CN112953704B

CN112953704B - 5G-based unmanned POC relay method

Info

Publication number: CN112953704B
Application number: CN202110124804.2A
Authority: CN
Inventors: 邬文达; 倪仰; 李晓丹; 陈尚武
Original assignee: Hangzhou Xujian Science And Technology Co ltd
Current assignee: Hangzhou Xujian Science And Technology Co ltd
Priority date: 2021-01-29
Filing date: 2021-01-29
Publication date: 2022-05-27
Anticipated expiration: 2041-01-29
Also published as: CN112953704A

Abstract

The invention discloses a 5G-based unmanned POC relay method, which comprises the following steps: s1, POC center server, center chain memory module generates a certification chain, first generates a random number as certification chain key, carries on HASH calculation to certification chain key to obtain HASH value as certification chain address; s2, importing the authentication chain key into a relay chain storage module of the 5G unmanned POC relay station in advance; the relay link storage module performs HASH calculation on the authentication link key to obtain an authentication link address; and S3, the center POC management module realizes terminal and channel management and adopts a manual management mode. The invention realizes the transmission synchronization of the management information by transmitting the 5G POC terminal and the 5G unmanned POC relay station in the POC center server by using an authentication chain mode, prevents the management information from being falsified in the transmission by using HASH correlation correction, and realizes the unmanned management of the 5G POC relay station.

Description

5G-based unmanned POC relay method

Technical Field

The invention relates to the field of 5G communication, in particular to a 5G-based unmanned POC relay method.

Background

POC talkback is a half-duplex voice service implemented by using a mobile network VOIP technology, but no signal cannot be used in a remote area, ad hoc network capability is improved in a 5G technology, and a management trouble is brought by placing a POC relay station of 5G, and an unattended method is required to implement management of the POC relay station of 5G.

Disclosure of Invention

In order to solve the defects in the prior art, the invention provides a 5G-based unmanned POC relay method.

The technical scheme of the invention is as follows:

A5G-based unmanned POC relay method comprises the following steps:

s1, POC center server, center chain memory module generates a certification chain, first randomly generates a random number as certification chain key, and carries on HASH calculation to certification chain key to obtain HASH value as certification chain address;

s2, importing the authentication chain key into a relay chain storage module of the 5G unmanned POC relay station in advance; the relay link storage module performs HASH calculation on the authentication link key to obtain an authentication link address;

s3, center POC management module realizes terminal and channel management, and adopts manual management mode;

3.1 center POC management module adding terminal, using SUPI user permanent identity information of 5G; performing character string connection on the terminal SUPI and the authentication chain address, and performing HASH calculation to obtain a terminal authentication address for online authentication of the terminal; performing character string connection on the terminal authentication address and the authentication chain address, and performing HASH calculation to obtain a terminal address;

3.2 the center POC management module sends the adding action and the terminal address to the center chain generation block module and the center POC media module;

3.3 the center POC management module adds channels, generates POC channel addresses by using random numbers, and sends the adding action to the center chain generation block module;

3.4 the center POC management module deletes the terminal and sends the deletion action and the terminal address to the center chain generation block module; the center POC management module deletes the channel and sends the deletion action and the channel address to the center chain generation block module and the center POC media module;

3.5 the center POC management module binds and unbinds the terminal and the channel, and sends the binding/unbinding action, the channel address and the terminal address to the center chain generation block module and the center POC media module.

S4, the center chain generating block module receives the terminal adding and deleting actions and the channel adding and deleting actions of the center POC management module, and generates a block node to the center chain storage module;

4.1 the central chain block generating module generates blocks periodically (such as 30min), collects management information of one period and generates one block;

4.2 the central chain generates the block module and generates the terminal management tree, the tree node of the management tree includes the terminal address and ADDs or deletes the movements, ADD and delete movements use "ADD" and "DEL" character string to replace respectively, adopt and ADD or delete the character string and terminal address of the movement to turn into the new character string to the address calculation method of the first tree node, carry on HASH calculation to get HASH value to the character string, the HASH value is regarded as the address of the first tree node; generating a new character string by adopting the character string and the terminal address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no terminal management data exists, and the address of the last tree node is used as the root node address of the terminal management tree; whether the root node address changes due to deletion, addition or modification in the terminal management tree, and the integrity of the terminal management information is ensured by checking the root node address unchanged;

4.3 the central chain generates the block module and generates the channel management tree, the tree node of the management tree includes the channel address and ADDs or deletes the movements, ADD and delete movements and use "ADD" and "DEL" character string to replace separately, to the address calculation method of the first tree node, adopt and ADD or delete the character string and terminal address of the movement to produce the new character string, carry on HASH calculation to the character string and get the HASH value, the HASH value is regarded as the address of the first tree node; the address calculation method of the subsequent tree node, adopt and increase or delete the character string and terminal address of the movements and HASH value of the previous tree node and produce the new character string, carry on HASH calculation to the character string and receive HASH value, the HASH value is regarded as the address of the tree node, until there is no channel management data, the address of the last tree node is regarded as the root node address of the terminal station management tree; whether the root node address is changed after the channel management tree is deleted, added or modified, the integrity of the channel management information is ensured by checking the root node address unchanged;

4.4 the central chain generation block module generates a channel member tree, the tree nodes of the channel member tree contain channel addresses, terminal addresses and binding or unbinding actions, the binding and unbinding actions are respectively replaced by using 'BIND' and 'UNBIND' character strings, a new character string is generated for the address of the first tree node by adopting the character strings of the binding or unbinding actions, the channel addresses and the terminal addresses, and HASH calculation is carried out on the character strings to obtain an HASH value, wherein the HASH value is used as the address of the first tree node; generating a new character string by adopting the character string of the binding or unbinding action, the channel address and the terminal address as well as the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no channel member data exists, and the address of the last tree node is used as the root node address of the channel member tree; whether the root node address is changed after the channel member tree is deleted, added or modified, the integrity of the channel member information is ensured by checking the root node address unchanged;

4.5 the central chain generates the block module and generates the management address, the root node address of the terminal management tree and the root node address of the channel member tree are connected by character strings to generate a new character string, HASH calculation is carried out, and the HASH value is obtained and used as the management address; no matter any one of the terminal management tree, the channel management tree and the channel member tree is changed, the management address is changed, and the information integrity of the terminal management tree, the channel management tree and the channel member tree is ensured by detecting that the management address is unchanged;

4.6 the central chain generates the block module and generates the first block address, the management address and the certification chain address are connected with the certification tree key by the character string to generate a new character string to carry out HASH calculation, and the HASH value is obtained and used as the first block address;

4.7 the central chain generates the block module and generates the subsequent block address, the block address of the last block and the management address are connected with the block address of the last block by the character string to generate a new character string for HASH calculation, and the HASH value is obtained as the block address;

4.8 the central chain generates the block module, sends the block address and the block content to the central chain storage module, the block content includes the terminal management tree, the channel member tree, the management address.

S5, the central chain storage module receives the newly generated blocks of the central chain block generation module and stores the blocks to the authentication chain according to the sequence;

s6, the terminal POC authentication module carries out login authentication to the central POC management module; the terminal POC authentication module registers with the center POC management module or the relay management module, an encryption transmission channel is established by using an SSL encryption method, the terminal POC authentication module sends a terminal address A1 and a terminal authentication address to the relay management module, and the encryption transmission channel is used for avoiding the leakage of the terminal authentication address;

s7, the center POC management module carries out character string connection on the terminal authentication address and the authentication chain address, HASH calculation is carried out to obtain a terminal address A2, if the terminal address A1 is the same as the terminal address A2, the terminal is considered as an effective terminal, and the terminal of the center POC media module is informed to be on-line;

s8, after the authentication of the terminal POC authentication module receiving center POC management module is successful, the authentication chain of the terminal chain downloading module downloading center chain storage module is triggered; informing the terminal POC media module that the authentication is successful;

s9, the terminal chain downloading module downloads the authentication chain from the central chain storage module; the terminal needs to use the 5G unmanned POC relay station, and the authentication chain is downloaded when the terminal uses the POC center server; the terminal chain downloading module requests the authentication chain from a central chain storage module by the block address of the latest block of the current authentication chain, and the central chain storage module sends the block behind the block address to the terminal chain downloading module, wherein the block address, the management address, the terminal management tree, the channel management tree and the channel member tree are contained; the terminal chain downloading module receives the block and sends the block to the terminal chain storage module;

s10, the terminal chain storage module receives the block data from the terminal chain downloading module, and the block data is locally stored and used for being read by the terminal chain uploading module;

s11, when the terminal POC authentication module registers to the relay management module, the terminal chain uploading module is triggered to upload the relay chain legal detection module by the authentication chain, and the relay management module is ensured to have the management information of the terminal;

s12, the terminal chain uploading module uploads the authentication chain to the relay chain combination detection module;

12.1 the terminal chain uploading module obtains the latest block address of the authentication chain of the relay from the relay chain storage module;

12.2 the terminal chain uploading module judges whether the block address exists in an authentication chain of the terminal chain storage module, if the block address exists and is not the latest address of the terminal authentication chain, the terminal authentication chain is longer than the relay authentication chain of the relay chain storage module, and a new block is sent to the relay chain legal detection module;

and the 12.3 terminal chain uploading module uploads the authentication chain to the authentication of the terminal chain and simultaneously sends management data of the 5G unmanned POC relay station synchronous chain POC center management service to the terminal chain uploading module.

S13, the relay chain combination detection module detects the block legality of the authentication chain;

13.1 the relay link legal detection module receives the block uploaded by the terminal link uploading module, and the relay link legal detection module acquires the authentication link address, the authentication tree key and the latest block address of the relay link storage module;

13.2 the method of the terminal management tree of the block of detection of the legal detection module of trunk link, to the address inspection mode of the first tree node, adopt and increase or delete the character string and terminal address of the movements and turn into the new character string, carry on HASH calculation to get HASH value to the character string, the HASH value compares with first tree node of the terminal management tree, if different, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string of the adding or deleting action, the terminal address and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain a HASH value, comparing the HASH value with the tree node of the terminal management tree, and if the HASH value is different from the tree node of the terminal management tree, judging that the block is illegal;

13.3 trunk chain legal detection module checks the channel management tree method of the block, to the address inspection mode of the first tree node, adopt and increase or delete the character string and channel address of the movements and turn into the new character string, carry on HASH calculation to get HASH value to the character string, the HASH value compares with first tree node of the channel management tree, if different, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string and the channel address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, comparing the HASH value with the tree node of the channel management tree, and if the HASH value is different from the tree node of the channel management tree, judging that the block is illegal;

13.4 trunk chain legal detection module checks the channel member tree method of the block, to the address check mode of the first tree node, adopt and bind or go character string and channel address and terminal address of the binding movement to turn into the new character string, carry on HASH calculation to get HASH value to the character string, the HASH value compares with first tree node of the channel member tree, if different, the block is illegal; in the address checking mode of the subsequent tree nodes, a new character string is generated by adopting the character string of the binding or unbinding action, the channel address and the HASH value of the previous tree node, HASH calculation is carried out on the character string to obtain the HASH value, the HASH value is compared with the tree nodes of the channel member tree, and if the HASH value is different from the tree nodes of the channel member tree, the block is illegal;

13.5 the last address of the terminal management tree, the channel management tree and the channel member tree is used as a root node address, a relay link combination detection module checks the legal management address method, the root node address of the terminal management tree, the root node address of the channel management tree and the root node address of the channel member tree are connected by character strings to generate a new character string, HASH calculation is carried out on the character string to obtain an HASH value, the HASH value is compared with the management address, and if the HASH value is different, the block is illegal;

13.6 the relay chain combination detection module checks the first block address legal method, carries on the character string connection to the management address and the certification chain address and the certification tree key to generate the new character string to carry on the HASH calculation, the HASH value is compared with the first block address, if different, the block is illegal;

13.7 the relay chain combination method detection module checks other block address legal methods, carries on the character string connection to the block address of the last block and the authentication tree key to generate the new character string to carry on the HASH calculation, obtains HASH value and block address to compare, if different is the same, the block is illegal;

13.8 the relay link legal detection module discards the illegal block to avoid the synchronous forged management data, and the relay link legal detection module sends the legal block to the relay link storage module.

S14, the relay chain storage module is an authentication chain storage module and is used for the terminal chain uploading module to obtain the latest block address and for the relay chain combination detection module to obtain the authentication chain address, the authentication tree key and the latest block address; the relay chain storage module needs to introduce an authentication tree key in advance, and the relay chain storage module performs HASH calculation on the authentication tree key to obtain an authentication chain address; the relay chain storage module receives the block storage block, analyzes the terminal management tree, the channel management tree and the channel member tree, adds and deletes the terminal, adds and deletes the channel, and binds and unbinds the channel with the terminal to send the relay management module;

s15, a providing terminal registration online module of the relay management module 5G unmanned POC relay station, and the synchronization of management information is realized by synchronizing an authentication chain of a POC center server in an unmanned management mode; the relay management module receives terminal addition and deletion, channel addition and deletion and channel and terminal binding information of the relay chain storage module, and locally stores the information;

s16, registering the terminal POC authentication module with the relay management module, establishing an encryption transmission channel by using an SSL encryption method, sending a terminal address A1 and a terminal authentication address to the relay management module by using the terminal PC authentication module, and avoiding the leakage of the terminal authentication address by using the encryption transmission channel; if the terminal address A1 is the added address, the relay management module performs character string connection on the terminal authentication address and the authentication chain address, performs HASH calculation to obtain a terminal address A2, and if the terminal address A1 is the same as the terminal address A2, the terminal is considered to be a valid terminal, and the relay POC forwarding module is notified that the terminal is on-line.

S17, the POC media module receives the authentication of POC authentication module and then starts working to switch the channel to POC media module or center POC media module according to the operation of terminal user, parameter terminal address and channel address; carrying out PTT speaking right request according to the operation of a terminal user, receiving the POC speaking right of a channel acquired by a relay POC media module or a center POC media module, and then sending a local voice stream by the terminal POC media module to realize the calling of the POC; when the terminal POC media module has no right of talk, the terminal POC media module receives the voice data of the relay POC media module or the center POC media module to realize the voice monitoring of the POC;

s18, relay POC transfer module and center POC media module provide the half-duplex audio data transfer of terminal channel; the relay POC forwarding module receives the channel creation of the center POC management module, creates forwarding service according to the channel address, and binds all terminal addresses of the channel according to the member terminal list; the relay POC forwarding module receives the terminal on-line of the center POC management module and ensures that the terminal address is in an on-line state; the relay POC forwarding module receives a cut-in channel, a parameter terminal address and a channel address of a terminal POC media module, judges whether the channel address is bound with the terminal address or not, and if the channel address is bound with the terminal address, the terminal joins in the channel; the relay POC forwarding module receives a PTT talk right request of the terminal POC media module, the relay POC forwarding module judges that no person occupies the talk right in the channel at the moment, the relay POC forwarding module informs the terminal POC media module to acquire the POC talk right of the channel, the relay POC forwarding module receives audio stream data of the terminal POC media module, and the relay POC forwarding module forwards the audio data to other on-line terminals of the channel, so that one-to-many talk is realized.

The invention has the beneficial effects that: the management information is transmitted between the POC center server and the 5G unmanned POC relay station through the 5G POC terminal in an authentication chain mode, so that the management information transmission synchronization is realized, the HASH association correction is used, the management information is prevented from being falsified in the transmission process, and the unmanned management of the 5G POC relay station is realized.

Drawings

Fig. 1 is a flow chart of each module in a 5G-based POC relay method according to the present invention;

fig. 2 is a schematic diagram of block address formation in a 5G-based POC relay method according to the present invention;

reference numbers in the figures: 1. a central POC media module; 2. a central POC management module; 3. a central chain generation block module; 4. a central chain storage module; 5. a terminal chain downloading module; 6. a terminal chain storage module; 7. a terminal POC authentication module; 8. a terminal POC media module; 9. a terminal chain uploading module; 10. a relay link legal detection module; 11. a relay chain storage module; 12. a relay management module; 13. and a relay POC forwarding module.

Detailed Description

The following examples are illustrative and are not to be construed as limiting the invention.

As shown in fig. 1-2, a 5G-based unmanned POC relay method includes the following steps:

s1, POC center server, center chain storage module 4 generates a certification chain, first randomly generates a random number as certification chain key, and carries out HASH calculation to the certification chain key to obtain HASH value as certification chain address;

s2, the certification chain key is imported into the relay chain storage module 11 of the 5G unmanned POC relay station in advance; the relay chain storage module 11 performs HASH calculation on the certification chain key to obtain a certification chain address;

s3, center POC management module 2 realizes terminal and channel management, and adopts manual management mode;

3.1 center POC management module 2 adds terminal, uses SUPI user permanent identity information of 5G; performing character string connection on the terminal SUPI and the authentication chain address, and performing HASH calculation to obtain a terminal authentication address for online authentication of the terminal; performing character string connection on the terminal authentication address and the authentication chain address, and performing HASH calculation to obtain a terminal address;

3.2 center POC management module 2 sends the adding action and the terminal address to center chain generation block module 3 and center POC media module 1;

3.3 center POC management module 2 adds channel, generates POC channel address using random number, sends adding action to center chain generating block module 3;

3.4 center POC management module 2 deletes terminal, and sends deleting action and terminal address to center chain generating block module 3; the center POC management module 2 deletes the channel and sends the deletion action and the channel address to the center chain generation block module 3 and the center POC media module 1;

3.5 center POC management module 2 binds and unbinds the terminal and the channel, and sends the binding/unbinding action, the channel address and the terminal address to center chain generation block module 3 and center POC media module 1.

S4, the central chain generation block module 3 receives the terminal adding and deleting actions and the channel adding and deleting actions of the central POC management module 2, and generates a block node to the central chain storage module 4;

4.1 the central chain block generating module 3 generates blocks periodically (30min), collects management information of one period and generates one block;

4.2 the central chain generating block module 3 generates a terminal management tree, the tree nodes of the management tree comprise terminal addresses and adding or deleting actions, the adding and deleting actions are respectively replaced by 'ADD' and 'DEL' character strings, the address calculation method of the first tree node adopts the character strings of the adding or deleting actions and the terminal addresses to generate new character strings, HASH calculation is carried out on the character strings to obtain HASH values, and the HASH values are used as the addresses of the first tree node; the address calculation method of the subsequent tree node adopts the character string and the terminal address of the adding or deleting action and the HASH value of the previous tree node to generate a new character string, HASH calculation is carried out on the character string to obtain the HASH value, the HASH value is used as the address of the tree node until no terminal management data exists, and the address of the last tree node is used as the root node address of the terminal management tree; whether the root node address is changed after deletion, addition or modification in the terminal management tree is finally caused, and the integrity of the terminal management information is ensured by checking the unchanged root node address;

4.3 the central chain generating block module 3 generates a channel management tree, the tree nodes of the management tree comprise channel addresses and adding or deleting actions, the adding and deleting actions are respectively replaced by 'ADD' and 'DEL' character strings, for the address calculation method of the first tree node, the character strings of the adding or deleting actions and the terminal address are adopted to generate new character strings, HASH calculation is carried out on the character strings to obtain HASH values, and the HASH values are used as the addresses of the first tree node; generating a new character string by adopting the character string and the terminal address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no channel management data exists, and the address of the last tree node is used as the root node address of the terminal management tree; whether the root node address is changed after the channel management tree is deleted, added or modified, the integrity of the channel management information is ensured by checking the root node address unchanged;

4.4 the central chain generation block module 3 generates a channel member tree, the tree nodes of the channel member tree contain channel addresses, terminal addresses and binding or unbinding actions, the binding and unbinding actions are respectively replaced by using 'BIND' and 'UNBIND' character strings, a new character string is generated for the address calculation method of the first tree node by adopting the character string of the binding or unbinding action, the channel address and the terminal address, and HASH calculation is carried out on the character string to obtain a HASH value, wherein the HASH value is used as the address of the first tree node; generating a new character string by adopting the character string of the binding or unbinding action, the channel address and the terminal address as well as the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no channel member data exists, and the address of the last tree node is used as the root node address of the channel member tree; whether the root node address is changed after the channel member tree is deleted, added or modified, the integrity of the channel member information is ensured by checking the root node address unchanged;

4.5 the central chain generating block module 3 generates a management address, the root node address of the terminal management tree and the root node address of the channel management tree are connected with the root node address of the channel member tree by character strings to generate a new character string, HASH calculation is carried out, and an HASH value is obtained to be used as the management address; no matter any one of the terminal management tree, the channel management tree and the channel member tree is changed, the management address is changed, and the information integrity of the terminal management tree, the channel management tree and the channel member tree is ensured by detecting that the management address is unchanged;

4.6 the central chain generating block module 3 generates a first block address, the management address, the authentication chain address and the authentication tree key are connected by character strings to generate a new character string for HASH calculation, and the HASH value is obtained and used as the first block address;

4.7 the central chain generates the block module 3 and generates the subsequent block address, the block address of the last block and the management address are connected with the block address of the last block by the character string to generate a new character string for HASH calculation, and the HASH value is obtained as the block address, because the block address generation needs the participation of the authentication tree key, only the block address validity verified by the authentication tree key determines the validity of the management address, thus ensuring the information integrity of the terminal management tree, the channel management tree and the channel member tree;

4.8 the central chain block generating module 3 sends the block address and the block content to the central chain storage module 4, and the block content includes the terminal management tree, the channel member tree and the management address.

S5, the central chain storage module 4 receives the newly generated blocks of the central chain generation block module 3, and stores the newly generated blocks in the authentication chain in sequence;

s6, terminal POC authentication module 7 carries out login authentication to center POC management module 2; the terminal POC authentication module 7 registers with the central POC management module 2 or the relay management module 12, an encryption transmission channel is established by using an SSL encryption method, the terminal POC authentication module 7 sends a terminal address A1 and a terminal authentication address to the relay management module 12, and the encryption transmission channel is used for avoiding the leakage of the terminal authentication address;

s7, the center POC management module 2 carries out character string connection on the terminal authentication address and the authentication chain address, HASH calculation is carried out to obtain a terminal address A2, if the terminal address A1 is the same as the terminal address A2, the terminal is considered as an effective terminal, and the center POC media module 1 is informed that the terminal is on-line;

s8, after receiving the successful authentication of the center POC management module 2, the terminal POC authentication module 7 triggers the terminal chain download module 5 to download the authentication chain of the center chain storage module 4; informing the terminal POC media module 8 that the authentication is successful;

s9, the terminal chain downloading module 5 downloads the authentication chain from the central chain storage module 4; the terminal needs to use the 5G unmanned POC relay station, and the authentication chain is downloaded when the terminal uses the POC center server; the terminal chain downloading module 5 requests the authentication chain from the central chain storage module 4 by the block address of the latest block of the current authentication chain, and the central chain storage module 4 sends the block behind the block address to the terminal chain downloading module 5, wherein the block address, the management address, the terminal management tree, the channel management tree and the channel member tree are contained; the terminal chain downloading module 5 receives the blocks and sends the blocks to the terminal chain storage module 6;

s10, the terminal chain storage module 6 receives the block data from the terminal chain download module 5, and stores the block data locally for the terminal chain upload module 9 to read;

s11, when the POC authentication module 7 of the terminal registers in the relay management module 12, first trigger the terminal chain uploading module 9 to upload the authentication chain to the relay chain validity detection module 10, so as to ensure that the relay management module 12 has the management information of the terminal;

s12, the terminal chain uploading module 9 uploads the authentication chain to the relay chain combination detection module 10;

12.1 the terminal chain uploading module 9 obtains the latest block address of the authentication chain of the relay from the relay chain storage module 11;

12.2 the terminal chain uploading module 9 judges whether the block address exists in the authentication chain of the terminal chain storage module 6, if the block address exists and is not the latest address of the terminal authentication chain, the block address shows that the terminal authentication chain is longer than the relay authentication chain of the relay chain storage module 11, and a new block is sent to the relay chain combination detection module 10;

12.3 terminal chain upload module 9 uploads certification chain to authenticate itself, and also to 5G unmanned POC relay station synchronization chain POC center management service management data.

S13, the relay chain combination detection module 10 detects the block legality of the authentication chain;

13.1 the relay link combination detection module 10 receives the block uploaded by the terminal link uploading module 9, and the relay link combination detection module 10 acquires the authentication link address, the authentication tree key and the latest block address of the relay link storage module 11;

13.2 the method for checking the terminal management tree of the block by the relay chain combination detection module 10, generating a new character string by adopting the character string of adding or deleting actions and the terminal address for the address checking mode of the first tree node, and carrying out HASH calculation on the character string to obtain a HASH value, wherein the HASH value is compared with the first tree node of the terminal management tree, and if the HASH value is different from the first tree node of the terminal management tree, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string of the adding or deleting action, the terminal address and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain a HASH value, comparing the HASH value with the tree node of the terminal management tree, and if the HASH value is different from the tree node of the terminal management tree, judging that the block is illegal;

13.3 the trunk chain combination method detection module 10 checks the channel management tree method of the block, to the address check mode of the first tree node, adopt and increase or delete the character string and channel address of the movement and turn into the new character string, carry on HASH calculation to get HASH value to the character string, the HASH value compares with first tree node of the channel management tree, if different, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string and the channel address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, comparing the HASH value with the tree node of the channel management tree, and if the HASH value is different from the tree node of the channel management tree, judging that the block is illegal;

13.4 the trunk chain combination method detection module 10 checks the channel member tree method of the block, to the address check mode of the first tree node, adopt and bind or go the character string and channel address and terminal address of the binding movement to turn into the new character string, carry on HASH calculation to get HASH value to the character string, the HASH value compares with first tree node of the channel member tree, if different, the block is illegal; in the address checking mode of the subsequent tree nodes, a new character string is generated by adopting the character string of the binding or unbinding action, the channel address and the HASH value of the previous tree node, HASH calculation is carried out on the character string to obtain the HASH value, the HASH value is compared with the tree nodes of the channel member tree, and if the HASH value is different from the tree nodes of the channel member tree, the block is illegal;

13.5 the last address of the terminal management tree, the channel management tree and the channel member tree is used as a root node address, the relay link combination detection module 10 checks the legal management address method, the root node address of the terminal management tree, the root node address of the channel management tree and the root node address of the channel member tree are connected by character strings to generate new character strings, HASH calculation is carried out on the character strings to obtain HASH values, the HASH values are compared with the management addresses, and if the HASH values are different, blocks are illegal;

13.6 the relay chain combination detection module 10 checks the first block address legal method, connects the management address and the certification chain address with the certification tree key to generate a new character string for HASH calculation, compares the HASH value with the first block address, and if the HASH value is different from the first block address, the block is illegal;

13.7 the relay chain combination method detection module 10 checks other block address legal methods, connects the management address with the block address of the previous block and the authentication tree key to generate a new character string for HASH calculation, obtains HASH value and compares the HASH value with the block address, if the HASH value is different from the block address, the block is illegal;

13.8 the relay link legal detection module 10 discards illegal blocks to avoid synchronous forged management data, and the relay link legal detection module 10 sends legal blocks to the relay link storage module 11.

S14, the relay chain storage module 11 is an authentication chain storage module, and is used for the terminal chain upload module 9 to obtain the latest block address, and for the relay chain legal detection module 10 to obtain the authentication chain address, the authentication tree key, and the latest block address; the relay chain storage module 11 needs to introduce the authentication tree key in advance, and the relay chain storage module 11 performs HASH calculation on the authentication tree key to obtain an authentication chain address; the relay chain storage module 11 receives the block storage block, analyzes the terminal management tree, the channel management tree and the channel member tree, adds and deletes the terminal, adds and deletes the channel, and binds and unbinds the channel with the terminal to send the relay management module 12;

s15, a providing terminal registration online module of the relay management module 125G unmanned POC relay station, and the synchronization of management information is realized by synchronizing an authentication chain of a POC center server in an unmanned management mode; the relay management module 12 receives the terminal addition and deletion, channel addition and deletion, and channel and terminal binding information of the relay chain storage module 11, and locally stores the information, the relay management module 12 sends the channel creation and deletion, and a member terminal list of the channel to the relay POC forwarding module 13;

s16, the terminal POC authentication module 7 registers to the relay management module 12, an encryption transmission channel is established by using an SSL encryption method, the terminal PC authentication module 7 sends a terminal address A1 and a terminal authentication address to the relay management module 12, and the encryption transmission channel is used for avoiding the leakage of the terminal authentication address; if the terminal address a1 is an added address, the relay management module 12 performs string connection between the terminal authentication address and the authentication chain address, performs HASH calculation to obtain the terminal address a2, and if the terminal address a1 is the same as the terminal address a2, the terminal is considered to be a valid terminal, and notifies the relay POC forwarding module 13 that the terminal is online.

S17, the terminal POC media module 8 starts working after receiving the authentication of the terminal POC authentication module 7 and switches channels to the terminal POC media module 8 or the center POC media module 1 according to the operation of the terminal user, and the terminal address and the channel address are parameters; carrying out PTT speaking right request according to the operation of a terminal user, receiving the POC speaking right of a channel acquired by the relay POC media module 8 or the center POC media module 1, and then sending a local voice stream by the terminal POC media module 8 to realize the calling of POC; when the terminal POC media module 8 has no right of talk, the terminal POC media module 8 receives the voice data of the relay POC media module 8 or the center POC media module 1 to realize the voice monitoring of POC;

s18, relay POC forwarding module 13 and center POC media module 1 provide half-duplex audio data forwarding of the channel of the terminal; the relay POC forwarding module 13 receives the channel creation of the center POC management module 2, creates forwarding service according to the channel address, and binds all the terminal addresses of the channel according to the member terminal list; the relay POC forwarding module 13 receives the terminal on-line of the center POC management module 2, and ensures that the terminal address is in an on-line state; the relay POC forwarding module 13 receives the cut-in channel, the parameter terminal address and the channel address of the terminal POC media module 8, judges whether the channel address and the terminal address are bound, and if the channel address and the terminal address are bound, the terminal joins in the channel; the relay POC forwarding module 13 receives a PTT talk right request of the terminal POC media module 8, the relay POC forwarding module 13 determines that no person occupies the talk right in the channel at this time, and notifies the terminal POC media module 8 to acquire the POC talk right of the channel, the relay POC forwarding module 13 receives audio stream data of the terminal POC media module 8, and the relay POC forwarding module 13 forwards the audio data to other online terminals of the channel, thereby implementing one-to-many voice talkback.

Wherein, the center POC media module 1 is the POC media service module of the POC center server;

the center POC management module 2 is a terminal providing, channel managing and terminal registering on-line module of a POC center server, and the center POC management module 2 has a manual management mode;

the center chain generating block module 3 is a certification chain block generating module of the POC center server;

the central chain storage module 4 is used for receiving the newly generated blocks of the central chain generation block module 3 and storing the newly generated blocks to the authentication chain according to the sequence;

the terminal chain downloading module 5 is an authentication chain downloading module of the terminal and downloads an authentication chain from the central chain storage module 4;

the terminal chain storage module 6 is an authentication chain storage module of the terminal, receives block data from the terminal chain download module 5, performs local storage, and is used for reading by the terminal chain upload module 9;

the terminal POC authentication module 7 performs login authentication to the central POC management module 2 or the relay management module 12;

the terminal POC media module 8 starts to work after receiving the authentication of the terminal POC authentication module 7;

the terminal chain uploading module 9 is an authentication chain uploading module of the terminal and uploads an authentication chain to the 5G unmanned POC relay station;

the relay chain combination detection module 10 is a block combination detection module of the authentication chain of the 5G unmanned POC relay station;

the relay chain storage module 11 is an authentication chain storage module of the 5G unmanned POC relay station, and is used for the terminal chain uploading module 9 to obtain the latest block address, and used for the relay chain legal detection module (10) to obtain the authentication chain address and the authentication tree key, and the latest block address;

the relay management module 12 is a terminal registration online module of the 5G unmanned POC relay station, and realizes management information synchronization by synchronizing an authentication chain of a POC center server in an unmanned management mode;

relay POC forwarding module 13 is a POC media service module of the 5G unmanned POC relay station, and provides half-duplex audio data forwarding of a channel of the terminal.

In light of the foregoing description of the preferred embodiment of the present invention, many modifications and variations will be apparent to those skilled in the art without departing from the spirit and scope of the invention. The technical scope of the present invention is not limited to the content of the specification, and must be determined according to the scope of the claims.

Claims

1. A5G-based unmanned POC relay method is characterized by comprising the following steps:

s1, POC center server, center chain storage module (4) generates a certification chain, first randomly generates a random number as certification chain key, and carries out HASH calculation to the certification chain key to obtain HASH value as certification chain address;

s2, a certification chain key is imported into a relay chain storage module (11) of the 5G unmanned POC relay station in advance; the relay link storage module (11) performs HASH calculation on the certification link key to obtain a certification link address;

s3, center POC management module (2) realizes terminal and channel management, and adopts manual management mode;

s4, the center chain generating block module (3) receives the terminal adding and deleting action, the channel adding and deleting action of the center POC management module (2), and generates a block node to the center chain storage module (4);

s5, the central chain storage module (4) receives the newly generated blocks of the central chain generation block module (3) and stores the blocks to the authentication chain according to the sequence;

s6, the terminal POC authentication module (7) performs login authentication to the central POC management module (2); the terminal POC authentication module (7) registers with the central POC management module (2) or the relay management module (12), an encryption transmission channel is established by using an SSL encryption method, the terminal POC authentication module (7) sends a terminal address A1 and a terminal authentication address to the relay management module (12), and the encryption transmission channel is used for avoiding the leakage of the terminal authentication address;

s7, the center POC management module (2) carries out character string connection on the terminal authentication address and the authentication chain address, HASH calculation is carried out to obtain a terminal address A2, if the terminal address A1 is the same as the terminal address A2, the terminal is considered as an effective terminal, and the center POC media module (1) is informed that the terminal is online;

s8, after the authentication of the receiving center POC management module (2) is successful, the terminal POC authentication module (7) triggers the authentication chain of the downloading center chain storage module (4) of the terminal chain downloading module (5); informing the terminal POC media module (8) that the authentication is successful;

s9, the terminal chain downloading module (5) downloads the authentication chain from the central chain storage module (4); the terminal needs to use the 5G unmanned POC relay station, and the authentication chain is downloaded when the terminal uses the POC center server; the terminal chain downloading module (5) requests the authentication chain from the block address of the latest block of the current authentication chain to the central chain storage module (4), and the central chain storage module (4) sends the block behind the block address to the terminal chain downloading module (5) and comprises the block address, a management address, a terminal management tree, a channel management tree and a channel member tree; the terminal chain downloading module (5) receives the block and sends the block to the terminal chain storage module (6);

s10, the terminal chain storage module (6) receives the block data from the terminal chain downloading module (5), and the block data is stored locally and used for being read by the terminal chain uploading module (9);

s11, when the terminal POC authentication module (7) registers to the relay management module (12), triggering the terminal chain uploading module (9) to upload the relay chain legal detection module (10) through the authentication chain, and ensuring that the relay management module (12) has the management information of the terminal;

s12, the terminal chain uploading module (9) uploads the authentication chain to the relay chain legal detection module (10);

s13, the relay chain legal detection module (10) carries out block legal detection of the authentication chain;

s14, the relay chain storage module (11) is an authentication chain storage module, and is used for the terminal chain uploading module (9) to obtain the latest block address, and used for the relay chain legality detection module (10) to obtain the authentication chain address, the authentication tree key and the latest block address; the relay link storage module (11) needs to introduce the authentication tree key in advance, and the relay link storage module (11) performs HASH calculation on the authentication tree key to obtain an authentication link address; the relay chain storage module (11) receives the block storage block, analyzes the terminal management tree, the channel management tree and the channel member tree, adds and deletes the terminal, adds and deletes the channel, and binds and unbinds the channel with the terminal to send the relay management module (12);

s15, a relay management module (12) and a providing terminal registration online module of the 5G unmanned POC relay station, and the synchronization of management information is realized by synchronizing an authentication chain of a POC center server in an unmanned management mode; the relay management module (12) receives the terminal addition and deletion, the channel addition and deletion and the binding information of the channel and the terminal of the relay chain storage module (11) and stores the information locally, and the relay management module (12) sends the channel creation and deletion and a member terminal list of the channel to the relay POC forwarding module (13);

s16, registering the terminal POC authentication module (7) with the relay management module (12), establishing an encryption transmission channel by using an SSL encryption method, sending a terminal address A1 and a terminal authentication address to the relay management module (12) by using the terminal PC authentication module (7), and avoiding the leakage of the terminal authentication address by using the encryption transmission channel; if the terminal address A1 is the added address, the relay management module (12) carries out character string connection on the terminal authentication address and the authentication chain address, carries out HASH calculation to obtain a terminal address A2, and if the terminal address A1 is the same as the terminal address A2, the terminal is considered as a valid terminal, and the relay POC forwarding module (13) is informed that the terminal is online.

S17, the terminal POC media module (8) starts working after receiving the authentication of the terminal POC authentication module (7) and switches channels to the terminal POC media module (8) or the center POC media module (1) according to the operation of the terminal user, and the terminal address and the channel address are parameters; the PTT speaking right request is carried out according to the operation of a terminal user, after the POC speaking right of a channel acquired by a relay POC media module (8) or a center POC media module (1) is received, the local voice stream is sent by the terminal POC media module (8), and the calling of the POC is realized; when the terminal POC media module (8) has no right of talk, the terminal POC media module receives the voice data of the relay POC media module (8) or the center POC media module (1) to realize the POC voice monitoring;

s18, relay POC transfer module (13) and center POC media module (1) provide half-duplex audio data transfer of terminal channel; the relay POC forwarding module (13) receives the channel creation of the center POC management module (2), creates forwarding service according to the channel address, and binds all terminal addresses of the channel according to the member terminal list; the relay POC forwarding module (13) receives the terminal online of the center POC management module (2) and ensures that the terminal address is in an online state; a relay POC forwarding module (13) receives a cut-in channel, a parameter terminal address and a channel address of a terminal POC media module (8), judges whether the channel address and the terminal address are bound, and if the channel address and the terminal address are bound, the terminal joins in the channel; the relay POC forwarding module (13) receives a PTT talk right request of the terminal POC media module (8), the relay POC forwarding module (13) judges that no person occupies the talk right in the channel at the moment, the relay POC forwarding module (13) informs the terminal POC media module (8) to acquire the POC talk right of the channel, the relay POC forwarding module (13) receives audio stream data of the terminal POC media module (8), and the relay POC forwarding module (13) forwards the audio data to other online terminals of the channel, so that one-to-many voice talkback is realized.

2. The POC 5G-based unmanned POC relay method according to claim 1, wherein said S3 includes the following procedures:

s3.1, adding a terminal by a POC management module (2) of a center, and using SUPI (super wish identity) user permanent identity information of 5G; performing character string connection on the terminal SUPI and the authentication chain address, and performing HASH calculation to obtain a terminal authentication address for online authentication of the terminal; performing character string connection on the terminal authentication address and the authentication chain address, and performing HASH calculation to obtain a terminal address;

s3.2, the center POC management module (2) sends the adding action and the terminal address to the center chain generation block module (3) and the center POC media module (1);

s3.3, adding channels by a center POC management module (2), generating POC channel addresses by using random numbers, and sending an adding action to a center chain generation block module (3);

s3.4, the center POC management module (2) deletes the terminal and sends the deletion action and the terminal address to the center chain generation block module (3); the center POC management module (2) deletes the channel and sends the deletion action and the channel address to the center chain generation block module (3) and the center POC media module (1);

s3.5 the center POC management module (2) binds and unbinds the terminal and the channel, and sends the binding/unbinding action, the channel address and the terminal address to the center chain generation block module (3) and the center POC media module (1).

3. The POC 5G-based unmanned POC relay method according to claim 1, wherein said S4 includes the following procedures:

s4.1, the central chain generating block module (3) periodically generates blocks, and collects management information of one period to generate one block;

s4.2, a central chain generating block module (3) generates a terminal management tree, tree nodes of the management tree comprise terminal addresses and adding or deleting actions, the adding and deleting actions are replaced by 'ADD' and 'DEL' character strings respectively, a new character string is generated by adopting the character string and the terminal address of the adding or deleting actions for an address calculation method of a first tree node, a HASH value is obtained by carrying out HASH calculation on the character string, and the HASH value is used as the address of the first tree node; generating a new character string by adopting the character string and the terminal address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no terminal management data exists, and the address of the last tree node is used as the root node address of the terminal management tree; whether the root node address changes due to deletion, addition or modification in the terminal management tree, and the integrity of the terminal management information is ensured by checking the root node address unchanged;

s4.3, a central chain generating block module (3) generates a channel management tree, tree nodes of the management tree comprise channel addresses and adding or deleting actions, the adding and deleting actions are replaced by 'ADD' and 'DEL' character strings respectively, a new character string is generated for an address calculation method of a first tree node by adopting the character strings of the adding or deleting actions and a terminal address, a HASH value is obtained by carrying out HASH calculation on the character strings, and the HASH value is used as the address of the first tree node; generating a new character string by adopting the character string and the terminal address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no channel management data exists, and the address of the last tree node is used as the root node address of the terminal management tree; whether the root node address is changed after the channel management tree is deleted, added or modified, the integrity of the channel management information is ensured by checking the root node address unchanged;

s4.4, a central chain generating block module (3) generates a channel member tree, tree nodes of the channel member tree comprise channel addresses, terminal addresses and binding or unbinding actions, the binding and unbinding actions are replaced by using 'BIND' and 'UNBIND' character strings respectively, a new character string is generated for an address calculation method of a first tree node by adopting the character string of the binding or unbinding action, the channel address and the terminal address, a HASH value is obtained by carrying out HASH calculation on the character string, and the HASH value is used as the address of the first tree node; generating a new character string by adopting the character string of the binding or unbinding action, the channel address and the terminal address as well as the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, wherein the HASH value is used as the address of the tree node until no channel member data exists, and the address of the last tree node is used as the root node address of the channel member tree; whether the root node address is changed after the channel member tree is deleted, added or modified, the integrity of the channel member information is ensured by checking the root node address unchanged;

s4.5, the central chain generating block module (3) generates a management address, the root node address of the terminal management tree, the root node address of the channel management tree and the root node address of the channel member tree are subjected to character string connection to generate a new character string, HASH calculation is carried out, and an HASH value is obtained and is used as the management address; no matter any one of the terminal management tree, the channel management tree and the channel member tree is changed, the management address is changed, and the information integrity of the terminal management tree, the channel management tree and the channel member tree is ensured by detecting that the management address is unchanged;

s4.6, the central chain generating block module (3) generates a first block address, the management address, the authentication chain address and the authentication tree key are subjected to character string connection to generate a new character string, and HASH calculation is carried out to obtain an HASH value serving as the first block address;

s4.7, the central chain generates a block module (3) to generate a subsequent block address, the block address of the last block and the management address are connected with the block address of the last block through a character string to generate a new character string to perform HASH calculation, and an HASH value is obtained to be used as the block address;

s4.8 the central chain block generating module (3) sends the block address and the block content to the central chain storage module (4), and the block content comprises a terminal management tree, a channel member tree and a management address.

4. The POC 5G-based unmanned POC relay method according to claim 1, wherein said S12 includes the following procedures:

s12.1, the terminal chain uploading module (9) acquires the latest block address of the authentication chain of the relay from the relay chain storage module (11);

s12.2, the terminal chain uploading module (9) judges whether the block address exists in an authentication chain of the terminal chain storage module (6), if the block address exists and is not the latest address of the terminal authentication chain, the block address shows that the terminal authentication chain is longer than the relay authentication chain of the relay chain storage module (11), and a new block is sent to the relay chain legal detection module (10);

and S12.3, the terminal chain uploading module (9) uploads the authentication chain to the authentication of the terminal chain and simultaneously sends management data of the POC center management service of the 5G unmanned POC relay station synchronization chain.

5. The POC 5G-based unmanned POC relay method according to claim 1, wherein said S13 includes the following procedures:

s13.1, the relay link legal detection module (10) receives the blocks uploaded by the terminal link uploading module (9), and the relay link legal detection module (10) acquires the authentication link address, the authentication tree key and the latest block address of the relay link storage module (11);

s13.2, a relay link legal detection module (10) checks a terminal management tree method of a block, a new character string is generated by adopting a character string of adding or deleting actions and a terminal address for an address check mode of a first tree node, HASH calculation is carried out on the character string to obtain an HASH value, the HASH value is compared with the first tree node of the terminal management tree, and if the HASH value is different from the first tree node of the terminal management tree, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string of the adding or deleting action, the terminal address and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain a HASH value, comparing the HASH value with the tree node of the terminal management tree, and if the HASH value is different from the tree node of the terminal management tree, judging that the block is illegal;

s13.3, a relay link legal detection module (10) checks a channel management tree method of a block, adopts a character string of adding or deleting actions and a channel address to generate a new character string for an address check mode of a first tree node, carries out HASH calculation on the character string to obtain an HASH value, and compares the HASH value with the first tree node of the channel management tree, if the HASH value is different from the first tree node of the channel management tree, the block is illegal; in the address checking mode of the subsequent tree node, generating a new character string by adopting the character string and the channel address of the adding or deleting action and the HASH value of the previous tree node, carrying out HASH calculation on the character string to obtain the HASH value, comparing the HASH value with the tree node of the channel management tree, and if the HASH value is different from the tree node of the channel management tree, judging that the block is illegal;

s13.4, a relay link legal detection module (10) checks a channel member tree method of a block, a new character string is generated by adopting a character string of binding or unbinding action, a channel address and a terminal address for an address check mode of a first tree node, HASH calculation is carried out on the character string to obtain an HASH value, the HASH value is compared with the first tree node of the channel member tree, and if the HASH value is different from the first tree node of the channel member tree, the block is illegal; in the address checking mode of the subsequent tree nodes, a new character string is generated by adopting the character string of the binding or unbinding action, the channel address and the HASH value of the previous tree node, HASH calculation is carried out on the character string to obtain the HASH value, the HASH value is compared with the tree nodes of the channel member tree, and if the HASH value is different from the tree nodes of the channel member tree, the block is illegal;

s13.5, the last address of the terminal management tree, the channel management tree and the channel member tree is used as a root node address, a relay link legal detection module (10) checks a legal management address method, the root node address of the terminal management tree, the root node address of the channel management tree and the root node address of the channel member tree are subjected to character string connection to generate a new character string, HASH calculation is carried out on the character string to obtain an HASH value, the HASH value is compared with the management address, and if the HASH value is different, a block is illegal;

s13.6 the relay link legal detection module (10) checks the legal method of the first block address, carries out character string connection on the management address, the authentication link address and the authentication tree key to generate a new character string for HASH calculation, compares the HASH value with the first block address, and if the HASH value is different from the first block address, the block is illegal;

s13.7, the relay link legal detection module (10) checks other block address legal methods, the management address, the block address of the last block and the authentication tree key are connected in a character string mode to generate a new character string, HASH calculation is carried out, the HASH value is obtained and compared with the block address, and if the HASH value is different from the block address, the block is illegal;

s13.8 the relay link legal detection module (10) discards the illegal blocks to avoid the synchronous forged management data, and the relay link legal detection module (10) sends the legal blocks to the relay link storage module (11).