follows:

2.3.1卫星k定时向卫星r发送测试数据移动代理,2.3.1 Satellite k regularly sends test data mobile agent to satellite r,

2.3.2.卫星r收到测试数据移动代理后,划分出一块虚拟区域供TestDataAgent运行,记录测试数据移动代理的动作,2.3.2. After satellite r receives the test data mobile agent, it divides a virtual area for TestDataAgent to run, and records the actions of the test data mobile agent.

2.3.3.当测试数据移动代理运行完成后,若所有动作都是合法的,卫星r将区域K添加到自己的信任列表中,把测试数据移动代理的允许访问属性置为真;若存在有恶意行为,则将区域K从信任列表中剔除,把测试数据移动代理的允许访问属性置为假,2.3.3. After the test data mobile agent runs, if all actions are legal, the satellite r will add the area K to its trust list, and set the allowed access attribute of the test data mobile agent to true; if there are Malicious behavior, remove area K from the trust list, set the allowed access attribute of the test data mobile agent to false,

2.3.4.测试数据移动代理t迁移回卫星k,卫星k对它的重要资源和属性进行检查若没有被篡改,且允许访问属性为真,则将区域R添加到信任列表中,否则将区域K从信任列表中剔除,2.3.4. Test data The mobile agent t migrates back to the satellite k, and the satellite k checks its important resources and attributes. If it has not been tampered with and the access permission attribute is true, then the region R is added to the trust list, otherwise the region K is removed from the trust list,

2.4.卫星之间通过移动代理进行数据传送,若发送卫星和目的卫星处于相同子网,则根据路由选择直接发送;若处于两个不同子网,数据移动代理的迁移路径为:发送卫星->发送卫星所在子网的中心卫星->目的卫星所在子网的中心卫星->目的卫星,2.4. Data is transmitted between satellites through a mobile agent. If the sending satellite and the destination satellite are in the same subnet, they will be sent directly according to the route selection; if they are in two different subnets, the migration path of the data mobile agent is: sending satellite -> The central satellite of the subnet where the sending satellite is located -> the central satellite of the subnet where the destination satellite is located -> the destination satellite,

2.5.中心卫星定时对自身的信息流量进行检测,当信息量超过阀值Ef时,替换中心卫星,替换的步骤如下:2.5. The central satellite regularly detects its own information flow. When the amount of information exceeds the threshold Ef, the central satellite is replaced. The replacement steps are as follows:

2.5.1.对子网内的普通卫星进行评估,从信息量,资源利用率,网络状况等方面挑选出新的中心卫星,2.5.1. Evaluate the ordinary satellites in the subnet, and select a new central satellite from the aspects of information volume, resource utilization, network conditions, etc.,

2.5.2.原中心卫星将相关的信息发送给新的中心卫星,原中心卫星的center属性置为假,cover属性置为真,2.5.2. The original center satellite sends relevant information to the new center satellite. The center attribute of the original center satellite is set to false, and the cover attribute is set to true.

2.5.3.新的中心卫星将自身的center属性置为真,2.5.3. The new center satellite sets its own center attribute to true,

2.5.4.发送信息通知子网内卫星和其他子网关于中心卫星更替的消息。2.5.4. Send information to inform the satellites in the subnet and other subnets about the replacement of the central satellite.

有益效果:本发明的目的是为了提出一种能够适用于卫星网络的动态路由算法,在路由算法中加入移动代理技术,通过移动代理在网络中的迁移来遍历网络收集信息,进行卫星网络中的信息传送。Beneficial effects: the purpose of the present invention is to propose a dynamic routing algorithm applicable to satellite networks, adding mobile agent technology in the routing algorithm, traversing the network to collect information through the migration of mobile agents in the network, and performing routing in the satellite network information transmission.

与以往的路由算法相比,本发明利用了移动代理具备的移动性等种种优点,由路由节点发出的多个路由代理遍历网络收集信息,通过一种特殊的通信方式合作,自适应地更新路由表和网络状况。Compared with the previous routing algorithm, the present invention utilizes various advantages such as the mobility of the mobile agent, and multiple routing agents sent by the routing node traverse the network to collect information, cooperate through a special communication mode, and update the route adaptively tables and network conditions.

将整个卫星网络划分为若干个局部子网,当网络拓扑的某个部分发生变化时,只需要改变发生变化的那个局部子网区域,不会影响到网络的其他部分。各个子网由一个中心卫星负责管理,可以最大化的保证子网内的卫星节点都是可信的,不会做出恶意行为,子网之间只需要中心卫星相互信任之后就能够保证整个区域的卫星都能够相互信任,大大减少了为保证卫星之间的信任而需要的系统开销和网络资源。不同子网之间使用虚拟空间来运行移动代理,记录移动代理的行为,提高了移动代理在网络中的安全保障。Divide the entire satellite network into several local subnets. When a certain part of the network topology changes, only the changed local subnet area needs to be changed without affecting other parts of the network. Each subnet is managed by a central satellite, which can maximize the guarantee that the satellite nodes in the subnet are credible and will not perform malicious acts. Only the central satellites between the subnets need to trust each other to ensure the entire area All satellites can trust each other, which greatly reduces the system overhead and network resources needed to ensure the trust between satellites. Different subnets use virtual space to run the mobile agent, record the behavior of the mobile agent, and improve the security of the mobile agent in the network.

子网中的普通卫星可以交替成为中心卫星,避免了由于中心卫星的信息量过大而造成的网络拥塞和网络性能的下降。同时,本发明中使用的动态路由算法,各颗卫星只需要定时更新到本子网卫星的路由选择,而不用记录整个网络的路由,极大地减少了由于路径探测而造成的系统开销和网络资源,减轻了网络的负载,有利于保持网络的通畅。Ordinary satellites in the subnet can alternately become central satellites, which avoids network congestion and network performance degradation caused by the excessive information volume of central satellites. At the same time, with the dynamic routing algorithm used in the present invention, each satellite only needs to regularly update the routing selection of the subnet satellite, without recording the routing of the entire network, which greatly reduces the system overhead and network resources caused by path detection. It reduces the load of the network and helps to keep the network smooth.

附图说明Description of drawings

图1是划分子网区域的流程图。Figure 1 is a flow chart of dividing subnet areas.

图2是网络子网划分后的示意图。FIG. 2 is a schematic diagram of a network subnet divided.

图3是移动代理t在卫星网络中的运行图。Figure 3 is a diagram of the operation of the mobile agent t in the satellite network.

图4是子网间安全通信的示意图。Fig. 4 is a schematic diagram of secure communication between subnets.

图5是卫星间数据通信示意图。Fig. 5 is a schematic diagram of data communication between satellites.

具体实施方式Detailed ways

一、体系结构1. Architecture

基于移动代理安全的卫星网动态路由算法通过移动Agent技术来实现路由算法的更新和数据传送。把整个卫星网络划分为若干个区域子网,变成子网内的卫星节点通信和各个子网之间的数据通信,简化了网络结构。采用虚拟区域保障移动代理的通信安全。其中,区域子网的划分模块,子网内部管理模块,子网间安全通信模块,路由更新模块,中心卫星更替模块是实现本发明方法的主要功能部分,下面就对几个具体部分给出说明:The satellite network dynamic routing algorithm based on mobile agent security realizes the update of routing algorithm and data transmission through mobile agent technology. The entire satellite network is divided into several regional subnets, which become satellite node communication in the subnet and data communication between each subnet, which simplifies the network structure. The communication security of the mobile agent is ensured by using the virtual area. Wherein, the division module of the regional subnet, the internal management module of the subnet, the safety communication module between the subnets, the routing update module, and the central satellite replacement module are the main functional parts for realizing the method of the present invention, and several specific parts are explained below :

区域子网的划分Division of regional subnets

每个卫星节点具有sub属性,center属性,cover属性和Nlist邻居表。初始化卫星网络,置sub为100,center和cover的属性为假,Nlist中记录可以进行直接通信的邻居卫星。卫星节点以概率p向邻居卫星广播消息,若发送成功,置center的属性为真,sub为卫星的节点号,形成一个子网区域,该卫星就是这个子网的中心卫星。当邻居卫星收到消息时,若center属性和cover属性都为假,就回送一条消息,表明加入该子网,成为普通卫星,置sub等于加入子网的中心卫星节点号,同时置cover属性为真。当所有子网划分完成后,中心卫星将本子网的子网号和成员节点号发送给所有的成员卫星。Each satellite node has sub attribute, center attribute, cover attribute and Nlist neighbor list. Initialize the satellite network, set sub to 100, the attributes of center and cover to false, and record the neighboring satellites that can communicate directly in Nlist. Satellite nodes broadcast messages to neighbor satellites with probability p. If the message is sent successfully, set the attribute of center to true, and sub is the node number of the satellite to form a subnetwork area. The satellite is the center satellite of this subnetwork. When the neighbor satellite receives the message, if both the center attribute and the cover attribute are false, a message will be sent back, indicating that it will join the subnet and become an ordinary satellite. Set sub equal to the node number of the center satellite joining the subnet, and set the cover attribute to real. After all subnets are divided, the central satellite sends the subnet number and member node number of this subnet to all member satellites.

子网内部管理Subnet internal management

中心卫星负责管理子网内的所有普通卫星。定时向普通卫星发送一些检测信息,检测各个普通卫星的运行状况,是否存在有恶意行为,如果有恶意行为存在,中心卫星就会监督该普通卫星,令其修改自身的行为动作。普通卫星之间通信时发生的问题纠纷,也会提交给中心卫星,由其进行判决。中心卫星在子网内拥有绝对的监督权和判决权,管理子网的正常运行,保证子网内的所有普通卫星都是的安全可信的。The central satellite is responsible for managing all common satellites in the subnet. Regularly send some detection information to ordinary satellites to detect the operation status of each ordinary satellite and whether there is any malicious behavior. If there is malicious behavior, the central satellite will supervise the ordinary satellite and order it to modify its own behavior. Problems and disputes arising from communication between ordinary satellites will also be submitted to the central satellite for judgment. The central satellite has absolute supervision and judgment rights in the subnet, manages the normal operation of the subnet, and ensures that all ordinary satellites in the subnet are safe and reliable.

子网间安全通信Secure communication between subnets

卫星直接通过数据的移动代理的迁移来进行数据的传递。每个中心卫星都代表了它所在的卫星子网,要判断一个子网是否能够被信任,只要判断它的中心卫星是否能够信任。在本发明中,采用虚拟空间的方法来实现子网间的安全通信,保证传送数据的移动代理的安全。任意两个子网K(中心卫星为k)和子网R(中心卫星为r)之间进行通信,卫星k定时发送测试数据的移动代理给卫星r,卫星r收到后,划分出一块虚拟区域供测试数据的移动代理运行,记录测试数据的移动代理的动作,当测试数据的移动代理运行完成后,若所有动作都是合法的,则卫星r将区域K添加到自己的信任列表中,表示区域K从区域K迁移过来的DataAgent都是安全的,可以信任的。同时将测试数据的移动代理的允许访问属性置为真;若存在有恶意行为,则将区域K从信任列表中剔除,把TestDataAgent的允许访问属性置为假,之后对于从区域K迁移过来的数据的移动代理都不接受。TestDataAgent在卫星r执行完后迁移回卫星k,由卫星k检查它的一些重要资源、属性是否被修改,若没有被篡改,且允许访问属性为真,则将区域R添加到信任列表中,可以安全的发送数据的移动代理给区域K,否则,说明区域R是不安全的。The satellite transfers the data directly through the migration of the mobile agent of the data. Each central satellite represents the satellite subnet it is in. To judge whether a subnet can be trusted, you only need to judge whether its central satellite can be trusted. In the present invention, the method of virtual space is adopted to realize the safe communication between the subnets, so as to ensure the safety of the mobile agent transmitting data. Communication between any two subnetworks K (center satellite is k) and subnetwork R (center satellite is r), satellite k regularly sends the mobile agent of the test data to satellite r, after satellite r receives it, it divides a virtual area for The mobile agent of the test data runs and records the actions of the mobile agent of the test data. When the mobile agent of the test data runs, if all the actions are legal, the satellite r adds the area K to its trust list, indicating the area K DataAgents migrated from area K are safe and trustworthy. At the same time, set the allowed access attribute of the mobile agent of the test data to true; if there is malicious behavior, remove the area K from the trust list, set the allowed access attribute of the TestDataAgent to false, and then for the data migrated from area K The mobile agent of is not accepted. TestDataAgent migrates back to satellite k after the execution of satellite r, and satellite k checks whether some of its important resources and attributes have been modified. If they have not been tampered with and the allowed access attribute is true, then add region R to the trust list, which can be It is safe for mobile agents to send data to region K, otherwise, region R is insecure.

路由更新routing update

随着时间的变化,卫星网络的拓扑结构和卫星的位置也会发生变化,卫星的路由表需要即时进行更新。路由选择的更新包括子网内的路由更新和子网间的路由更新两种。对于普通卫星来说,它们的路由表中只记录了到达本子网内的卫星的路由选择,只需要定时向本子网的其他卫星发送路由移动代理来更新路由。对于中心节点来说,除了要记录达到本子网内的卫星的路由选择,还要定时更新到达其他中心卫星的路由。As time changes, the topology of the satellite network and the position of the satellites will also change, and the routing table of the satellite needs to be updated in real time. Routing updates include routing updates within a subnet and routing updates between subnets. For ordinary satellites, their routing table only records the routing to the satellites in the subnet, and only needs to regularly send routing mobile agents to other satellites in the subnet to update the routing. For the central node, in addition to recording the route selection to the satellites in the subnet, it is also necessary to regularly update the routes to other central satellites.

中心卫星更替Center Satellite Replacement

中心卫星是否变换的标准是信息量的阀值Ef,当中心卫星处的信息量大于Ef时,就对子网内的普通卫星进行评估,选择出新的中心卫星,原中心卫星将相关的信息发送给新的中心卫星后就变成普通卫星,同时新的中心卫星发送信息通知子网内卫星和其他子网关于中心卫星更替的消息。The standard for whether the center satellite is changed is the threshold value Ef of the amount of information. When the amount of information at the center satellite is greater than Ef, the ordinary satellites in the subnet will be evaluated, and a new center satellite will be selected. The original center satellite will transfer the relevant information After being sent to the new center satellite, it becomes an ordinary satellite, and at the same time, the new center satellite sends information to inform the satellites in the subnet and other subnets about the replacement of the center satellite.

二、方法流程2. Method flow

对整个卫星网络进行初始化,每颗卫星的Nlist邻居表中记录可以进行直接通信的邻居卫星,设定中心卫星的信息量阀值Ef,进行子网的划分。Initialize the entire satellite network, record the neighboring satellites that can communicate directly in the Nlist neighbor table of each satellite, set the information volume threshold Ef of the central satellite, and divide the subnetwork.

子网的划分过程如下:The subnet division process is as follows:

1)卫星i具有centeri,coveri,subi三个属性,置centeri和coveri为假,subi=100,表示卫星i既不是中心卫星,也没有加入任何子网1) Satellite i has three attributes: center i , cover i , and sub i . Set center i and cover i as false, and sub i = 100, indicating that satellite i is neither a center satellite nor joined any subnet

2)以概率p=2向卫星i的邻居卫星广播消息msg(Di),其中α为卫星i的邻居数2) Broadcast message msg(D i ) to neighbor satellites of satellite i with probability p=2 - α, where α is the number of neighbors of satellite i

3)若信息msg(Di)发送成功,则置centeri为真,subi=i,表示卫星i成为子网i的中心卫星,转步骤53) If the message msg(D i ) is sent successfully, set center i as true, sub i = i, which means satellite i becomes the center satellite of subnet i, go to step 5

4)经过V个时间片后,检测centeri和coveri属性,若都为假,将概率p加倍后,向邻居卫星广播消息msg(Di),转步骤34) After V time slices, check the center i and cover i attributes, if both are false, double the probability p, broadcast the message msg(D i ) to the neighbor satellite, go to step 3

5)当卫星j收到消息msg(Di)时,先判断自己是否已成为中心卫星,或已加入某个子网。若centerj,coverj均为假,表明卫星j既不是中心卫星,也没有加入某个子网成为普通卫星。回送一条消息msg(BDj)给卫星i,表示卫星j加入子网i,成为子网i的普通卫星,置coverj为真,subj=i,否则丢弃msg(Di)5) When satellite j receives the message msg(D i ), it first judges whether it has become a central satellite or has joined a certain subnet. If both center j and cover j are false, it means that satellite j is neither a center satellite nor a common satellite that joins a certain subnet. Send back a message msg(BD j ) to satellite i, indicating that satellite j joins subnet i and becomes an ordinary satellite of subnet i, set cover j as true, sub j = i, otherwise discard msg(D i )

6)卫星i收到msg(BDj)后,将卫星j列为本子网的普通卫星6) After satellite i receives msg(BD j ), it lists satellite j as an ordinary satellite of this subnet

子网划分完成后,每个子网都包括一个中心卫星和若干个普通卫星。中心卫星负责将本子网的卫星成员通知各个普通卫星。然后进行路由的更新和信息传送:After the subnet is divided, each subnet includes a central satellite and several common satellites. The central satellite is responsible for notifying each ordinary satellite of the satellite members of the subnet. Then perform routing update and information transmission:

1.卫星定时发送路由移动代理给周围卫星,更新自身的路由选择1. The satellite regularly sends the routing mobile agent to the surrounding satellites to update its own routing selection

a)普通卫星以本子网的卫星为目的卫星依次发送路由移动代理a) Ordinary satellites use the satellites of this subnet as the destination satellites to send routing mobile agents in sequence

b)中心卫星将本子网卫星和其他子网的中心卫星分别列为目的卫星依次发送路由移动代理b) The center satellite lists the satellites of this subnet and the center satellites of other subnets as the destination satellites and sends routing mobile agents in turn

c)当路由移动代理从目的卫星迁移回来后,发送卫星根据其经过路径,更新自身的路由表。c) When the routing mobile agent migrates back from the destination satellite, the sending satellite updates its own routing table according to the route it passes through.

2.中心卫星定时发送检测信息给普通卫星,监督普通卫星的动作,防止出现恶意行为,2. The central satellite regularly sends detection information to ordinary satellites to monitor the actions of ordinary satellites and prevent malicious behaviors.

检查普通卫星的网络状况和资源使用情况,对普通卫星的不当行为进行处理Check the network status and resource usage of ordinary satellites, and deal with improper behavior of ordinary satellites

a)中心卫星定时向子网内的普通卫星发送检测信息a) The central satellite regularly sends detection information to ordinary satellites in the subnet

b)检测信息达到普通卫星后,记录卫星节点的行为动作、网络状况和资源使用情况,返回中心卫星b) After the detection information reaches the ordinary satellite, record the behavior of the satellite node, network status and resource usage, and return to the central satellite

c)若检测信息记录到了被检测卫星实施不允许的操作或网络资源状况出现异常,中心卫星对其进行处理,保证正常运行c) If the detection information records the operation that is not allowed by the detected satellite or the network resource status is abnormal, the central satellite will process it to ensure normal operation

d)普通卫星间如果出现问题,则将问题提交给中心卫星,由其进行处理d) If there is a problem between ordinary satellites, submit the problem to the central satellite for processing

3.不同子网的中心卫星之间定时发送测试数据移动代理,检测移动Agent在子网间传递信息的安全性,例如子网K(中心卫星为卫星k)和子网R(中心卫星为卫星r)之间的相互检测过程如下:3. The test data mobile agent is regularly sent between the central satellites of different subnets to detect the security of the mobile Agent transmitting information between subnets, such as subnet K (the central satellite is satellite k) and subnet R (the central satellite is satellite r ) between the mutual detection process is as follows:

a)卫星k定时向卫星r发送测试数据移动代理卫星r收到TestDataAgent后,划分出一块虚拟区域供测试数据移动代理运行,记录测试数据移动代理的动作a) Satellite k sends test data mobile agent to satellite r at regular intervals. After satellite r receives TestDataAgent, it divides a virtual area for test data mobile agent to run and records the actions of test data mobile agent.

b)当测试数据移动代理运行完成后,若所有动作都是合法的,卫星r将区域K添加到自己的信任列表中,把测试数据移动代理的允许访问属性置为真;若存在有恶意行为,则将区域K从信任列表中剔除,把TestDataAgent的允许访问属性置为假b) After the test data mobile agent runs, if all actions are legal, the satellite r adds area K to its trust list, and sets the allowed access attribute of the test data mobile agent to true; if there is any malicious behavior , remove area K from the trust list, and set the allowed access attribute of TestDataAgent to false

c)测试数据移动代理迁移回卫星k,卫星k对它的重要资源和属性进行检查若没有被篡改,且允许访问属性为真,则将区域R添加到信任列表中,否则将区域K从信任列表中剔除c) The test data mobile agent migrates back to satellite k, and satellite k checks its important resources and attributes. If it has not been tampered with and the access permission attribute is true, then region R is added to the trust list, otherwise region K is removed from the trust list delist

4.卫星之间通过数据移动代理进行数据传送。若发送卫星和目的卫星处于相同同一子网,则根据路由选择直接发送;若处于两个不同子网,测试数据移动代理的迁移路径为:发送卫星->发送卫星所在子网的中心卫星->目的卫星所在子网的中心卫星->目的卫星4. Data transfer between satellites through data mobile agents. If the sending satellite and the destination satellite are in the same subnet, they will be sent directly according to the routing selection; if they are in two different subnets, the migration path of the test data mobile agent is: sending satellite -> central satellite of the subnet where the sending satellite is located -> The center satellite of the subnet where the destination satellite is located -> the destination satellite

5.中心卫星定时对自身的信息流量进行检测,当信息量超过阀值Ef时,替换中心卫星,替换的步骤如下5. The central satellite regularly detects its own information flow. When the amount of information exceeds the threshold Ef, the central satellite is replaced. The replacement steps are as follows

a)对子网内的普通卫星进行评估,从信息量,资源利用率,网络状况等方面挑选出新的中心卫星a) Evaluate the ordinary satellites in the subnet, and select a new central satellite from the aspects of information volume, resource utilization, network status, etc.

b)原中心卫星将相关的信息发送给新的中心卫星,原中心卫星的center属性置为假,cover属性置为真b) The original center satellite sends relevant information to the new center satellite, the center attribute of the original center satellite is set to false, and the cover attribute is set to true

c)新的中心卫星将自身的center属性置为真c) The new center satellite sets its own center attribute to true

d)发送信息通知子网内卫星和其他子网关于中心卫星更替的消息d) Send information to inform the satellites in the subnet and other subnets about the replacement of the central satellite

Claims (1)

1.一种基于移动代理安全的卫星网动态路由方法,其特征在于该方法将整个网络划分为若干个小子网,通过移动代理的移动性特点,来遍历网络进行数据的传送,同时采用虚拟空间的方法,保障移动代理在网络中的安全,其中,1. A satellite network dynamic routing method based on mobile agent security, characterized in that the method divides the entire network into several small subnets, and traverses the network for data transmission through the mobility characteristics of mobile agents, while using virtual space A method to ensure the security of the mobile agent in the network, wherein, 子网的划分步骤如下:The subnet division steps are as follows: 1.1.卫星i具有centeri,cov eri,subi三个属性,置centeri和cov eri为假,subi=100表示卫星i既不是中心卫星,也没有加入任何子网,1.1. Satellite i has three attributes: center i , cover i , and sub i . Set center i and cover i as false, and sub i = 100 means that satellite i is neither a center satellite nor joined any subnet. 1.2.以概率p=2向卫星i的邻居卫星广播消息msg(Di),其中α为卫星i的邻居数,1.2. Broadcast message msg(D i ) to neighbor satellites of satellite i with probability p=2 , where α is the number of neighbors of satellite i, 1.3.若信息msg(Di)发送成功,则置centeri为真,subi=i,表示卫星i成为子网i的中心卫星,转步骤1.5;若信息msg(Di)发送失败,则转步骤1.4;1.3. If the message msg(D i ) is sent successfully, then set center i as true, sub i =i, which means satellite i becomes the center satellite of subnet i, and go to step 1.5; if the message msg(D i ) fails to send, then Go to step 1.4; 1.4.经过V个时间片后,检测centeri和cov eri属性,若都为假,将概率p加倍后,向邻居卫星广播消息msg(Di),转步骤1.3,1.4. After V time slices, detect center i and cover i attributes, if both are false, double the probability p, broadcast message msg(D i ) to neighboring satellites, go to step 1.3, 1.5.当卫星j收到消息msg(Di)时,先判断自己是否已成为中心卫星,或已加入某个子网;若centerj,cov erj均为假,表明卫星j既不是中心卫星,也没有加入某个子网成为普通卫星;回送一条消息msg(BDj)给卫星i,表示卫星j加入子网i,成为子网i的普通卫星,置cov erj为真,subj=i,否则丢弃msg(Di),1.5. When satellite j receives the message msg(D i ), it first judges whether it has become a center satellite or has joined a certain subnet; if center j and cover j are all false, it means that satellite j is neither a center satellite, Also did not join a certain subnet to become an ordinary satellite; return a message msg(BD j ) to satellite i, indicating that satellite j joins subnet i and becomes an ordinary satellite of subnet i, set cover j as true, sub j = i, Otherwise discard msg(D i ), 1.6.卫星i收到msg(BDj)后,将卫星j列为本子网的普通卫星;1.6. After satellite i receives msg(BD j ), it lists satellite j as an ordinary satellite of this subnet; 子网划分完成后,每个子网都包括一个中心卫星和若干个普通卫星,中心卫星负责将本子网的卫星成员通知各个普通卫星,然后进行路由的更新和信息传送:After the subnet division is completed, each subnet includes a central satellite and several ordinary satellites. The central satellite is responsible for notifying each ordinary satellite of the satellite members of this subnet, and then performing routing update and information transmission: 2.1.卫星定时发送路由移动代理t给周围卫星,更新自身的路由选择,2.1. The satellite regularly sends the routing mobile agent t to the surrounding satellites to update its own routing selection, 2.1.1.普通卫星以本子网的卫星为目的卫星依次发送路由移动代理,2.1.1. Ordinary satellites use the satellites of this subnet as the destination satellites to send routing mobile agents in sequence, 2.1.2.中心卫星将本子网卫星和其他子网的中心卫星分别列为目的卫星依次发送路由移动代理,2.1.2. The central satellite lists the satellites of this subnet and the central satellites of other subnets as the destination satellites and sends routing mobile agents in turn, 2.1.3.当路由移动代理从目的卫星迁移回来后,发送卫星根据其经过路径,更新自身的路由表;2.1.3. When the routing mobile agent migrates back from the destination satellite, the sending satellite updates its own routing table according to its passing path; 2.2.中心卫星定时发送检测信息给普通卫星,监督普通卫星的动作,防止出现恶意行为,检查普通卫星的网络状况和资源使用情况,对普通卫星的不当行为进行处理,2.2. The central satellite regularly sends detection information to ordinary satellites, supervises the actions of ordinary satellites, prevents malicious behavior, checks the network status and resource usage of ordinary satellites, and handles improper behavior of ordinary satellites. 2.2.1.中心卫星定时向子网内的普通卫星发送检测信息,2.2.1. The central satellite regularly sends detection information to ordinary satellites in the subnet, 2.2.2.检测信息到达普通卫星后,记录卫星节点的行为动作、网络状况和资源使用情况,返回中心卫星,2.2.2. After the detection information reaches the ordinary satellite, record the behavior of the satellite node, network status and resource usage, and return to the central satellite, 2.2.3.若检测信息记录到了被检测卫星实施不允许的操作或网络资源状况出现异常,中心卫星对其进行处理,保证正常运行,2.2.3. If the detection information records the operation that is not allowed by the detected satellite or the network resource status is abnormal, the central satellite will process it to ensure normal operation, 2.2.4.普通卫星间如果出现问题,则将问题提交给中心卫星,由其进行处理;2.2.4. If there is a problem between ordinary satellites, the problem will be submitted to the central satellite for processing; 2.3.不同子网的中心卫星之间定时发送TestDataAgent,检测移动Agent在子网间传递信息的安全性,相互之间的检测过程如下:2.3. The central satellites of different subnets regularly send TestDataAgent to detect the security of the mobile Agent transmitting information between subnets. The mutual detection process is as follows: 2.3.1卫星k定时向卫星r发送测试数据移动代理,2.3.1 Satellite k regularly sends test data mobile agent to satellite r, 2.3.2.卫星r收到测试数据移动代理后,划分出一块虚拟区域供TestDataAgent运行,记录测试数据移动代理的动作,2.3.2. After satellite r receives the test data mobile agent, it divides a virtual area for TestDataAgent to run, and records the actions of the test data mobile agent. 2.3.3.当测试数据移动代理运行完成后,若所有动作都是合法的,卫星r将区域K添加到自己的信任列表中,把测试数据移动代理的允许访问属性置为真;若存在有恶意行为,则将区域K从信任列表中剔除,把测试数据移动代理的允许访问属性置为假,2.3.3. After the test data mobile agent runs, if all actions are legal, the satellite r will add the area K to its trust list, and set the allowed access attribute of the test data mobile agent to true; if there are Malicious behavior, remove area K from the trust list, set the allowed access attribute of the test data mobile agent to false, 2.3.4.测试数据移动代理t迁移回卫星k,卫星k对它的重要资源和属性进行检查若没有被篡改,且允许访问属性为真,则将区域R添加到信任列表中,否则将区域R从信任列表中剔除,2.3.4. Test data The mobile agent t migrates back to the satellite k, and the satellite k checks its important resources and attributes. If it has not been tampered with and the access permission attribute is true, then the region R is added to the trust list, otherwise the region R is removed from the trust list, 2.4.卫星之间通过移动代理进行数据传送,若发送卫星和目的卫星处于相同子网,则根据路由选择直接发送;若处于两个不同子网,数据移动代理的迁移路径为:发送卫星->发送卫星所在子网的中心卫星->目的卫星所在子网的中心卫星->目的卫星,2.4. Data is transmitted between satellites through a mobile agent. If the sending satellite and the destination satellite are in the same subnet, they will be sent directly according to the route selection; if they are in two different subnets, the migration path of the data mobile agent is: sending satellite -> The central satellite of the subnet where the sending satellite is located -> the central satellite of the subnet where the destination satellite is located -> the destination satellite, 2.5.中心卫星定时对自身的信息流量进行检测,当信息量超过阀值Ef时,替换中心卫星,替换的步骤如下:2.5. The central satellite regularly detects its own information flow. When the amount of information exceeds the threshold Ef, the central satellite is replaced. The replacement steps are as follows: 2.5.1.对子网内的普通卫星进行评估,从信息量,资源利用率,网络状况三方面挑选出新的中心卫星,2.5.1. Evaluate the ordinary satellites in the subnet, and select a new central satellite from the three aspects of information volume, resource utilization, and network conditions. 2.5.2.原中心卫星将相关的信息发送给新的中心卫星,原中心卫星的center属性置为假,cover属性置为真,2.5.2. The original center satellite sends relevant information to the new center satellite. The center attribute of the original center satellite is set to false, and the cover attribute is set to true. 2.5.3.新的中心卫星将自身的center属性置为真,2.5.3. The new center satellite sets its own center attribute to true, 2.5.4.发送信息通知子网内卫星和其他子网关于中心卫星更替的消息。2.5.4. Send information to inform the satellites in the subnet and other subnets about the replacement of the central satellite.
CN2009100249738A 2009-02-27 2009-02-27 A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security Expired - Fee Related CN101552992B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2009100249738A CN101552992B (en) 2009-02-27 2009-02-27 A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2009100249738A CN101552992B (en) 2009-02-27 2009-02-27 A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security

Publications (2)

Publication Number Publication Date
CN101552992A CN101552992A (en) 2009-10-07
CN101552992B true CN101552992B (en) 2010-12-08

Family

ID=41156910

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2009100249738A Expired - Fee Related CN101552992B (en) 2009-02-27 2009-02-27 A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security

Country Status (1)

Country Link
CN (1) CN101552992B (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102238684B (en) * 2011-08-01 2014-03-26 南京邮电大学 Routing method based on bandwidth and delay bi-objective optimization
CN103686810B (en) * 2013-12-10 2017-02-15 航天恒星科技有限公司 Satellite network neighbor detection method
US9369198B2 (en) * 2014-03-28 2016-06-14 Google Inc. Global communication network
CN106489261A (en) * 2014-04-11 2017-03-08 迪瑞公司 dynamic background device network
CN113131995B (en) * 2018-12-06 2022-07-29 长沙天仪空间科技研究院有限公司 Communication network
CN110012516B (en) * 2019-03-28 2020-10-23 北京邮电大学 A low-orbit satellite routing strategy method based on deep reinforcement learning architecture
CN114944860B (en) * 2022-04-08 2023-08-15 北京邮电大学 Satellite network data transmission method and device

Also Published As

Publication number Publication date
CN101552992A (en) 2009-10-07

Similar Documents

Publication Publication Date Title
Mabodi et al. Multi-level trust-based intelligence schema for securing of internet of things (IoT) against security threats using cryptographic authentication
CN101552992B (en) A Dynamic Routing Method for Satellite Networks Based on Mobile Agent Security
Deng et al. Routing security in wireless ad hoc networks
Haseeb et al. Trust management with fault-tolerant supervised routing for smart cities using internet of things
CN101304384B (en) Safety routing method for amalgamation network of honeycomb network and self-organization network with enhanced security
Seyedi et al. NIASHPT: a novel intelligent agent-based strategy using hello packet table (HPT) function for trust Internet of Things: B. Seyedi, R. Fotohi
CN102170639B (en) Authentication method of distributed wireless Ad Hoc network
Arul Selvan et al. Malicious node identification using quantitative intrusion detection techniques in MANET
Datta et al. Security for mobile ad hoc networks
Haseeb et al. Ddr-esc: a distributed and data reliability model for mobile edge-based sensor-cloud
CN113824643A (en) Ubiquitous network topological graph construction method and network security protection method
Rajkumar et al. Secure multipath routing and data transmission in MANET
Pugalendhi et al. Fuzzy-based trusted routing to mitigate packet dropping attack between data aggregation points in smart grid communication network
Khaloopour et al. Resilience-by-design in 6G networks: Literature review and novel enabling concepts
Abdellatif et al. Efficient monitoring for intrusion detection in wireless sensor networks
Geng et al. A software defined networking-oriented security scheme for vehicle networks
Devanagavi et al. Secured routing in wireless sensor networks using fault‐free and trusted nodes
Chatterjee Trust based clustering and secure routing scheme for mobile ad hoc networks
Huang et al. LCD: light‐weight control model for data plane in software‐defined wireless sensor networks
Walid et al. Trust security mechanism for maritime wireless sensor networks
Vijayalakshmi et al. Intelligent mobile agents collaboration for the performance enhancement in wireless sensor networks
Virendra et al. Securing information through trust management in wireless networks
Virendra et al. SAWAN: a survivable architecture for wireless LANs
Sahu et al. Secure Data Transmission in Wireless Sensor Networks with Secure System for Identification of Trusted Route with Node Behavior Analysis.
Sethi et al. Secure cross layer architecture for IOT devices in NGN

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
EE01 Entry into force of recordation of patent licensing contract

Application publication date: 20091007

Assignee: Jiangsu Nanyou IOT Technology Park Ltd.

Assignor: Nanjing Post & Telecommunication Univ.

Contract record no.: 2016320000220

Denomination of invention: A satellite network dynamic routing method based on mobile agent security

Granted publication date: 20101208

License type: Common License

Record date: 20161121

LICC Enforcement, change and cancellation of record of contracts on the licence for exploitation of a patent or utility model
EC01 Cancellation of recordation of patent licensing contract

Assignee: Jiangsu Nanyou IOT Technology Park Ltd.

Assignor: Nanjing Post & Telecommunication Univ.

Contract record no.: 2016320000220

Date of cancellation: 20180116

EC01 Cancellation of recordation of patent licensing contract
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20101208

Termination date: 20180227

CF01 Termination of patent right due to non-payment of annual fee