Ship multimode communication method and system based on block chain identity authentication

Abstract

The invention discloses a block chain identity authentication-based ship multi-mode communication method and system, and the method comprises the following steps: obtaining the identity information of a ship, carrying out the quantification processing of the identity information of the ship, obtaining the identity feature vector of the ship, carrying out the hash of the identity information of the ship and the identity feature vector, and carrying out the recognition of the identity information of the ship. Obtaining a content identifier CID of the ship, and registering the generated CID and the identity information of the ship into a block chain; the ship sends a communication request containing the CID to a receiver, after the receiver receives the communication request, the validity of the ship CID is verified through the block chain, if the verification is passed, subsequent steps are continued to be executed, and otherwise, the communication request of the ship is rejected; the ship carries out key negotiation with the receiver, the communication data of the two parties are encrypted by using the negotiated key, the two parties sign the negotiation process, and the signature is uploaded to the block chain; and the blockchain performs validity authentication on the signature, and after the authentication is passed, the encrypted communication data is recorded in the blockchain.

Description

Technical Field

[0001] The present invention relates to the field of ship communication technology, and in particular to a ship multi-mode communication method and system based on blockchain identity authentication. Background Art

[0002] Driven by globalized trade and the maritime economy, maritime communications have become key to ensuring the efficiency, safety, and regulation of maritime transportation. With the rapid development of the shipping industry, the increase in the number of ships, and the frequency of shipping activities, the demand for maritime communications is growing. In the process of maritime communications, it is necessary to authenticate the identity of the ship to ensure the accuracy and security of information, prevent illegal activities, and meet the requirements of international regulations. Effective ship identity authentication is essential for maritime navigation safety, maritime supervision, and emergency rescue.

[0003] To solve the identity authentication problem in maritime communications, existing technologies mainly rely on paper documents and single electronic systems. Paper documents, such as ship certificates and nautical charts, are used to verify the legitimacy and navigation intentions of ships. At the same time, electronic systems such as automatic identification systems (AIS), radio communications, and satellite communications provide ships with real-time communication and data exchange capabilities. These technologies meet basic communication and identity authentication needs to a certain extent, but with the rapid development of the shipping industry and the surge in the number of ships, the capacity and security of existing communication systems have been unable to meet the needs of the changing communication environment.

[0004] Although existing technology has alleviated the problem of marine communications to a certain extent, it still has some problems. Traditional paper documents are easily lost and damaged, and are not easy to update and verify in real time. Single electronic systems, such as AIS and radio communications, have limited transmission distances, are susceptible to severe weather conditions, have tight frequency band resources, and have security issues with communication information, which can be easily intercepted and cracked. These problems not only threaten the navigation safety of ships, but also pose challenges to the effectiveness of maritime supervision and emergency rescue, while reducing the convenience and reliability of marine communications. Summary of the invention

[0005] The present invention proposes a ship multi-mode communication method and system based on blockchain identity authentication, which solves the problem of low security of existing ship identity authentication methods.

[0006] In order to solve the above technical problems, the present invention provides a ship multi-mode communication method based on blockchain identity authentication, comprising the following steps:

[0007] Step S1: The identification code, ship name, ship owner, type, size and performance parameters of the ship are used as the identity information of the ship, the identity information of the ship is quantified to obtain the identity feature vector of the ship, the identity information of the ship and the identity feature vector are hashed to obtain the content identifier CID of the ship, and the generated CID and the identity information of the ship are registered in the blockchain;

[0008] Step S2: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S3 is executed. Otherwise, the receiver rejects the ship's communication request.

[0009] Step S3: The ship and the receiver negotiate a key, and use the negotiated key to encrypt the communication data between the two parties. Both parties sign the negotiation process and upload the signature to the blockchain;

[0010] Step S4: The blockchain authenticates the validity of the signature, and after authentication, the encrypted communication data is recorded in the blockchain.

[0011] Preferably, in step S1, a pair of public and private keys is generated for the ship, and the public key is sent to the blockchain.

[0012] Preferably, after receiving the communication request in step S2, the receiver verifies the validity of the ship CID through the blockchain, including the following steps:

[0013] Step S21: The receiving party extracts the ship's identity information and CID from the communication request, and queries the validity of the ship's CID through the blockchain;

[0014] Step S22: quantizing the extracted ship identity information to obtain the ship identity feature vector, and performing hashing on the ship identity information and the identity feature vector;

[0015] Step S23: Compare the generated hash value with the extracted ship CID. If the two are the same, the ship's identity information is considered to be authentic. When the CID is valid and the ship's identity information is authentic, communication is allowed.

[0016] Preferably, the key negotiation between the ship and the receiver in step S3 includes the following steps:

[0017] Step S301: The ship selects a random number kA, signs kA with a private key to obtain RA, and hashes RA to obtain RA';

[0018] Step S302: RA and RA' are sent to the receiver, and the receiver decrypts RA' to obtain RA, and uses the ship's public key to verify the validity of RA;

[0019] Step S303: The receiver selects a random number kB, performs hashing on RA' and kB to obtain RB, and returns RB to the ship;

[0020] Step S304: the ship encrypts the received information RB and the random number kA using the public key to obtain a first shared key; the receiver encrypts the received information RA, RA' and the random number kB using the public key to obtain a second shared key;

[0021] Step S305: merge the first shared key and the second shared key to obtain a complete shared key.

[0022] Preferably, the two parties in step S3 sign the negotiation process, including the following steps: the ship signs part of the negotiation information using a private key, and the recipient verifies the validity of the ship's signature using a public key. If the verification is passed, the ship and the recipient jointly complete the final signature.

[0023] Preferably, the blockchain in step S4 authenticates the validity of the signature, including the following steps: the blockchain obtains the public keys of the communicating parties, splits the final signature into parts signed by the ship and the recipient, and verifies the signature using the corresponding public keys to ensure that the signature is generated by a legitimate communicating party.

[0024] The present invention also provides a ship multimode communication system based on blockchain identity authentication, which is implemented based on the above-mentioned ship multimode communication method based on blockchain identity authentication, including: a ship CID generation module, a communication verification module, a key negotiation module, a digital signature generation module, a communication encryption module and a data supervision module;

[0025] The ship CID generation module: performs quantization processing on the ship's identity information to obtain the ship's identity feature vector, and performs hashing on the ship's identity information and the identity feature vector to obtain the ship's content identifier CID;

[0026] The communication verification module: when a ship sends a communication request containing a CID to a recipient, the module queries the validity of the ship's CID through the blockchain, recalculates the hash value based on the ship's identity information and compares it with the ship's CID registered on the blockchain, and verifies the authenticity of the ship's identity information associated with the CID;

[0027] The key negotiation module: allows the ship and the recipient to select a random number respectively, encrypts the random numbers of both parties, and generates a shared key;

[0028] The digital signature generation module signs the key negotiation information between the ship and the recipient, and uploads the signature to the blockchain;

[0029] The communication encryption module: uses a shared key to encrypt and decrypt the communication data between the ship and the receiver;

[0030] The data supervision module uses blockchain to authenticate the validity of the signature, and after the authentication is passed, the encrypted communication data is recorded in the blockchain.

[0031] Preferably, the system further comprises a key management module, which is used to generate and manage the public-private key pair of the ship and register the public key of the ship in the blockchain.

[0032] Preferably, in the digital signature generation module, the ship signs part of the key negotiation information using a private key, and the recipient verifies the validity of the ship's signature using a public key. If the verification is successful, the ship and the recipient jointly complete the final signature.

[0033] Preferably, the identity information of the vessel includes the identification code, name, owner, type, size and performance parameters of the vessel.

[0034] The benefits of the present invention include at least:

[0035] 1. After quantifying the ship's identification code, ship name, ship owner, type, size and performance parameters, the ship's content identifier CID is generated through a hash algorithm, making the ship's CID highly unique;

[0036] 2. Registering the ship’s identity information and CID on the blockchain ensures the long-term security and reliability of the ship’s identity information. Any entity that needs to verify the ship’s identity can query and verify the validity of the ship’s CID through the blockchain network without relying on a centralized authority.

[0037] 3. Key negotiation and encrypted communication ensure the security of data transmission between the ship and the recipient, preventing the data from being intercepted or tampered with during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 A schematic diagram of a method flow of an embodiment of the present invention;

[0039] Figure 2 This is a schematic diagram of the structure of a device used when a ship communicates with a receiver in an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of a process for registering ship identity information in a blockchain according to an embodiment of the present invention;

[0041] Figure 4 Schematic diagram of the key distribution process according to an embodiment of the present invention. DETAILED DESCRIPTION

[0042] The following is a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work belong to the protection scope of the present invention.

[0043] Traditional ship identity authentication methods rely on paper documents or a single electronic system, which are not only susceptible to forgery and tampering, but also have problems with cumbersome authentication processes and low efficiency. During navigation, ships need to frequently communicate with shore-based systems, other ships and maritime administration agencies, but a single communication method often cannot adapt to the changing communication environment and needs, resulting in unstable communication and delayed information transmission. In addition, with the rapid development of the shipping industry, the surge in the number of ships has also put forward higher requirements on the capacity and security of the communication system. In response to the above problems, the present invention proposes a ship multi-mode communication method and system based on blockchain identity authentication, which aims to fundamentally solve the security problems of ship identity authentication through the immutability of blockchain technology and the flexibility of multi-mode communication technology, improve communication efficiency and flexibility, and meet the shipping industry's urgent needs for efficient, safe and reliable communications.

[0044] like Figure 1 As shown, the method comprises the following steps:

[0045] Step S1: Generate a pair of public and private keys for the ship.

[0046] Specifically, a communication device is provided on the ship in the embodiment of the present invention, and the structure of the communication device is as follows: Figure 2 As shown, it includes: a processor, a power supply, a data storage module, a communication module, an audio module, and a human-computer interaction and expansion module. The processor is responsible for efficiently packaging the processed and optimized ship data into a new block. At the same time, the processor is also responsible for initiating and verifying the smart contract communication request closely related to the ship identification code authentication to ensure that all operations comply with the preset rules and logic. In order to ensure data security and privacy, the processor will also strictly encrypt the part involving sensitive information to ensure that the transmission and storage of data in the blockchain network are in a highly secure state. The power supply is used to power the entire system device. The data storage module is used to store a ship database containing information such as ship identification code, ship name, ship type, navigation area, etc. The communication module uses a 4G method to realize communication between the ship and the receiver's communication device. The audio module is used to receive audio input from the outside world and another communication device, and output processed audio data at the same time. The human-computer interaction and expansion module is used to input the ship identification code into the communication device and display various information, including but not limited to text and graphics.

[0047] Before starting the device, it is necessary to carry out installation inspection and power self-test. After the device is started, a pair of public and private keys are automatically generated for the ship, including private key d and public key pk. The private key d is encrypted and securely stored in a dedicated storage area inside the device to prevent unauthorized access. The public key pk is sent to the blockchain network and registered in a specific smart contract.

[0048] Step S2: Obtain the identity information of the ship, generate the content identifier CID of the ship according to the identity information of the ship, and register the generated CID and the identity information of the ship in the blockchain.

[0049] Specifically, in addition to basic ship information such as the ship's identification code IMO, ship name, ship owner, and ship type, the embodiment of the present invention also collects more detailed ship characteristic information, such as the ship's construction location, construction year, hull material, propulsion method, and main equipment information such as engine model, generator model, and any special ship logo or mark as the ship's identity information.

[0050] Standardize all collected information to ensure uniform format and remove redundant and erroneous data. Format dates into a uniform international standard format and convert text information into a format without spaces and special characters.

[0051] A feature vector is generated based on the characteristics of the ship's identity information. This feature vector contains information in multiple dimensions: the ship's dimensions, such as length, width, and draft; performance parameters, such as speed and endurance; and special equipment configuration. The feature vector is obtained by quantifying the ship's information, for example, converting the dimension information into metric units and converting the performance parameters into values ​​in standard units.

[0052] At the same time, a timestamp related to the current time is generated and added to the ship identity information. The standardized ship identity information and the feature vector are input into the hash algorithm together. The hash algorithm generates a hash value of a fixed length, namely the ship identifier CID.

[0053] like Figure 3 As shown, the generated CID, timestamp, digital signature and detailed identity information of the ship are registered on the blockchain. A smart contract related to the CID is created on the blockchain, which is used to store and manage all information related to the CID.

[0054] Step S3: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S4 is executed, otherwise the receiver rejects the ship's communication request.

[0055] Specifically, the ship sends a communication request containing a CID to a receiver such as a port or maritime department through a device. After receiving the communication request, the receiver queries the validity of the CID through the blockchain network, and further verifies the authenticity of the ship identity information associated with the CID. The receiver generates a new hash value by inputting the same ship identity information and feature vector into the hash algorithm again and adding the corresponding timestamp. The newly generated hash value is compared with the CID registered on the blockchain. If the two are the same, the verification is passed. If the CID is valid and the ship identity information is authentic, the receiver confirms and agrees to continue the communication; otherwise, the communication request is rejected.

[0056] Step S4: The ship and the recipient conduct key negotiation and use the negotiated key to encrypt the communication data between the two parties. Both parties sign the negotiation process and upload the signature to the blockchain.

[0057] Specifically, in order to ensure the security of communication, the ship and the receiver negotiate a key, and use the negotiated key to encrypt and decrypt the communication data of both parties. Figure 4 As shown, the following steps are included:

[0058] Step S401: The ship selects a random number kA, signs kA with a private key to obtain RA, and hashes RA to obtain RA'.

[0059] The ship first generates a high entropy random number kA as the random value used in the key negotiation process, and then uses its private key to sign the random number kA to generate RA. That is, RA = sign 私钥 (kA), which means that RA is the digital signature of kA, and only a ship with the corresponding private key can generate a valid RA. Finally, RA is hashed to generate a summary RA' to reduce the amount of data or for fast verification.

[0060] Step S402: The ship sends RA and RA' to the receiver. After receiving RA and RA', the receiver decrypts RA' to obtain RA and uses the ship's public key to verify the validity of RA.

[0061] The receiver uses its own private key to decrypt RA' and obtain RA. After obtaining RA, the receiver uses the ship's public key to verify the signature of RA to ensure that RA is indeed generated by the ship and kA has not been tampered with. If the verification is successful, it means that RA' is valid and RA has not been tampered with.

[0062] Step S403: The receiver selects a random number kB, and performs hashing on RA' and kB to obtain RB.

[0063] The receiver generates a high entropy random number kB for the key negotiation process. By hashing the receiver's random number kB and RA', an intermediate value RB is generated to ensure that the generation of RB is associated with RA' to prevent security threats such as replay attacks, that is, RB = H(kB||RA).

[0064] Step S404: The receiver returns the RB to the ship.

[0065] Step S405: The ship encrypts the received information RB and the random number kA using the public key to obtain a first shared key; the receiver encrypts the received information RA, RA′ and the random number kB using the public key to obtain a second shared key;

[0066] Step S406: merge the first shared key and the second shared key to obtain a complete shared key.

[0067] Both parties sign the negotiation process and upload the signature to the blockchain, including the following steps:

[0068] Step S411: The ship uses the private key d to sign part of the negotiation information to generate s′.

[0069] Step S412: The ship and the recipient work together to complete the final signature (r, s) to ensure that both parties recognize the communication content and prevent tampering.

[0070] After the ship uses the private key d to generate s′, s′ is used as the ship's preliminary signature on the negotiation information to prove the authenticity and integrity of the information. Subsequently, the ship and the recipient use their own private keys to jointly sign the entire key negotiation process based on s′ and the random numbers generated by each party to form the final signature (r, s). The final signature (r, s) ensures that both parties recognize and agree to the content of the negotiation to prevent any tampering.

[0071] Step S413: Encrypt the signature (r, s) or upload the signature (r, s) to the blockchain smart contract in a secure manner as proof of the validity of the communication.

[0072] After completing the joint signature, the ship and the recipient will encrypt or securely upload the signature (r, s) to the blockchain smart contract as proof of the validity of the communication. Through this process, s' not only verifies the source of the ship's initial information, but also provides a basis for the final signature, ensuring the security and credibility of the entire key negotiation process, thereby ensuring that the communication data recorded on the blockchain is legal and cannot be tampered with.

[0073] Step S5: The blockchain authenticates the validity of the signature, and after authentication, the encrypted communication data is recorded in the blockchain.

[0074] Specifically, all verification requests from both parties are automatically executed by triggering smart contracts through the blockchain network. The smart contract first verifies the validity of the signature (r, s) to ensure the authenticity of the identity and information of both parties. After the signature verification is passed, the smart contract checks whether the CID is consistent with the record on the blockchain to confirm that the CID has not been tampered with and the associated ship information is still valid.

[0075] Once the verification is successful, the smart contract will generate an authentication result, which includes the identities of the two communicating parties, the communication time, the summary of the communication content, etc. By recording the authentication results on the blockchain, the authenticity and traceability of the communication information can be ensured by utilizing the immutability and distributed characteristics of the blockchain.

[0076] Specifically, when verifying the validity of the final signature in the blockchain, the blockchain first extracts the signature and its related negotiation data from the record. Subsequently, the public keys of the communicating parties are obtained from the pre-registered or stored public key library. The final signature is split into the signature parts of the ship and the recipient, and these signatures are verified using the corresponding public keys to ensure that the signatures are indeed generated by the legitimate communicating parties and the negotiation data has not been tampered with. If all signature verifications pass, the blockchain confirms the authenticity and integrity of the communication record and stores it permanently on the chain; if any part of the verification fails, the blockchain rejects the record, thereby ensuring the security and credibility of the system. This verification process relies on standard digital signature algorithms such as ECDSA, the correct management of public keys, and the integrity of the negotiation data to ensure the security and reliability of the entire communication protocol.

[0077] An embodiment of the present invention also provides a ship multi-mode communication system based on blockchain identity authentication, which is implemented based on the above-mentioned ship multi-mode communication method based on blockchain identity authentication, including: a key management module, a ship CID generation module, a communication verification module, a key negotiation module, a digital signature generation module, a communication encryption module and a data supervision module.

[0078] The key management module is used to generate and manage the ship's public and private key pairs and register the ship's public key in the blockchain.

[0079] The ship CID generation module is used to quantify the ship's identity information to obtain the ship's identity feature vector, and hash the ship's identity information and the identity feature vector to obtain the ship's content identifier CID.

[0080] The communication verification module is used to query the validity of the ship's CID through the blockchain when the ship sends a communication request containing the CID to the recipient, recalculate the hash value based on the ship's identity information and compare it with the ship's CID registered on the blockchain to verify the authenticity of the ship's identity information associated with the CID.

[0081] The key negotiation module allows the ship and the recipient to each select a random number, encrypt the random numbers of both parties, and generate a shared key.

[0082] The digital signature generation module is used to sign the key negotiation information between the ship and the recipient, and upload the signature to the blockchain.

[0083] The communication encryption module uses a shared key to encrypt and decrypt the communication data between the ship and the receiver.

[0084] The data supervision module uses blockchain to authenticate the validity of the signature, and once the authentication is passed, the encrypted communication data will be recorded in the blockchain.

[0085] The method of the present invention generates a composite and unique ship identification code by combining the ship's official identification code with the hash value of the device's public key, and uses the distributed ledger characteristics of the blockchain to ensure the uniqueness and non-tamperability of the identification code. This effectively solves the possible forgery and tampering problems in traditional ship identification methods and improves the security and credibility of ship identity authentication.

[0086] By utilizing the decentralized nature of blockchain, global distributed verification of ship identification codes is achieved. Any entity that needs to verify the identity of a ship can query and verify the validity of the identification code through the blockchain network without relying on a centralized authority. This decentralized verification method not only improves verification efficiency, but also reduces the risk of centralized institutions being attacked or tampered with.

[0087] On the basis of ship identification code authentication, combined with encrypted communication technology, secure communication between ships or between ships and shore-based systems is achieved. Through the public and private key encryption system, the confidentiality and integrity of the communication content are ensured to prevent the data from being stolen or tampered with during the transmission process. It effectively improves the security of ship communications and provides a strong guarantee for the smooth progress of ship transportation.

[0088] The blockchain in this invention provides the basis for identity authentication, record and verification, transparency and trust, while the key negotiation mechanism ensures the security of the communication process and the confidentiality of the data. These two mechanisms work together to achieve a fully secure, efficient and transparent ship identification code authentication and communication process.

[0089] By utilizing the smart contract function of blockchain, a flexible permission management mechanism can be implemented. Different entities such as ship owners, operators, port management agencies, etc. can be granted different access rights and data operation rights as needed. This refined permission management not only protects the sensitivity of data, but also ensures that all parties can collaborate efficiently.

[0090] The method and system take into account cross-platform compatibility and interoperability, so that ships of different manufacturers and models and shore-based systems can be seamlessly integrated and interacted. By following unified communication protocols and standards, ships can easily establish connections and transmit data. At the same time, the modular design makes each module in the system highly cohesive, and the reserved serial port interface can be connected to external modules to realize additional functions, making the device upgradeable to a certain extent.

[0091] The embodiment of the present invention also provides a microcontroller unit MCU specially designed for ship communication, which integrates at least one processor, memory, at least one network interface and user interface, and realizes connection and communication between various components through a bus system. The microcontroller unit is designed to support the ship identity authentication process based on blockchain technology to ensure communication security and data integrity. With the ship's microcontroller unit MCU as the processing core, the installation cost can be reduced and the MCU is portable.

[0092] The processor is responsible for executing programs and instructions stored in the memory, including but not limited to blockchain transaction processing, encryption and decryption operations, data verification, etc. During the ship identity authentication process, the processor is responsible for processing data from the network interface and user interface, and making decisions based on preset algorithms and logic.

[0093] The memory is divided into volatile memory such as RAM and non-volatile memory such as ROM, EEPROM, etc. The memory is used to store operating systems, applications, blockchain data, ship identity information and authentication records, etc. The programs and instructions stored in the memory can be called by the processor to implement the relevant functions of ship identity authentication.

[0094] The network interface supports wired and / or wireless connections for data transmission with the blockchain network, other computer equipment or ship communication systems. During the ship identity authentication process, the network interface is responsible for sending and receiving authentication requests, responses and blockchain transaction data.

[0095] The user interface includes input and output devices such as screen and audio, which are used to interact with the user. The user can input the ship identity information, view the authentication results or perform other related operations through the user interface.

[0096] The bus system includes a data bus, a power bus, a control bus and a status signal bus, which are used to realize connection and communication between various components.

[0097] Based on the above-mentioned method, system and microcontroller unit MCU, an embodiment of the present invention provides a multi-mode communication software, including: an operating system, an application and a blockchain interface. The operating system is used to provide basic system services, such as resource management, task scheduling, process management, etc., and supports the operation of multiple applications, including applications for ship identity authentication. Applications include general applications such as media players and browsers, as well as applications specifically used for ship identity authentication. The ship identity authentication application is responsible for processing user input, calling the blockchain interface, executing authentication logic and displaying authentication results. The blockchain interface is used to provide an interface for interacting with the blockchain network, including sending transactions, querying blocks, verifying transactions, etc. During the ship identity authentication process, the blockchain interface is used to communicate with the blockchain network to verify the authenticity and validity of the ship identity information.

[0098] In actual application, the ship's identity authentication is achieved through the following steps:

[0099] Step 1: The user enters the ship's identity information, such as IMO number, ship name, shipowner information, etc. through the user interface.

[0100] Step 2: The application receives the information entered by the user and performs preliminary verification and formatting.

[0101] Step 3: The application generates an authentication request based on the processed information and sends it to the blockchain network through the network interface.

[0102] Step 4: The node in the blockchain network receives the authentication request and verifies it based on the ship identity information stored on the blockchain. The verification result is returned to the application through the blockchain interface.

[0103] Step 5: The application receives the verification result and displays it to the user through the user interface.

[0104] In order to more clearly demonstrate the operation flow of the method of the present invention, the implementation process of the method is described in detail by substituting specific data.

[0105] Step 1: Generate public and private key pairs.

[0106] When the device is started for the first time, its internal system will automatically generate a pair of public and private keys. For example, the generated private key d can be a 64-bit random number, such as d=1234567890abcdef1234567890abcdef, and the public key pk is calculated using the elliptic curve encryption algorithm on the private key d, such as pk=0x04c7e9b5db6dc8a08b0a22e22b8e5a43f586a4d83b1e1b2e9f0a5b8b5d73b96a2a54c3e4a6d5d5e4a11b30e88e2e8e2c182a1c6a076d1005f2c2e28e2d1d3c5b49f3.

[0107] The generated private key d is encrypted and securely stored in a dedicated storage area inside the device, while the public key pk is used for subsequent operations.

[0108] Step 2: Public key registration and CID generation.

[0109] The public key pk is sent to the blockchain network and registered in a specific smart contract. At the same time, basic ship information including ship identification code, ship name, ship owner, ship type, etc., as well as more detailed ship feature information such as ship construction location, construction year, hull material, propulsion method, main equipment information, etc. are collected as ship identity information. For example, the IMO number of a ship is IMO 987654321, the ship name is MV OceanVoyager, the ship owner information is Ocean Shipping Co., the ship type is Cargo Ship, the ship construction location is Shanghai, China, the construction year is 2020, the hull material is Steel, the propulsion method is Diesel Engine, the engine model is XYZ1234, and the generator model is ABC5678.

[0110] This information is standardized, for example, the date is formatted into an international standard format, and the text information is converted into a format without spaces and special characters. Then, a feature vector is generated based on this information, for example, the ship size of a ship is 200m in length, 30m in width, 10m in draft, and the performance parameters are 25knots in speed and 10,000 nautical miles in endurance. At the same time, a timestamp related to the current time is generated, such as 2024-11-15T12:00:00Z, and added to the ship identity information. The standardized ship identity information and the feature vector are input into a hash algorithm such as SHA-256 to generate a unique hash value of a fixed length as the ship's content identifier CID. For example, the generated CID is e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

[0111] The generated CID, timestamp, digital signature and detailed information of the ship are registered on the blockchain, and a smart contract associated with the CID is created on the blockchain to store and manage all information related to the CID.

[0112] Step 3: The ship sends a request message containing the CID to the receiver through its device. After receiving the request, the receiver queries the validity of the CID through the blockchain network. And further verify the authenticity of the ship identity information associated with the CID by inputting the same ship identity information and feature vector into the hash algorithm again and adding the corresponding timestamp to generate a new hash value. The newly generated hash value is compared with the CID registered on the blockchain. If the two are the same, the verification is passed.

[0113] Step 4: The ship selects a random number kA=987654321, and the receiver selects a random number kB=123456789.

[0114] The ship calculates RA and RA' using the private key d or other security mechanism and sends them to the receiver. The receiver verifies the validity of RA'. The receiver calculates RB based on RA' and returns it to the ship. The ship and the receiver calculate a shared key based on the information they received and their own random numbers.

[0115] Step 5: The ship signs part of the negotiation information using the private key d to generate s′. The client and the receiver work together to complete the final signature (r, s) and encrypt it or upload it to the blockchain smart contract in a secure manner.

[0116] Step 6: The ship and the receiver communicate and use the shared key to encrypt and decrypt the communication data.

[0117] Step 7: All verification requests from both the ship and the recipient trigger the automatic execution of the smart contract through the blockchain network. The smart contract first verifies the validity of the signature and then checks the consistency of the CID with the record on the blockchain.

[0118] Step 8: Once the verification is successful, the smart contract will generate an authentication result including the identities of the communicating parties, the communication time, a summary of the communication content, etc., and record the authentication result on the blockchain.

[0119] The present invention combines the tamper-proof characteristics of blockchain technology and the flexibility of multi-mode communication to build an efficient, safe and reliable ship identity authentication method. The method generates a unique and tamper-proof ship identification code and is closely integrated with advanced public key encryption technology, thereby doubly guaranteeing the authenticity of the ship's identity and the absolute security of communication data. In addition, the present invention supports a variety of communication modes, enabling ships to exchange data stably and encrypted in global waters, and communication is always unimpeded regardless of changes in the environment.

[0120] It is worth mentioning that the automated execution mechanism of smart contracts greatly simplifies the authentication process, significantly improves operational efficiency, and brings unprecedented convenience and trust to the field of maritime traffic management and supervision. In addition, the present invention is flexible in design, and can adjust the communication strategy according to the operating scenarios and actual needs of different ships, and reserves a rich space for functional expansion, indicating that it has broad application prospects and far-reaching research value in multiple fields.

[0121] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. Only the preferred embodiments of the present invention are expressed. The description is more specific and detailed, but it cannot be understood as limiting the scope of the present invention. As long as there is no contradiction in the combination of these technical features, they should be considered as within the scope of this specification.

[0122] It should be noted that, for those skilled in the art, several modifications and improvements can be made without departing from the concept of the present invention, and these modifications and improvements all belong to the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the attached claims.

Claims

1. A ship multi-mode communication method based on blockchain identity authentication, characterized in that: The following steps are involved: Step S1: The identification code, ship name, ship owner, type, size and performance parameters of the ship are used as the identity information of the ship, the identity information of the ship is quantified to obtain the identity feature vector of the ship, the identity information of the ship and the identity feature vector are hashed to obtain the content identifier CID of the ship, and the generated CID and the identity information of the ship are registered in the blockchain; Step S2: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S3 is executed. Otherwise, the receiver rejects the ship's communication request. Step S3: The ship and the receiver negotiate a key, and use the negotiated key to encrypt the communication data between the two parties. Both parties sign the negotiation process and upload the signature to the blockchain; Step S4: The blockchain authenticates the validity of the signature, and after authentication, the encrypted communication data is recorded in the blockchain.

2. According to claim 1, a ship multi-mode communication method based on blockchain identity authentication is characterized in that: In step S1, a pair of public and private keys is generated for the ship, and the public key is sent to the blockchain.

3. According to claim 1, a ship multi-mode communication method based on blockchain identity authentication is characterized in that: After receiving the communication request in step S2, the receiver verifies the validity of the ship CID through the blockchain, including the following steps: Step S21: The receiving party extracts the ship's identity information and CID from the communication request, and queries the validity of the ship's CID through the blockchain; Step S22: quantizing the extracted ship identity information to obtain the ship identity feature vector, and performing hashing on the ship identity information and the identity feature vector; Step S23: Compare the generated hash value with the extracted ship CID. If the two are the same, the ship's identity information is considered to be authentic. When the CID is valid and the ship's identity information is authentic, communication is allowed.

4. According to claim 2, a ship multi-mode communication method based on blockchain identity authentication is characterized in that: In step S3, the ship and the receiver perform key negotiation, which includes the following steps: Step S301: The ship selects a random number kA, signs kA with a private key to obtain RA, and hashes RA to obtain RA'; Step S302: RA and RA' are sent to the receiver, and the receiver decrypts RA' to obtain RA, and uses the ship's public key to verify the validity of RA; Step S303: The receiver selects a random number kB, performs hashing on RA' and kB to obtain RB, and returns RB to the ship; Step S304: the ship encrypts the received information RB and the random number kA using the public key to obtain a first shared key; the receiver encrypts the received information RA, RA' and the random number kB using the public key to obtain a second shared key; Step S305: merge the first shared key and the second shared key to obtain a complete shared key.

5. According to claim 2, a ship multi-mode communication method based on blockchain identity authentication is characterized in that: In step S3, the two parties sign the negotiation process, including the following steps: the ship uses the private key to sign part of the negotiation information, and the recipient uses the public key to verify the validity of the ship's signature. If the verification is passed, the ship and the recipient jointly complete the final signature.

6. A ship multi-mode communication method based on blockchain identity authentication according to claim 5, characterized in that: The blockchain described in step S4 authenticates the validity of the signature, including the following steps: the blockchain obtains the public keys of the communicating parties, splits the final signature into parts signed by the ship and the recipient, and verifies the signature using the corresponding public keys to ensure that the signature is generated by a legitimate communicating party.

7. A ship multimode communication system based on blockchain identity authentication, implemented based on a ship multimode communication method based on blockchain identity authentication as claimed in any one of claims 1 to 6, characterized in that: include: Ship CID generation module, communication verification module, key negotiation module, digital signature generation module, communication encryption module and data supervision module; The ship CID generation module: performs quantization processing on the ship's identity information to obtain the ship's identity feature vector, and performs hashing on the ship's identity information and the identity feature vector to obtain the ship's content identifier CID; The communication verification module: when a ship sends a communication request containing a CID to a recipient, the module queries the validity of the ship's CID through the blockchain, recalculates the hash value based on the ship's identity information and compares it with the ship's CID registered on the blockchain, and verifies the authenticity of the ship's identity information associated with the CID; The key negotiation module: allows the ship and the recipient to select a random number respectively, encrypts the random numbers of both parties, and generates a shared key; The digital signature generation module signs the key negotiation information between the ship and the recipient, and uploads the signature to the blockchain; The communication encryption module: uses a shared key to encrypt and decrypt the communication data between the ship and the receiver; The data supervision module uses blockchain to authenticate the validity of the signature, and after the authentication is passed, the encrypted communication data is recorded in the blockchain.

8. A ship multi-mode communication system based on blockchain identity authentication according to claim 7, characterized in that: The system also includes a key management module, which is used to generate and manage the public and private key pairs of the ship and register the public key of the ship in the blockchain.

9. A ship multi-mode communication system based on blockchain identity authentication according to claim 8, characterized in that: In the digital signature generation module, the ship uses the private key to sign part of the key negotiation information, and the recipient uses the public key to verify the validity of the ship's signature. If the verification is successful, the ship and the recipient jointly complete the final signature.

10. A ship multi-mode communication system based on blockchain identity authentication according to claim 7, characterized in that: The identity information of the vessel includes the vessel's identification code, ship name, ship owner, type, size and performance parameters.

Images