基于区块链的卫星网络系统安全通信机制设计与验证  

Design and Verification of Security Communication Mechanism for Satellite Network System Based on Blockchain

作　　者：陈韬鸣 张健 冷超 冉渝阳 CHEN Taoming;ZHANG Jian;LENG Chao;RAN Yuyang(Beijing Institute of Tracking and Telecommunication Technology,Beijing 100094,China;Network Research Institute,School of Computer Science,Wuhan University,Wuhan 430072,Hubei,China)

机构地区：[1]北京跟踪与通信技术研究所,北京100094 [2]武汉大学计算机学院网络研究所,湖北武汉430072

出　　处：《上海航天(中英文)》2024年第6期88-94,105,共8页Aerospace Shanghai(Chinese&English)

摘　　要：现有的卫星网络节点间的身份认证大多依赖于一个证书颁发机构,即授权认证服务器,很容易出现中央瓶颈和单点故障,而且经过身份认证的节点很可能在之后遭受恶意攻击,导致关键配置文件被篡改而留下固件后门。本文利用区块链和智能合约构建了一个卫星网络系统安全通信框架,通过区块链为网络中的所有节点提供一个相同的防篡改可追溯分布式账本,使身份认证不再需要可信中介,直接通过点对点实现分布式身份认证,还可以通过智能合约定期验证节点关键数据的完整性来加强系统安全防护。最后,本文在一个开源的区块链平台上实现了一个原型来验证该安全通信机制。The identity authentication between the existing satellite network nodes mostly relies on a certificate authority,i.e.,an authorized authentication server,which is prone to central bottlenecks and single points of failure.Moreover,the authenticated nodes are likely to suffer malicious attacks in the future,leading to the tampering of key configuration files and thus leaving firmware backdoors.In this paper,the blockchain and smart contracts are used to build a secure communication framework for satellite network systems.Through the blockchain,an identical tamperproof and traceable distributed ledger is provided for all nodes in the network,so that identity authentication no longer requires a trusted intermediary.The distributed identity authentication can be realized directly through point-to-point,and the integrity of the key data of nodes can be regularly verified through smart contracts to strengthen the system security protection.Finally,a prototype is implemented on an open source blockchain platform,and verifies the secure communication mechanism.

关 键 词：卫星网络系统 安全机制 区块链 智能合约 身份认证 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]