Communication security management method and device based on block chain node

Abstract

The invention relates to the technical field of communication security, in particular to a communication security management method and device based on block chain nodes. Based on the block chain technology, the public key encryption algorithm is used to ensure that the identities of both communication parties are real and reliable. Each node records the public key, the registration time and the identity information of the known node through the storage block chain, so that the security and the consistency of identity authentication are ensured, and the credibility and the security of the network are improved; the behavior of each node is regularly evaluated through a behavior analysis and statistical method in combination with request frequency, behavior consistency and tampering data detection, and malicious nodes are expelled from the network through a consensus protocol, so that the malicious node detection accuracy is enhanced, attack and damage are effectively prevented, and the malicious node detection efficiency is improved. And the stability and the reliability of the network are improved.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and specifically to a communication security management method and device based on blockchain nodes. Background Art

[0002] With the rapid development of information technology, communication networks have become one of the most important infrastructures in the world. Especially after blockchain technology has been widely used in finance, the Internet of Things, smart contracts and other fields, communication security issues have become an increasingly serious challenge. The characteristics of blockchain itself, such as decentralization, data immutability, and transparency, have been applied in the security management of many industries, but there are still some technical bottlenecks and deficiencies in the security management of communication networks.

[0003] At present, security management methods in communication networks mainly rely on traditional authentication technologies, firewalls, intrusion detection systems (IDS), virtual private networks (VPN), etc. Although these methods can ensure communication security to a certain extent, they still have some significant problems.

[0004] First, existing identity authentication methods rely on centralized authentication agencies, which poses the risk of being hacked or forged. Especially in decentralized and distributed networks, the identity authentication problem of nodes is difficult to be effectively solved and is extremely vulnerable to forgery and abuse. Secondly, existing malicious behavior detection methods mostly rely on rule bases and feature matching, and are unable to detect and analyze node behavior changes in real time and comprehensively. Malicious nodes are often able to cleverly hide their behavior or disguise themselves as legitimate nodes, resulting in malicious behavior being misjudged or not being discovered in time, causing network security risks.

[0005] In view of the above problems, it is necessary to propose a communication security management method and device based on blockchain nodes. Summary of the invention

[0006] The purpose of the present invention is to solve the problems existing in the background technology and to propose a communication security management method and device based on blockchain nodes.

[0007] The purpose of the present invention can be achieved through the following technical solutions:

[0008] In a first aspect, the present invention provides a communication security management method based on a blockchain node, comprising the following steps:

[0009] Step 1: Node identity authentication;

[0010] Authentication is performed on the nodes where the communicating parties are located to ensure their identity authenticity and prevent malicious nodes from joining the network.

[0011] In the communication network, each node stores a blockchain locally, which together form a blockchain network for node identity authentication. The blockchain stored in each node contains the public keys, registration time and identity information of all known nodes, which are used for identity information authentication and comparison. All blockchains use a hash link structure to associate each area with the data of the previous block, ensuring that if the information of a block is tampered with, all subsequent blocks will become invalid.

[0012] Whenever a new node sends a request to join the communication network, all nodes in the communication network are required to verify the identity of the newly joined node, including querying whether the public key of the newly joined node exists in the blocks saved by each node and verifying the matching degree between the public key of the newly joined node and its own identity information. The specific process is as follows:

[0013] First, the blockchain is used to query whether the public key of the newly joined node already exists in the blockchain stored by each node. If the blockchain of a node already contains the public key, the identity authentication phase begins. Each node uses the public key saved in its stored blockchain to authenticate the newly joined node, and obtains the identity authentication results of each node for the newly joined node. Among them, the identity authentication result is obtained through the public key encryption algorithm RSA. If the identity authentication results of all nodes for the newly joined node are passed, the node newly joined to the communication network is determined to have passed the node identity authentication, and the request of the newly joined node to join the communication network is allowed;

[0014] If not, it is determined that the node newly joined the communication network has not passed the identity authentication, and the identity information of the node newly joined the communication network is registered, a pair of public and private keys for identity authentication is generated, and the public key is registered in the blockchain of all nodes. Among them, the private key is used to encrypt the node identity information, and the public key is used to verify the node identity information.

[0015] The specific process of registering the identity information of the newly joined node is as follows: the identity information of the newly joined node is encrypted by the generated private key, and the encryption result is saved in the local storage space of the newly joined node. Each node in the communication network adds the public key of the newly joined node to the locally stored blockchain to ensure that all nodes can obtain the public key for subsequent identity verification.

[0016] Step 2: Node malicious behavior detection;

[0017] Through behavioral analysis and statistical methods, combined with request frequency, behavioral consistency and tampered data detection, we regularly evaluate whether the behavior of each node complies with network regulations, and promptly detect and eliminate malicious nodes.

[0018] Combine the request frequency to detect node malicious behavior and set the node request frequency threshold , obtain the number of requests for joining the communication network issued by each newly joined node within the last preset time interval t , if the condition is met , then it is determined that the joining request of the newly joined node contains potential malicious behavior, and a malicious request signal about node i is generated.

[0019] Combined with behavioral consistency, node malicious behavior detection is performed. The communication protocol number symbol Pi(t), response time RTi(t), and data packet size Si(t) of each node in the communication network are obtained at preset time intervals t, where i is the node number in the communication network, i=1,2,...,n; n is the total number of nodes. Among them, the specific value of the communication protocol number symbol Pi is 1, 2, 3 or 4 for the preset communication protocols TCP, UDP, HTTP and WebSocket in the communication network respectively. The connection duration C(i1, i2) of each node with other nodes is obtained, where i1∈i and i2∈i; i1 is the initiating node number of the connection, and i2 is the receiving node number of the connection. Generate the behavioral feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node i at time t, and use the preset formula Calculate the behavior consistency eigenvalue of node i at time t If it is lower than the set threshold, it is considered that the behavior of the node has abnormal fluctuations, a malicious behavior change signal about node i is generated, and the potential malicious behavior of node i in terms of behavior consistency is determined. is the behavior feature vector of the previous preset time interval t before the current time t. is the Euclidean distance, that is, the straight-line distance between two points Bi(t) and Bi(t-1) in the vector space.

[0020] Malicious node behavior detection is performed in combination with tampered data records. Tampering detection is performed by comparing whether the blockchain data saved by the node is consistent with the data stored in other nodes. The block data Di saved in the blockchain of each node i is obtained at preset time intervals. If it is detected that the block data Di saved in the blockchain of node i is inconsistent with the block data saved in the blockchain of other nodes, a malicious tampering signal about node i is generated, and it is determined that node i has tampered with the blockchain data.

[0021] Obtain the number of malicious request signals, malicious behavior change signals, or malicious tampering signals of each node.

[0022] If the weighted sum of the number of malicious request signals, malicious behavior change signals, and malicious tampering signals generated by a node exceeds the preset threshold, the node is judged to have serious malicious behavior and security risks, and is expelled from the network through a consensus protocol.

[0023] During the node communication process, the generation time of all nodes' malicious request signals, malicious behavior change signals or malicious tampering signals and the corresponding node numbers are recorded in the node's security log for later auditing.

[0024] Step 3: Encrypted communication;

[0025] Whenever communication is established between two nodes i1 and i2, the encryption public keys of nodes i1 and i2 are exchanged. Using an asymmetric encryption algorithm, the initiating node i1 of the communication encrypts the message to be sent using its own private key and sends the message to the target node i2.

[0026] The target node i2 uses the public key of the communication initiator node i1 to decrypt the message encrypted by the private key to obtain the original message.

[0027] Step 4: Message integrity verification;

[0028] Whenever communication is established between two nodes i1 and i2, both parties use a message authentication code to verify the integrity of the message, ensuring that the data has not been tampered with during transmission.

[0029] Whenever the initiating node i1 of the communication sends a message Mi1, it will first calculate the MAC value of the message Mi1 before encryption and obtain the message authentication code MACi1 based on the hash function;

[0030] When the target node i2 receives the message Mi1, the MAC value of the decrypted message Mi1 is used to obtain the message authentication code MACi2 based on the hash function;

[0031] Check the consistency of the message authentication codes MACi1 and MACi2. If the matching results are consistent, it means that the message has not been tampered with during the transmission process; otherwise, the target node i2 of the communication rejects the message.

[0032] In a second aspect, the present invention provides a communication security management device based on blockchain nodes, including a plurality of nodes, all of which together constitute a communication network. Among them, the types of communication nodes include servers, personal computers, and personal mobile call terminals. Each communication node includes a computing unit, a storage unit, a network interface, and an encryption module. The node communicates with other nodes through a network connection, and identity authentication and data consistency are guaranteed through the blockchain. Each node saves a blockchain through a local storage space.

[0033] The blockchain stored in each node has the following characteristics: The blockchain adopts a hash link structure, and each block contains a hash value pointing to the previous block to ensure that the data cannot be tampered with. The blockchain data is encrypted and protected by encryption algorithms. Nodes use blockchain for identity authentication and sharing of behavior data. Each node adds metadata such as the public key and identity information of the newly added node to the local blockchain, and maintains the consistency of the network status through the consensus protocol.

[0034] Compared with the prior art, the present invention has the following beneficial effects:

[0035] 1. The present invention is based on blockchain technology and uses a public key encryption algorithm to ensure that the identities of both parties in communication are authentic and reliable. Each node stores the public key, registration time and identity information of known nodes in the blockchain to ensure the security and consistency of identity authentication. The hash link structure of the blockchain prevents tampering of node identity information and enhances network security. This method uses encryption technology and blockchain consensus mechanism to avoid trust issues that may exist in traditional identity authentication methods and improve the credibility and security of the network;

[0036] 2. The present invention uses behavioral analysis and statistical methods, combined with request frequency, behavioral consistency and tampered data detection, to regularly evaluate the behavior of each node. This method can detect abnormal behavior of nodes in a timely manner, such as frequent requests or abnormal data packet size, connection duration and other abnormal signals. If the node behavior is abnormal, a malicious signal is generated, and the malicious node is expelled from the network through a consensus protocol. This mechanism combines multiple monitoring methods to enhance the accuracy of malicious node detection, effectively prevent attacks and damage, and improve the stability and reliability of the network;

[0037] 3. The present invention uses an asymmetric encryption algorithm to encrypt the communication content to ensure that the data will not be stolen or tampered with when transmitted in the network. In addition, the integrity of the data is verified through the message authentication code (MAC) mechanism to further ensure that the message has not been tampered with during transmission. This mechanism supports the encryption and decryption process through hardware encryption modules and dedicated accelerators, improving the security and efficiency of data transmission. Combined with the dual protection of encryption and message authentication codes, the confidentiality and integrity of the data in the entire communication process are effectively guaranteed, enhancing the security of communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to facilitate understanding by those skilled in the art, the present invention is further described below with reference to the accompanying drawings:

[0039] Figure 1 is a flow chart of the method of the present invention;

[0040] Figure 2This is a schematic diagram of a communication security management device based on blockchain nodes of the present invention. DETAILED DESCRIPTION

[0041] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] See also Figure 1 As shown, the communication security management method based on blockchain nodes includes the following steps:

[0043] Step 1: Node identity authentication;

[0044] Authentication is performed on the nodes where the communicating parties are located to ensure their identity authenticity and prevent malicious nodes from joining the network.

[0045] In the communication network, each node stores a blockchain locally, which together form a blockchain network for node identity authentication. The blockchain stored in each node contains the public keys, registration time and identity information of all known nodes, which are used for identity information authentication and comparison. All blockchains use a hash link structure to associate each area with the data of the previous block, ensuring that if the information of a block is tampered with, all subsequent blocks will become invalid.

[0046] Whenever a new node sends a request to join the communication network, all nodes in the communication network are required to verify the identity of the newly joined node, including querying whether the public key of the newly joined node exists in the blocks saved by each node and verifying the matching degree between the public key of the newly joined node and its own identity information. The specific process is as follows:

[0047] First, the blockchain is used to query whether the public key of the newly joined node already exists in the blockchain stored by each node. If the blockchain of a node already contains the public key, the identity authentication phase begins. Each node uses the public key saved in its stored blockchain to authenticate the newly joined node, and obtains the identity authentication results of each node for the newly joined node. Among them, the identity authentication result is obtained through the public key encryption algorithm RSA. If the identity authentication results of all nodes for the newly joined node are passed, the node newly joined to the communication network is determined to have passed the node identity authentication, and the request of the newly joined node to join the communication network is allowed;

[0048] If not, it is determined that the node newly joined the communication network has not passed the identity authentication, and the identity information of the node newly joined the communication network is registered, a pair of public and private keys for identity authentication is generated, and the public key is registered in the blockchain of all nodes. Among them, the private key is used to encrypt the node identity information, and the public key is used to verify the node identity information.

[0049] The specific process of registering the identity information of the newly joined node is as follows: the identity information of the newly joined node is encrypted by the generated private key, and the encryption result is saved in the local storage space of the newly joined node. Each node in the communication network adds the public key of the newly joined node to the locally stored blockchain to ensure that all nodes can obtain the public key for subsequent identity verification.

[0050] Step 2: Node malicious behavior detection;

[0051] Through behavioral analysis and statistical methods, combined with request frequency, behavioral consistency and tampered data detection, we regularly evaluate whether the behavior of each node complies with network regulations, and promptly detect and eliminate malicious nodes.

[0052] Combine the request frequency to detect node malicious behavior and set the node request frequency threshold , obtain the number of requests for joining the communication network issued by each newly joined node within the last preset time interval t , if the condition is met , then it is determined that the joining request of the newly joined node contains potential malicious behavior, and a malicious request signal about node i is generated.

[0053] Combined with behavioral consistency, node malicious behavior detection is performed. The communication protocol number symbol Pi(t), response time RTi(t), and data packet size Si(t) of each node in the communication network are obtained at preset time intervals t, where i is the node number in the communication network, i=1,2,...,n; n is the total number of nodes. Among them, the specific value of the communication protocol number symbol Pi is 1, 2, 3 or 4 for the preset communication protocols TCP, UDP, HTTP and WebSocket in the communication network respectively. The connection duration C(i1, i2) of each node with other nodes is obtained, where i1∈i and i2∈i; i1 is the initiating node number of the connection, and i2 is the receiving node number of the connection. Generate the behavioral feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node i at time t, and use the preset formula Calculate the behavior consistency eigenvalue of node i at time t If it is lower than the set threshold, it is considered that the behavior of the node has abnormal fluctuations, a malicious behavior change signal about node i is generated, and the potential malicious behavior of node i in terms of behavior consistency is determined. is the behavior feature vector of the previous preset time interval t before the current time t. is the Euclidean distance, that is, the straight-line distance between two points Bi(t) and Bi(t-1) in the vector space.

[0054] It should be noted that the consistency of node behavior is used to detect whether the change of node behavior is abnormal. The behavior of normal nodes should be consistent in the network and should not change frequently. In addition, the number of connections between the node and other nodes, the duration of the connection, and other information are continuous. If a node suddenly increases or decreases its connections with other nodes, it may be a sign of malicious behavior; for example, an infected node may frequently change the nodes it connects to to avoid detection.

[0055] Malicious node behavior detection is performed in combination with tampered data records. Tampering detection is performed by comparing whether the blockchain data saved by the node is consistent with the data stored in other nodes. The block data Di saved in the blockchain of each node i is obtained at preset time intervals. If it is detected that the block data Di saved in the blockchain of node i is inconsistent with the block data saved in the blockchain of other nodes, a malicious tampering signal about node i is generated, and it is determined that node i has tampered with the blockchain data.

[0056] Obtain the number of malicious request signals, malicious behavior change signals, or malicious tampering signals of each node.

[0057] If the weighted sum of the number of malicious request signals, malicious behavior change signals, and malicious tampering signals generated by a node exceeds the preset threshold, the node is judged to have serious malicious behavior and security risks, and is expelled from the network through a consensus protocol.

[0058] During the node communication process, the generation time of all nodes' malicious request signals, malicious behavior change signals or malicious tampering signals and the corresponding node numbers are recorded in the node's security log for later auditing.

[0059] Step 3: Encrypted communication;

[0060] Whenever communication is established between two nodes i1 and i2, the encryption public keys of nodes i1 and i2 are exchanged. Using an asymmetric encryption algorithm, the initiating node i1 of the communication encrypts the message to be sent using its own private key and sends the message to the target node i2.

[0061] The target node i2 uses the public key of the communication initiator node i1 to decrypt the message encrypted by the private key to obtain the original message.

[0062] Step 4: Message integrity verification;

[0063] Whenever communication is established between two nodes i1 and i2, both parties use a message authentication code to verify the integrity of the message, ensuring that the data has not been tampered with during transmission.

[0064] Whenever the initiating node i1 of the communication sends a message Mi1, it will first calculate the MAC value of the message Mi1 before encryption and obtain the message authentication code MACi1 based on the hash function;

[0065] When the target node i2 receives the message Mi1, the MAC value of the decrypted message Mi1 is used to obtain the message authentication code MACi2 based on the hash function;

[0066] Check the consistency of the message authentication codes MACi1 and MACi2. If the matching results are consistent, it means that the message has not been tampered with during the transmission process; otherwise, the target node i2 of the communication rejects the message.

[0067] See also Figure 2 As shown, the communication security management device based on blockchain nodes includes several nodes, and all nodes together form a communication network. Among them, the types of communication nodes include servers, personal computers and personal mobile call terminals. Each communication node includes a computing unit, a storage unit, a network interface and an encryption module. The node communicates with other nodes through a network connection, and ensures identity authentication and data consistency through the blockchain. Each node saves a blockchain through local storage space.

[0068] The blockchain stored in each node has the following characteristics: The blockchain adopts a hash link structure, and each block contains a hash value pointing to the previous block to ensure that the data cannot be tampered with. The blockchain data is encrypted and protected by encryption algorithms. Nodes use blockchain for identity authentication and sharing of behavior data. Each node adds metadata such as the public key and identity information of the newly added node to the local blockchain, and maintains the consistency of the network status through the consensus protocol.

[0069] It should be understood that the terms “include” and “comprising” used in the specification and claims of the present disclosure indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or collections thereof.

[0070] It should also be understood that the terms used in this disclosure are only for the purpose of describing specific embodiments and are not intended to limit the disclosure. As used in this disclosure and the claims, the singular forms "a", "an", and "the" are intended to include the plural forms unless the context clearly indicates otherwise. It should also be further understood that the term "and / or" used in this disclosure and the claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes these combinations;

[0071] The preferred embodiments of the present invention disclosed above are only used to help explain the present invention. The preferred embodiments do not describe all the details in detail, nor do they limit the invention to only specific implementation methods. Obviously, many modifications and changes can be made according to the content of this specification. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can understand and use the present invention well. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A communication security management method based on blockchain nodes, characterized in that: The steps include: Step 1: Node identity authentication; Establish a blockchain network for node identity authentication; authenticate the nodes where the two communicating parties are located to ensure their authenticity and prevent malicious nodes from joining the network; whenever a new node requests to join, all nodes in the communication network verify the identity of the newly joined node; through the public key encryption algorithm, each node uses its stored public key to authenticate the new node; Step 2: Node malicious behavior detection; Through behavioral analysis and statistical methods, combined with request frequency, behavior consistency and tampering data detection, regularly evaluate whether the behavior of each node complies with network regulations, generate malicious request signals, malicious behavior change signals or malicious tampering signals based on the evaluation results, and obtain the number of malicious request signals, malicious behavior change signals or malicious tampering signals of each node; if the weighted sum of the number of malicious request signals, malicious behavior change signals and malicious tampering signals generated by a node exceeds the preset threshold, it is determined that the node has serious malicious behavior and security risks, and it is expelled from the network through the consensus protocol; Step 3: Encrypted communication; When two nodes establish communication, the nodes use an asymmetric encryption algorithm to exchange encryption public keys and encrypt the message using the private key of the initiating node; Step 4: Message integrity verification; Use hash-based message authentication codes to verify the integrity of communication messages; By calculating the MAC value of the message and comparing it with the result calculated by the target node, it is confirmed that the message has not been tampered with.

2. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of building a blockchain network for node identity authentication is as follows: In the communication network, each node stores a blockchain locally, which together form a blockchain network for node identity authentication; the blockchain stored in each node contains the public keys, registration time and identity information-related metadata of all known nodes, which are used for identity information authentication and comparison; all blockchains use a hash link structure to link each area with the data of the previous block, ensuring that if the information of a block is tampered with, all subsequent blocks will become invalid.

3. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of having all nodes in the communication network verify the identity of the newly added node is: First, the blockchain is used to query whether the public key of the newly added node already exists in the blockchain stored by each node; if the blockchain of a node already contains the public key, the identity authentication phase is entered; each node uses the public key stored in its stored blockchain to authenticate the newly added node, and obtains the identity authentication results of each node for the newly added node; the identity authentication results are obtained by the public key encryption algorithm RSA; if the identity authentication results of all nodes for the newly added node are passed, it is determined that the node newly added to the communication network has passed the node identity authentication, and the request of the newly added node to join the communication network is allowed; If not, it is determined that the node newly added to the communication network has not passed the identity authentication, and the identity information of the node newly added to the communication network is registered.

4. The communication security management method based on blockchain nodes according to claim 3 is characterized in that: The specific process of registering the identity information of a node newly added to the communication network is as follows: Generate a pair of public and private keys for identity authentication and register the public key in the blockchain of all nodes; the private key is used to encrypt the node identity information, and the public key is used to verify the node identity information; The identity information of the newly joined node is encrypted using the generated private key, and the encryption result is saved in the local storage space of the newly joined node; each node in the communication network adds the public key of the newly joined node to the locally stored blockchain to ensure that all nodes can obtain the public key for subsequent identity authentication.

5. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of detecting node malicious behavior in combination with request frequency is as follows: Set the request frequency threshold of the node , obtain the number of requests for joining the communication network issued by each newly joined node within the last preset time interval t , if the condition is met , then it is determined that the joining request of the newly joined node contains potential malicious behavior, and a malicious request signal about node i is generated.

6. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of detecting node malicious behavior in combination with behavioral consistency is as follows: At every preset time interval t, the communication protocol number symbol Pi(t), response time RTi(t), and data packet size Si(t) of each node in the communication network are obtained, where i is the node number in the communication network, i=1,2,...,n; n is the total number of nodes; wherein the specific value of the communication protocol number symbol Pi is 1, 2, 3 or 4 for the preset communication protocols TCP, UDP, HTTP and WebSocket in the communication network respectively; the connection duration C(i1, i2) of each node with other nodes is obtained, where i1∈i and i2∈i; i1 is the initiating node number of the connection, and i2 is the receiving node number of the connection; the behavior feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node i at time t is generated, and the behavior feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node i is generated at time t ... is generated at time t, and the behavior feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node is generated at time t, and the behavior feature vector Bi(t)={Pi, RTi(t), Si(t), C(i,1), C(i,2),..., C(i,n)} of each node is generated at time t, and the behavior feature vector Bi(t)={Pi, RTi(t), Si(t Calculate the behavior consistency eigenvalue of node i at time t , if it is lower than the set threshold, it is considered that the behavior of the node has abnormal fluctuations, a malicious behavior change signal about node i is generated, and the potential malicious behavior of node i in terms of behavior consistency is determined; among them, is the behavior feature vector of the previous preset time interval t before the current time t; is the Euclidean distance, that is, the straight-line distance between two points Bi(t) and Bi(t-1) in the vector space.

7. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of detecting node malicious behavior in combination with tampered data records is as follows: Tampering detection is performed by comparing whether the blockchain data saved by the node is consistent with the data stored in other nodes. The block data Di saved in the blockchain of each node i is obtained at preset time intervals. If it is detected that the block data Di saved in the blockchain of node i is inconsistent with the block data saved in the blockchain of other nodes, a malicious tampering signal about node i is generated, and it is determined that node i has tampered with the blockchain data.

8. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of encrypting a message using the private key of the initiating node is as follows: Whenever communication is established between two nodes i1 and i2, the encryption public keys of nodes i1 and i2 are exchanged; using an asymmetric encryption algorithm, the initiating node i1 of the communication encrypts the message to be sent using its own private key and sends the message to the target node i2; The target node i2 uses the public key of the communication initiator node i1 to decrypt the message encrypted by the private key to obtain the original message.

9. The communication security management method based on blockchain nodes according to claim 1 is characterized in that: The specific process of message integrity verification is as follows: Whenever the initiating node i1 of the communication sends a message Mi1, it first calculates the MAC value of the message Mi1 before encryption and obtains the message authentication code MACi1 based on the hash function; When the target node i2 receives the message Mi1, the MAC value of the decrypted message Mi1 is used to obtain the message authentication code MACi2 based on the hash function; Check the consistency of the message authentication codes MACi1 and MACi2. If the matching results are consistent, it means that the message has not been tampered with during the transmission process; otherwise, the target node i2 of the communication rejects the message.

10. A communication security management device based on blockchain nodes, characterized in that The communication security management method based on blockchain nodes is applied to implement any one of claims 1 to 9: comprising a plurality of nodes, all of which together constitute a communication network; wherein the types of nodes include servers, personal computers, and personal mobile call terminals; each node includes a computing unit, a storage unit, a network interface, and an encryption module; the node communicates with other nodes through a network connection, and identity authentication and data consistency are ensured through the blockchain; each node saves a blockchain through a local storage space; The blockchain stored in each node is as follows: the blockchain adopts a hash link structure, and each block contains a hash value pointing to the previous block; the blockchain data is encrypted and protected by an encryption algorithm; nodes perform identity authentication and share behavioral data through the blockchain; each node adds the public key and identity information metadata of the newly joined node to the local blockchain, and maintains the consistency of the network status through a consensus protocol.

Images