Service layer analysis mapping system for multi-dimensional identification heterogeneous network

Abstract

The invention discloses a service layer analysis mapping system for a multi-dimensional identification heterogeneous network. The service layer analysis mapping system comprises an autonomous domain layer, an access layer and an access network layer which are connected in sequence, the autonomous domain layer comprises a multi-controller cluster in a main-sub mode, a Byzantine fault-tolerant mechanism module based on a fuzzy set theory and a digital currency distribution method, a mapping module of network object identifiers, a registration module, a query module, an updating module, a recovery module and an exception handling module; the access layer is used for connecting the autonomous domain layer and the access network layer and providing channels for uplink and downlink of data streams; and the access network layer is also connected with a terminal user and is used for processing access requirements of user data. Through the above design, effective identification and isolation of the malicious controller are realized, and the accuracy and efficiency of block chain consensus are ensured. The dynamic distribution mechanism of the digital currency values not only ensures the fairness of the consensus process, but also improves the overall safety and operation efficiency of the system.

Description

Technical Field

[0001] The present invention belongs to the technical field of novel network architecture, and in particular relates to a service layer parsing and mapping system for multi-dimensional identification heterogeneous networks. Background Art

[0002] In order to meet the urgent needs of diversified emerging services for the future Internet in terms of high security, lightweight, intelligence, high efficiency, mobility, etc., a multi-dimensional identification heterogeneous network is proposed based on an in-depth study of the existing network identification system and its derivative technologies. The multi-dimensional identification heterogeneous network uses a multi-dimensional unified identification UID (Unified Identifiers) as the unique identifier of the subject identity information in the network. The multi-dimensional unified identification has multi-dimensional attributes such as identity, location, time, and physics, and is used to describe various types of network entities such as terminals, interfaces, services, content, and specific groups in the network. The multi-dimensional identification network adopts the idea of ​​separating identity and location, separates the IP space into a multi-dimensional unified identification UID and a network connection identification NID (Network Interconnection Identifiers), and uses UID to mark the unique identity of the object and NID to mark the location of the object in the network. Multi-dimensional identification network objects are divided into two categories: device objects and service objects, which contain different multi-dimensional attributes MAD (Multidimensional Attribute Description). The multi-dimensional identification heterogeneous network consists of three layers: service layer, network layer, and interface layer. The network layer supports a forwarding routing mechanism based on modular attributes and supports flexible addressing. The network layer uses a unified identifier to characterize the multidimensional elements in the network. The interface layer completes the dual requirements of the service provider and the service requester, and completes the transfer from application attributes to service types. The interface layer is abstracted and aggregated by the north-south interface. The service layer uses a unified service model to be compatible with all services and different applications. The service layer consists of a multidimensional identifier attribute parsing module and a multidimensional identifier distribution query module. In a multidimensional identifier heterogeneous network, users can locate the target object to initiate communication or obtain services through multidimensional attributes.

[0003] As multi-dimensional identification heterogeneous networks are still in their infancy, relevant implementation mechanisms are in urgent need of further improvement.

[0004] (1) Lack of intelligent security strategies:

[0005] Traditional security policies are usually based on static rules, which make it difficult to cope with the dynamically changing threat environment in multi-dimensional heterogeneous networks, resulting in lagging security policies. When faced with complex network attacks, existing security policies may not be able to detect and respond in a timely manner, resulting in the attack being successful.

[0006] (2) Factors restricting operation efficiency:

[0007] Due to the differences between the various parts of the heterogeneous network, the data transmission delay and packet loss rate may be high, affecting the overall operation efficiency. Resource management in heterogeneous networks is relatively decentralized, making it difficult to achieve unified resource scheduling and optimization, resulting in low resource utilization and affecting operation efficiency. Summary of the invention

[0008] In view of the above-mentioned deficiencies in the prior art, the service layer parsing and mapping system for multi-dimensional identification heterogeneous networks provided by the present invention solves the problem that the existing multi-dimensional identification heterogeneous networks still have much room for improvement in overall security and operation efficiency.

[0009] In order to achieve the above-mentioned invention object, the technical solution adopted by the present invention is: a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network, comprising an autonomous domain layer, an access layer and an access network layer connected in sequence;

[0010] The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module, wherein each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mapping, and the Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate the digital currency value, and identify and isolate malicious controllers according to the digital currency value and the fuzzy score;

[0011] The access layer is used to connect the autonomous domain layer and the access network layer, and provide a channel for uplink and downlink data flows;

[0012] The access network layer is also connected to the terminal users to process the access requirements of the user data.

[0013] Further: the registration process of the registration module is specifically as follows:

[0014] S11, sending the service layer mapping registration request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, and storing the registration request mapping result to the destination access layer mapping server through the mapping management server according to the internal attribute storage allocation mechanism, so as to establish a binding relationship between the network object and its home domain;

[0015] S12: Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

[0016] Further: the query process of the query module is specifically as follows:

[0017] S21, sending the service layer mapping query request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, parsing the query request through the mapping management server, and judging whether there is an attribute description about the autonomous domain or the home domain in the query request, if so, sending the query request to the autonomous domain server or the home domain server for query, if not, entering S22;

[0018] S22, the mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration, and determines whether the destination access layer mapping server can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23;

[0019] S23, the query request is parsed by the autonomous domain server to determine whether there is a description of the autonomous domain or the home domain attribute in the query request. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. When the match is successful, the query request is forwarded to the access network layer where the object is located according to the binding result, and then enter S24;

[0020] S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25;

[0021] S25. Return the UID value to the access routing switch where the requester is located.

[0022] Further: the method for identifying and isolating malicious controllers by the Byzantine fault tolerance mechanism module based on fuzzy set theory and digital currency allocation method comprises the following sub-steps:

[0023] S31. Optimizing the digital currency allocation process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring value to the [0,1] interval through the fuzzy set, and evaluating the participation of each controller in block generation;

[0024] S32, calculating the digital currency value according to the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assigning read and write permissions according to the digital currency value;

[0025] S33. Obtain a sub-controller whose digital currency value is greater than a preset digital currency threshold. If the fuzzy score of the sub-controller is less than a preset integrity threshold, identify the sub-controller as a malicious controller and isolate the malicious controller.

[0026] The beneficial effect of the above further scheme is that sub-controllers with high digital currency values ​​are given more permissions, thereby ensuring the priority of honest nodes in the system. In this way, the service layer mapping system can effectively identify and isolate malicious controllers, improve the accuracy and efficiency of blockchain consensus, and ensure the security and high efficiency of the system. The mapping system allows sub-controllers with high digital currency values ​​to perform read and write operations. During network initialization, each controller is regarded as an honest node. After several rounds of operations, the credibility of the controller is adjusted according to its digital currency value, thereby effectively identifying and isolating malicious controllers. By setting thresholds to identify and isolate malicious controllers, the security of the entire system is ensured.

[0027] Further: In S31, the fuzzy score mC of any controller hscore The specific expression is:

[0028] mxD hscore =[Θ,1-Λ]

[0029] In the formula, Θ represents the honest score and Λ represents the malicious score.

[0030] Further: In said S32, the digital currency value V is calculated DC The specific expression is:

[0031] V DC =(α×(HTD 22 +HTD 22 ))(β×(HTD 11 +HTD 13 ))(γ×DB)

[0032] In the formula, α, β, and γ are weight factors, and α+β+γ=1, HTD 22 、HTD 11 、HTD 13 is the historical transaction data of the controller, and DB is the historical data of the blockchain.

[0033] The beneficial effects of the above further scheme are: the practical Byzantine fault tolerance mechanism combines fuzzy set theory and digital currency distribution system to ensure the fairness of consensus by providing equal opportunities for all participating honest miners.

[0034] The beneficial effects of the present invention are:

[0035] (1) The present invention provides a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network. According to the design of the architecture and mechanism of the autonomous domain layer, access layer and access network layer, it realizes the effective identification and isolation of malicious controllers, and ensures the accuracy and efficiency of the blockchain consensus. The dynamic allocation mechanism of digital currency value not only ensures the fairness of the consensus process, but also improves the overall security and operation efficiency of the system. This design is not only applicable to traditional network architectures, but also an innovative solution for the security and high efficiency of multi-dimensional identification fusion network systems and system service layer parsing and mapping systems. This architectural design provides reliable guarantees for identification resolution and data management in new network environments through multi-level and multi-mechanism collaborative operations, and has strong foresight and practicality.

[0036] (2) The present invention deploys a master-slave mode multi-controller on the control plane, so that the multi-dimensional identification mapping system can obtain real-time and consistent network layer mapping information, thereby expanding the application scope of multi-dimensional identification heterogeneous networks in mobile scenarios.

[0037] (3) The mapping management server of the present invention is distributedly deployed based on the access layer, so that the mapping system can withstand single point failure of the controller caused by DDoS attacks, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 It is a schematic diagram of the service layer parsing and mapping system for multi-dimensional identification heterogeneous networks of the present invention. DETAILED DESCRIPTION

[0039] The specific implementation modes of the present invention are described below so that those skilled in the art can understand the present invention. However, it should be clear that the present invention is not limited to the scope of the specific implementation modes. For those of ordinary skill in the art, as long as various changes are within the spirit and scope of the present invention as defined and determined by the attached claims, these changes are obvious, and all inventions and creations utilizing the concept of the present invention are protected.

[0040] like Figure 1 As shown, in one embodiment of the present invention, a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network includes an autonomous domain layer, an access layer, and an access network layer connected in sequence;

[0041] The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module, wherein each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mapping, and the Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate the digital currency value, and identify and isolate malicious controllers according to the digital currency value and the fuzzy score;

[0042] The access layer is used to connect the autonomous domain layer and the access network layer, and provide a channel for uplink and downlink data flows;

[0043] The access network layer is also connected to the terminal users to process the access requirements of the user data.

[0044] In this embodiment, the architecture design of the service layer parsing and mapping system is centered around improving the security, robustness, and efficiency of the system. The overall architecture is divided into three layers, namely, the autonomous domain layer, the access layer, and the access network layer. These three layers of architecture each assume different functions in a distributed network environment, thereby ensuring that the system has high scalability and flexibility at different network levels.

[0045] The autonomous domain layer introduces a multi-controller cluster in master-sub mode. This structure allows multiple controllers to run simultaneously to share the system pressure and improve fault tolerance. In order to cope with the diverse needs of controller functions, the system adds some additional functional modules, such as mapping, registration, query, update, recycling and exception handling modules of network object identifiers. The addition of these functions makes the impact of controllers more significant when single point failure occurs. Therefore, the introduction of multi-controller clusters and Byzantine fault tolerance mechanisms in the autonomous domain layer is crucial to ensure the efficient operation of the system at the access layer. Each sub-controller is responsible for managing and maintaining local identifier mappings, and calculates and generates digital currency values ​​by collecting and analyzing local monitoring data and historical data of the blockchain. These digital currency values ​​are not only rewards for controller behavior, but also used as the basis for the allocation of read and write permissions, ensuring that honest participants can fairly participate in the block generation process in the consensus mechanism of the blockchain network.

[0046] In order to further improve the security of the system and the reliability of the consensus mechanism, a new practical Byzantine fault-tolerant mechanism is designed, which integrates the digital currency distribution system in blockchain technology. Through the distribution and verification of digital currency, the system can fairly select honest miners and ensure that they have equal opportunities to participate in the block generation process. The generation of digital currency value depends on the local identity mapping data and blockchain history data collected by the sub-controller. This process not only optimizes miner selection, but also helps the system identify and isolate possible malicious controllers.

[0047] The access network layer is directly connected to the end user and is responsible for processing the access needs of user data. At this level, the system pays more attention to the reliability of network access and the accurate transmission of data. The data processing at the access network layer directly affects the user experience, so it is necessary to maintain good coordination with the upper-layer architecture to ensure that user requests can be responded to quickly and accurately through efficient data transmission and accurate identification mapping.

[0048] The registration process of the registration module is specifically as follows:

[0049] S11, sending the service layer mapping registration request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, and storing the registration request mapping result to the destination access layer mapping server through the mapping management server according to the internal attribute storage allocation mechanism, so as to establish a binding relationship between the network object and its home domain;

[0050] S12: Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

[0051] The query process of the query module is specifically as follows:

[0052] S21, sending the service layer mapping query request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, parsing the query request through the mapping management server, and judging whether there is an attribute description about the autonomous domain or the home domain in the query request, if so, sending the query request to the autonomous domain server or the home domain server for query, if not, entering S22;

[0053] S22, the mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration, and determines whether the destination access layer mapping server can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23;

[0054] S23, the query request is parsed by the autonomous domain server to determine whether there is a description of the autonomous domain or the home domain attribute in the query request. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. When the match is successful, the query request is forwarded to the access network layer where the object is located according to the binding result, and then enter S24;

[0055] S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25;

[0056] S25. Return the UID value to the access routing switch where the requester is located.

[0057] The method for identifying and isolating malicious controllers by the Byzantine fault tolerance mechanism module based on fuzzy set theory and digital currency allocation method includes the following sub-steps:

[0058] S31. Optimizing the digital currency allocation process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring value to the [0,1] interval through the fuzzy set, and evaluating the participation of each controller in block generation;

[0059] S32, calculating the digital currency value according to the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assigning read and write permissions according to the digital currency value;

[0060] S33. Obtain a sub-controller whose digital currency value is greater than a preset digital currency threshold. If the fuzzy score of the sub-controller is less than a preset integrity threshold, identify the sub-controller as a malicious controller and isolate the malicious controller.

[0061] In this embodiment, the service layer parsing mapping system for the multi-dimensional identification fusion network system and system uses a redesigned practical Byzantine fault tolerance mechanism to optimize the consensus process of the blockchain. The practical Byzantine fault tolerance mechanism combines fuzzy set theory and digital currency distribution system to ensure the fairness of consensus by providing equal opportunities for all participating honest miners.

[0062] In S31, the fuzzy score mC of any controller hscore The specific expression is:

[0063] mxD hscore =[Θ,1-Λ]

[0064] In the formula, Θ represents the honest score and Λ represents the malicious score.

[0065] In S32, the digital currency value V is calculated. DC The specific expression is:

[0066] V DC =(α×(HTD 22 +HTD 22 ))(β×(HTD 11 +HTD 13 ))(γ×DB)

[0067] In the formula, α, β, and γ are weight factors, which are adjusted according to the specific situation of the controller to reflect its importance in the system, and α+β+γ=1, HTD 22 、HTD 11 、HTD 13 is the historical transaction data of the controller, and DB is the historical data of the blockchain.

[0068] In this embodiment, sub-controllers with high digital currency values ​​are given more permissions, thereby ensuring the priority of honest nodes in the system. In this way, the service layer mapping system can effectively identify and isolate malicious controllers, improve the accuracy and efficiency of blockchain consensus, and ensure the security and high efficiency of the system. The mapping system allows sub-controllers with high digital currency values ​​to perform read and write operations. During network initialization, each controller is regarded as an honest node. After several rounds of operations, the credibility of the controller is adjusted according to its digital currency value, thereby effectively identifying and isolating malicious controllers. By setting thresholds to identify and isolate malicious controllers, the security of the entire system is ensured.

[0069] In S33, the controller state is determined according to the following preset integrity threshold:

[0070] mxD hscore >0.8 Honest

[0071] 0.5≤mC hscore ≤0.8 Suspicious

[0072] mxD hscore <0.5 Malicious

[0073] Honest indicates an honest controller, Suspicious indicates a suspicious controller, and Malicious indicates a malicious controller.

[0074] In this embodiment, through the design of the Byzantine fault-tolerant mechanism module based on fuzzy set theory and digital currency allocation method, the system can not only effectively manage the coordination of multiple controllers, but also ensure the reasonable allocation of resources through the digital currency allocation system, and can timely detect and defend against potential attacks. At the same time, through the multi-layer architecture and Byzantine fault-tolerant mechanism, the system can still maintain efficient operation in the face of complex network environments, reduce the update cost caused by mapping changes, and improve the response speed and service quality of the overall network.

[0075] The beneficial effects of the present invention are as follows: the present invention provides a service layer parsing and mapping system for multi-dimensional identification heterogeneous networks. According to the design of the architecture and mechanism of the autonomous domain layer, access layer and access network layer, it realizes the effective identification and isolation of malicious controllers, and ensures the accuracy and efficiency of blockchain consensus. The dynamic allocation mechanism of digital currency value not only ensures the fairness of the consensus process, but also improves the overall security and operation efficiency of the system. This design is not only suitable for traditional network architecture, but also an innovative solution for the security and high efficiency of multi-dimensional identification fusion network system and system service layer parsing and mapping system. This architectural design provides reliable guarantee for identification resolution and data management in new network environment through multi-level and multi-mechanism collaborative operation, and has strong foresight and practicality.

[0076] The present invention deploys a master-slave mode multi-controller on the control plane, so that the multi-dimensional identification mapping system can obtain real-time and consistent network layer mapping information, and expand the application scope of multi-dimensional identification heterogeneous networks in mobile scenarios.

[0077] The present invention is based on a mapping management server deployed in a distributed manner at the access layer, so that the mapping system can withstand single-point failures of the controller caused by DDoS attacks and the like.

[0078] In the description of the present invention, it is necessary to understand that the orientation or positional relationship indicated by the terms "center", "thickness", "upper", "lower", "horizontal", "top", "bottom", "inner", "outer", "radial", etc. is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", and "third" are used only for descriptive purposes, and cannot be understood as indicating or implying the relative importance or the number of implicitly specified technical features. Therefore, the features defined by "first", "second", and "third" may explicitly or implicitly include one or more of the features.

Claims

1. A service layer parsing and mapping system for multi-dimensional identification heterogeneous networks, characterized in that: It includes an autonomous domain layer, an access layer and an access network layer connected in sequence; The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module, wherein each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mapping, and the Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate the digital currency value, and identify and isolate malicious controllers according to the digital currency value and the fuzzy score; The access layer is used to connect the autonomous domain layer and the access network layer, and provide a channel for uplink and downlink data flows; The access network layer is also connected to the terminal users to process the access requirements of the user data.

2. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 1 is characterized in that: The registration process of the registration module is specifically as follows: S11, sending the service layer mapping registration request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, and storing the registration request mapping result to the destination access layer mapping server through the mapping management server according to the internal attribute storage allocation mechanism, so as to establish a binding relationship between the network object and its home domain; S12: Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

3. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 2 is characterized in that: The query process of the query module is specifically as follows: S21, sending the service layer mapping query request of the network object to the mapping management server of the access layer of the domain through the access routing switch of the access network layer, parsing the query request through the mapping management server, and judging whether there is an attribute description about the autonomous domain or the home domain in the query request, if so, sending the query request to the autonomous domain server or the home domain server for query, if not, entering S22; S22, the mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration, and determines whether the destination access layer mapping server can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23; S23, the query request is parsed by the autonomous domain server to determine whether there is a description of the autonomous domain or the home domain attribute in the query request. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. When the match is successful, the query request is forwarded to the access network layer where the object is located according to the binding result, and then enter S24; S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25; S25. Return the UID value to the access routing switch where the requester is located.

4. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 1 is characterized in that: The method for identifying and isolating malicious controllers by the Byzantine fault tolerance mechanism module based on fuzzy set theory and digital currency allocation method includes the following sub-steps: S31. Optimizing the digital currency allocation process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring value to the [0,1] interval through the fuzzy set, and evaluating the participation of each controller in the block generation; S32, calculating the digital currency value according to the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assigning read and write permissions according to the digital currency value; S33. Obtain a sub-controller whose digital currency value is greater than a preset digital currency threshold. If the fuzzy score of the sub-controller is less than a preset integrity threshold, identify the sub-controller as a malicious controller and isolate the malicious controller.

5. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 4 is characterized in that: In S31, the fuzzy score mC of any controller hscore The specific expression is: mC hscore =[Θ,1-Λ] In the formula, Θ represents the honest score and Λ represents the malicious score.

6. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 5 is characterized in that: In S32, the digital currency value V is calculated. DC The specific expression is: V DC =(α×(HTD 22 +HTD 22 ))(β×(HTD 11 +HTD 13 ))(γ×DB) In the formula, α, β, and γ are weight factors, and α+β+γ=1, HTD 22 、HTD 11 、HTD 13 is the historical transaction data of the controller, and DB is the historical data of the blockchain.

Images