Satellite self-organizing network security framework system and method for resisting black hole attacks

Abstract

A satellite self-organizing network security framework system based on blockchain technology includes a data layer, a network layer, a consensus layer, a function implementation layer and an application layer; the data layer specifies the structure and content of each block; the satellite nodes of the network layer jointly form a decentralized system structure, and each satellite node joins the alliance chain system as a member of the alliance chain; the consensus layer completes accounting through a consensus mechanism based on rights and interests; each satellite node in the function implementation layer jointly maintains a blockchain account book, and implements the routing actions of satellite nodes in the data plane, the announcement of node malicious behaviors, and the trusted record of the current reputation value of each satellite node according to the provisions in the smart contract, and the records are distributed and stored among each node; the top layer is the application layer, which provides network status perception, black hole attack identification, and reputation reference for satellite nodes in the data plane based on the trusted records of the underlying network to ensure network security.

Description

Technical Field

[0001] The invention relates to a method for a satellite self-organizing network to resist black hole attacks. Background Art

[0002] In recent years, with the advent and development of the information age, the global demand for wireless and mobile communications has grown rapidly, and the traditional ground communication method that relies solely on ordinary ground relay stations for communication can no longer achieve "seamless" coverage of the communication network. In order to enable people to exchange various information with others at any time, any place, and in any way, satellite communication that uses satellites as relay stations to transmit or forward radio waves has become an indispensable means of communication. Compared with traditional ground communication methods, satellite communication has a wider coverage: only three GEO satellites are needed to cover all areas of the world except the two poles; the communication capacity is larger: it can provide broadband communication services and can be easily expanded to higher frequency bands; it can quickly provide services to the market: it is fast to establish ground communication facilities, and the cycle of launching new businesses and applications is short; it is not restricted by the geographical environment: it can still fully cover places that cannot be covered by ground wireless networks such as air, ocean, mountains, deserts, and Gobi, and the communication distance is not related to the cost; high disaster tolerance: it can still work normally and provide stable communication when encountering natural disasters such as earthquakes, tsunamis, floods, and typhoons. The significant advantages of satellite communication networks in various aspects make satellite communication technology have important research and application value in many fields such as communication broadcasting, weather forecasting, resource exploration, environmental monitoring, disaster warning, navigation and positioning, digital cities and digital earth.

[0003] Due to the many advantages of satellite communications, the space-ground integrated communication network solution came into being. Micro-nano satellites have become a hot research direction in satellite communications due to their small size, low power consumption, short development cycle, and the ability to form a team and network to complete many complex space missions at a lower cost. How to build an efficient self-organizing network of micro-nano satellites to provide reliable and efficient information communication guarantees for the on-orbit missions of small satellite constellations has become a top priority.

[0004] In order to make the micro-nano satellite self-organizing network provide services safely and efficiently, it is necessary to take defensive measures against its potential attack methods, and DDos attack, the full name of which is distributed denial of service attack, is one of the most common attack methods in the network. When attacking, this method can attack a large number of network nodes in different locations. When attacking, it mainly sends data packets to the target that exceed its processing capacity, causing the target to be paralyzed and unable to provide normal services.

[0005] DDoS attacks are simple and deadly network attacks that exploit TCP / IP protocol vulnerabilities. Since the session mechanism vulnerabilities of the TCP / IP protocol cannot be modified, there is a lack of direct and effective defense methods. A large number of examples have proven that passive defense using traditional equipment is basically futile, and existing firewall equipment will also be paralyzed due to limited processing power, becoming a bottleneck for network operation; in addition, the target node will inevitably be paralyzed during the attack.

[0006] The most effective way to defend against DDos attacks now is "black hole". Black hole means that when the server's attack traffic exceeds the black hole threshold of the computer room, the cloud computing service provider blocks the server's external network access. But with it comes a new problem. Since black hole is a service purchased by major cloud computing service providers from operators (China Unicom, China Telecom, China Mobile), and operators have strict restrictions on the time and frequency of black hole release, the black hole state cannot be released manually. You need to wait patiently for the system to automatically release it. If you wait for the black hole to be automatically released and then continue to forward data, it will cause a lot of system delays. Then in the communication network, if a node enters a black hole, it will not be able to send data packets before it releases the black hole, and loses its original forwarding function. We say that the node has been attacked by a black hole.

[0007] In a satellite self-organizing network, a malicious node attracts data packets passing through the malicious node by falsely claiming to have the latest route or the shortest path to the destination node. When the black hole threshold of the node is exceeded, the node enters the black hole without any route to the destination. Then, the data is absorbed without forwarding it to the destination node, forming a data black hole and performing a black hole attack on the network. When the source node wants to send a data packet to the destination node, if the route goes through multiple hops and is attacked by a black hole in the path, the various traditional routing protocols cannot determine where in the data packet transmission path the attack caused the packet loss.

[0008] Blockchain is a distributed ledger technology that uses decentralized infrastructure and distributed storage consensus technology. It consists of a shared, fault-tolerant distributed database and a multi-node network.

[0009] Blockchain services are generally provided to users in two ways:

[0010] 1. Application services based on public chains: Typical public chains such as BTC / ETH or self-developed public chains. Based on existing public chains, we build chain browsers to interact with blockchains and develop blockchain application services in corresponding fields for users on browsers.

[0011] 2. Cloud service platform based on alliance chain / private chain: Popular alliance chains such as Fabric / Corda provide customers with alliance members (organizations) with complete bottom-level encapsulation based on the alliance chain architecture, and develop blockchain application services in corresponding fields by deploying application chain codes (smart contracts). Service providers provide enterprise-level blockchain open platforms that can be quickly deployed and accessed with one click, and have decentralized trust mechanisms, private deployment, and rich operation and maintenance management capabilities.

[0012] When traditional satellite self-organizing networks are attacked by black holes:

[0013] (1) When a node in a satellite network enters a black hole and becomes a malicious node, if the node is a relay node in a multi-hop route from a source node to a destination node, the source node cannot determine which node in the path has been attacked.

[0014] (2) It is impossible to effectively punish malicious nodes that launch black hole attacks, and malicious nodes can continue to launch attacks to damage the network. Summary of the invention

[0015] The technical problem to be solved by the present invention is: the present invention proposes a method for satellite self-organizing network to resist black hole attack based on blockchain technology, and improves the security of traditional satellite self-organizing network. By utilizing the information sharing characteristics of blockchain technology, the routing actions of all nodes in the network are shared. When a malicious node in the network launches a black hole attack, the source node can discover the malicious node through the security framework of blockchain technology, and then punish the discovered malicious node through the reputation reference mechanism, so that it cannot continue to attack the satellite network, thereby ensuring the security of satellite network communication.

[0016] The technical solution adopted by the present invention is: a satellite self-organizing network security framework system based on blockchain technology, including five layers, from bottom to top, namely, data layer, network layer, consensus layer, function implementation layer and application layer;

[0017] The data layer specifies the structure and content of each block; the satellite nodes of the network layer jointly form a decentralized system structure, and each satellite node joins this alliance chain system as a member of the alliance chain; the consensus layer completes accounting through a consensus mechanism based on rights and interests; each satellite node in the function implementation layer jointly maintains a blockchain ledger, and the provisions in the smart contract implement the routing actions of the satellite nodes in the data plane, the announcement of node malicious behaviors, and the trusted record of the current reputation value of each satellite node, and the records are distributed and stored among each node; the top layer is the application layer, which provides network status perception, black hole attack identification, and reputation reference for the satellite nodes in the data plane based on the trusted records of the underlying network to ensure network security.

[0018] The data layer stores all the data information on the blockchain and is the lowest level data structure in the entire blockchain technology. From the genesis block that does not record transactions to the continuously added blocks, a chain structure is formed, which encapsulates hash values, timestamps for authenticating transactions, transaction information, and public and private keys. On the blockchain network, the consensus algorithm is used between nodes to maintain the consistency of the data layer data. Through asymmetric encryption and hash algorithms in cryptography, the data information in this distributed database is guaranteed to be tamper-proof and traceable.

[0019] The data layer includes two types of blocks, satellite node routing action blocks and malicious node attack behavior blocks;

[0020] Satellite node routing action block: When each satellite node has a routing action, the packaged transaction contains the following information: the action initiator's address; the action initiator's signature, used to verify the initiator's identity; the source address and destination address of the data packet, as well as the data packet number; the size of the data packet; the next hop address to which the data packet is sent;

[0021] Malicious node attack behavior block, the block includes the following content: the address of the initiator of the block and his / her identity certificate; timestamp; hash value of the previous block; address of the malicious node; number of the data packet discarded by the malicious node, source node, destination node; current reputation value of the malicious node.

[0022] In the satellite self-organizing network security framework system, the blockchain is located in the satellite self-organizing network, and each satellite node in the network jointly maintains a consortium chain; each satellite node joins the consortium chain system as a member of the consortium chain. There is no specific privileged node in the entire system. The P2P protocol is used to complete transactions between nodes and the transmission of block data. When a node creates a new block, it will be broadcast to all nodes in the network. The nodes that receive the message will verify the block and then create a new block; the nodes in the satellite network are issued a unique public key, private key and digital certificate proving their identity by the ground station that manages the constellation. The public key is notified to all nodes in the network, and the private key is kept by the node itself; the node verifies the digital signature of the information to ensure that the information does come from the signing node.

[0023] The network status perception is as follows:

[0024] The nodes in the data plane update the network status table entries they maintain in real time according to the network status information in the blockchain to obtain network status perception.

[0025] Black hole attack identification is as follows:

[0026] The application layer can also identify black hole attacks; each data packet generated by a node has a source node, a destination node, and a serial number. After the node generates a data packet, it tracks the destination of the data packet based on the serial number information of the data packet with the help of the blockchain that records the node's actions; if a source node in the network generates a data packet and does not receive an ACK from the destination node, it queries the blockchain transaction information, determines the malicious node, and identifies the black hole attack.

[0027] The node reputation reference is as follows:

[0028] The function implementation layer implements the announcement of malicious behaviors of malicious nodes and records the current reputation value of each node in the network. The application layer provides a reputation reference for node routing selection; the application layer uses the reputation record of the node to punish nodes with low reputation; when the node needs to perform reinforcement learning to find the optimal next hop, if the current reputation value of a neighbor node is less than 7 units, the probability of the neighbor node being selected will be reduced during the learning process; when the number of reputation coins held by a neighbor node is less than 3 units, the node will not be considered as a possible next hop node during the reinforcement learning process.

[0029] If a malicious node launches black hole attacks multiple times and deliberately discards data packets that should be forwarded, the malicious node will be identified by other nodes in the network and the number of data packets forwarded by the malicious node will be reduced. If the node still launches black hole attacks, other nodes in the network will not consider it as a possible next hop node, and ultimately the node will be isolated from the entire network.

[0030] The method for a satellite self-organizing network to resist a black hole attack using the satellite self-organizing network security framework system based on blockchain technology comprises the following steps:

[0031] S1. When a satellite node joins the network, a genesis block is generated, in which each satellite node is assigned an initial reputation value of 10 and an initial equity value of 0;

[0032] S2. Compare the equity values ​​of each satellite node in the current network. The satellite node with the highest equity value is selected as the block generation node for this round. If the equity values ​​are the same, it is randomly selected from the nodes with the same equity value.

[0033] S3: When the satellite node performs the "action" of sending the data packet to the next-hop node in this round, it packages the "action" and broadcasts it to the entire network, otherwise no "action" will be generated;

[0034] S4. The block generation node collects the "action" information sent by each node, packs it into a block (Type I), broadcasts it to the entire network, and sets the equity value to 0;

[0035] S5. After receiving the satellite node routing action block, other satellite nodes verify the correctness of the block according to the information in the block. If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it.

[0036] S6. If the source node does not receive the ACK from the destination node in this round, query the blockchain of this node;

[0037] S7. If a malicious node is found, the current node sets the reputation value of the malicious node to -1 and the equity value to -1, generates a malicious node attack behavior block, broadcasts it to the entire network, and jumps to S8;

[0038] If no malicious node is found, jump to 9;

[0039] S8. After receiving the malicious node attack behavior block, other satellite nodes verify the correctness of the block based on the information in the block. If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it.

[0040] S9: The equity value of all nodes in the current network is increased by 1. If a new satellite node joins the network, return to S1; otherwise, return to S2.

[0041] Compared with the prior art, the present invention has the following advantages:

[0042] The present invention proposes a method for satellite self-organizing networks to resist black hole attacks based on blockchain technology, i.e., a new blockchain security framework, which overcomes the shortcomings of traditional satellite self-organizing networks, such as being vulnerable to black hole attacks, being difficult to identify malicious nodes attacked by black holes, and being difficult to recover after being attacked. The present invention can not only identify malicious nodes that initiate black hole attacks, but also isolate the malicious nodes in time, thereby improving the security of the network. This is mainly reflected in:

[0043] (1) Blockchain technology is combined with satellite self-organizing networks. The information sharing and non-tamperability characteristics of blockchain technology are utilized to realize the sharing of routing action information of all nodes in the network, so that each node can know which nodes have performed packet sending actions, thereby judging whether any node has launched a black hole attack, and the attack identification process is concise; and the blockchain consensus mechanism in the present invention adopts PoS, which does not require complex calculation processes, saves precious energy and computing power of satellites, and is adapted to the miniaturization, lightweight, low power consumption and other characteristics of micro-nano satellites. Compared with traditional micro-nano satellite self-organizing networks, the present invention greatly improves the reliability of the network.

[0044] (2) By adopting the idea of ​​reputation reference, when the attack of a malicious node is identified, the security framework of the present invention will deduct the reputation value of the node. Other nodes will punish the malicious nodes with low reputation values ​​according to the reputation value records of each node in the blockchain, and isolate them outside the network, preventing them from continuing to attack the network. This reduces the impact of malicious nodes on the network and also avoids the possibility of normal nodes being misjudged as malicious nodes. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 It is a general schematic diagram of the safety framework in the present invention;

[0046] Figure 2 It is a schematic diagram of the recording node routing action block (Type I);

[0047] Figure 3 Schematic diagram of the block (Type II) for recording malicious node attack behavior;

[0048] Figure 4 Schematic diagram of identifying malicious nodes under black hole attack through this framework. DETAILED DESCRIPTION

[0049] The present invention is further described in conjunction with the accompanying drawings.

[0050] like Figures 1 to 4 As shown, the present invention proposes a satellite self-organizing network security framework based on blockchain (such as Figure 1 ), the security framework is divided into five layers, from bottom to top, data layer, network layer, consensus layer, function implementation layer and application layer. The data layer specifies the structure and content of each block. The satellite nodes of the network layer jointly form a decentralized system structure, and each satellite node joins this alliance chain system as a member of the alliance chain. The consensus layer completes the bookkeeping through a consensus mechanism based on equity (PoS). Each satellite node in the function implementation layer jointly maintains a blockchain ledger, and the provisions in the smart contract implement the routing actions of the satellite nodes in the data plane, the announcement of the malicious behavior of the nodes, the trusted record of the current reputation value of each satellite node, and the records are distributed and stored between each node. The top layer of the blockchain-based network security framework is the application layer. Based on the trusted records of the underlying network, the application layer provides reliable network status perception, black hole attack identification, reputation reference and other functions for the satellite nodes of the data plane, ensuring network security.

[0051] A. Data Layer

[0052] The data layer stores all the data information on the blockchain and is the lowest level data structure in the entire blockchain technology. From the genesis block that does not record transactions to the continuous addition of new blocks, the chain structure encapsulates the hash value, the timestamp of the authentication transaction, the transaction information, the public and private keys, etc., ensuring the security of all data when the data is open to the entire network. On the blockchain network, the consensus algorithm is used between nodes to maintain the consistency of the data layer data. Through asymmetric encryption and hash algorithms in cryptography, the data information in this distributed database is guaranteed to be tamper-proof and traceable. The data layer of the blockchain is equivalent to a database that cannot be tampered with and has distributed characteristics.

[0053] There are two main types of blocks in this framework. The first is the satellite node routing action block (Type I). When each satellite node has a routing action, the packaged transaction should contain the following information (such as Figure 2 ): the action initiator's address; the action initiator's signature, used to verify the initiator's identity; the source address and destination address of the data packet, as well as the data packet number; the size of the data packet; the next hop address to which the data packet is sent.

[0054] Then there is the malicious node attack behavior block (Type II), which includes the following content (such as Figure 3 ): the address of the initiator of the block and his / her identity certificate; timestamp; hash value of the previous block; address of the malicious node; number of the data packet discarded by the malicious node, source node, destination node (to help other satellite nodes verify that the data packet was indeed discarded by the malicious node); current reputation value of the malicious node.

[0055] In this framework, the blockchain is located in the satellite self-organizing network, and each satellite node in the network jointly maintains a consortium chain. Each satellite node joins this consortium chain system as a member of the consortium chain. There is no specific privileged node in the entire system. The P2P protocol is used to complete transactions between nodes and the transmission of block data. When a node creates a new block, it will be broadcast to all nodes in the network. The nodes that receive the message will verify the block and then create a new block. The nodes in the satellite network are issued a unique public key, private key, and digital certificate proving their identity by the ground station that manages the constellation. The public key is notified to all nodes in the network, and the private key is kept by the node itself. The node can verify the digital signature of the information to ensure that the information is indeed from the signing node.

[0056] C. Consensus Layer

[0057] This framework uses P2P network for data transmission. Each satellite node in the P2P network will be responsible for network routing, verifying block data, and ensuring data consistency. Therefore, it is necessary to add a necessary consensus mechanism to select nodes that generate new blocks at the consensus layer. All network nodes verify and upload new blocks to the chain according to the consensus mechanism to ensure data consistency and availability of the blockchain system.

[0058] When recording the routing actions of satellite nodes, considering the insufficient computing power and limited energy of each node in the micro-nano satellite network, the traditional computing power-based proof-of-work consensus mechanism (PoW) has high costs and consumes a lot of resources, which is not suitable for small satellite networks. This framework adopts a consensus mechanism based on proof of stake (PoS), which does not require a lot of calculations, saving precious computing power and energy of micro-nano satellite nodes. At the same time, this consensus mechanism has low latency, high efficiency of block generation, and high throughput, which is suitable for data plane nodes with frequent data transmission.

[0059] D. Function Implementation Layer

[0060] The functional implementation layer of this framework is based on the data layer, network layer and consensus layer, and is regulated by smart contracts to achieve the recording of the routing actions of satellite nodes in the data plane, the announcement of malicious behaviors of nodes, and the reliable record of the current reputation value of each satellite node.

[0061] E. Application layer

[0062] Based on the trusted records of the underlying network, the application layer provides reliable network status perception, black hole attack identification, node reputation reference and other functions for the satellite nodes of the data plane.

[0063] 1. Network status awareness

[0064] The nodes in the data plane update the network status table entries they maintain in real time according to the network status information in the blockchain, and obtain reliable network status perception. For example, the satellite node reads from the transaction in the just updated blockchain (i.e., the "action" of the node) that node A sent a data packet to node B. If node B exists in the neighbor node status table of node A, the remaining capacity and traffic load of node B in the neighbor status table are corrected according to the size of the sent data packet.

[0065] 2. Black hole attack identification

[0066] The application layer can also identify black hole attacks. Each data packet generated by a node has a source node, a destination node, and a serial number. After the node generates a data packet, it can track the destination of the data packet based on the serial number and other information of the data packet with the help of the blockchain that records the node actions. If a source node in the network does not receive an ACK from the destination node after generating a data packet, the blockchain can be queried. Assume that A generates a data packet with a serial number of 0001, the source node is A, and the destination node is D. A selects the next hop node as B, broadcasts the action, and generates a new block on the chain through the node selected by the consensus mechanism. B receives the data packet sent by A, selects the next hop node as C through the routing strategy, broadcasts the action, and generates a new block on the chain again through the node selected by the consensus mechanism. C is a malicious node, which absorbs the data packet into the black hole, and no new actions are generated for this data packet. After a period of time, A finds that D has no response, so it queries the transaction information in the blockchain and finds that C has not forwarded this data packet. It is believed that node C has a black hole attack behavior and may be a malicious node, realizing the identification of black hole attacks (such as Figure 4 ).

[0067] 3. Node reputation reference

[0068] The function implementation layer implements the announcement of malicious behavior of malicious nodes and the record of the current reputation value of each node in the network. On this basis, the application layer provides a reliable reputation reference for node routing selection. The application layer can use the reputation record of the node to punish nodes with low reputation. When the node needs to perform reinforcement learning to find the optimal next hop, if the current reputation value of a neighbor node is less than 7 units (initial 10 units), the probability of the neighbor node being selected will be reduced during the learning process. When the number of reputation coins held by a neighbor node is less than 3 units, the node will not be considered as a possible next hop node during the reinforcement learning process.

[0069] If a malicious node launches black hole attacks multiple times and deliberately discards data packets that should be forwarded, it will be recognized by other nodes in the network and the number of data packets forwarded by the malicious node will be reduced. If the node still launches black hole attacks, other nodes in the network will not regard it as a possible next-hop node, and ultimately the node will be isolated from the entire network, ensuring the security of network traffic.

[0070] The specific steps of the method for using the satellite self-organizing network based on the blockchain to resist black hole attacks are as follows:

[0071] S1. When a satellite node joins the network, a genesis block is generated, in which each satellite node is assigned an initial reputation value of 10 and an initial equity value of 0;

[0072] S2. Compare the equity values ​​of each satellite node in the current network. The satellite node with the highest equity value is selected as the block generation node for this round (if the equity values ​​are the same, it is randomly selected from the nodes with the same equity value);

[0073] S3: When the satellite node performs the "action" of sending the data packet to the next-hop node in this round, it packages the "action" and broadcasts it to the entire network, otherwise no "action" will be generated;

[0074] S4. The block generation node collects the "action" information sent by each node, packs it into a block (Type I), broadcasts it to the entire network, and sets the equity value to 0;

[0075] S5. After receiving the block (Type I), other satellite nodes verify the correctness and integrity of the block based on the information in the block (such as digital signature, etc.). If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it.

[0076] S6. If the source node does not receive the ACK from the destination node in this round, query the blockchain of this node;

[0077] S7. If a malicious node is found, the current node sets the reputation value of the malicious node to -1 and the equity value to -1, generates a block (Type II), broadcasts it to the entire network, and jumps to S8;

[0078] If no malicious node is found, jump to S9;

[0079] S8. After receiving the block (Type II), other satellite nodes verify the correctness and integrity of the block based on the information in the block (such as digital signature, etc.). If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it.

[0080] S9: The equity value of all nodes in the current network is increased by 1. If a new satellite node joins the network, return to S1; otherwise, return to S2.

[0081] Parts of the present invention that are not described in detail belong to the well-known technology for those skilled in the art.

Claims

1. A satellite self-organizing network security framework system based on blockchain technology, characterized in that: It includes five layers, from bottom to top: data layer, network layer, consensus layer, function implementation layer and application layer; The data layer specifies the structure and content of each block; the satellite nodes of the network layer jointly form a decentralized system structure, and each satellite node joins the alliance chain system as a member of the alliance chain; The consensus layer completes the bookkeeping through a consensus mechanism based on rights and interests; each satellite node in the function implementation layer jointly maintains a blockchain ledger, and the provisions in the smart contract implement the announcement of the routing actions of the satellite nodes in the data plane, the malicious behavior of the nodes, and the reliable record of the current reputation value of each satellite node, and the records are distributed and stored among each node; The top layer is the application layer. Based on the trusted records of the underlying network, the application layer provides network status perception, black hole attack identification, and node reputation reference for satellite nodes on the data plane. Black hole attack identification is as follows: The application layer identifies black hole attacks: each data packet generated by a node has a source node, a destination node, and a sequence number. After the node generates a data packet, it tracks the destination of the data packet based on the sequence number information of the data packet with the help of the blockchain that records the node's actions; If a source node in the network generates a data packet but does not receive an ACK from the destination node, it will query the transaction information in the blockchain, identify malicious nodes, and identify black hole attacks; The node reputation reference is as follows: The function implementation layer implements the announcement of malicious behavior of malicious nodes and records the current reputation value of each node in the network. The application layer provides reputation reference for node routing selection; the application layer uses the reputation record of the node to punish the node with low reputation; When a node needs to perform reinforcement learning to find the optimal next hop, if the current reputation value of a neighbor node is less than 7 units, the probability of the neighbor node being selected will be reduced during the learning process; When the number of reputation coins held by a neighbor node is less than 3 units, the node will not be considered as a possible next hop node during the reinforcement learning process; If a malicious node launches black hole attacks multiple times and deliberately discards data packets that should be forwarded, the malicious node will be identified by other nodes in the network and the number of data packets forwarded by the malicious node will be reduced. If the node still launches black hole attacks, other nodes in the network will not consider it as a possible next hop node, and ultimately the node will be isolated from the entire network.

2. According to a satellite self-organizing network security framework system based on blockchain technology according to claim 1, it is characterized in that: The data layer stores all the data information on the blockchain and is the lowest-level data structure in the entire blockchain technology. From the genesis block that does not record any transactions to the continuously added blocks, a chain structure is formed, which encapsulates hash values, timestamps for authenticating transactions, transaction information, and public and private keys. On the blockchain network, a consensus algorithm is used between nodes to maintain the consistency of data in the data layer. Through asymmetric encryption and hash algorithms in cryptography, the data information in this distributed database is guaranteed to be tamper-proof and traceable.

3. According to a satellite self-organizing network security framework system based on blockchain technology according to claim 2, it is characterized in that: The data layer includes two types of blocks, satellite node routing action blocks and malicious node attack behavior blocks; Satellite node routing action block: When each satellite node has a routing action, the packaged transaction contains the following information: the action initiator's address; the action initiator's signature, used to verify the initiator's identity; the source address and destination address of the data packet, as well as the data packet number; the size of the data packet; the next hop address to which the data packet is sent; Malicious node attack behavior block, the block includes the following content: the address of the initiator of the block and his / her identity certificate; timestamp; hash value of the previous block; address of the malicious node; number of the data packet discarded by the malicious node, source node, destination node; current reputation value of the malicious node.

4. According to a satellite self-organizing network security framework system based on blockchain technology according to claim 3, it is characterized in that: The blockchain in the satellite self-organizing network security framework system is located in the satellite self-organizing network, and each satellite node in the network jointly maintains a consortium chain; each satellite node joins the consortium chain system as a consortium chain member, and there is no specific privileged node in the entire system. The P2P protocol is used to complete transactions between nodes and the transmission of block data. When a node creates a new block, it will be broadcast to all nodes in the network. The nodes that receive the message will verify the block and then create a new block. The nodes in the satellite network are issued a unique public key, private key and digital certificate proving their identity by the ground station that manages the constellation. The public key is notified to all nodes in the network, and the private key is kept by the node itself; the node verifies the digital signature of the information to ensure that the information does come from the signing node.

5. According to a satellite self-organizing network security framework system based on blockchain technology according to claim 4, it is characterized in that: The network status perception is as follows: The nodes in the data plane update the network status table entries they maintain in real time according to the network status information in the blockchain to obtain network status perception.

6. A method for a satellite self-organizing network to resist black hole attacks using a satellite self-organizing network security framework system based on blockchain technology as described in any one of claims 1 to 5, characterized in that: The steps include: S1. When a satellite node joins the network, a genesis block is generated, in which each satellite node is assigned an initial reputation value of 10 and an initial equity value of 0; S2. Compare the equity values ​​of each satellite node in the current network. The satellite node with the highest equity value is selected as the block generation node for this round. If the equity values ​​are the same, randomly select from the nodes with the same equity values; S3: When the satellite node performs the "action" of sending the data packet to the next-hop node in this round, it packages the "action" and broadcasts it to the entire network, otherwise no "action" will be generated; S4. The block generation node collects the "action" information sent by each node, packs it into a block, broadcasts it to the entire network, and sets the equity value to 0; S5. After receiving the satellite node routing action block, other satellite nodes verify the correctness of the block according to the information in the block. If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it. S6. If the source node does not receive the ACK from the destination node in this round, query the blockchain of this node; S7. If a malicious node is found, the current node sets the reputation value of the malicious node to -1 and the equity value to -1, generates a malicious node attack behavior block, broadcasts it to the entire network, and jumps to S8; If no malicious node is found, jump to S9; S8. After receiving the malicious node attack behavior block, other satellite nodes verify the correctness of the block based on the information in the block. If it is correct, they update their own stored blockchain. If it is wrong, they directly discard it. S9: The equity value of all nodes in the current network is increased by 1. If a new satellite node joins the network, return to S1; otherwise, return to S2.

Images