A service layer parsing and mapping system for multi-dimensional identification heterogeneous networks

Abstract

The present invention discloses a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network, comprising an autonomous domain layer, an access layer, and an access network layer connected in sequence; the autonomous domain layer comprises a multi-controller cluster in a master-sub mode, a Byzantine fault tolerance mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identification mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module; the access layer is used to connect the autonomous domain layer and the access network layer to provide a channel for upstream and downstream data flows; the access network layer is also connected to the end user to process the access requirements of user data. Through the above design, the effective identification and isolation of malicious controllers are achieved, ensuring the accuracy and efficiency of the blockchain consensus. The dynamic allocation mechanism of digital currency value not only ensures the fairness of the consensus process, but also improves the overall security and operational efficiency of the system.

Description

Technical Field

[0001] The present invention belongs to the technical field of novel network architecture, and in particular relates to a service layer parsing and mapping system for multi-dimensional identification heterogeneous networks. Background Art

[0002] To meet the urgent needs of diverse emerging services for the future internet, including high security, lightweight, intelligent, efficient, and mobile, a multi-dimensional identity heterogeneous network (MID) has been proposed based on an in-depth study of existing network identification systems and their derivative technologies. MIDs use multi-dimensional unified identifiers (UIDs) as unique identifiers for network entities. These identifiers possess multi-dimensional attributes, including identity, location, time, and physical attributes, and are used to describe various network entities, including terminals, interfaces, services, content, and specific groups. MIDs employ the concept of separating identity from location, separating the IP space into MIDs and NIDs. UIDs are used to uniquely identify objects, while NIDs are used to identify their locations within the network. MID network objects are divided into two categories: device objects and service objects, each embodying different multi-dimensional attributes (MADs). MIDs consist of three layers: the service layer, the network layer, and the interface layer. The network layer supports a modular attribute-based forwarding and routing mechanism, enabling flexible addressing. The network layer uses a unified identifier to represent multidimensional elements within the network. The interface layer fulfills the dual requirements of service providers and service requesters, translating application attributes into service types. The interface layer abstracts and aggregates north-south interfaces. The service layer uses a unified service model compatible with all services and diverse applications. The service layer consists of a multidimensional identifier attribute parsing module and a multidimensional identifier distribution query module. In a heterogeneous network with multidimensional identifiers, users can locate the target object for communication or service acquisition using multidimensional attributes.

[0003] Since multi-dimensional identification heterogeneous networks are still in their infancy, the relevant implementation mechanisms are in urgent need of further improvement.

[0004] (1) Lack of intelligent security strategies:

[0005] Traditional security policies are usually based on static rules and are difficult to cope with the dynamically changing threat environment in multi-dimensional heterogeneous networks, resulting in lagging security policies. When faced with complex network attacks, existing security policies may not be able to detect and respond in a timely manner, resulting in the attack being successful.

[0006] (2) Factors restricting operational efficiency:

[0007] Due to the differences between different parts of a heterogeneous network, data transmission delays and packet loss rates may be high, affecting overall operational efficiency. Resource management in a heterogeneous network is relatively decentralized, making it difficult to achieve unified resource scheduling and optimization, resulting in low resource utilization and affecting operational efficiency. Summary of the Invention

[0008] In response to the above-mentioned deficiencies in the prior art, the service layer parsing and mapping system for multi-dimensional identification heterogeneous networks provided by the present invention solves the problem that the existing multi-dimensional identification heterogeneous networks still have much room for improvement in overall security and operational efficiency.

[0009] In order to achieve the above-mentioned object of the invention, the technical solution adopted by the present invention is: a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network, comprising an autonomous domain layer, an access layer and an access network layer connected in sequence;

[0010] The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module. Each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mappings. The Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate digital currency values, and identify and isolate malicious controllers based on the digital currency values ​​and fuzzy scores.

[0011] The access layer is used to connect the autonomous domain layer and the access network layer, providing a channel for uplink and downlink data flows;

[0012] The access network layer is also connected to the end user to process the access requirements of user data.

[0013] Furthermore: the registration process of the registration module is specifically as follows:

[0014] S11. Sending a service layer mapping registration request of a network object to a mapping management server at the access layer of the domain where the network object resides through an access routing switch at the access network layer. The mapping management server stores the registration request mapping result to the destination access layer mapping server according to its internal attribute storage allocation mechanism, thereby establishing a binding relationship between the network object and its home domain.

[0015] S12. Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

[0016] Furthermore: the query process of the query module is specifically as follows:

[0017] S21. Send a service layer mapping query request of the network object to a mapping management server of the access layer of the domain via the access routing switch of the access network layer. The mapping management server parses the query request and determines whether there is an attribute description of the autonomous domain or the home domain in the query request. If so, the query request is sent to the autonomous domain server or the home domain server for query. If not, the process proceeds to S22.

[0018] S22. The mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration. The destination access layer mapping server determines whether it can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23.

[0019] S23. The autonomous domain server parses the query request and determines whether the query request contains a description of autonomous domain or home domain attributes. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. If a match is successful, the query request is forwarded to the access network layer where the object is located based on the binding result, and then the process proceeds to S24.

[0020] S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25;

[0021] S25. Return the UID value to the access routing switch where the requester is located.

[0022] Furthermore, the method for identifying and isolating malicious controllers using the Byzantine fault-tolerant mechanism module based on fuzzy set theory and digital currency allocation method includes the following steps:

[0023] S31. Optimizing the digital currency distribution process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring value to the interval [0, 1] through the fuzzy set, and evaluating the participation of each controller in block generation;

[0024] S32. Calculate the digital currency value based on the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assign read and write permissions based on the digital currency value;

[0025] S33. Obtain a sub-controller whose digital currency value is greater than a preset digital currency threshold. If the fuzzy score of the sub-controller is less than a preset integrity threshold, identify the sub-controller as a malicious controller and isolate the malicious controller.

[0026] The beneficial effect of this further solution is that sub-controllers with high digital currency values ​​are granted more permissions, thereby ensuring the priority of honest nodes in the system. In this way, the service layer mapping system can effectively identify and isolate malicious controllers, improve the accuracy and efficiency of blockchain consensus, and ensure the security and high efficiency of the system. The mapping system allows sub-controllers with high digital currency values ​​to perform read and write operations. During network initialization, each controller is considered an honest node. After several rounds of operations, the controller's trustworthiness is adjusted based on its digital currency value, effectively identifying and isolating malicious controllers. By setting thresholds to identify and isolate malicious controllers, the security of the entire system is ensured.

[0027] Further: In said S31, the fuzzy score mC of any controller hscore The specific expression is:

[0028] mC hscore =[Θ,1-Λ]

[0029] Where Θ represents the honest score and Λ represents the malicious score.

[0030] Further: In said S32, the digital currency value V is calculated DC The specific expression is:

[0031] V DC =(α×(HTD 22 +HTD 22 ))(β×(HTD 11 +HTD 13 ))(γ×DB)

[0032] Where α, β, and γ are weight factors, and α+β+γ=1, HTD 22 、HTD 11 、HTD 13 is the historical transaction data of the controller, and DB is the historical data of the blockchain.

[0033] The beneficial effects of the above further scheme are: the practical Byzantine fault tolerance mechanism combines fuzzy set theory and digital currency distribution system to ensure the fairness of consensus by providing equal opportunities for all honest miners participating.

[0034] The beneficial effects of the present invention are:

[0035] (1) The present invention provides a service layer parsing and mapping system for multi-dimensional identification heterogeneous networks. Based on the design of the architecture and mechanism of the autonomous domain layer, access layer and access network layer, it realizes the effective identification and isolation of malicious controllers, ensuring the accuracy and efficiency of blockchain consensus. The dynamic allocation mechanism of digital currency value not only ensures the fairness of the consensus process, but also improves the overall security and operation efficiency of the system. This design is not only applicable to traditional network architectures, but also an innovative solution for the security and high efficiency of multi-dimensional identification fusion network systems and system service layer parsing and mapping systems. This architectural design provides reliable protection for identification resolution and data management in new network environments through the coordinated operation of multiple levels and multiple mechanisms, and has strong foresight and practicality.

[0036] (2) The present invention deploys a master-slave mode multi-controller on the control plane, so that the multi-dimensional identification mapping system can obtain real-time and consistent network layer mapping information, expanding the application scope of multi-dimensional identification heterogeneous networks in mobile scenarios.

[0037] (3) The present invention is based on a mapping management server distributedly deployed at the access layer, so that the mapping system can withstand single-point failures of the controller caused by DDoS attacks, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 This is a schematic diagram of the service layer parsing and mapping system for multi-dimensional identification heterogeneous networks of the present invention. DETAILED DESCRIPTION

[0039] The specific embodiments of the present invention are described below to facilitate understanding of the present invention by those skilled in the art. However, it should be clear that the present invention is not limited to the scope of the specific embodiments. For those skilled in the art, as long as various changes are within the spirit and scope of the present invention as defined and determined by the appended claims, these changes are obvious, and all inventions and creations utilizing the concepts of the present invention are protected.

[0040] like Figure 1 As shown, in one embodiment of the present invention, a service layer parsing and mapping system for a multi-dimensional identification heterogeneous network includes an autonomous domain layer, an access layer, and an access network layer connected in sequence;

[0041] The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module. Each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mappings. The Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate digital currency values, and identify and isolate malicious controllers based on the digital currency values ​​and fuzzy scores.

[0042] The access layer is used to connect the autonomous domain layer and the access network layer, providing a channel for uplink and downlink data flows;

[0043] The access network layer is also connected to the end user to process the access requirements of user data.

[0044] In this embodiment, the architecture of the service layer parsing and mapping system is designed to improve system security, robustness, and efficiency. The overall architecture is divided into three layers: the autonomous domain layer, the access layer, and the access network layer. These three layers each perform different functions in a distributed network environment, ensuring the system's high scalability and flexibility at different network levels.

[0045] The autonomous domain layer introduces a multi-controller cluster in a master-subordinate model. This architecture allows multiple controllers to operate simultaneously, sharing system load and improving fault tolerance. To address the diverse functional requirements of controllers, the system has added additional functional modules, such as network object identity mapping, registration, querying, updating, recycling, and exception handling. These added functions increase the impact of single-point failures in the controllers. Therefore, the introduction of a multi-controller cluster and Byzantine fault tolerance mechanisms at the autonomous domain layer is crucial to ensure efficient operation of the system at the access layer. Each sub-controller is responsible for managing and maintaining local identity mappings and calculating and generating digital currency values ​​by collecting and analyzing local monitoring data and historical blockchain data. These digital currency values ​​serve not only as rewards for controller behavior but also as a basis for allocating read and write permissions, ensuring fair participation in the block generation process within the blockchain network's consensus mechanism.

[0046] To further enhance system security and the reliability of the consensus mechanism, a novel practical Byzantine fault-tolerant mechanism was designed, incorporating the digital currency distribution system found in blockchain technology. Through the distribution and verification of digital currency, the system fairly selects honest miners and ensures equal participation in the block generation process. The generation of digital currency value relies on local identity mapping data and blockchain history collected by sub-controllers. This process not only optimizes miner selection but also helps the system identify and isolate potentially malicious controllers.

[0047] The access network layer directly connects to end users and is responsible for processing user data access requests. At this level, the system prioritizes network access reliability and accurate data delivery. Data processing at the access network layer directly impacts the user experience, and therefore requires close coordination with upper-layer architectures. Through efficient data transmission and precise identity mapping, this ensures that user requests are responded to promptly and accurately.

[0048] The registration process of the registration module is specifically as follows:

[0049] S11. Sending a service layer mapping registration request of a network object to a mapping management server at the access layer of the domain where the network object resides through an access routing switch at the access network layer. The mapping management server stores the registration request mapping result to the destination access layer mapping server according to its internal attribute storage allocation mechanism, thereby establishing a binding relationship between the network object and its home domain.

[0050] S12. Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

[0051] The query process of the query module is specifically as follows:

[0052] S21. Send a service layer mapping query request of the network object to a mapping management server of the access layer of the domain via the access routing switch of the access network layer. The mapping management server parses the query request and determines whether there is an attribute description of the autonomous domain or the home domain in the query request. If so, the query request is sent to the autonomous domain server or the home domain server for query. If not, the process proceeds to S22.

[0053] S22. The mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration. The destination access layer mapping server determines whether it can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23.

[0054] S23. The autonomous domain server parses the query request and determines whether the query request contains a description of autonomous domain or home domain attributes. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. If a match is successful, the query request is forwarded to the access network layer where the object is located based on the binding result, and then the process proceeds to S24.

[0055] S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25;

[0056] S25. Return the UID value to the access routing switch where the requester is located.

[0057] The method for identifying and isolating malicious controllers using a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method includes the following steps:

[0058] S31. Optimizing the digital currency distribution process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring value to the interval [0, 1] through the fuzzy set, and evaluating the participation of each controller in block generation;

[0059] S32. Calculate the digital currency value based on the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assign read and write permissions based on the digital currency value;

[0060] S33. Obtain a sub-controller whose digital currency value is greater than a preset digital currency threshold. If the fuzzy score of the sub-controller is less than a preset integrity threshold, identify the sub-controller as a malicious controller and isolate the malicious controller.

[0061] In this embodiment, the service-layer parsing and mapping system for a multi-dimensional identity fusion network and system utilizes a redesigned practical Byzantine fault tolerance mechanism to optimize the blockchain consensus process. This mechanism combines fuzzy set theory with a digital currency distribution system to ensure consensus fairness by providing equal opportunities for all participating honest miners.

[0062] In S31, the fuzzy score mC of any controller hscore The specific expression is:

[0063] mC hscore =[Θ,1-Λ]

[0064] Where Θ represents the honest score and Λ represents the malicious score.

[0065] In said S32, the digital currency value V is calculated DC The specific expression is:

[0066] V DC =(α×(HTD 22 +HTD 22 ))(β×(HTD 11 +HTD 13 ))(γ×DB)

[0067] Where α, β, and γ are weight factors, which are adjusted according to the specific situation of the controller to reflect its importance in the system, and α+β+γ=1, HTD 22 、HTD 11 、HTD 13 is the historical transaction data of the controller, and DB is the historical data of the blockchain.

[0068] In this embodiment, sub-controllers with high digital currency values ​​are granted more permissions, thereby ensuring the priority of honest nodes in the system. In this way, the service layer mapping system can effectively identify and isolate malicious controllers, improve the accuracy and efficiency of blockchain consensus, and ensure the security and high efficiency of the system. The mapping system allows sub-controllers with high digital currency values ​​to perform read and write operations. During network initialization, each controller is considered an honest node. After several rounds of operations, the controller's trustworthiness is adjusted based on its digital currency value, effectively identifying and isolating malicious controllers. By setting thresholds to identify and isolate malicious controllers, the security of the entire system is ensured.

[0069] In S33, the controller status is determined based on the following preset integrity threshold:

[0070] mC hscore >0.8 Honest

[0071] 0.5≤mC hscore ≤0.8 Suspicious

[0072] mC hscore <0.5 Malicious

[0073] Honest represents an honest controller, Suspicious represents a suspicious controller, and Malicious represents a malicious controller.

[0074] In this embodiment, through the design of a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, the system not only effectively manages the coordination of multiple controllers, but also ensures the rational allocation of resources through the digital currency allocation system, and promptly detects and defends against potential attacks. Furthermore, through its multi-layered architecture and Byzantine fault-tolerant mechanism, the system maintains efficient operation in complex network environments, reduces the update costs associated with mapping changes, and improves the overall network's responsiveness and service quality.

[0075] The beneficial effects of the present invention are as follows: the present invention provides a service layer parsing and mapping system for multi-dimensional identification heterogeneous networks. According to the design of the architecture and mechanism of the autonomous domain layer, access layer and access network layer, it realizes the effective identification and isolation of malicious controllers, and ensures the accuracy and efficiency of the blockchain consensus. The dynamic allocation mechanism of digital currency value not only ensures the fairness of the consensus process, but also improves the overall security and operation efficiency of the system. This design is not only applicable to traditional network architectures, but also an innovative solution for the security and high efficiency of multi-dimensional identification fusion network systems and system service layer parsing and mapping systems. This architectural design provides reliable guarantees for identity resolution and data management in new network environments through the collaborative operation of multiple levels and multiple mechanisms, and has strong foresight and practicality.

[0076] The present invention deploys a master-slave mode multi-controller on the control plane, so that the multi-dimensional identification mapping system can obtain real-time and consistent network layer mapping information, expanding the application scope of multi-dimensional identification heterogeneous networks in mobile scenarios.

[0077] The present invention is based on a mapping management server deployed in a distributed manner at the access layer, so that the mapping system can withstand single-point failures of the controller caused by DDoS attacks and the like.

[0078] In the description of the present invention, it should be understood that the terms "center", "thickness", "upper", "lower", "horizontal", "top", "bottom", "inner", "outer", "radial", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only and cannot be understood as indicating or implying the relative importance or the number of technical features implicitly specified. Therefore, the features defined by "first", "second", and "third" may explicitly or implicitly include one or more of such features.

Claims

1. A service layer parsing and mapping system for multi-dimensional identification heterogeneous networks, characterized by: It includes the autonomous domain layer, access layer and access network layer connected in sequence; The autonomous domain layer includes a multi-controller cluster in a master-sub-mode, a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method, a network object identifier mapping module, a registration module, a query module, an update module, a recycling module, and an exception handling module. Each sub-controller in the multi-controller cluster in the master-sub-mode is used to manage and maintain local identifier mappings. The Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method is used to collect and analyze historical transaction data of the sub-controller and historical data of the blockchain, calculate digital currency values, and identify and isolate malicious controllers based on the digital currency values ​​and fuzzy scores. The access layer is used to connect the autonomous domain layer and the access network layer, providing a channel for uplink and downlink data flows; The access network layer is also connected to the end user to process the access requirements of user data; The method for identifying and isolating malicious controllers using a Byzantine fault-tolerant mechanism module based on fuzzy set theory and a digital currency allocation method includes the following steps: S31. Optimizing the digital currency distribution process through fuzzy sets. Specifically, the method comprises: establishing a fuzzy set, the fuzzy set including the fuzzy scores of all controllers, mapping the monitoring values ​​to the interval [0, 1] through the fuzzy set, and evaluating the participation of each controller in block generation; S32. Calculate the digital currency value based on the historical transaction data of the sub-controller and the historical data of the blockchain collected by the sub-controller, and assign read and write permissions based on the digital currency value; S33: obtaining a sub-controller whose digital currency value is greater than a preset digital currency threshold; if the fuzzy score of the sub-controller is less than a preset integrity threshold, identifying the sub-controller as a malicious controller and isolating the malicious controller; In S31, the fuzzy score of any controller The specific expression is: Where, represents the honesty score, Indicates the malicious score; In said S32, the digital currency value is calculated The specific expression is: Where, 、 、 is the weight factor, and , 、 、 is the controller's historical transaction data, It is the historical data of the blockchain.

2. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 1 is characterized in that: The registration process of the registration module is specifically as follows: S11. Sending a service layer mapping registration request of a network object to a mapping management server at the access layer of the domain where the network object resides through an access routing switch at the access network layer. The mapping management server stores the registration request mapping result to the destination access layer mapping server according to its internal attribute storage allocation mechanism, thereby establishing a binding relationship between the network object and its home domain. S12. Send the binding relationship to the autonomous domain server of the autonomous domain layer through the access point of the access layer. Before sending the binding relationship, perform longest prefix aggregation on the multi-dimensional attributes in the binding relationship through the access point.

3. The service layer parsing and mapping system for multi-dimensional identification heterogeneous networks according to claim 2 is characterized in that: The query process of the query module is specifically as follows: S21. Send a service layer mapping query request of the network object to a mapping management server of the access layer of the domain via the access routing switch of the access network layer. The mapping management server parses the query request and determines whether there is an attribute description of the autonomous domain or the home domain in the query request. If so, the query request is sent to the autonomous domain server or the home domain server for query. If not, the process proceeds to S22. S22. The mapping management server sends the query request to the destination access layer mapping server according to the attribute storage allocation mechanism during registration. The destination access layer mapping server determines whether it can successfully perform attribute matching. If so, the UID value of the matching result is obtained, and the process proceeds to S25. If not, the mapping query request is forwarded to the autonomous domain server, and the process proceeds to S23. S23. The autonomous domain server parses the query request and determines whether the query request contains a description of autonomous domain or home domain attributes. If so, inter-domain forwarding or local domain forwarding is performed. If not, attribute query matching is performed. If a match is successful, the query request is forwarded to the access network layer where the object is located based on the binding result, and then the process proceeds to S24. S24, receiving the query request forwarded by the access network layer through the autonomous domain server, performing attribute matching search on the destination access layer mapping server according to the attribute storage allocation mechanism, obtaining the searched UID value, and entering S25; S25. Return the UID value to the access routing switch where the requester is located.

Images