CN101977073A - Bidirectional authentication system for satellite receiving terminal and receiving antenna - Google Patents

Abstract

The invention discloses a system for bidirectional authentication of a satellite receiving terminal and a receiving antenna, which is characterized in that the satellite receiving terminal and the receiving antenna are connected through a coaxial cable for data communication, and the satellite receiving terminal supplies power to the receiving antenna through the coaxial cable; the satellite receiving terminal internal authentication module generates random numbers according to a set period, encrypts the random numbers and sends the encrypted random numbers to a receiving antenna, the receiving antenna internal authentication module receives the encrypted data, decrypts the encrypted data and returns the decrypted data to the satellite receiving terminal, the satellite receiving terminal receives the data and then decrypts the data and judges whether the data is consistent with the random data sent before, the satellite receiving terminal stops supplying power to the receiving antenna if the data is inconsistent with the random data, and the receiving antenna performs primary authentication according to the mode if the data is consistent with the random data; if the authentication is successful, the antenna normally works in the set period, otherwise, the antenna stops working. The system has the advantages of small influence on both receiving parties, high safety, simple structure, easy realization, low cost and suitability for wide popularization.

Description

Two-way Authentication System of Satellite Receiving Terminal and Receiving Antenna

technical field

The invention relates to a two-way authentication system for a satellite receiving terminal and a receiving antenna.

Background technique

The launch of the ChinaSat 9 live broadcast satellite and the construction of the radio and television "Village to Village" project represent the completion of China's first-generation TV satellite live broadcast system, and also indicate that my country's TV satellite live broadcast has entered a new stage and will get vigorous development. How to effectively control and utilize satellite resources and related equipment has become a topic. For example, the public welfare nature of the "Village Access" project determines that the receiving terminals and satellite antennas are all purchased by the government. The methods in the prior art cannot guarantee the specificity of the above equipment, especially the satellite antenna, which requires a method and device for mutual authentication between the terminal and the antenna.

In the existing satellite receiving system, the commonly used methods for realizing the dedicated receiving antenna include the use of non-standard down-conversion LNB (the down-converter is also called high-frequency head, the main component of the receiving antenna), special LNB power supply voltage, etc. These methods have some shortcoming. Non-standard down-conversion makes a large number of standard devices in the existing industry unusable, and both the LNB of the antenna and the TUNER (tuner) of the terminal need to be customized. Special LNB supply voltage is easy to modify the supply circuit to cross the limit. So these are not optimal solutions.

Contents of the invention

The purpose of the present invention is to provide a satellite receiving terminal and receiving antenna between the satellite receiving terminal and the receiving antenna in order to ensure the specificity of the use of the receiving antenna equipment and better maintain the order of the country's regulations and the market, aiming at the fact that the current satellite receiving terminal will enter ordinary users. Mutual authentication system based on specified protocol. The technical scheme that the present invention adopts is as follows:

A device for two-way authentication between a satellite receiving terminal and a receiving antenna, characterized in that the satellite receiving terminal and the receiving antenna are connected through a coaxial cable for data communication, and at the same time, the satellite receiving terminal supplies power to the receiving antenna through the coaxial cable;

The satellite receiving terminal includes an authentication module A; the authentication module A includes a random number generator A, an encryption module A, a decryption module B and a comparison authentication module A;

The random number generator A is used for the satellite receiving terminal to generate the random number used in the verification process;

The encryption module A is used to encrypt the random number generated by the random number generator A or the data decrypted by the decryption module B;

The decryption module B is used to decrypt the encrypted data sent back by the receiving antenna received by the satellite receiving terminal;

The comparison authentication module A is used to compare the random number generated by the random number generator A with the decrypted data of the decryption module B, and simultaneously send the comparison result to the satellite receiving terminal for processing;

The receiving antenna includes an authentication module B, a controllable power supply and a tuner;

The high-frequency head is used to receive satellite signals and transmit them to satellite receiving terminals through coaxial cables after frequency conversion and amplification;

The authentication module B includes a random number generator B, an encryption module B, a decryption module A and a comparison authentication module B;

The random number generator B is used for receiving antennas to generate random numbers used in the verification process;

The encryption module B is used to encrypt the random number generated by the random number generator B or the random number decrypted by the decryption module A;

The decryption module A is used to decrypt the encrypted data received by the receiving antenna;

The comparison authentication module B is used to compare the random number generated by the random number generator B with the data restored by the decryption module A, and send the comparison result to the controllable power supply;

The controllable power supply is used to receive the result of the comparison and verification unit to decide whether to supply power to the tuner according to the set time or to cut off the power;

The random number generator A in the authentication module A in the satellite receiving terminal generates a random number according to a set period and transmits it to the encryption module A for encryption, and then sends this data to the receiving antenna through a coaxial cable, and the authentication in the receiving antenna After the module B receives the encrypted data, it decrypts the data through the decryption module A, and the decrypted data is encrypted by the encryption module B and then transmitted to the satellite receiving terminal. After the satellite receiving terminal receives the data, it passes the decryption module in the authentication module A B decrypts the received data and sends it to comparison authentication module A. Comparison authentication module A judges whether the data is consistent with the random data sent before. If it is inconsistent, the satellite receiving terminal stops supplying power to the receiving antenna. If it is consistent, the authentication module B in the receiving antenna The random number generator B generates random numbers and transmits them to the encryption module B for encryption, and then sends the data to the satellite receiving terminal through the coaxial cable. After the authentication module A in the satellite receiving terminal receives the encrypted data, it passes the decryption module B decrypts the data, and the decrypted data is encrypted by the encryption module A and transmitted to the receiving antenna. After the receiving antenna receives the data, the decryption module A in the authentication module B decrypts the received data and sends it to the comparison authentication module B. , comparing the authentication module B to judge whether this data is consistent with the random data sent to the satellite receiving terminal before. If it is inconsistent, the receiving antenna controls the controllable power supply to stop supplying power to the tuner; frequency head for power supply.

A method for two-way authentication of a satellite receiving terminal and a receiving antenna, characterized in that it comprises the following steps:

Step 1: The verification is initiated by the satellite receiving terminal;

Step 2: The communication protocol between the satellite receiving terminal and the receiving antenna is specified in advance, and the satellite receiving terminal generates a random number conforming to the protocol through the authentication module according to the protocol and encrypts it with an encryption algorithm, and periodically sends the data to the receiving antenna ;

Step 3: The authentication module in the receiving antenna decrypts the data sent by the satellite receiving terminal, and then encrypts the data and returns it to the satellite receiving terminal;

Step 4: The satellite receiving terminal receives the data sent back by the receiving antenna, and decrypts it, and then compares the decrypted data with the random number generated in this period. If the data is consistent, go to step 5, otherwise it prompts that the antenna device authentication fails ;

Step 5: The receiving antenna generates a random number conforming to the protocol through the authentication module according to the above protocol and encrypts it with an encryption algorithm, and sends the data to the satellite receiving terminal;

Step 6: The authentication module in the satellite receiving terminal decrypts the data sent by the receiving antenna, and then encrypts the data and sends it to the receiving antenna;

Step 7: The receiving antenna receives the data sent back by the satellite receiving terminal, and compares it with the random number generated in step 5 after decryption. If the data is consistent, proceed to step 8, otherwise cut off the power supply of the LNB in the receiving antenna;

Step 8: The receiving antenna is authenticated successfully, and after the LNB receives power within this period, proceed to Step 2.

The fourth step also includes the step of stopping power supply to the introduction antenna after the satellite receiving terminal learns that the authentication of the antenna device fails.

The encryption algorithm in the step 2 and step 5 adopts DES, AES or RSA encryption algorithm.

Compared with the prior art, the advantages of the present invention are obvious, specifically as follows:

1) Some existing technologies are easy to be cracked, but the present invention transmits randomly changing information to each other, which cannot be imitated and increases the difficulty of cracking.

2) Periodic identity authentication minimizes the impact on the performance of satellite receiving terminals and receiving antennas.

3) Greatly guarantee the specificity between the satellite receiving terminal and the receiving antenna.

4) The present invention only needs to add a safety microcontroller on the LNB, and the hardware on the terminal needs to be changed very little, which is easy to realize.

In addition, because of its simple structure, it is not only convenient for production, but also low in cost and suitable for wide popularization.

Description of drawings

Fig. 1 is a schematic diagram of the system structure of the present invention;

Fig. 2 is a schematic diagram of the composition and structure of the authentication module of the present invention;

Fig. 3 is a flowchart of the authentication process of the present invention.

In the figure: 1. Satellite receiving terminal, 2. Receiving antenna, 3. Coaxial cable, 5. Authentication module A, 501, random number generator A, 502, encryption module A, 503, decryption module B, 504, comparative authentication Module A, 6, authentication module B, 601, random number generator B, 602, encryption module B, 603, decryption module A, 604, comparison authentication module B, 7, controllable power supply, 8, tuner.

Detailed ways

In conjunction with accompanying drawing and specific embodiment, the present invention is further elaborated:

As shown in Figure 1 and Figure 2, the satellite receiving terminal 1 and the receiving antenna 2 are connected through the coaxial cable 3 for data communication, and the satellite receiving terminal 1 supplies power to the receiving antenna 2 through the coaxial cable 3;

The satellite receiving terminal 1 includes an authentication module A5; the authentication module A5 includes a random number generator A501, an encryption module A502, a decryption module B503 and a comparison authentication module A504;

The random number generator A501 is used for the satellite receiving terminal 1 to generate random numbers used in the verification process;

The encryption module A502 is used to encrypt the random number generated by the random number generator A501 or the data decrypted by the decryption module B;

The decryption module B503 is used to decrypt the encrypted data sent back by the receiving antenna 2 received by the satellite receiving terminal 1;

The comparison authentication module A504 is used to compare the random number generated by the random number generator A501 with the decrypted data of the decryption module B503, and send the comparison result to the satellite receiving terminal for processing;

The receiving antenna 2 includes an authentication module B6, a controllable power supply 7 and a tuner 8;

The tuner 8 is used to receive the satellite signal and transmit it to the satellite receiving terminal 1 through the coaxial cable 3 after frequency conversion and amplification;

The authentication module B6 includes a random number generator B601, an encryption module B602, a decryption module A603 and a comparison authentication module B604;

The random number generator B601 is used for the receiving antenna 2 to generate the random number used in the verification process;

The encryption module B602 is used to encrypt the random number generated by the random number generator B601 or the random number decrypted by the decryption module A603;

The decryption module A603 is used to decrypt the encrypted data received by the receiving antenna 2;

The comparison authentication module B604 is used to compare the random number generated by the random number generator B601 with the data restored by the decryption module A603, and send the comparison result to the controllable power supply;

The controllable power supply 7 is used to receive the result of the comparison and verification unit to decide whether to supply power to the tuner 8 according to the set time or to cut off the power;

The random number generator A501 in the authentication module A5 in the satellite receiving terminal 1 generates a random number according to a set period and transmits it to the encryption module A502 for encryption, and then sends this data to the receiving antenna 2 through the coaxial cable 3, and the receiving After the authentication module B6 in the antenna 2 receives the encrypted data, it decrypts the data through the decryption module A603, and the decrypted data is encrypted by the encryption module B602 and then transmitted to the satellite receiving terminal 1. After the satellite receiving terminal 1 receives the data, it passes the authentication. The decryption module B503 in the module A5 decrypts the received data and sends it to the comparison and authentication module A504, and the comparison and authentication module A504 judges whether the data is consistent with the random data sent before, and if it is inconsistent, the satellite receiving terminal 1 stops supplying power to the receiving antenna 2; Then the random number generator B601 in the authentication module B6 in the receiving antenna 2 generates a random number and transmits it to the encryption module B602 for encryption, and then sends this data to the satellite receiving terminal 1 through the coaxial cable 3, and the authentication in the satellite receiving terminal 1 After the module A5 receives the encrypted data, it decrypts the data through the decryption module B503, and the decrypted data is encrypted by the encryption module A502 and then transmitted to the receiving antenna 2. After the receiving antenna 2 receives the data, it passes the decryption module in the authentication module B6 A603 decrypts the received data and sends it to the comparison and authentication module B604. The comparison and authentication module B604 judges whether the data is consistent with the random data sent to the satellite receiving terminal 1 before. 8 power supply; if consistent, the receiving antenna 2 controls the controllable power supply 7 to supply power to the tuner 8 within the above cycle time. Among them, the communication between the terminal and the antenna can adopt the DISEQC (Digital Satellite Equipment Control) 2.0 protocol, or you can customize the communication protocol to modulate the data onto the coaxial cable. Generally, the authentication module of the terminal is used as the master device in the communication, and the antenna is used as the slave device in the communication. The antenna authentication terminal may be performed according to a pre-agreed interval period. The terminal requests the antenna to authenticate it. If the terminal does not request authentication within the agreed period, the antenna can take corresponding measures to limit usage, such as cutting off the signal. The authentication module A5 can be realized by using the CPU of the satellite receiving terminal 1 with software, or an independent authentication module such as a safety microcontroller or other special circuits can be used. The authentication module B6 and the controllable power supply are implemented with a secure microcontroller, built into the LNB. At the same time, random numbers, key lengths and encryption algorithms can be flexibly selected according to hardware performance and security requirements.

The flow chart shown in Figure 3 further describes the present invention in conjunction with the existing following assumptions:

1) Assume that the random number is 64 bits, and the keys A and B are also 64 bits, which are respectively placed in two authentication modules;

2) Suppose the encryption algorithm adopts DES, AES or RSA encryption algorithm;

3) It is assumed that authentication is performed every 5 minutes (that is, the period is 5 minutes), and the terminal authenticates the antenna first, and then the antenna authenticates the terminal. Every time the authentication is passed, the terminal supplies power to the antenna for 5 minutes, and the controllable power supply supplies power to the tuner for 5 minutes;

4) Assume that the communication protocol adopts the 22KHz DISEQC 2.0 protocol;

5) Assuming that the waiting time for data return is 10 seconds, the timeout indicates that the corresponding equipment does not meet the requirements, the authentication antenna fails to directly stop power supply to the antenna equipment, and the controllable power supply stops power supply to the LNB if the authentication terminal fails.

Combined with Figure 3, this method is implemented as follows:

S100: The satellite receiving terminal starts up, and supplies power to the antenna system, and the receiving antenna enters a working state.

S200: The satellite receiving terminal generates a random number R, encrypts it with the DES algorithm and the key A to obtain A(R), and sends it to the receiving antenna through the coaxial cable using the DISEQC 2.0 protocol.

S300: The receiving antenna receives the above-mentioned encrypted data, uses the key A to decrypt to obtain R', and then uses the key B to encrypt to obtain B(R'), and sends this number back to the satellite receiving terminal.

S400: The satellite receiving terminal receives the data sent back by the antenna, decrypts it with the key B to obtain R", and compares it with the original data R through the comparator. If the data is consistent, the receiving antenna authenticates the satellite receiving terminal, and proceeds S500, otherwise, the satellite receiving terminal will stop supplying power to the receiving antenna and prompt that the authentication fails.

S500: Because it is a master-slave communication mechanism, the satellite receiving terminal sends an authentication request to the receiving antenna, and the receiving antenna generates a random number r, encrypts it with the key B to obtain B(r), and sends it to the satellite receiving terminal.

S600: The satellite receiving terminal receives the above-mentioned encrypted data, decrypts it with the key B to obtain r', encrypts it with the key A to obtain A(r'), and sends this number back to the receiving antenna.

S700: After the receiving antenna receives the data sent back by the satellite receiving terminal, decrypt it with the key A to obtain r", compare it with the original data r through the comparator, if the data is consistent, go to S800, otherwise the receiving antenna can The control power supply stops supplying power to the tuner and the satellite receiving terminal prompts that the authentication fails.

S800: Power on the tuner for 5 minutes, and continue to S200 after 5 minutes.

For the sake of safety, S400 may also include the step of stopping power supply to the introducing antenna after the satellite receiving terminal learns that the authentication of the antenna device fails.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, any person familiar with the technical field within the technical scope disclosed in the present invention, according to the technical solution of the present invention Any equivalent replacement or change of the inventive concepts thereof shall fall within the protection scope of the present invention.

Claims (3)

1. the device of the two-way authentication of satellite receiving terminal and reception antenna, it is characterized in that satellite receiving terminal (1) is connected by coaxial cable (3) with reception antenna (2) carries out data communication, and satellite receiving terminal (1) be that reception antenna (2) is powered by coaxial cable (3) simultaneously;

Described satellite receiving terminal (1) comprises authentication module A (5); Described authentication module A (5) comprises tandom number generator A (501), encrypting module A (502), deciphering module B (503) and compares authentication module A (504);

Described tandom number generator A (501) is used for satellite receiving terminal (1) and produces the random number that proof procedure uses;

Described encrypting module A (502) is used for random number or deciphering module B decrypted data that tandom number generator A (501) produces are carried out encryption;

Described deciphering module B (503), the enciphered data that the reception antenna (2) that is used for that satellite receiving terminal (1) is received is passed back is decrypted processing;

Described relatively authentication module A (504) is used for the random number that tandom number generator A (501) produces is compared with deciphering module B (503) data decryption, simultaneously comparative result is sent to satellite receiving terminal and handles;

Described reception antenna (2) comprises authentication module B (6), controllable electric power (7) and tuner (8);

Described tuner (8) is used for sending satellite receiving terminal (1) to by coaxial cable (3) after receiving satellite signal and frequency conversion are amplified;

Described authentication module B (6) comprises tandom number generator B (601), encrypting module B (602), deciphering module A (603) and compares authentication module B (604);

Described tandom number generator B (601) is used for reception antenna (2) and produces the random number that proof procedure uses;

Described encrypting module B (602) is used for the random number of tandom number generator B (601) generation or the random number of deciphering module A (603) deciphering are carried out encryption;

Described deciphering module A (603) is used for the enciphered data that reception antenna (2) receives is decrypted processing;

Described relatively authentication module B (604) is used for the random number of tandom number generator B (601) generation and the data of deciphering module A (603) reduction are compared, and comparative result is sent to controllable electric power;

Described controllable electric power (7), the result who is used to receive the comparatively validate unit decides tuner (8) is pressed still outage of setting-up time power supply;

Tandom number generator A (501) among the interior authentication module A of described satellite receiving terminal (1) (5) sends encrypting module A (502) to by setting cycle generation random number and encrypts, then these data are sent to reception antenna (2) by coaxial cable (3), after the interior authentication module B of described reception antenna (2) (6) receives ciphered data, by deciphering module A (603) with data decryption, decrypted data is passed to satellite receiving terminal (1) after encrypting by encrypting module B (602), after described satellite receiving terminal (1) is received data, give comparison authentication module A (504) by the deciphering module B (503) among the authentication module A (5) after with the data decryption of receiving, relatively authentication module A (504) judges whether these data are consistent with the random data that sends before, inconsistent satellite receiving terminal (1) stops to power to reception antenna (2), the unanimity then tandom number generator B (601) among the interior authentication module B of reception antenna (2) (6) produces random number and sends encrypting module B (602) to and encrypt, then these data are sent to satellite receiving terminal (1) by coaxial cable (3), after the interior authentication module A of described satellite receiving terminal (1) (5) receives ciphered data, by deciphering module B (503) with data decryption, decrypted data is passed to reception antenna (2) after encrypting by encrypting module A (502), after described reception antenna (2) is received data, give comparison authentication module B (604) by the deciphering module A (603) among the authentication module B (6) after with the data decryption of receiving, relatively authentication module B (604) judges whether these data are consistent with the random data that sends to satellite receiving terminal (1) before, inconsistent reception antenna (2) control controllable electric power (7) stops tuner (8) power supply, and unanimity then reception antenna (2) control controllable electric power (7) was powered to tuner (8) in above-mentioned cycle time.

2. the method for the two-way authentication of satellite receiving terminal and reception antenna is characterized in that comprising the steps:

Step 1: checking is initiated by satellite receiving terminal;

Step 2: the communications protocol between satellite receiving terminal and the reception antenna is specified in advance, satellite receiving terminal produces the random digit of protocol compliant and adopts cryptographic algorithm to encrypt according to the authenticated module of this agreement, and with this cycle data send to reception antenna;

Step 3: the authentication module in the reception antenna is decrypted the data that satellite receiving terminal sends, and then with this data encryption and return to satellite receiving terminal;

Step 4: satellite receiving terminal is received the data that reception antenna is beamed back, and is decrypted, and the random digit that the data after will deciphering then produced with this cycle compares, if data consistent then carries out step 5, otherwise prompting antenna equipment authentification failure;

Step 5: reception antenna produces the random number of protocol compliant and adopts cryptographic algorithm to encrypt according to the authenticated module of above-mentioned agreement, and these data are sent to satellite receiving terminal;

Step 6: the authentication module in the satellite receiving terminal is decrypted the data that reception antenna sends, and then this data encryption is sent to reception antenna;

Step 7: reception antenna receives the data that satellite receiving terminal is beamed back, after the deciphering itself and random number that step 5 produces compared, if data consistent then carries out step 8, otherwise a cut-out reception antenna medium-high frequency power supply;

Step 8: reception antenna authentication success, tuner are proceeded step 2 obtain power supply in this cycle time after.

3. the method for the two-way authentication of a kind of satellite receiving terminal according to claim 2 and reception antenna, it is characterized in that described step 4 comprises that also satellite receiving terminal is known the antenna equipment authentification failure after, stop step to reception antenna power supply.

Images