A low-orbit satellite network privacy protection method and system based on blockchain

Abstract

The embodiments of this specification provide a low-orbit satellite network privacy protection method and system based on blockchain, wherein the method includes: deploying a blockchain network, selecting a miner node, generating a key pair through a network control center, and registering the service platform public key in the blockchain; calculating the user's partial private key based on the user's identity information, encrypting it to generate a user key pair and distributing it to the user, and registering the user's public key in the blockchain; submitting the user's information to be disseminated to the satellite node, which uploads it to the blockchain for storage through the user information management contract and the dissemination control contract; when the user searches for information, the search information is obtained from the blockchain; when the user requests to terminate the dissemination of the uploaded information, the dissemination control contract corresponding to the information to be disseminated is modified, and all the information to be terminated is deleted. This application enables users to terminate the dissemination of potentially sensitive information when they need to withdraw the information.

Description

Technical Field

[0001] This document relates to the field of blockchain and information security technology, and in particular to a blockchain-based low-orbit satellite network privacy protection method and system. Background Art

[0002] As global low-orbit satellite communication systems mature, the impact of privacy breaches is becoming increasingly apparent, and the need to protect sensitive information is increasing. Data transmission via satellites is subject to cross-satellite and cross-platform restrictions. Information owners cannot control the data transmitted to other satellites and information platforms. This makes it impossible for information owners to terminate the dissemination of potentially sensitive information when they need to withdraw it. This requires careful consideration before disseminating potentially sensitive information, which poses potential risks to such information. Therefore, the security of users of inter-satellite collaborative services is paramount, and effective control over the dissemination of user information during collaboration is necessary to protect users' potentially sensitive information.

[0003] Existing technologies for privacy protection in propagation control are limited to terrestrial networks. However, low-orbit satellite networks differ significantly from terrestrial networks. These technologies fail to consider the unique characteristics of low-orbit satellite networks and are therefore not applicable to these networks. Furthermore, these technologies primarily target specific sensitive information and lack sufficient versatility for scenarios where low-orbit satellite networks and terrestrial networks are combined, which often involve a wide range of sensitive information. It is necessary to design a propagation control privacy protection framework that is applicable to scenarios where low-orbit satellite networks and terrestrial networks are combined, taking into account the inherent characteristics of low-orbit satellite networks, such as low latency, high bandwidth, high transmission rate, low link loss, high global coverage, and efficient frequency reuse, and to improve its versatility for sensitive information. Summary of the Invention

[0004] One or more embodiments of this specification provide a blockchain-based low-orbit satellite network privacy protection method, including:

[0005] S1. Deploy a blockchain network between the service platform and the low-orbit satellite constellation, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellites through the network control center, and register the service platform's public key in the key pair with the blockchain; the service platform includes a platform control center;

[0006] S2. The network control center calculates the user's partial private key based on the user identity information submitted by the platform control center, encrypts it, and transmits it to the platform control center to generate a user key pair. The user key pair is distributed to the user and the user's public key is registered in the blockchain;

[0007] S3. The service platform submits the received user information to be disseminated to the satellite node, which uploads it to the blockchain for storage through the user information management contract and the dissemination control contract. The user information to be disseminated includes: the content of the information to be disseminated, privacy preferences, and the user's signature;

[0008] S4. In response to the user's request for information, the service platform obtains search information from the propagation information stored in the blockchain and sends the search information to the user;

[0009] S5. In response to a user's request to terminate the dissemination of uploaded information, obtain the user's information to be disseminated and signature, perform identity authentication, search the blockchain for the information to be disseminated corresponding to the information to be disseminated, modify the dissemination control contract corresponding to the information to be disseminated, and delete the information to be disseminated corresponding to the information to be disseminated in all satellite nodes and service platforms.

[0010] One or more embodiments of this specification provide a blockchain-based low-orbit satellite network privacy protection system, including:

[0011] Blockchain deployment module: used to deploy a blockchain network between the service platform and the low-orbit satellite cluster, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellites through the network control center, and register the service platform public key in the key pair into the blockchain; the service platform includes a platform control center;

[0012] User registration module: used to calculate the user's partial private key based on the user identity information submitted by the platform control center through the network control center, encrypt it and transmit it to the platform control center to generate a user key pair, distribute the user key pair to the user, and register the user's public key in the blockchain;

[0013] Information upload module: used to submit user information to be disseminated received through the service platform to the satellite node, and the satellite node uploads the information to the blockchain for storage through the user information management contract and the dissemination control contract; the user information to be disseminated includes: the content of the information to be disseminated, privacy preferences, and user signature;

[0014] Information dissemination module: used to respond to a user's information acquisition request, obtain search information from the dissemination information stored in the blockchain through the service platform, and send the search information to the user;

[0015] Information dissemination termination module: used to respond to the user's request to terminate the dissemination of uploaded information, obtain the user's information to be terminated and signature, search the blockchain for the information to be disseminated corresponding to the information to be terminated after identity authentication, modify the dissemination control contract corresponding to the information to be disseminated, and delete the information to be disseminated corresponding to the information to be terminated in all satellite nodes and service platforms.

[0016] The beneficial effects of the present invention are as follows:

[0017] Deploying blockchain between the satellite network and the service platform is in line with the trustless nature of blockchain. The satellite network can also provide high-speed transmission for the blockchain, complementing each other. User-transmitted information is only stored on the service platform or satellite node, and the hash value of the information is stored on the blockchain, which reduces the storage overhead of the blockchain and increases the diversity of storable information. Assisting user registration through the platform control center allows the network control center to review user identities and makes users anonymous to the blockchain, thereby improving user anonymity. Using blockchain to provide cross-platform transmission control and using smart contracts to provide automatic transaction execution solutions can effectively control the dissemination process of user information.

[0018] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are specifically listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate one or more embodiments of this specification or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0020] Figure 1 A flowchart of a blockchain-based low-orbit satellite network privacy protection method provided for one or more embodiments of this specification;

[0021] Figure 2 A schematic diagram of the user registration process in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0022] Figure 3 A schematic diagram of the information uploading process in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0023] Figure 4A schematic diagram of a user information management contract in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0024] Figure 5 A schematic diagram of a propagation control contract in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0025] Figure 6 A schematic diagram of the information dissemination process in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0026] Figure 7 A schematic diagram of the information termination propagation process in a blockchain-based low-orbit satellite network privacy protection method provided in one or more embodiments of this specification;

[0027] Figure 8 A schematic diagram of the composition of a blockchain-based low-orbit satellite network privacy protection system provided for one or more embodiments of this specification. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below in conjunction with the drawings in one or more embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this document.

[0029] Method Example

[0030] According to an embodiment of the present invention, a low-orbit satellite network privacy protection method based on blockchain is provided. Figure 1 A flowchart of a low-orbit satellite network privacy protection method based on blockchain provided in one or more embodiments of this specification, such as Figure 1 As shown, the low-orbit satellite network privacy protection method based on blockchain according to an embodiment of the present invention specifically includes:

[0031] S1. Deploy a blockchain network between the service platform and a low-orbit satellite constellation, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellites through the network control center, and register the service platform public key in the key pair with the blockchain; the service platform includes a platform control center.

[0032] S2. The network control center calculates the user's partial private key based on the user identity information submitted by the platform control center, encrypts it and transmits it to the platform control center to generate a user key pair, distributes the user key pair to the user, and registers the user's public key in the blockchain. Specifically, Figure 2 As shown,

[0033] receiving user identity information submitted by the user through the platform control center, and submitting the user identity information to the network control center;

[0034] The network control center reviews and records the user's identity, calculates a partial private key of the user, encrypts the partial private key of the user with the public key of the service platform, signs it with the private key of the network control center, and transmits it to the platform control center;

[0035] The platform control center verifies the signature of the user's partial private key, generates a random value, calculates and distributes the complete user key pair to the user, and registers the user's public key in the blockchain.

[0036] S3. The service platform submits the received user information to the satellite node, which uploads it to the blockchain for storage through the user information management contract and the transmission control contract. The user information includes: the content of the information to be transmitted, privacy preferences, and user signature. Figure 3 As shown,

[0037] Receive, through the service platform, information to be disseminated from the user, including: content of the information to be disseminated, privacy preferences, and a signature; wherein the privacy preferences are the visibility of the information to be disseminated, including: visible to all users, visible to some users, and invisible;

[0038] The user's signature is verified by the service platform, and the first information m1 is submitted to the satellite node after identity confirmation; wherein the first information m1 includes the user's signature Sign User , the hash value MsgHash of the user's information to be disseminated, the storage address MsgAddress, the privacy preference Preference, the user UserId, the service platform SPId, the operation type OperationType, the timestamp Timestamp, and the service platform's signature Sign SP ,Right now:

[0039] m 1＝ Sign User ,MsgHash,MsgAddress,Preference,UserId,SPId,OperationType,Timestamp,Sign SP#(1);

[0040] After the signature of the service platform is verified by the satellite node, the user information management contract is called, such as Figure 4 As shown, and the propagation control contract, such as Figure 5 As shown, the first information is submitted to the blockchain network; the user information management contract includes: the hash value of the user's information content to be disseminated, the dissemination tree root, the user ID, the service platform ID, the satellite node ID and the timestamp; the dissemination control contract includes: the dissemination tree root, the information item ID, the storage address, the privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status and the timestamp; wherein, the operation type includes upload and download, and the status includes available and unavailable;

[0041] The first information is packaged and uploaded to the blockchain through the miner node on the blockchain network.

[0042] S4. In response to the user's request for information, the service platform obtains search information from the propagation information stored in the blockchain and sends the search information to the user. Specifically, Figure 6 As shown,

[0043] Submit the second information m2 to the satellite node through the service platform; the second information m2 includes the user's signature Sign User , the hash value MsgHash of the user's uploaded information, the new storage address MsgAddress of the information, the new privacy preference Preference, the user UserId, the service platform SPId, the operation type OperationType, the timestamp Timestamp, and the service platform's signature Sign SP ,Right now:

[0044] m2=Sign User ,MsgHash,MsgAddress,Preference,UserId,SPId,OperationType,Timestamp,Sign SP #(2);

[0045] The service platform's signature is verified through the satellite node. The status of the corresponding propagation information in the blockchain is searched based on the hash value of the user's information to be obtained. If the information is available, the propagation control contract is called to submit the information to be propagated to the blockchain network. The call to the propagation control contract includes: the propagation tree root, the information item ID, the new storage address, the new privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status, and the timestamp.

[0046] Uploading the second information to the blockchain through a miner node on the blockchain network;

[0047] The information to be acquired is downloaded from the original storage address through the satellite node and transmitted to the service platform, and then sent to the user's new storage address for storage through the service platform.

[0048] S5. In response to the user's request to terminate the dissemination of uploaded information, obtain the user's dissemination information to be terminated and signature, perform identity verification, search the blockchain for the dissemination information corresponding to the dissemination information to be terminated, modify the dissemination control contract corresponding to the dissemination information to be terminated, and delete the dissemination information corresponding to the dissemination information to be terminated in all satellite nodes and service platforms. Specifically, Figure 7 As shown,

[0049] receiving, through the service platform, a user's request to terminate dissemination of uploaded information, and receiving the user's information to be terminated and the user's signature;

[0050] After verifying the user's signature through the service platform, the hash value of the information to be terminated is calculated and the third information m3 is submitted to the satellite node; the third information m3 includes the user's signature Sign User , the hash value MsgHash of the information to be disseminated, the timestamp Timestamp and the signature Sign of the service platform SP ,Right now

[0051] m3=Sign User ,MsgHash,Timestamp,Sign SP #(3);

[0052] After verifying the signature of the service platform through the satellite node, the corresponding propagation tree root of the information to be disseminated is searched in the blockchain according to the hash value of the information to be disseminated, and the propagation control contract is called to submit the transaction to the blockchain network, changing the status of the propagation control contract to unavailable; the parameters of the user information management contract to be called include: propagation tree root, status, and timestamp;

[0053] The third information is uploaded to the blockchain through the propagation control contract by the miner node on the blockchain network, so that all satellite nodes and service platforms delete the information to be propagated corresponding to the information to be terminated, and the propagation is terminated.

[0054] The beneficial effects of the present invention are as follows:

[0055] Deploying blockchain between the satellite network and the service platform is in line with the trustless nature of blockchain. The satellite network can also provide high-speed transmission for the blockchain, complementing each other. User-transmitted information is only stored on the service platform or satellite node, and the hash value of the information is stored on the blockchain, which reduces the storage overhead of the blockchain and increases the diversity of storable information. Assisting user registration through the platform control center allows the network control center to review user identities and makes users anonymous to the blockchain, thereby improving user anonymity. Using blockchain to provide cross-platform transmission control and using smart contracts to provide automatic transaction execution solutions can effectively control the dissemination process of user information.

[0056] System Example

[0057] According to an embodiment of the present invention, a low-orbit satellite network privacy protection system based on blockchain is provided. Figure 8 A schematic diagram of the composition of a blockchain-based low-orbit satellite network privacy protection system provided in one or more embodiments of this specification is as follows: Figure 8 As shown, the low-orbit satellite network privacy protection system based on blockchain according to an embodiment of the present invention specifically includes:

[0058] Blockchain deployment module 80: used to deploy a blockchain network between the service platform and the low-orbit satellite cluster, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellite through the network control center, and register the service platform public key in the key pair into the blockchain; the service platform includes a platform control center.

[0059] User registration module 82: used to calculate the user's partial private key based on the user identity information submitted by the platform control center through the network control center, encrypt it and transmit it to the platform control center to generate a user key pair, distribute the user key pair to the user, and register the user public key in the blockchain.

[0060] The user registration module 82 is specifically used for:

[0061] receiving user identity information through the platform control center and submitting the user identity information to the network control center;

[0062] The network control center reviews and records the user's identity, calculates a partial private key of the user, encrypts the partial private key of the user with the public key of the service platform, signs it with the private key of the network control center, and transmits it to the platform control center;

[0063] The platform control center verifies the signature of the user's partial private key, generates a random value, calculates and distributes the complete user key pair to the user, and registers the user's public key in the blockchain.

[0064] Information upload module 84: used to submit the received user information to be disseminated to the satellite node through the service platform. The satellite node uploads the information to the blockchain for storage through the user information management contract and the dissemination control contract. The user information to be disseminated includes: the content of the information to be disseminated, privacy preferences, and user signature.

[0065] The information upload module 84 is specifically used for:

[0066] Receive, through the service platform, information to be disseminated from the user, including: content of the information to be disseminated, privacy preferences, and a signature; wherein the privacy preferences are the visibility of the information to be disseminated, including: visible to all users, visible to some users, and invisible;

[0067] Verify the user's signature through the service platform, and submit first information to the satellite node after identity confirmation; wherein the first information includes the user's signature, the hash value of the user's information content to be disseminated, the storage address, the privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature;

[0068] After verifying the signature of the service platform through the satellite node, the user information management contract and the transmission control contract are called to submit the first information to the blockchain network; the user information management contract includes: the hash value of the user's information content to be transmitted, the transmission tree root, the user ID, the service platform ID, the satellite node ID and the timestamp; the transmission control contract includes: the transmission tree root, the information item ID, the storage address, the privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status and the timestamp; wherein the operation type includes upload and download, and the status includes available and unavailable;

[0069] The first information is uploaded to the blockchain through a miner node on the blockchain network.

[0070] The information dissemination module 86 is used to respond to a user's request for information acquisition, obtain search information from the dissemination information stored in the blockchain through the service platform, and send the search information to the user.

[0071] The information dissemination module 86 is specifically used for:

[0072] Submitting second information to the satellite node through the service platform; the second information includes the user's signature, the hash value of the user's information to be obtained, the new storage address, the new privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature;

[0073] The service platform's signature is verified through the satellite node. The status of the corresponding information to be disseminated in the blockchain is searched based on the hash value of the user's information to be obtained. If the information is available, the dissemination control contract is called to submit the information to be disseminated to the blockchain network. The call to the dissemination control contract includes: the dissemination tree root, the information item ID, the new storage address, the new privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status, and the timestamp.

[0074] Uploading the second information to the blockchain through a miner node on the blockchain network;

[0075] The information to be acquired is downloaded from the original storage address through the satellite node and transmitted to the service platform, and then sent to the user's new storage address for storage through the service platform.

[0076] Information dissemination termination module 88: is used to respond to the user's request to terminate the dissemination of uploaded information, obtain the user's information to be terminated and signature, search for the information to be disseminated corresponding to the information to be terminated in the blockchain after identity authentication, modify the dissemination control contract corresponding to the information to be disseminated, and delete the information to be disseminated corresponding to the information to be terminated in all satellite nodes and service platforms.

[0077] The information termination propagation module 88 is specifically used to:

[0078] receiving, through the service platform, a user's request to terminate dissemination of uploaded information, and receiving the user's information to be terminated and the user's signature;

[0079] After verifying the user's signature through the service platform, calculating the hash value of the information to be disseminated, and submitting third information to the satellite node; the third information includes the user's signature, the hash value of the information to be disseminated, the timestamp, and the signature of the service platform;

[0080] After verifying the signature of the service platform through the satellite node, the corresponding propagation tree root of the information to be disseminated is searched in the blockchain according to the hash value of the information to be disseminated, and the propagation control contract is called to submit the transaction to the blockchain network, thereby changing the status of the propagation control contract to unavailable;

[0081] The third information is uploaded to the blockchain through the propagation control contract by the miner node on the blockchain network, so that all satellite nodes and service platforms delete the information to be propagated corresponding to the information to be terminated, and the propagation is terminated.

[0082] The embodiment of the present invention is a system embodiment corresponding to the above-mentioned method embodiment. The specific operations of each module can be understood by referring to the description of the method embodiment, which will not be repeated here.

[0083] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A low-orbit satellite network privacy protection method based on blockchain, characterized in that: include: S1. Deploy a blockchain network between the service platform and the low-orbit satellite constellation, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellites through the network control center, and register the service platform's public key in the key pair with the blockchain; the service platform includes a platform control center; S2. The network control center calculates the user's partial private key based on the user identity information submitted by the platform control center, encrypts it, and transmits it to the platform control center to generate a user key pair. The user key pair is distributed to the user and the user's public key is registered in the blockchain; S3. The service platform submits the received user information to be disseminated to the satellite node, and the satellite node uploads it to the blockchain for storage through the user information management contract and the dissemination control contract; The user information to be disseminated includes: the content of the information to be disseminated, privacy preferences and user signature; S4. In response to the user's request for information, the service platform obtains search information from the propagation information stored in the blockchain and sends the search information to the user; S5. In response to a user's request to terminate dissemination of uploaded information, obtain the user's dissemination information to be terminated and signature, perform identity verification, search the blockchain for the dissemination information corresponding to the dissemination information to be terminated, modify the dissemination control contract corresponding to the dissemination information to be terminated, and delete the dissemination information corresponding to the dissemination information to be terminated from all satellite nodes and service platforms; Wherein, step S3 specifically includes: Receive, through the service platform, information to be disseminated from the user, including: content of the information to be disseminated, privacy preferences, and a signature; wherein the privacy preferences are the visibility of the information to be disseminated, including: visible to all users, visible to some users, and invisible; Verify the user's signature through the service platform, and submit first information to the satellite node after identity confirmation; wherein the first information includes the user's signature, the hash value of the user's information content to be disseminated, the storage address, the privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature; After verifying the signature of the service platform through the satellite node, the user information management contract and the transmission control contract are called to submit the first information to the blockchain network; the user information management contract includes: the hash value of the user's information content to be transmitted, the transmission tree root, the user ID, the service platform ID, the satellite node ID and the timestamp; the transmission control contract includes: the transmission tree root, the information item ID, the storage address, the privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status and the timestamp; wherein, the operation type includes upload and download, and the status includes available and unavailable; The first information is uploaded to the blockchain through a miner node on the blockchain network.

2. The method according to claim 1, characterized in that Step S2 specifically includes: receiving user identity information through the platform control center and submitting the user identity information to the network control center; The network control center reviews and records the user's identity, calculates a partial private key of the user, encrypts the partial private key of the user with the public key of the service platform, signs it with the private key of the network control center, and transmits it to the platform control center; The platform control center verifies the signature of the user's partial private key, generates a random value, calculates and distributes the complete user key pair to the user, and registers the user's public key in the blockchain.

3. The method according to claim 1, characterized in that Step S4 specifically includes: Submitting second information to the satellite node through the service platform; the second information includes the user's signature, the hash value of the user's information to be obtained, the new storage address, the new privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature; The service platform's signature is verified through the satellite node. The status of the corresponding propagation information in the blockchain is searched based on the hash value of the user's information to be obtained. If the information is available, the propagation control contract is called to submit the information to be propagated to the blockchain network. The call to the propagation control contract includes: the propagation tree root, the information item ID, the new storage address, the new privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status, and the timestamp. Uploading the second information to the blockchain through a miner node on the blockchain network; The information to be acquired is downloaded from the original storage address through the satellite node and transmitted to the service platform, and then sent to the user's new storage address for storage through the service platform.

4. The method according to claim 1, wherein Step S5 specifically includes: receiving, through the service platform, a user's request to terminate dissemination of uploaded information, and receiving the user's information to be terminated and the user's signature; After verifying the user's signature through the service platform, calculating the hash value of the information to be disseminated, and submitting third information to the satellite node; the third information includes the user's signature, the hash value of the information to be disseminated, the timestamp, and the signature of the service platform; After verifying the signature of the service platform through the satellite node, the corresponding propagation tree root of the information to be disseminated is searched in the blockchain according to the hash value of the information to be disseminated, and the propagation control contract is called to submit the transaction to the blockchain network, thereby changing the status of the propagation control contract to unavailable; The third information is uploaded to the blockchain through the propagation control contract by the miner node on the blockchain network, so that all satellite nodes and service platforms delete the information to be propagated corresponding to the information to be terminated, and the propagation is terminated.

5. A low-orbit satellite network privacy protection system based on blockchain, characterized in that: include: Blockchain deployment module: used to deploy a blockchain network between the service platform and the low-orbit satellite cluster, select some satellite nodes as miner nodes, generate a key pair between the service platform and the low-orbit satellites through the network control center, and register the service platform public key in the key pair into the blockchain; the service platform includes a platform control center; User registration module: used to calculate the user's partial private key based on the user identity information submitted by the platform control center through the network control center, encrypt it and transmit it to the platform control center to generate a user key pair, distribute the user key pair to the user, and register the user's public key in the blockchain; Information upload module: used to submit the received user information to be disseminated to the satellite node through the service platform. The satellite node uploads the information to the blockchain for storage through the user information management contract and the dissemination control contract; The user information to be disseminated includes: the content of the information to be disseminated, privacy preferences and user signature; Information dissemination module: used to respond to a user's information acquisition request, obtain search information from the dissemination information stored in the blockchain through the service platform, and send the search information to the user; The information dissemination termination module is used to respond to a user's request to terminate the dissemination of uploaded information, obtain the user's information to be disseminated and signature, search the blockchain for the information to be disseminated corresponding to the information to be disseminated after identity verification, modify the dissemination control contract corresponding to the information to be disseminated, and delete the information to be disseminated corresponding to the information to be disseminated in all satellite nodes and service platforms; The information upload module is specifically used to: Receive, through the service platform, information to be disseminated from the user, including: content of the information to be disseminated, privacy preferences, and a signature; wherein the privacy preferences are the visibility of the information to be disseminated, including: visible to all users, visible to some users, and invisible; Verify the user's signature through the service platform, and submit first information to the satellite node after identity confirmation; wherein the first information includes the user's signature, the hash value of the user's information content to be disseminated, the storage address, the privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature; After verifying the signature of the service platform through the satellite node, the user information management contract and the transmission control contract are called to submit the first information to the blockchain network; the user information management contract includes: the hash value of the user's information content to be transmitted, the transmission tree root, the user ID, the service platform ID, the satellite node ID and the timestamp; the transmission control contract includes: the transmission tree root, the information item ID, the storage address, the privacy preference, the user ID, the service platform ID, the satellite node ID, the operation type, the status and the timestamp; wherein, the operation type includes upload and download, and the status includes available and unavailable; The first information is uploaded to the blockchain through a miner node on the blockchain network.

6. The system according to claim 5, characterized in that The user registration module is specifically used for: receiving user identity information through the platform control center and submitting the user identity information to the network control center; The network control center reviews and records the user's identity, calculates a partial private key of the user, encrypts the partial private key of the user with the public key of the service platform, signs it with the private key of the network control center, and transmits it to the platform control center; The platform control center verifies the signature of the user's partial private key, generates a random value, calculates and distributes the complete user key pair to the user, and registers the user's public key in the blockchain.

7. The system according to claim 5, characterized in that The information dissemination module is specifically used for: Submitting second information to the satellite node through the service platform; the second information includes the user's signature, the hash value of the user's information to be obtained, the new storage address, the new privacy preference, the user ID, the service platform ID, the operation type, the timestamp, and the service platform's signature; Verify the signature of the service platform through the satellite node, and search the blockchain for the status of the corresponding information to be disseminated based on the hash value of the user's information to be obtained. If it is available, call the dissemination control contract to submit the information to be disseminated to the blockchain network; The call propagation control contract includes: propagation tree root, information item ID, new storage address, new privacy preference, user ID, service platform ID, satellite node ID, operation type, status and timestamp; Uploading the second information to the blockchain through a miner node on the blockchain network; The information to be acquired is downloaded from the original storage address through the satellite node and transmitted to the service platform, and then sent to the user's new storage address for storage through the service platform.

8. The system according to claim 5, wherein: The information termination propagation module is specifically used for: receiving, through the service platform, a user's request to terminate dissemination of uploaded information, and receiving the user's information to be terminated and the user's signature; After verifying the user's signature through the service platform, calculating the hash value of the information to be disseminated, and submitting third information to the satellite node; the third information includes the user's signature, the hash value of the information to be disseminated, the timestamp, and the signature of the service platform; After verifying the signature of the service platform through the satellite node, the corresponding propagation tree root of the information to be disseminated is searched in the blockchain according to the hash value of the information to be disseminated, and the propagation control contract is called to submit the transaction to the blockchain network, thereby changing the status of the propagation control contract to unavailable; The third information is uploaded to the blockchain through the propagation control contract by the miner node on the blockchain network, so that all satellite nodes and service platforms delete the information to be propagated corresponding to the information to be terminated, and the propagation is terminated.

Images