首页|基于区块链的卫星网络系统安全通信机制设计与验证

基于区块链的卫星网络系统安全通信机制设计与验证

扫码查看
现有的卫星网络节点间的身份认证大多依赖于一个证书颁发机构,即授权认证服务器,很容易出现中央瓶颈和单点故障,而且经过身份认证的节点很可能在之后遭受恶意攻击,导致关键配置文件被篡改而留下固件后门.本文利用区块链和智能合约构建了一个卫星网络系统安全通信框架,通过区块链为网络中的所有节点提供一个相同的防篡改可追溯分布式账本,使身份认证不再需要可信中介,直接通过点对点实现分布式身份认证,还可以通过智能合约定期验证节点关键数据的完整性来加强系统安全防护.最后,本文在一个开源的区块链平台上实现了一个原型来验证该安全通信机制.
Design and Verification of Security Communication Mechanism for Satellite Network System Based on Blockchain
The identity authentication between the existing satellite network nodes mostly relies on a certificate authority,i.e.,an authorized authentication server,which is prone to central bottlenecks and single points of failure.Moreover,the authenticated nodes are likely to suffer malicious attacks in the future,leading to the tampering of key configuration files and thus leaving firmware backdoors.In this paper,the blockchain and smart contracts are used to build a secure communication framework for satellite network systems.Through the blockchain,an identical tamper-proof and traceable distributed ledger is provided for all nodes in the network,so that identity authentication no longer requires a trusted intermediary.The distributed identity authentication can be realized directly through point-to-point,and the integrity of the key data of nodes can be regularly verified through smart contracts to strengthen the system security protection.Finally,a prototype is implemented on an open source blockchain platform,and verifies the secure communication mechanism.

satellite network systemsecurity mechanismblockchainsmart contractidentity authentication

陈韬鸣、张健、冷超、冉渝阳

展开 >

北京跟踪与通信技术研究所,北京 100094

武汉大学 计算机学院网络研究所,湖北 武汉 430072

卫星网络系统 安全机制 区块链 智能合约 身份认证

2024

上海航天(中英文)
上海航天技术研究院

上海航天(中英文)

CSTPCD
影响因子:0.166
ISSN:2096-8655
年,卷(期):2024.41(6)