A blockchain-based multi-mode communication method and system for ships

Abstract

This invention discloses a multi-mode communication method and system for ships based on blockchain identity authentication. The method includes the following steps: acquiring the ship's identity information; quantifying the ship's identity information to obtain the ship's identity feature vector; hashing the ship's identity information and identity feature vector to obtain the ship's Content Identifier (CID); registering the generated CID and the ship's identity information in the blockchain; the ship sending a communication request containing the CID to the receiver; upon receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain; if the verification is successful, the subsequent steps are executed; otherwise, the ship's communication request is rejected; the ship and the receiver conduct key negotiation, encrypting the communication data of both parties using the negotiated key; both parties sign the negotiation process and upload the signatures to the blockchain; the blockchain authenticates the signatures, and upon successful authentication, records the encrypted communication data in the blockchain.

Description

Technical Field

[0001] This invention relates to the field of ship communication technology, specifically to a ship multi-mode communication method and system based on blockchain identity authentication. Background Technology

[0002] Driven by globalization and the maritime economy, maritime communication has become crucial for ensuring the efficiency, safety, and regulation of maritime transport. With the rapid development of the shipping industry, the increase in the number of vessels, and the frequency of shipping activities, the demand for maritime communication is growing. During maritime communication, vessel authentication is necessary to ensure the accuracy and security of information, prevent illegal activities, and meet international regulatory requirements. Effective vessel authentication is essential for maritime navigation safety, maritime supervision, and emergency rescue.

[0003] To address the authentication issues in maritime communications, existing technologies primarily rely on paper documents and single electronic systems. Paper documents, such as ship certificates and nautical charts, are used to verify the vessel's legitimacy and navigational intent. Meanwhile, electronic systems such as Automatic Identification Systems (AIS), radio communications, and satellite communications provide vessels with real-time communication and data exchange capabilities. These technologies, to a certain extent, meet basic communication and authentication needs; however, with the rapid development of the shipping industry and the surge in the number of vessels, the capacity and security of existing communication systems are increasingly insufficient to meet the demands of the ever-changing communication environment.

[0004] While existing technologies have alleviated the problems of maritime communication to some extent, several issues remain. Traditional paper documents are easily lost or damaged, and are not easily updated or verified in real time. Single electronic systems, such as AIS and radio communication, suffer from limited transmission distances, susceptibility to severe weather conditions, limited frequency resources, and security vulnerabilities, making information easily intercepted and cracked. These problems not only threaten the safety of ship navigation but also challenge the effectiveness of maritime supervision and emergency rescue, while reducing the convenience and reliability of maritime communication. Summary of the Invention

[0005] This invention proposes a multi-mode communication method and system for ships based on blockchain identity authentication, which solves the problem of low security in existing ship identity authentication methods.

[0006] To address the aforementioned technical problems, this invention provides a ship multi-mode communication method based on blockchain identity authentication, comprising the following steps:

[0007] Step S1: Use the ship's identification code, ship name, ship owner, type, size and performance parameters as the ship's identity information. Quantify the ship's identity information to obtain the ship's identity feature vector. Hash the ship's identity information and identity feature vector to obtain the ship's content identifier (CID). Register the generated CID and the ship's identity information in the blockchain.

[0008] Step S2: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S3 is executed; otherwise, the receiver rejects the ship's communication request.

[0009] Step S3: The ship and the receiver conduct key negotiation, encrypt the communication data between the two parties using the negotiated key, sign the negotiation process, and upload the signatures to the blockchain;

[0010] Step S4: The blockchain verifies the validity of the signature. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

[0011] Preferably, in step S1, a public-private key pair is generated for the ship, and the public key is sent to the blockchain.

[0012] Preferably, in step S2, after receiving the communication request, the recipient verifies the validity of the ship's CID through blockchain, including the following steps:

[0013] Step S21: The receiver extracts the ship's identity information and CID from the communication request and queries the validity of the ship's CID through the blockchain;

[0014] Step S22: Quantize the extracted ship identity information to obtain the ship identity feature vector, and hash the ship identity information and identity feature vector;

[0015] Step S23: Compare the generated hash value with the extracted ship CID. If they are the same, the ship's identity information is considered to be genuine. When the CID is valid and the ship's identity information is genuine, communication is agreed upon.

[0016] Preferably, the key negotiation between the ship and the receiver in step S3 includes the following steps:

[0017] Step S301: The ship selects a random number kA, signs kA with its private key to obtain RA, and hashes RA to obtain RA';

[0018] Step S302: Send RA and RA' to the receiver. The receiver decrypts RA' to obtain RA and uses the ship's public key to verify the validity of RA.

[0019] Step S303: The receiver selects a random number kB, hashes RA' and kB to obtain RB, and returns RB to the ship;

[0020] Step S304: The ship uses the public key to encrypt the received information RB and the random number kA to obtain the first shared key; the receiver uses the public key to encrypt the received information RA, RA' and the random number kB to obtain the second shared key.

[0021] Step S305: Merge the first shared key and the second shared key to obtain the complete shared key.

[0022] Preferably, the signing of the negotiation process by both parties in step S3 includes the following steps: the ship signs part of the negotiation information using its private key, the recipient verifies the validity of the ship's signature using its public key, and if the verification is successful, the ship and the recipient jointly complete the final signing.

[0023] Preferably, the blockchain performs signature validity authentication in step S4, which includes the following steps: the blockchain obtains the public keys of both communicating parties, splits the final signature into the signatures of the ship and the receiver respectively, and verifies the signatures using the corresponding public keys to ensure that the signature was generated by a legitimate communicating party.

[0024] This invention also provides a ship multi-mode communication system based on blockchain identity authentication, implemented based on the above-mentioned ship multi-mode communication method based on blockchain identity authentication, including: a ship CID generation module, a communication verification module, a key negotiation module, a digital signature generation module, a communication encryption module, and a data supervision module;

[0025] The ship CID generation module: quantifies the ship's identity information to obtain the ship's identity feature vector, and hashes the ship's identity information and identity feature vector to obtain the ship's content identifier (CID);

[0026] The communication verification module: When the ship sends a communication request containing the CID to the receiver, this module queries the validity of the ship's CID through the blockchain, recalculates the hash value based on the ship's identity information, and compares it with the ship's CID registered on the blockchain to verify the authenticity of the ship's identity information associated with the CID.

[0027] The key negotiation module allows the ship and the recipient to each select a random number, encrypt the random numbers from both parties, and generate a shared key.

[0028] The digital signature generation module: signs the key negotiation information between the ship and the recipient, and uploads the signature to the blockchain;

[0029] The communication encryption module uses a shared key to encrypt and decrypt communication data between the ship and the receiver.

[0030] The data supervision module uses blockchain to verify the validity of signatures. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

[0031] Preferably, the system further includes a key management module, which is used to generate and manage the ship's public and private key pairs and register the ship's public key in the blockchain.

[0032] Preferably, in the digital signature generation module, the ship uses its private key to sign part of the key negotiation information, and the recipient uses its public key to verify the validity of the ship's signature. If the verification is successful, the ship and the recipient jointly complete the final signature.

[0033] Preferably, the vessel's identity information includes the vessel's identification code, name, owner, type, size, and performance parameters.

[0034] The advantages of this invention include at least the following:

[0035] 1. By quantifying the ship's identification information such as its identification code, name, owner, type, size, and performance parameters, and then generating the ship's Content Identifier (CID) through a hash algorithm, the ship's CID has extremely high uniqueness.

[0036] 2. Registering the ship's identity information and CID on the blockchain ensures the long-term security and reliability of the ship's identity information. Furthermore, any entity that needs to verify the ship's identity can query and verify the validity of the ship's CID through the blockchain network without relying on a centralized authority.

[0037] 3. Key negotiation and encrypted communication ensure the security of data transmission between the ship and the receiver, preventing data from being intercepted or tampered with during transmission. Attached Figure Description

[0038] Figure 1 This is a schematic diagram of the method flow according to an embodiment of the present invention;

[0039] Figure 2 This is a schematic diagram of the device used for communication between the ship and the receiver in an embodiment of the present invention;

[0040] Figure 3 This is a schematic diagram illustrating the process of registering ship identity information in a blockchain according to an embodiment of the present invention;

[0041] Figure 4 This is a schematic diagram of the key distribution process according to an embodiment of the present invention. Detailed Implementation

[0042] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of the present invention.

[0043] Traditional ship identity authentication methods rely on paper documents or single electronic systems. These methods are not only susceptible to forgery and tampering but also suffer from cumbersome and inefficient authentication processes. Ships frequently communicate with shore-based systems, other vessels, and maritime authorities during navigation. However, single communication methods often cannot adapt to changing communication environments and demands, leading to communication instability and information transmission delays. Furthermore, the rapid development of the shipping industry and the surge in the number of ships have placed higher demands on the capacity and security of communication systems. To address these issues, this invention proposes a multi-mode ship communication method and system based on blockchain identity authentication. It aims to fundamentally solve the security problem of ship identity authentication by leveraging the immutability of blockchain technology and the flexibility of multi-mode communication technology, thereby improving communication efficiency and flexibility and meeting the shipping industry's urgent need for efficient, secure, and reliable communication.

[0044] like Figure 1 As shown, the method includes the following steps:

[0045] Step S1: Generate a public-private key pair for the ship.

[0046] Specifically, the ship in this embodiment of the invention is equipped with a communication device, the structure of which is as follows: Figure 2 As shown, the system includes: a processor, a power supply, a data storage module, a communication module, an audio module, and a human-computer interaction and expansion module. The processor is responsible for efficiently packaging the processed and optimized ship data into new blocks. Simultaneously, the processor is also responsible for initiating and verifying smart contract communication requests closely related to ship identification code authentication, ensuring that all operations comply with preset rules and logic. To ensure data security and privacy, the processor also performs strict encryption processing on parts involving sensitive information, ensuring that the transmission and storage of data in the blockchain network are in a highly secure state. The power supply provides power to the entire system. The data storage module stores a ship database containing information such as ship identification code, ship name, ship type, and navigation area. The communication module uses a method such as 4G to achieve communication between the ship and the receiving communication device. The audio module receives audio input from external sources and another communication device, and outputs processed audio data. The human-computer interaction and expansion module is used to input the ship identification code into the communication device and display various information, including but not limited to text and graphics.

[0047] Before starting the device, an installation check and power self-test are required. After the device is started, it automatically generates a public-private key pair for the ship, including a private key d and a public key pk. The private key d is encrypted and securely stored in a dedicated storage area inside the device to prevent unauthorized access. The public key pk is sent to the blockchain network and registered in a specific smart contract.

[0048] Step S2: Obtain the ship's identity information, generate a Content Identifier (CID) based on the ship's identity information, and register the generated CID and the ship's identity information into the blockchain.

[0049] Specifically, in addition to basic ship information such as the ship's identification code (IMO), ship name, shipowner, and ship type, the embodiments of the present invention also collect more detailed ship characteristic information, such as the ship's construction location, construction year, hull material, propulsion method, engine model, generator model, and other major equipment information, as well as any special ship markings or signs as the ship's identity information.

[0050] All collected information is standardized to ensure consistent formatting and remove redundant and erroneous data. Dates are formatted to a unified international standard format, and text information is converted to a format without spaces and special characters.

[0051] Based on the ship's identity information, a feature vector is generated. This feature vector contains information in multiple dimensions: the ship's dimensions, such as length, width, and draft; performance parameters, such as speed and range; and special equipment configurations. The feature vector is obtained through quantification of the ship's information, such as converting dimension information to metric units and performance parameters to numerical values ​​in standard units.

[0052] Simultaneously, a timestamp related to the current time is generated and added to the ship's identification information. The standardized ship identification information and feature vector are then input into a hash algorithm. The hash algorithm generates a fixed-length hash value, which is the ship's identifier (CID).

[0053] like Figure 3 As shown, the generated CID, timestamp, digital signature, and detailed identity information of the vessel are registered on the blockchain. A smart contract related to the CID is created on the blockchain to store and manage all information related to the CID.

[0054] Step S3: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S4 is executed; otherwise, the receiver rejects the ship's communication request.

[0055] Specifically, the vessel sends a communication request containing its CID to a recipient, such as a port or maritime authority, via a device. Upon receiving the request, the recipient checks the validity of the CID through the blockchain network and further verifies the authenticity of the vessel's identity information associated with the CID. The recipient then generates a new hash value by inputting the same vessel identity information and feature vector into a hash algorithm and adding a corresponding timestamp. This newly generated hash value is compared with the CID registered on the blockchain; if they match, the verification is successful. If the CID is valid and the vessel's identity information is authentic, the recipient confirms and agrees to continue communication; otherwise, the communication request is rejected.

[0056] Step S4: The ship and the receiver negotiate a key, encrypt the communication data between the two parties using the negotiated key, sign the negotiation process, and upload the signature to the blockchain.

[0057] Specifically, to ensure communication security, the ship and the receiver negotiate a key, using the negotiated key to encrypt and decrypt the communication data between the two parties, such as... Figure 4 As shown, it includes the following steps:

[0058] Step S401: The ship selects a random number kA, signs kA with its private key to obtain RA, and hashes RA to obtain RA'.

[0059] The ship first generates a high-entropy random number kA, which is used as the random value during key negotiation. Then, it signs the random number kA using its private key to generate RA. That is, RA = sign. 私钥 (kA), which means that RA is a digital signature of kA, and only the ship with the corresponding private key can generate a valid RA. Finally, RA is hashed to generate a digest RA', which reduces the amount of data or is used for fast verification.

[0060] Step S402: The ship sends RA and RA' to the receiver. After receiving RA and RA', the receiver decrypts RA' to obtain RA and uses the ship's public key to verify the validity of RA.

[0061] The recipient uses its private key to decrypt RA' and obtain RA. After obtaining RA, the recipient uses the ship's public key to verify the RA's signature, ensuring that RA was indeed generated by the ship and that kA has not been tampered with. If the verification passes, it means that RA' is valid and RA has not been tampered with.

[0062] Step S403: The receiver selects a random number kB and hashes RA' and kB to obtain RB.

[0063] The receiver generates a high-entropy random number kB for the key negotiation process. By hashing the receiver's random number kB with RA', an intermediate value RB is generated, ensuring that the generation of RB is associated with RA' to prevent security threats such as replay attacks, i.e., RB = H(kB||RA).

[0064] Step S404: The receiver returns the RB to the ship.

[0065] Step S405: The ship uses the public key to encrypt the received information RB and the random number kA to obtain the first shared key; the receiver uses the public key to encrypt the received information RA, RA′ and the random number kB to obtain the second shared key.

[0066] Step S406: Merge the first shared key and the second shared key to obtain the complete shared key.

[0067] Both parties sign the negotiation process and upload the signatures to the blockchain, including the following steps:

[0068] Step S411: The ship uses its private key d to sign part of the negotiated information to generate s′.

[0069] Step S412: The ship and the receiver work together to complete the final signature (r,s) to ensure that both parties acknowledge the content of the communication and prevent tampering.

[0070] After the ship generates s′ using its private key d, s′ serves as the ship's initial signature on the negotiated information, proving its authenticity and integrity. Subsequently, the ship and the recipient, based on s′ and their respective generated random numbers, collaboratively use their private keys to jointly sign the entire key negotiation process, forming the final signature (r, s). The final signature (r, s) ensures that both parties acknowledge and agree to the negotiated content, preventing any tampering.

[0071] Step S413: Encrypt the signature (r,s), or upload the signature (r,s) securely to the blockchain smart contract as proof of the validity of the communication.

[0072] After the joint signature is completed, the ship and the recipient encrypt the signature (r,s) or securely upload it to the blockchain smart contract as proof of the validity of the communication. Through this process, s' not only verifies the source of the ship's initial information but also provides the basis for the final signature, ensuring the security and trustworthiness of the entire key negotiation process, thereby guaranteeing that the communication data recorded on the blockchain is legitimate and tamper-proof.

[0073] Step S5: The blockchain verifies the validity of the signature. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

[0074] Specifically, all verification requests from both communicating parties are automatically executed via smart contracts triggered by the blockchain network. The smart contract first verifies the validity of the signature (r,s) to ensure the authenticity of the identities and information of both parties. After successful signature verification, the smart contract checks whether the CID matches the record on the blockchain, confirming that the CID has not been tampered with and that the associated ship information remains valid.

[0075] Once verification is successful, the smart contract will generate an authentication result, which includes information such as the identities of both communicating parties, the communication time, and a summary of the communication content. By recording the authentication result on the blockchain, the immutability and distributed nature of the blockchain are used to ensure the authenticity and traceability of the communication information.

[0076] Specifically, when verifying the validity of the final signature in the blockchain, the blockchain first extracts the signature and its associated negotiation data from the record. Then, it retrieves the public keys of both communicating parties from a pre-registered or stored public key store. The final signature is then split into signature parts for the ship and the receiver, and each signature is verified using its corresponding public key to ensure that the signature was indeed generated by the legitimate communicating party and that the negotiation data has not been tampered with. If all signature verifications pass, the blockchain confirms the authenticity and integrity of the communication record and permanently stores it on the chain; if any part fails verification, the blockchain rejects the record, thus ensuring the security and trustworthiness of the system. This verification process relies on standard digital signature algorithms such as ECDSA, proper public key management, and the integrity of the negotiation data to ensure the security and reliability of the entire communication protocol.

[0077] This invention also provides a ship multi-mode communication system based on blockchain identity authentication, implemented based on the above-mentioned ship multi-mode communication method based on blockchain identity authentication, including: a key management module, a ship CID generation module, a communication verification module, a key negotiation module, a digital signature generation module, a communication encryption module, and a data supervision module.

[0078] The key management module is used to generate and manage the ship's public and private key pairs, and to register the ship's public key in the blockchain.

[0079] The ship CID generation module is used to quantify the ship's identity information to obtain the ship's identity feature vector, and to hash the ship's identity information and identity feature vector to obtain the ship's content identifier (CID).

[0080] The communication verification module is used to query the validity of the ship's CID through the blockchain when the ship sends a communication request containing the CID to the receiver. It recalculates the hash value based on the ship's identity information and compares it with the ship's CID registered on the blockchain to verify the authenticity of the ship's identity information associated with the CID.

[0081] The key negotiation module allows the ship and the recipient to each select a random number, encrypt the random numbers of both parties, and generate a shared key.

[0082] The digital signature generation module is used to sign the key negotiation information between the ship and the recipient, and upload the signature to the blockchain.

[0083] The communication encryption module uses a shared key to encrypt and decrypt communication data between the ship and the receiver.

[0084] The data supervision module uses blockchain to verify the validity of signatures. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

[0085] The method of this invention generates a composite, unique ship identification code by combining the ship's official identification code with the hash value of the device's public key. Utilizing the distributed ledger characteristics of blockchain, it ensures the uniqueness and immutability of this identification code. This effectively solves the forgery and tampering problems that may exist in traditional ship identification methods, improving the security and reliability of ship identity authentication.

[0086] Leveraging the decentralized nature of blockchain, globally distributed verification of ship identification codes has been achieved. Any entity needing to verify a ship's identity can query and verify the validity of the identification code through the blockchain network, without relying on a centralized authority. This decentralized verification method not only improves verification efficiency but also reduces the risk of centralized institutions being attacked or tampered with.

[0087] Based on ship identification code authentication and combined with encrypted communication technology, secure communication is achieved between ships or between ships and shore-based systems. A public-private key encryption system ensures the confidentiality and integrity of communication content, preventing data theft or tampering during transmission. This effectively enhances the security of ship communication and provides strong support for the smooth operation of maritime transport.

[0088] The blockchain in this invention provides the foundation for identity verification, recording and verification, transparency, and trust, while the key negotiation mechanism ensures the security of the communication process and the confidentiality of the data. These two mechanisms work together to achieve a secure, efficient, and transparent ship identification code authentication and communication process throughout.

[0089] By leveraging the smart contract functionality of blockchain, a flexible access control mechanism can be implemented. Different entities, such as ship owners, operators, and port management agencies, can be granted different access permissions and data operation rights as needed. This granular access control protects data sensitivity while ensuring efficient collaboration among all parties.

[0090] This method and system consider cross-platform compatibility and interoperability, enabling seamless integration and interaction between ships of different manufacturers and models, as well as shore-based systems. By adhering to unified communication protocols and standards, ships can easily establish connections and transmit data. Meanwhile, the modular design ensures high cohesion among each module in the system, and the reserved serial port interface allows for external module connection to achieve additional functions, giving the device a degree of upgradeability.

[0091] This invention also provides a microcontroller unit (MCU) specifically designed for ship communication. This MCU integrates at least one processor, memory, at least one network interface, and a user interface, and achieves communication between the components through a bus system. This MCU is designed to support ship identity authentication processes based on blockchain technology, ensuring communication security and data integrity. Using the ship's MCU as the processing core reduces installation costs and provides portability.

[0092] The processor is responsible for executing programs and instructions stored in memory, including but not limited to blockchain transaction processing, encryption / decryption operations, and data verification. During ship identity authentication, the processor processes data from the network interface and user interface, and makes decisions based on preset algorithms and logic.

[0093] Memory is divided into volatile memory such as RAM and non-volatile memory such as ROM and EEPROM. Memory is used to store operating systems, applications, blockchain data, ship identity information, and authentication records. The programs and instructions stored in memory can be called by the processor to implement the relevant functions of ship identity authentication.

[0094] The network interface supports wired and / or wireless connections for data transmission with blockchain networks, other computer devices, or ship communication systems. During ship identity authentication, the network interface is responsible for sending and receiving authentication requests, responses, and blockchain transaction data.

[0095] The user interface includes input / output devices such as a screen and audio, used for interaction with the user. Users can use the user interface to input vessel identification information, view authentication results, or perform other related operations.

[0096] The bus system includes a data bus, a power bus, a control bus, and a status signal bus, which are used to enable communication between the components.

[0097] Based on the aforementioned method, system, and microcontroller unit (MCU), this embodiment of the invention provides a multi-mode communication software, including: an operating system, an application program, and a blockchain interface. The operating system provides basic system services such as resource management, task scheduling, and process management, and supports the operation of various applications, including an application for ship identity authentication. The applications include general-purpose applications such as media players and browsers, as well as applications specifically for ship identity authentication. The ship identity authentication application is responsible for processing user input, calling the blockchain interface, executing authentication logic, and displaying authentication results. The blockchain interface provides an interface for interacting with the blockchain network, including sending transactions, querying blocks, and verifying transactions. During the ship identity authentication process, the blockchain interface communicates with the blockchain network to verify the authenticity and validity of the ship's identity information.

[0098] In practical applications, the following steps are used to authenticate a ship's identity:

[0099] Step 1: The user enters the vessel's identity information, such as IMO number, vessel name, and owner information, through the user interface.

[0100] Step 2: The application receives the information entered by the user and performs preliminary verification and formatting.

[0101] Step 3: The application generates an authentication request based on the processed information and sends it to the blockchain network through the network interface.

[0102] Step 4: Nodes in the blockchain network receive authentication requests and verify them based on the ship identity information stored on the blockchain. The verification result is returned to the application through the blockchain interface.

[0103] Step 5: The application receives the verification result and displays it to the user through the user interface.

[0104] To more clearly demonstrate the operational flow of the method of the present invention, the implementation process of the method is described in detail by substituting specific data.

[0105] Step 1: Generate public and private key pairs.

[0106] When the device is first started, its internal system automatically generates a public-private key pair. For example, the generated private key d can be a 64-bit random number, such as d = 1234567890abcdef1234567890abcdef. The public key pk is calculated using the elliptic curve cryptography algorithm on the private key d, for example, pk = 0x04c7e9b5db6dc8a08b0a22e22b8e5a43f586a4d83b1e1b2e9f0a5b8b5d73b96a2a54c3e4a6d5d5e4a11b30e88e2e8e2c182a1c6a076d1005f2c2e28e2d1d3c5b49f3.

[0107] The generated private key d is encrypted and securely stored in a dedicated storage area inside the device, while the public key pk is used for subsequent operations.

[0108] Step 2: Public key registration and CID generation.

[0109] The public key (PK) is sent to the blockchain network and registered in a specific smart contract. Simultaneously, basic ship information, including the ship's identification number, name, owner, and type, is collected, along with more detailed ship characteristics such as construction location, year of construction, hull material, propulsion method, and major equipment information, as the ship's identity information. For example, a ship might have the IMO number IMO 987654321, name MV OceanVoyager, owner Ocean Shipping Co., type Cargo Ship, construction location Shanghai, China, year of construction 2020, hull material Steel, propulsion method Diesel Engine, engine model XYZ1234, and generator model ABC5678.

[0110] This information is standardized, for example, by formatting dates to an international standard format and converting text information into a format without spaces and special characters. Then, a feature vector is generated based on this information; for example, a ship's dimensions are 200m in length, 30m in width, and 10m in draft, with performance parameters including a speed of 25 knots and a range of 10,000 nautical miles. Simultaneously, a timestamp related to the current time is generated, such as 2024-11-15T12:00:00Z, and added to the ship's identity information. The standardized ship identity information and feature vector are then input into a hash algorithm such as SHA-256 to generate a fixed-length unique hash value as the ship's Content Identifier (CID). For example, the generated CID might be e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

[0111] The generated CID, timestamp, digital signature, and ship details are registered on the blockchain, and a smart contract associated with the CID is created on the blockchain to store and manage all information related to the CID.

[0112] Step 3: The vessel sends a request containing the CID to the recipient via its device. Upon receiving the request, the recipient queries the validity of the CID through the blockchain network. It further verifies the authenticity of the vessel's identity information associated with the CID by inputting the same vessel identity information and feature vector back into the hash algorithm, adding a corresponding timestamp, and generating a new hash value. This newly generated hash value is compared with the CID registered on the blockchain; if they match, the verification is successful.

[0113] Step 4: The ship selects a random number kA = 987654321, and the receiver selects a random number kB = 123456789.

[0114] The ship uses its private key d or other security mechanism to calculate RA and RA′ and sends them to the receiver. The receiver verifies the validity of RA′. The receiver calculates RB based on RA′ and returns it to the ship. The ship and the receiver calculate a shared key based on the information they each received and their own random numbers.

[0115] Step 5: The ship uses its private key d to sign part of the negotiated information, generating s′. The user and the recipient collaborate to complete the final signature (r, s), and then encrypt or securely upload it to the blockchain smart contract.

[0116] Step 6: The ship and the receiver communicate and use a shared key to encrypt and decrypt the communication data.

[0117] Step 7: All verification requests from both the ship and the recipient trigger the automatic execution of a smart contract through the blockchain network. The smart contract first verifies the validity of the signature, and then checks the consistency between the CID and the record on the blockchain.

[0118] Step 8: Once the verification is successful, the smart contract will generate an authentication result including the identities of both communicating parties, the communication time, and a summary of the communication content, and record the authentication result on the blockchain.

[0119] This invention constructs an efficient, secure, and reliable ship identification method by integrating the immutability of blockchain technology with the flexibility of multi-mode communication. This method generates a unique and tamper-proof ship identification code and tightly integrates it with advanced public-key encryption technology, thus providing dual protection for the authenticity of the ship's identity and the absolute security of communication data. Furthermore, this invention supports diverse communication modes, enabling ships to conduct stable and encrypted data exchange in global waters, ensuring uninterrupted communication regardless of environmental changes.

[0120] It is worth mentioning that the automated execution mechanism of smart contracts greatly simplifies the authentication process and significantly improves operational efficiency, bringing unprecedented convenience and a foundation of trust to the field of maritime traffic management and supervision. Furthermore, the invention is flexible in design, allowing for adjustments to communication strategies based on the operational scenarios and actual needs of different vessels, and it reserves ample room for functional expansion, indicating its broad application prospects and profound research value in multiple fields.

[0121] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described; only preferred embodiments of the present invention are illustrated. The descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the present invention. As long as the combination of these technical features does not contradict each other, it should be considered within the scope of this specification.

[0122] It should be noted that those skilled in the art can make various modifications and improvements without departing from the inventive concept, and these all fall within the scope of protection of this invention. Therefore, the scope of protection of this invention should be determined by the appended claims.

Claims

1. A ship multi-mode communication method based on blockchain identity authentication, characterized in that, Includes the following steps: Step S1: Use the ship's identification code, ship name, ship owner, type, size and performance parameters as the ship's identity information. Quantify the ship's identity information to obtain the ship's identity feature vector. Hash the ship's identity information and identity feature vector to obtain the ship's content identifier (CID). Register the generated CID and the ship's identity information in the blockchain. Step S2: The ship sends a communication request containing the CID to the receiver. After receiving the communication request, the receiver verifies the validity of the ship's CID through the blockchain. If the verification is successful, step S3 is executed; otherwise, the receiver rejects the ship's communication request. Step S3: The ship and the receiver conduct key negotiation, encrypt the communication data between the two parties using the negotiated key, sign the negotiation process, and upload the signatures to the blockchain; Step S4: The blockchain verifies the validity of the signature. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

2. The ship multi-mode communication method based on blockchain identity authentication according to claim 1, characterized in that: In step S1, a public-private key pair is generated for the ship, and the public key is sent to the blockchain.

3. The ship multi-mode communication method based on blockchain identity authentication according to claim 1, characterized in that: In step S2, after receiving the communication request, the recipient verifies the validity of the ship's CID through the blockchain, including the following steps: Step S21: The receiver extracts the ship's identity information and CID from the communication request and queries the validity of the ship's CID through the blockchain; Step S22: Quantize the extracted ship identity information to obtain the ship identity feature vector, and hash the ship identity information and identity feature vector; Step S23: Compare the generated hash value with the extracted ship CID. If they are the same, the ship's identity information is considered to be genuine. When the CID is valid and the ship's identity information is genuine, communication is agreed upon.

4. The ship multi-mode communication method based on blockchain identity authentication according to claim 2, characterized in that: The key negotiation between the ship and the receiver in step S3 includes the following steps: Step S301: The ship selects a random number kA, signs kA with its private key to obtain RA, and hashes RA to obtain RA'; Step S302: Send RA and RA' to the receiver. The receiver decrypts RA' to obtain RA and uses the ship's public key to verify the validity of RA. Step S303: The receiver selects a random number kB, hashes RA' and kB to obtain RB, and returns RB to the ship; Step S304: The ship uses the public key to encrypt the received information RB and the random number kA to obtain the first shared key; the receiver uses the public key to encrypt the received information RA, RA' and the random number kB to obtain the second shared key. Step S305: Merge the first shared key and the second shared key to obtain the complete shared key.

5. A ship multi-mode communication method based on blockchain identity authentication according to claim 2, characterized in that: The signing of the negotiation process by both parties in step S3 includes the following steps: the ship signs part of the negotiation information using its private key, the recipient verifies the validity of the ship's signature using its public key, and if the verification is successful, the ship and the recipient jointly complete the final signing.

6. The ship multi-mode communication method based on blockchain identity authentication according to claim 5, characterized in that: The blockchain in step S4 verifies the validity of the signature, including the following steps: the blockchain obtains the public keys of both communicating parties, splits the final signature into the signatures of the ship and the receiver respectively, and verifies the signatures using the corresponding public keys to ensure that the signature was generated by a legitimate communicating party.

7. A ship multi-mode communication system based on blockchain identity authentication, implemented based on the ship multi-mode communication method based on blockchain identity authentication as described in any one of claims 1 to 6, characterized in that, include: The system includes a ship CID generation module, a communication verification module, a key negotiation module, a digital signature generation module, a communication encryption module, and a data monitoring module. The ship CID generation module: quantifies the ship's identity information to obtain the ship's identity feature vector, and hashes the ship's identity information and identity feature vector to obtain the ship's content identifier (CID); The communication verification module: When the ship sends a communication request containing the CID to the receiver, this module queries the validity of the ship's CID through the blockchain, recalculates the hash value based on the ship's identity information, and compares it with the ship's CID registered on the blockchain to verify the authenticity of the ship's identity information associated with the CID. The key negotiation module allows the ship and the recipient to each select a random number, encrypt the random numbers from both parties, and generate a shared key. The digital signature generation module: signs the key negotiation information between the ship and the recipient, and uploads the signature to the blockchain; The communication encryption module uses a shared key to encrypt and decrypt communication data between the ship and the receiver. The data supervision module uses blockchain to verify the validity of signatures. Once the verification is successful, the encrypted communication data is recorded in the blockchain.

8. A ship multi-mode communication system based on blockchain identity authentication according to claim 7, characterized in that: The system also includes a key management module, which is used to generate and manage the ship's public and private key pairs and register the ship's public key in the blockchain.

9. A ship multi-mode communication system based on blockchain identity authentication according to claim 8, characterized in that: In the digital signature generation module, the ship uses its private key to sign part of the key negotiation information, and the recipient uses its public key to verify the validity of the ship's signature. If the verification is successful, the ship and the recipient jointly complete the final signature.

10. A ship multi-mode communication system based on blockchain identity authentication according to claim 7, characterized in that: The vessel's identity information includes its identification code, name, owner, type, size, and performance parameters.

Images