NTNTrust: 空间零信任安全架构、后量子密码远程证明与可信根防护

NTNTrust Spaceborne Zero-Trust Identity & Attestation Pipeline

Continuous hardware root-of-trust verification across optical inter-satellite mesh links

Central System: Hardware Root-of-Trust (TPM/HSM) - Radiation-hardened physical unclonable function (PUF) core

Network Nodes

• Hardware Root-of-Trust (TPM/HSM)
• Remote Attestation Engine
• ML-KEM / ML-DSA Crypto Core
• Constellation Security Operations Center

Architectural Protocol Layers

• Spaceborne PHY/MAC Layer (3GPP Rel-17 TS 38.300): Doppler compensation, HARQ disabling, and timing advance extension.
• Orbital Mesh Routing (CCSDS / Delay-Tolerant Networking): Dynamic topology routing over intermittent laser crosslinks.
• Regenerative Core Processing (OpenRAN / 3GPP CU-DU Split): Onboard user plane function (UPF) local breakout.

Key Metrics: < 18ms (LEO Orbit-to-Ground Roundtrip) | 100 Gbps (Optical Crosslink Throughput) | ±48 kHz (Doppler Shift Compensation) | 99.999% (Orbital Constellation Availability)