Blockchain-based web3.0 system registration method and spatial information network system

Abstract

The present disclosure provides a blockchain-based Web3.0 system registration method and a spatial information network system, and is applied to a spatial information network system. When a first consensus ground node receives a user registration request, the first consensus ground node generates a blockchain identity and determines assistance nodes, each of which generates a key fragment. The client and the first consensus ground node generate a user public-private key pair based on system parameters and each key fragment. The first consensus ground node generates user storage information of a mobile user based on the public key in the user public-private key pair and the blockchain identity, and stores the user storage information in the blockchain. Through performance adaptation, scientific screening of assistance nodes is achieved, which not only avoids the efficiency bottleneck of a single node bearing too much load, but also replaces the traditional centralized mechanism with a distributed key fragment generation mode, greatly reducing the risk of single-point failure and the probability of key attack as a whole, while dispersing the computing pressure and improving the efficiency and security of key generation.

Description

Technical Field

[0001] This disclosure relates to blockchain technology, and in particular to a blockchain-based Web3.0 system registration method and spatial information network system. Background Technology

[0002] Web3.0, as the third major evolution of the internet, is characterized by its reliance on blockchain, decentralized technology, and smart contracts. Spatial Information Networks (SINs), three-dimensional networks built on space platforms such as satellites and aircraft, have become an important application scenario for the Web3.0 ecosystem due to their extensive geographical coverage and highly dynamic topology. However, traditional terrestrial network access authentication methods rely on centralized key generation and management mechanisms, which suffer from inherent drawbacks such as complex certificate management and single points of failure. Summary of the Invention

[0003] To address the aforementioned technical issues, this disclosure provides a blockchain-based Web3.0 system registration method and a spatial information network system.

[0004] One aspect of this disclosure provides a blockchain-based Web3.0 system registration method applied to a space information network system. The space information network system includes a terrestrial blockchain network and an inter-satellite blockchain network. The terrestrial blockchain network includes multiple ordinary terrestrial nodes and multiple consensus terrestrial nodes. The method includes: in response to receiving a user registration request from a client for a mobile user, a first consensus terrestrial node generates a blockchain identity for the mobile user, and determines at least one assisting node from the multiple consensus terrestrial nodes based on performance information of each consensus terrestrial node; each of the at least one assisting node generates key fragments; the client and the first consensus terrestrial node generate a user public-private key pair for the mobile user based on system parameters of the space information network system and the key fragments generated by the at least one assisting node; the first consensus terrestrial node generates user evidence information for the mobile user based on the public key in the user public-private key pair and the blockchain identity, and stores the user evidence information in the blockchains corresponding to the terrestrial blockchain network and the inter-satellite blockchain network, so that the mobile user can communicate through the space information network system based on the user evidence information.

[0005] Another aspect of this disclosure provides a Web3.0-based spatial information network system, comprising a terrestrial blockchain network and an inter-satellite blockchain network. The terrestrial blockchain network includes multiple ordinary terrestrial nodes and multiple consensus terrestrial nodes. A first consensus terrestrial node is configured to, in response to receiving a user registration request from a client, generate a blockchain identity for the mobile user, and, based on the performance information of each consensus terrestrial node, determine at least one assisting node among the multiple consensus terrestrial nodes. For each assisting node among the at least one assisting node, the assisting node is configured to generate key fragments. The first consensus terrestrial node is further configured to, in conjunction with the client, generate a public-private key pair for the mobile user based on the system parameters of the spatial information network system and each key fragment; and, based on the public key in the public-private key pair and the blockchain identity, generate user evidence information for the mobile user, and store the user evidence information in the blockchains corresponding to the terrestrial blockchain network and the inter-satellite blockchain network.

[0006] In another aspect of this disclosure, an electronic device is provided, comprising: a memory for storing a computer program; and a processor for executing the computer program stored in the memory, wherein when the computer program is executed, it implements the method described above.

[0007] In one aspect of this disclosure, a computer-readable storage medium is provided having a computer program stored thereon that, when executed by a processor, implements the method.

[0008] Based on the embodiments of this disclosure, the first consensus ground node generates the mobile user's blockchain identity. Assisting nodes are rationally selected based on the performance information of the consensus ground node. Each assisting node generates key fragments. The client and the first consensus ground node combine system parameters and all key fragments to generate a user public-private key pair. The first consensus ground node then generates user evidence storage information based on this public key and the blockchain identity, and stores it synchronously in the ground and inter-satellite blockchain networks. Thus, by achieving scientific selection of assisting nodes through performance adaptation, the efficiency bottleneck of a single node bearing excessive burden is avoided. Furthermore, the distributed key fragment generation mode replaces the traditional centralized mechanism, significantly reducing the risk of single-point failure and the probability of overall key attack. Simultaneously, it distributes computational pressure and improves the efficiency and security of key generation. The synchronous evidence storage design of the dual-blockchain network further ensures the consistency and traceability of user identity and key information, optimizing the overall execution efficiency of the registration process and providing comprehensive support for secure and reliable user access in the space information network. Simultaneously, the ground consensus node and the client jointly generate the mobile user's public-private key pair, eliminating the need to store the user's digital identity certificate and avoiding single-point failure issues.

[0009] The technical solutions of this disclosure will be further described in detail below with reference to the accompanying drawings and embodiments. Attached Figure Description

[0010] The accompanying drawings, which form part of this specification, illustrate embodiments of this disclosure and, together with the description, serve to explain the principles of this disclosure.

[0011] This disclosure will become clearer with reference to the accompanying drawings and the following detailed description, wherein:

[0012] Figure 1 This is a schematic diagram of the structure of a spatial information network system provided in an embodiment of the present disclosure;

[0013] Figure 2 This is a schematic flowchart illustrating a blockchain-based Web3.0 system registration method provided in an exemplary embodiment of this disclosure;

[0014] Figure 3 This is a flowchart illustrating step S120 provided in an exemplary embodiment of this disclosure;

[0015] Figure 4 This is a flowchart illustrating step S123 provided in an exemplary embodiment of this disclosure;

[0016] Figure 5 This is a flowchart illustrating step S130 provided in an exemplary embodiment of this disclosure;

[0017] Figure 6 This is a schematic flowchart of a blockchain-based Web3.0 system registration method provided in another exemplary embodiment of this disclosure;

[0018] Figure 7 This is a schematic flowchart of a blockchain-based Web3.0 system registration method provided in yet another exemplary embodiment of this disclosure;

[0019] Figure 8 This is a structural block diagram of a blockchain-based Web3.0 system registration device provided in an exemplary embodiment of this disclosure;

[0020] Figure 9 This is a schematic diagram of the structure of an application embodiment of the electronic device disclosed herein. Detailed Implementation

[0021] Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that, unless otherwise specifically stated, the relative arrangement, numerical expressions, and values ​​of the components and steps set forth in these embodiments do not limit the scope of the present disclosure.

[0022] Those skilled in the art will understand that the terms "first," "second," etc., in the embodiments of this disclosure are only used to distinguish different steps, devices, or modules, and do not represent any specific technical meaning, nor do they indicate a necessary logical order between them.

[0023] It should also be understood that in the embodiments of this disclosure, "a plurality of" can refer to two or more, and "at least one" can refer to one, two or more.

[0024] It should also be understood that any component, data or structure mentioned in the embodiments of this disclosure can generally be understood as one or more unless expressly defined or given to the contrary in the context.

[0025] Furthermore, the term "and / or" in this disclosure is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, the character " / " in this disclosure generally indicates that the preceding and following related objects have an "or" relationship.

[0026] It should also be understood that the description of the various embodiments in this disclosure emphasizes the differences between the various embodiments, and the similarities or similarities can be referred to each other. For the sake of brevity, they will not be described in detail.

[0027] At the same time, it should be understood that, for ease of description, the dimensions of the various parts shown in the accompanying drawings are not drawn according to actual scale.

[0028] The following description of at least one exemplary embodiment is merely illustrative and is in no way intended to limit this disclosure or its application or use.

[0029] Techniques, methods, and equipment known to those skilled in the art may not be discussed in detail, but where appropriate, such techniques, methods, and equipment should be considered part of the specification.

[0030] It should be noted that similar labels and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be discussed further in subsequent figures.

[0031] The embodiments disclosed herein can be applied to electronic devices such as terminal devices, computer systems, and servers, and can operate together with a wide range of other general-purpose or special-purpose computing system environments or configurations. Examples of well-known terminal devices, computing systems, environments, and / or configurations suitable for use with electronic devices such as terminal devices, computer systems, and servers include, but are not limited to: personal computer systems, server computer systems, thin clients, thick clients, handheld or laptop devices, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputer systems, mainframe computer systems, and distributed cloud computing environments including any of the above systems, etc.

[0032] Electronic devices such as terminal devices, computer systems, and servers can be described in the general context of computer system executable instructions (such as program modules) executed by a computer system. Typically, program modules can include routines, programs, object programs, components, logic, data structures, etc., which perform specific tasks or implement specific abstract data types. Computer systems / servers can be implemented in distributed cloud computing environments, where tasks are executed by remote processing devices linked through communication networks. In distributed cloud computing environments, program modules can reside on local or remote computing system storage media, including storage devices.

[0033] In the disclosed embodiment:

[0034] Web3.0 (the third generation of the Internet) is a user-centric, trustworthy value Internet built on decentralized technologies such as blockchain. Its core is that users have independent control over their data, identity, and assets, and the network architecture is decentralized, allowing value to flow freely.

[0035] In a narrow sense, blockchain technology can be defined as a chain-like data structure that combines data blocks sequentially in chronological order, creating a distributed ledger that is cryptographically guaranteed to be immutable and unforgeable. In a broader sense, blockchain technology can utilize a chain-like data structure to verify and store data, node consensus algorithms to generate and update data, cryptographic methods to ensure the security of data transmission and access, and smart contracts composed of automated script code.

[0036] A space information network system is a network system that uses space platforms (such as geostationary satellites or medium and low orbit satellites, stratospheric balloons, manned or unmanned aircraft, etc.) as carriers to acquire, transmit and process information in real time.

[0037] The basic function of a ground station is to transmit signals to the satellite and receive signals relayed by the satellite from other ground stations. The gateway station, as the data center node of the satellite communication space-ground system, is primarily responsible for the distribution and collection of satellite communication service data. The gateway station has a Network Control Center (NCC).

[0038] The space information network system includes a terrestrial blockchain network and an inter-satellite blockchain network. The terrestrial blockchain network comprises multiple ordinary ground nodes and multiple consensus ground nodes. For example, Figure 1 This is a schematic diagram of the structure of a spatial information network system provided in one embodiment of this disclosure. Figure 1 As shown, the space information network system includes a terrestrial network (terrestrial blockchain network) and an inter-satellite network (inter-satellite blockchain network). The terrestrial blockchain network is a blockchain network jointly constructed by multiple ground stations (ordinary ground nodes) and multiple gateway stations (consensus ground nodes). It serves as the trust core and management center of the entire space information network system, responsible for identity registration, key distribution, and global authentication. The inter-satellite blockchain network is an inter-satellite distributed evidence storage cluster (blockchain network) composed of multiple satellite access points (SAPs). It is responsible for verifying access users, relaying data, and transmitting data on the space side. Satellite access points can be, for example, low Earth orbit (LEO) satellites.

[0039] Consensus ground nodes participate in the blockchain consensus process and are responsible for the management and control of satellite access nodes, such as the registration, selection, and modification of satellite access nodes. Ordinary ground nodes are responsible for communication relay functions, such as forwarding data transmitted from the space network to the space network. In the space information network system, each consensus ground node communicates with at least one satellite access node. Mobile users (MUs) can access the space information network system using clients deployed on electronic devices, which may include at least one of the following: smartphones, smart cars, ships, airplanes, drones, and IoT devices.

[0040] Figure 2 This is a schematic flowchart illustrating a blockchain-based Web3.0 system registration method provided in an exemplary embodiment of this disclosure. This embodiment can be applied to spatial information network systems, such as... Figure 2 As shown, this blockchain-based Web3.0 system registration method may include the following steps:

[0041] In step S100, in response to receiving a user registration request from a client, the first consensus ground node generates the blockchain identity of the mobile user and, based on the performance information of each consensus ground node, determines at least one assisting node from among multiple consensus ground nodes.

[0042] The first consensus ground node is one of multiple consensus ground nodes. The client can be deployed, for example, in a mobile user's electronic device. Communication is established between the client and the consensus ground node.

[0043] Performance information may include, for example, Central Processing Unit (CPU) utilization, memory utilization, and disk utilization. For instance, the first consensus ground node can use system monitoring tools such as Node Exporter to collect the CPU utilization, memory utilization, and disk utilization of each consensus ground node. The performance value of each consensus ground node can be determined using a performance evaluation formula: Performance Value = CPU Utilization × First Preset Weight Value + Memory Utilization × Second Preset Weight Value + Disk Utilization × Third Preset Weight Value. Consensus ground nodes with performance values ​​less than a preset performance threshold are identified as assisting nodes.

[0044] User registration requests include the mobile user's user identifier. The mobile user's blockchain identity is used to identify the mobile user. Each consensus ground node has a ground public-private key pair, which includes a public key and a private key. The public key in the ground public-private key pair is used to verify the signature generated by the private key in the ground public-private key pair, and the private key in the ground public-private key pair is used to sign data or information. The ground public-private key pair can be generated using algorithms such as the SM3 (a cryptographic hash function standard formulated by the State Cryptography Administration of China), symmetric encryption algorithms, or asymmetric encryption algorithms.

[0045] For example, when the first consensus ground node receives a mobile user registration request, it generates n random numbers and selects the q-th random number. Based on the formula Generate blockchain identity for mobile users , User identifier representing a mobile user A pre-defined hash function (e.g., SHA-1 (Secure Hash Algorithm-1)) is provided for the first consensus ground node. The first consensus ground node generates user identity information including its node identifier and blockchain identity. It then signs this identity information using the private key from its ground public-private key pair, obtaining the signed user identity information, which is sent to the client. The client can request the public key from the first consensus ground node's ground public-private key pair, use this public key to verify the signed user identity information, and obtain the blockchain identity upon successful verification.

[0046] Step S110: Each of the at least one assisting node generates a key fragment.

[0047] In one implementation, the first consensus node broadcasts a key generation request to the assisting nodes. Upon receiving the request, each assisting node generates a random value as a key fragment and then sends this fragment to the first consensus ground node. The first consensus ground node can then use the private key from its ground public-private key pair to sign all key fragments and send the signed fragments to the client.

[0048] In step S120, the client and the first consensus ground node generate a user public-private key pair for the mobile user based on the system parameters of the space information network system and the key fragments generated by at least one assisting node.

[0049] The system parameters are the basic data required to generate the keys. A user public-private key pair includes a public key and a private key. The public key is used to verify the signature generated by the private key in the user public-private key pair, and the private key is used to sign data or information.

[0050] For example, the client and the first consensus ground node can use Certificateless Public Key Cryptography (CL-PKC) generation technology to generate a user public-private key pair. Specifically, the client can use the sum of the key fragments as the user secret value, and then generate a part of the public-private key pair based on the user secret value and system parameters using symmetric or asymmetric encryption algorithms. The first consensus ground node generates another part of the public-private key pair using the same encryption algorithm as the client. Finally, the client merges these two parts of the public-private key pair to obtain the user's public-private key pair.

[0051] In step S130, the first consensus ground node generates user evidence information for mobile users based on the public key in the user's public-private key pair and the blockchain identity, and stores the user evidence information in the corresponding blockchains of the ground blockchain network and the inter-satellite blockchain network for evidence storage, so that mobile users can communicate through the space information network system based on the user evidence information.

[0052] In the terrestrial blockchain network, each consensus ground node and each ordinary ground node stores the blockchain corresponding to the terrestrial blockchain network. In the inter-satellite blockchain network, each satellite access node stores the blockchain corresponding to the inter-satellite blockchain network.

[0053] In one implementation, basic information can be composed of the public key from the user's public-private key pair and the blockchain identity. Then, the basic information is signed using the private key from the ground public-private key pair of the first consensus ground node to obtain user evidence information. The first consensus ground node uploads the user evidence information to the blockchain to store the user evidence information in the blockchain corresponding to the ground blockchain network. In addition, the first consensus ground node sends the user evidence information to the satellite access node, and the satellite access node uploads the user evidence information to the blockchain to store the user evidence information in the blockchain corresponding to the inter-satellite blockchain network.

[0054] The client can also store user evidence information. When a mobile user uses the spatial information network system, the spatial information network system can compare the user evidence information sent by the client with the user evidence information stored in the blockchain to determine whether the mobile user can access and use the spatial information network system.

[0055] In this embodiment, the first consensus ground node generates the mobile user's blockchain identity. Based on the performance information of the consensus ground node, assisting nodes are rationally selected. Each assisting node generates key fragments. The client and the first consensus ground node combine system parameters and all key fragments to generate a user public-private key pair. The first consensus ground node then generates user evidence storage information based on this public key and the blockchain identity, and stores it synchronously in the ground and inter-satellite blockchain networks. Thus, by scientifically selecting assisting nodes through performance adaptation, the efficiency bottleneck of a single node bearing excessive burden is avoided. Furthermore, the distributed key fragment generation mode replaces the traditional centralized mechanism, significantly reducing the risk of single-point failure and the probability of overall key attack. Simultaneously, it distributes computational pressure and improves the efficiency and security of key generation. The synchronous evidence storage design of the dual-blockchain network further ensures the consistency and traceability of user identity and key information, optimizing the overall execution efficiency of the registration process and providing comprehensive support for secure and reliable user access in the space information network. Simultaneously, the ground consensus node and the client jointly generate the mobile user's public-private key pair, eliminating the need to store the user's digital identity certificate and avoiding single-point failure issues.

[0056] Figure 3 This is a flowchart illustrating step S120 provided in an exemplary embodiment of this disclosure. In some alternative embodiments, such as Figure 3 As shown, step S120 may include the following steps:

[0057] Step S121: The client generates the first user key data based on system parameters and each key fragment.

[0058] In one implementation, the client adds up the key fragments to obtain the value as the user secret value, and then uses the elliptic curve cryptography (ECC) algorithm to generate the first user key data based on the user secret value and system parameters.

[0059] The client stores temporary public-private key pairs for mobile users. User registration requests may also include the public key from the temporary public-private key pair. The client generates first user key information, signs the first user key information using the private key from the temporary public-private key pair, and obtains signed first user key information, which is then sent to the first consensus ground node. The first user key information includes: the first sub-user public key in the first user key data, the user timestamp, and the blockchain identity. The user timestamp includes the time when the signed first user key information was sent.

[0060] Step S122: The first consensus ground node generates the second user key data based on the system parameters.

[0061] For example, the first consensus ground node uses the public key from the temporary public-private key pair to decrypt the signed first user key information to obtain the first user key information. It calculates the difference between the user's timestamp and the current time. If this difference exceeds a preset time difference threshold, it sends a timeout message to the client, prompting the client to resend the signed user key information. Otherwise, if the difference exceeds the preset time difference threshold, the first consensus ground node can use an elliptic curve cryptography algorithm based on system parameters to generate second user key data.

[0062] The first consensus ground node generates second user key information and uses the private key in its ground public-private key pair to obtain the signed second user key information. The second user key information includes: second user key data, node timestamp, and node identifier of the first consensus ground node. The node timestamp includes the time when the signed second user key information was sent.

[0063] Step S123: The client generates a public-private key pair based on the first user key data and the second user key data.

[0064] In one implementation, the client verifies the second user key information by using the public key pair from the ground public-private key pair of the first consensus ground node to sign the second user key information. Based on the first user key data and the second user key data, the client generates a user public-private key pair using certificate-free public-key cryptography generation technology.

[0065] In this embodiment, the client and the first consensus ground node generate corresponding user key data based on system parameters and key fragments, and then jointly generate user public and private key pairs. This reduces the computational burden of key generation through division of labor and cooperation, and strengthens key security through a multi-subject generation mode. It effectively avoids the risks that may exist in key generation by a single subject, and ensures the secure and efficient generation of user public and private key pairs.

[0066] In some alternative implementations, in embodiments of this disclosure, the system parameters include: base point data and a secure hash function. The base point data includes the base point G (generator) of the elliptic curve. The secure hash function H1 is used to map an input of arbitrary length to an output (hash value) of fixed length.

[0067] Accordingly, in this embodiment of the disclosure, step S121 may include: determining a first sub-user private key based on each key fragment, generating a first sub-user public key based on the first sub-user private key and the base point data, and determining first user key data based on the first sub-user private key and the first sub-user public key.

[0068] For example, the first user key data includes: the first sub-user's private key and the first sub-user's public key.

[0069] On the client side, after receiving the blockchain identity sent by the first consensus ground node, the client adds up the key fragments to obtain the user secret value, and uses this user secret value as the first sub-user's private key. Then utilize Determine the public key of the first sub-user .

[0070] Accordingly, in this embodiment of the disclosure, step S122 may include: obtaining a first node random number; generating user random commitment data based on the first node random number and base point data; generating a second sub-user private key based on a secure hash function, the first node random number, the user random commitment data, the first sub-user public key and the private key in the ground node public-private key pair of the first consensus ground node; and determining the second user key data based on the second sub-user public key and the user random commitment data.

[0071] The second user key data includes: the second sub-user public key and user random commitment data.

[0072] For example, at the first consensus ground node, a random number is generated as the first node's random number. Based on the first node's random number and the base point data, using the formula Determine user random commitment data Using formulas Generate a second sub-user's private key , This refers to the private key in the public-private key pair of the first consensus ground node. For mobile users' user identifiers, This is the user's timestamp. The first consensus ground node sends the second sub-user's public key and the user's random commitment data to the client.

[0073] The first consensus ground node can also utilize the private key pair information in its ground public-private key pair. Perform the signing and pass the signing key information. It is sent to the satellite access node for storage in the corresponding blockchain of the inter-satellite blockchain network. The timestamp when the signature key information was sent. It serves as the node identifier for the first consensus ground node, and simultaneously uses a pre-defined smart contract to store the signature key information in the corresponding blockchain of the ground blockchain network.

[0074] In this embodiment of the disclosure, the multi-stage and multi-dimensional key data construction method not only avoids the risks that may exist in a single generation path, but also improves the anti-attack capability of the key by introducing elements such as random commitment data, thus providing strong support for the secure and reliable generation of public and private key pairs for end users.

[0075] Figure 4 This is a flowchart illustrating step S123 provided in an exemplary embodiment of this disclosure. In some alternative embodiments, such as Figure 4 As shown, step S123 may include the following steps:

[0076] Step S1231: The client generates an initial second sub-user public key based on the second sub-user's private key and the base point data.

[0077] On the client side, based on the formula Generate the initial second sub-user public key .

[0078] Step S1232: Verify the correctness of the initial second sub-user public key.

[0079] Among them, the first verification data is generated. The correctness of the initial second sub-user's public key is verified using the first verification data. When the first verification data is equal to the initial second sub-user public key, the initial second sub-user public key is determined to have passed the correctness verification; when the first verification data is not equal to the initial second sub-user public key, the initial second sub-user public key is determined to have failed the correctness verification. This is the public key in the public-private key pair of the first consensus ground node.

[0080] Step S1233: In response to the initial second sub-user public key passing the correctness verification, the initial second sub-user public key is determined as the second sub-user public key.

[0081] The operation terminates if the initial second sub-user public key fails the correctness verification. If the initial second sub-user public key passes the correctness verification, it is confirmed as the second sub-user public key.

[0082] Step S1234: Based on the first sub-user's public key and the second sub-user's public key, generate the public key in the user's public-private key pair, and send the public key in the user's public-private key pair to the first consensus ground node.

[0083] Among them, based on Generate the public key in the user's public-private key pair. .

[0084] Step S1235: Generate the private key in the user public-private key pair based on the first sub-user's private key and the second sub-user's private key.

[0085] Among them, based on Generate the private key in the user's public-private key pair. .

[0086] Figure 5 This is a flowchart illustrating step S130 provided in an exemplary embodiment of this disclosure. In some alternative embodiments, such as Figure 5 As shown, step S130 may include the following steps:

[0087] Step S131: The first consensus ground node assigns access permissions to mobile users and assigns lifespan to blockchain identities.

[0088] The lifespan is the validity period of the blockchain identity. When the blockchain identity expires, the first consensus ground node can reallocate the lifespan to the mobile user.

[0089] For example, the first consensus ground node stores the access permissions and lifespan of preset users, and can assign the access permissions and lifespan of preset users to mobile users.

[0090] Step S132 involves concatenating access permissions, lifespan, blockchain identity, and encrypted user characteristics to obtain the mobile user's verification information.

[0091] The encrypted user characteristics are obtained by encrypting user features. These user features include: the mobile user's user identifier, blockchain identity, and access permissions.

[0092] For example, at the first consensus ground node, it can be based on the formula: Generate user verification information , This indicates that the public key in the encryption process is performed using the public and private keys of the first consensus ground node. To encrypt user characteristics, For user characteristics, For access permissions, The lifespan.

[0093] Step S133: Generate user evidence storage data based on the public key, blockchain identity, access permissions, lifespan, and user verification information in the user's public-private key pair.

[0094] Specifically, at the first consensus ground node, the user's public key, blockchain identity, access permissions, lifespan, encrypted user characteristics, and user verification information are signed using the private key from the ground public-private key pair of the first consensus ground node to obtain the user's evidence storage data. .

[0095] Figure 6 This is a schematic flowchart illustrating a blockchain-based Web3.0 system registration method provided in another exemplary embodiment of this disclosure. In some alternative implementations, such as... Figure 6 As shown, system parameters are obtained in the following way:

[0096] Step S200: Elect a leader consensus ground node from among multiple consensus ground nodes.

[0097] Among these methods, Practical Byzantine Fault Tolerance (PBFT) or Raft Consensus Algorithm can be used to elect a leader consensus ground node from among multiple consensus ground nodes.

[0098] Step S210: The leader consensus ground node generates base point data, elliptic curve parameters, and a secure hash function.

[0099] Among them, the elliptic curve parameters include: prime region F p and elliptic curve E P (a,b) and base point G. Prime field F pA finite field containing p elements, where p is a large prime number; for example, p can be a 256-bit or 512-bit large prime number. Elliptic curve E P (a,b) represents the region in the finite field F. p The elliptic curve is defined above, where a and b are the curve coefficients of the elliptic curve, satisfying 4a 3 +27b 2 ≠ 0 mod p, where the base point G is a specific point on the elliptic curve and serves as the generator for the key. The cyclic subgroup generated by G has a large prime order. The order of the cyclic subgroup is the size (number of elements) of the cyclic subgroup generated by the base point G, which is usually a large prime number. It defines the range of values ​​for the private key. The base point in the elliptic curve parameters is determined as the base point data.

[0100] For example, the parameters of a standard elliptic curve can be selected as the elliptic curve parameters. For example, the standard elliptic curve can be a curve in the national cryptographic algorithm (such as the curve parameters specified in the national cryptographic algorithm SM2), Curve25519 (elliptic curve 25519) and Curve448 (elliptic curve 448), etc.

[0101] Standard cryptographic hash algorithms can be selected as secure hash functions. For example, standard cryptographic hash algorithms can be SM3 and SHA-256 (Secure Hash Algorithm-256).

[0102] Step S220: Determine system parameters based on base point data, elliptic curve parameters, and secure hash function.

[0103] The system parameters include: base point data, elliptic curve parameters, and secure hash function.

[0104] Step S230: Store the system parameters into the corresponding blockchains of the terrestrial blockchain network and the inter-satellite blockchain network, respectively.

[0105] In one implementation, the system parameters are signed using the private key in the public-private key pair of the ground node of the leadership consensus ground node to obtain signed system parameters. Then, the signed system parameters are stored in the blockchain corresponding to the ground blockchain network and in the blockchain corresponding to the inter-satellite blockchain network.

[0106] Figure 7 This is a schematic flowchart illustrating a blockchain-based Web3.0 system registration method provided in yet another exemplary embodiment of this disclosure. In some alternative implementations, such as... Figure 7 As shown, the Web3.0 system registration method for this blockchain may also include the following steps:

[0107] In step S300, when any satellite access node registers, the satellite access node generates first satellite key data and sends a satellite node registration request to the ground blockchain network.

[0108] The inter-satellite blockchain network includes multiple satellite access nodes. Communication connections exist between the client and these satellite access nodes. The first satellite key data includes a first sub-satellite private key and a satellite node registration request. The satellite node registration request includes the first sub-satellite public key and a satellite timestamp, the timestamp indicating the time the registration request was sent.

[0109] In one implementation, the satellite access node generates a random number as its node secret value and uses this node secret value as the private key of the first sub-satellite. Then utilize Determine the public key of the first subsatellite .

[0110] In step S310, in response to the ground blockchain network receiving the satellite node registration request, the first consensus ground node generates the second satellite key data based on the system parameters.

[0111] The second satellite key data includes: the second sub-satellite private key and satellite random commitment data. The first consensus ground node is one of multiple consensus ground nodes.

[0112] In one implementation, a consensus ground node can be randomly selected from multiple consensus ground nodes as the first consensus ground node. At the first consensus ground node, a random number is generated to serve as the random number for the second node. Based on the random number of the second node and the base point data, using the formula Determine satellite random commitment data Using formulas Generate the private key for the second subsatellite , This serves as the node identifier for the satellite access node. This is the satellite timestamp. The first consensus ground node sends the second satellite key data to the satellite access node.

[0113] In step S320, the satellite access node generates a satellite public-private key pair based on the first satellite key data and the second satellite key data.

[0114] The satellite public-private key pair includes a public key and a private key.

[0115] In one implementation, when the satellite access node receives the second satellite key data, the satellite access node uses the formula... Generate the initial second subsatellite public key Generate second verification data. The correctness of the initial second sub-satellite public key is verified using the second verification data. If the second verification data is equal to the initial second sub-satellite public key, the initial second sub-satellite public key is determined to have passed the correctness verification. If the second verification data is not equal to the initial second sub-satellite public key, the initial second sub-satellite public key is determined to have failed the correctness verification. The operation ends when the initial second sub-satellite public key fails the correctness verification. If the initial second sub-satellite public key passes the correctness verification, the initial second sub-satellite public key is designated as the second sub-satellite public key.

[0116] Based on the first and second sub-satellite public keys, a public key for the satellite public-private key pair is generated and sent to the first consensus ground node. Based on the first and second sub-satellite private keys, a private key for the satellite public-private key pair is generated.

[0117] For example, based on Generate the public key in the satellite public-private key pair .based on Generate the private key in the satellite public-private key pair. The satellite access point sends the public key from its satellite public-private key pair to the first consensus ground node.

[0118] In step S330, the first consensus ground node generates satellite evidence information for the satellite access node based on the public key in the satellite public-private key pair and the node identifier of the satellite access node, and stores the satellite evidence information in the corresponding blockchains of the ground blockchain network and the inter-satellite blockchain network.

[0119] Specifically, when the first consensus ground node receives the public key from the satellite public-private key pair, it uses the private key from the ground public-private key pair of the first consensus ground node to sign the satellite verification information to obtain satellite evidence information. The satellite verification information includes: the public key and node identifier of the satellite access node's satellite public-private key pair, as well as the timestamp of the satellite information and the timestamp of the satellite access node when it sent its public key from the satellite public-private key pair to the first consensus ground node. The satellite information is formed by concatenating the public key and node identifier of the satellite access node's satellite public-private key pair and the timestamp of the timestamp.

[0120] Figure 8 This is a structural block diagram of a Web3.0-based spatial information network system based on blockchain, provided in an exemplary embodiment of this disclosure. The spatial information network system includes a terrestrial blockchain network and an inter-satellite blockchain network, wherein the terrestrial blockchain network includes multiple ordinary terrestrial nodes and multiple consensus terrestrial nodes. Figure 8 As shown, this blockchain-based Web3.0 spatial information network system includes:

[0121] The first consensus ground node 400 is used to respond to a user registration request from a mobile user sent by a client 420, generate the blockchain identity of the mobile user, and determine at least one assisting node among the multiple consensus ground nodes based on the performance information of each consensus ground node.

[0122] For each of the at least one assisting node, the assisting node 410 is used to generate key fragments;

[0123] The first consensus ground node 400 is also used to generate a user public-private key pair for the mobile user with the client based on the system parameters of the space information network system and each key fragment; and the first consensus ground node generates user evidence information for the mobile user based on the public key in the user public-private key pair and the blockchain identity, and stores the user evidence information in the blockchains corresponding to the ground blockchain network and the inter-satellite blockchain network.

[0124] In some alternative examples, in the embodiments described above in this disclosure, the first consensus ground node 400 and the client 420, based on the system parameters of the space information network system and each key fragment, may include:

[0125] The first consensus ground node 400 is used to generate second user key data based on the system parameters;

[0126] The client 420 is further configured to generate first user key data based on the system parameters and the key fragments; and to generate the user public-private key pair based on the first user key data and the second user key data.

[0127] In some optional examples, the system parameters in the above embodiments of this disclosure include base point data;

[0128] The client 420 generates first user key data based on the system parameters and the key fragments, including:

[0129] Based on the key fragments, determine the first sub-user's private key; based on the first sub-user's private key and the base point data, generate the first sub-user's public key; based on the first sub-user's private key and the first sub-user's public key, determine the first user's key data.

[0130] In some optional examples, the system parameters described in the above embodiments of this disclosure further include a secure hash function;

[0131] The first consensus ground node 400 generates second user key data based on the system parameters, including:

[0132] Obtain a first node random number; based on the first node random number and the base point data, generate user random commitment data; based on the secure hash function, the first node random number, the user random commitment data, the first sub-user public key, and the private key in the ground node public-private key pair of the first consensus ground node, generate a second sub-user private key; based on the second sub-user public key and the user random commitment data, determine the second user key data.

[0133] In some optional examples, in the embodiments described above in this disclosure, the client generates the user public-private key pair based on the first user key data and the second user key data, including:

[0134] The client generates an initial second sub-user public key based on the second sub-user private key and the base point data; verifies the correctness of the initial second sub-user public key; in response to the initial second sub-user public key passing the correctness verification, determines the initial second sub-user public key as the second sub-user public key; generates the public key in the user public-private key pair based on the first sub-user public key and the second sub-user public key, and sends the public key in the user public-private key pair to the first consensus ground node; and generates the private key in the user public-private key pair based on the first sub-user private key and the second sub-user private key.

[0135] In some optional examples, in the embodiments described above in this disclosure, the first consensus ground node generates user evidence information for the mobile user based on the public key in the user's public-private key pair and the blockchain identity, including:

[0136] The first consensus ground node assigns access permissions to the mobile user and assigns a lifespan to the blockchain identity; based on the access permissions, the lifespan, the blockchain identity, and encrypted user features, the user verification information of the mobile user is obtained by concatenating the encrypted user features, which are obtained by encrypting user features and include the mobile user's user identifier, the blockchain identity, and the access permissions; based on the public key in the user's public-private key pair, the blockchain identity, the access permissions, the lifespan, and the user verification information, the user's evidence storage data is generated.

[0137] In some optional examples, the blockchain-based Web3.0 spatial information network system in the above embodiments of this disclosure further includes:

[0138] A leader consensus ground node is used to generate base point data, elliptic curve parameters, and a secure hash function; based on the base point data, the elliptic curve parameters, and the secure hash function, system parameters are determined; the system parameters are stored in the blockchains corresponding to the ground blockchain network and the inter-satellite blockchain network, respectively; the leader consensus ground node is elected from among the plurality of consensus ground nodes.

[0139] In some alternative examples, the inter-satellite blockchain network described in the above embodiments of this disclosure includes multiple satellite access nodes;

[0140] Accordingly, the blockchain-based Web3.0 spatial information network system in the above embodiments of this disclosure further includes:

[0141] In any of the satellite access nodes, during registration, the satellite access node generates first satellite key data and sends a satellite node registration request to the terrestrial blockchain network;

[0142] The first consensus ground node is used to generate second satellite key data based on the system parameters in response to the ground blockchain network receiving the satellite node registration request.

[0143] The key synthesis module is used to generate a satellite public-private key pair for the satellite access node based on the first satellite key data and the second satellite key data; generate satellite evidence information for the satellite access node based on the public key in the satellite public-private key pair and the node identifier of the satellite access node; and store the satellite evidence information in the blockchains corresponding to the terrestrial blockchain network and the inter-satellite blockchain network.

[0144] The blockchain-based Web3.0 spatial information network system disclosed herein corresponds to the embodiments of the blockchain-based Web3.0 system registration methods described above, and the relevant content can be referred to each other, which will not be repeated here.

[0145] The beneficial technical effects of the exemplary embodiment of the blockchain-based Web3.0 spatial information network system disclosed herein can be found in the corresponding beneficial technical effects in the exemplary method section above, and will not be repeated here.

[0146] In addition, this disclosure also provides an electronic device, including:

[0147] Memory, used to store computer programs;

[0148] A processor is configured to execute a computer program stored in the memory, wherein when the computer program is executed, it implements the blockchain-based Web3.0 system registration method described in any of the above embodiments of this disclosure.

[0149] Figure 9 This is a schematic diagram illustrating the structure of an application embodiment of the electronic device disclosed herein. Below, reference is made to… Figure 9 This describes an electronic device according to embodiments of the present disclosure. The electronic device may be either or both of a first device and a second device, or a standalone device independent of them, which may communicate with the first device and the second device to receive acquired input signals from them.

[0150] like Figure 9 As shown, the electronic device includes one or more processors and memory.

[0151] A processor can be a central processing unit (CPU) or other form of processing unit with data processing and / or instruction execution capabilities, and can control other components in an electronic device to perform desired functions.

[0152] The memory may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and a processor may execute the program instructions to implement the blockchain-based Web3.0 system registration method and / or other desired functions described in the various embodiments of this disclosure above.

[0153] In one example, the electronic device may also include input devices and output devices, which are interconnected via a bus system and / or other forms of connection mechanism (not shown).

[0154] In addition, the input device may include, for example, a keyboard, a mouse, etc.

[0155] This output device can output various information to the outside, including determined distance information, direction information, etc. The output device may include, for example, a display, a speaker, a printer, and a communication network and its connected remote output devices, etc.

[0156] Of course, for the sake of simplicity, Figure 9 Only some of the components of the electronic device relevant to this disclosure are shown, omitting components such as buses, input / output interfaces, etc. In addition, the electronic device may include any other suitable components depending on the specific application.

[0157] In addition to the methods and apparatus described above, embodiments of this disclosure may also be computer program products comprising computer program instructions that, when executed by a processor, cause the processor to perform the steps in the blockchain-based Web3.0 system registration method according to various embodiments of this disclosure as described in the foregoing portions of this specification.

[0158] The computer program product can be written in any combination of one or more programming languages ​​to perform the operations of the embodiments of this disclosure. The programming languages ​​include object-oriented programming languages ​​such as Java and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on a user's computing device, partially on a user's computing device, as a standalone software package, partially on a user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0159] Furthermore, embodiments of this disclosure may also be computer-readable storage media storing computer program instructions that, when executed by a processor, cause the processor to perform the steps in the blockchain-based Web3.0 system registration method according to various embodiments of this disclosure as described in the foregoing portion of this specification.

[0160] The computer-readable storage medium may be any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof.

[0161] Those skilled in the art will understand that all or part of the steps of the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it performs the steps of the above method embodiments. The aforementioned storage medium includes various media that can store program code, such as ROM, RAM, magnetic disk, or optical disk.

[0162] The basic principles of this disclosure have been described above with reference to specific embodiments. However, it should be noted that the advantages, benefits, and effects mentioned in this disclosure are merely examples and not limitations, and should not be considered as essential features of each embodiment of this disclosure. Furthermore, the specific details disclosed above are for illustrative and facilitative purposes only, and are not limitations. These details do not limit the scope of this disclosure to the necessity of employing the aforementioned specific details for implementation.

[0163] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For system embodiments, since they largely correspond to method embodiments, the description is relatively simple; relevant parts can be referred to the descriptions in the method embodiments.

[0164] The block diagrams of devices, apparatuses, devices, and systems disclosed herein are merely illustrative examples and are not intended to require or imply that they must be connected, arranged, or configured in the manner shown in the block diagrams. As those skilled in the art will recognize, these devices, apparatuses, devices, and systems can be connected, arranged, and configured in any manner. Words such as “comprising,” “including,” “having,” etc., are open-ended terms meaning “including but not limited to,” and are used interchangeably with them. The terms “or” and “and” as used herein refer to the terms “and / or,” and are used interchangeably with them unless the context clearly indicates otherwise. The term “such as” as used herein refers to the phrase “such as but not limited to,” and is used interchangeably with it.

[0165] The methods and apparatus of this disclosure may be implemented in many ways. For example, they may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above-described order of steps for the methods is for illustrative purposes only, and the steps of the methods of this disclosure are not limited to the order specifically described above unless otherwise specifically stated. Furthermore, in some embodiments, this disclosure may also be implemented as a program recorded on a recording medium, the program including machine-readable instructions for implementing the methods according to this disclosure. Thus, this disclosure also covers recording media storing programs for performing the methods according to this disclosure.

[0166] It should also be noted that in the apparatus, devices, and methods of this disclosure, the components or steps can be disassembled and / or recombined. These disassemblies and / or recombinations should be considered as equivalent solutions to this disclosure.

[0167] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use this disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of this disclosure. Therefore, this disclosure is not intended to be limited to the aspects shown herein, but rather to be carried out within the widest scope consistent with the principles and novel features disclosed herein.

[0168] The above description has been given for purposes of illustration and description. Furthermore, this description is not intended to limit the embodiments of this disclosure to the forms disclosed herein. Although numerous exemplary aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, alterations, additions, and sub-combinations therein.

Claims

1. A system registration method for Web3.0 based on blockchain, characterized in that, Applied to a space information network system, the space information network system including a terrestrial blockchain network and an inter-satellite blockchain network, the terrestrial blockchain network including multiple ordinary ground nodes and multiple consensus ground nodes, the method includes: In response to receiving a user registration request from a mobile user sent by a client, the first consensus ground node generates the blockchain identity of the mobile user, and determines at least one assisting node from the plurality of consensus ground nodes based on the performance information of each consensus ground node. Each of the at least one assisting node generates a key fragment; The client and the first consensus ground node generate the mobile user's public-private key pair based on the system parameters of the spatial information network system and the key fragments generated by the at least one assisting node. The first consensus ground node generates user evidence information for the mobile user based on the public key in the user's public-private key pair and the blockchain identity, and stores the user evidence information in the blockchains corresponding to the ground blockchain network and the inter-satellite blockchain network, so that the mobile user can communicate through the space information network system based on the user evidence information.

2. The method according to claim 1, characterized in that, The client and the first consensus ground node generate the mobile user's public-private key pair based on the system parameters and key fragments of the spatial information network system, including: The client generates first user key data based on the system parameters and the key fragments; The first consensus ground node generates second user key data based on the system parameters; The client generates the user public-private key pair based on the first user key data and the second user key data.

3. The method according to claim 2, characterized in that, The system parameters include base point data; the client generates first user key data based on the system parameters and each key fragment, including: Based on the aforementioned key fragments, the first sub-user's private key is determined; Generate the first sub-user's public key based on the first sub-user's private key and the base point data; The first user key data is determined based on the first sub-user's private key and the first sub-user's public key.

4. The method according to claim 3, characterized in that, The system parameters also include a secure hash function; the first consensus ground node generates second user key data based on the system parameters, including: Obtain the first node random number, and generate user random commitment data based on the first node random number and the base point data; Based on the secure hash function, the first node random number, the user random commitment data, the first sub-user public key, and the private key in the ground node public-private key pair of the first consensus ground node, a second sub-user private key is generated; The second user key data is determined based on the second sub-user's private key and the user's random commitment data.

5. The method according to claim 4, characterized in that, The client generates the user public-private key pair based on the first user key data and the second user key data, including: The client generates an initial second sub-user public key based on the second sub-user's private key and the base point data; Verify the correctness of the initial second sub-user public key; In response to the initial second sub-user public key passing the correctness verification, the initial second sub-user public key is determined as the second sub-user public key; Based on the first sub-user public key and the second sub-user public key, generate the public key in the user public-private key pair, and send the public key in the user public-private key pair to the first consensus ground node; Based on the first sub-user's private key and the second sub-user's private key, the private key in the user's public-private key pair is generated.

6. The method according to claim 5, characterized in that, The first consensus ground node generates user evidence information for the mobile user based on the public key in the user's public-private key pair and the blockchain identity, including: The first consensus ground node assigns access permissions to the mobile user and assigns a lifespan to the blockchain identity; The user verification information of the mobile user is obtained by concatenating the access permissions, the lifespan, the blockchain identity, and the encrypted user features. The encrypted user features are obtained by encrypting user features and include the mobile user's user identifier, the blockchain identity, and the access permissions. The user's evidence data is generated based on the public key in the user's public-private key pair, the blockchain identity, the access permissions, the lifespan, and the user verification information.

7. The method according to any one of claims 1-6, characterized in that, The system parameters are obtained in the following manner: Elect a leader consensus ground node from among the plurality of consensus ground nodes; The leadership consensus ground node generates base point data, elliptic curve parameters, and a secure hash function. Based on the base point data, the elliptic curve parameters, and the secure hash function, the system parameters are determined; The system parameters are stored in the blockchains corresponding to the terrestrial blockchain network and the inter-satellite blockchain network, respectively.

8. The method according to claim 1, characterized in that, The inter-satellite blockchain network includes multiple satellite access nodes, and the method further includes: When registering at any of the satellite access nodes, the satellite access node generates first satellite key data and sends a satellite node registration request to the terrestrial blockchain network; In response to the ground blockchain network receiving the satellite node registration request, the first consensus ground node generates second satellite key data based on the system parameters; The satellite access node generates a satellite public-private key pair based on the first satellite key data and the second satellite key data. The first consensus ground node generates satellite evidence information for the satellite access node based on the public key in the satellite public-private key pair and the node identifier of the satellite access node, and stores the satellite evidence information in the blockchains corresponding to the ground blockchain network and the inter-satellite blockchain network.

9. A Web3.0-based spatial information network system, characterized in that, The space information network system includes a terrestrial blockchain network and an inter-satellite blockchain network. The terrestrial blockchain network includes multiple ordinary terrestrial nodes and multiple consensus terrestrial nodes. The first consensus ground node is used to respond to a user registration request sent by a client from a mobile user, generate the blockchain identity of the mobile user, and determine at least one assisting node among the multiple consensus ground nodes based on the performance information of each consensus ground node. The at least one assisting node is used to generate key fragments; The first consensus ground node is also used to generate a public-private key pair for the mobile user with the client based on the system parameters of the spatial information network system and each key fragment; Based on the public key in the user's public-private key pair and the blockchain identity, user evidence information of the mobile user is generated, and the user evidence information is stored in the blockchains corresponding to the terrestrial blockchain network and the inter-satellite blockchain network.

10. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor for executing a computer program stored in the memory, wherein when the computer program is executed, it implements the method described in any one of claims 1-8.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method described in any one of claims 1-8.

Images