A satellite network data consensus method based on space-time dynamic trust

Abstract

The application discloses a satellite network data consensus method based on space-time dynamic trust, and belongs to the technical field of space information network and internet infrastructure. The method comprises the following steps: a space-time driven networking step, based on the orbit ephemeris, the future network topology is predicted, and the nodes with the continuous visible time exceeding the threshold are preferentially selected to dynamically form a consensus group; a trust enhanced consensus step, based on the node dynamic reputation value, weighted voting consensus is carried out, the reputation value is updated according to the historical voting accuracy, the proposal adoption rate and the link stability; a consensus instance synchronization step, the root service data after the consensus forms a distributed root service authority instance in the satellite network; and an elegant degradation survival guarantee step, the temperature of the consensus node is collected in real time through state monitoring, and millisecond-level thermal control reconstruction is realized by adopting a GPU parallel path planning. The application realizes the space-based consensus consistent with the logic of the ground root service system, and guarantees the survivability of the consensus node in the space extreme environment.

Description

Technical Field

[0001] This invention relates to the field of space information network and Internet infrastructure technology, and in particular to a satellite network data consensus method and system for supporting an integrated space-air-ground Internet root service system. Background Technology

[0002] The existing internet relies heavily on a centralized root domain name service system, whose inherent single point of failure and vulnerability to attack pose a fundamental security threat to the global internet. Although the development of low-Earth orbit satellite constellations has made it possible to build a space-based internet, ensuring the reliable operation of critical internet infrastructure (such as root services) in a high-speed, dynamic satellite network presents significant challenges.

[0003] In existing technologies, there exists a "blockchain sharding consensus method based on low-Earth orbit satellite constellations." This technology improves the performance of blockchain in satellite networks through sharding, but it has fundamental flaws: First, its consensus mechanism cannot effectively adapt to the dynamic changes in the topology of satellite networks, and frequent node entry and exit lead to low consensus efficiency; second, its equal voting mechanism is difficult to resist Byzantine node attacks in the space environment; most importantly, this solution builds an independent and closed blockchain system, which is incompatible with the existing Internet root service system and cannot achieve seamless coexistence.

[0004] Furthermore, existing technologies generally overlook the survivability of space-based consensus nodes in extreme space environments: micrometeoroid impacts, space debris collisions, and extreme thermal stress can lead to localized failures of consensus nodes. Traditional solutions rely on hardware redundancy (such as backup nodes), but this approach is costly, heavy, and cannot cope with simultaneous failures at multiple points.

[0005] Therefore, there is an urgent need in this field for a new consensus solution that can deeply integrate the spatiotemporal characteristics of satellite networks, possess an inherent security mechanism, and be able to coordinate and cooperate with the existing Internet root service system, while also having the ability to survive in extreme space environments. Summary of the Invention

[0006] The purpose of this invention is to overcome the shortcomings of the prior art and provide a satellite network data consensus method, system and device based on spatiotemporal dynamic trust, so as to build a space-based distributed root service system that is equivalent to and symbiotic with the ground root service system.

[0007] To achieve the above objectives, the present invention adopts the following technical solution: Firstly, this invention provides a satellite network data consensus method based on spatiotemporal dynamic trust. The core of this method lies in constructing a consensus mechanism that coordinates two dimensions of "spatiotemporal-trust," and integrating hardware survivability guarantees. Spatiotemporal driven networking: Based on the determinism of satellite orbital ephemeris data, it predicts future network topology changes and proactively selects nodes that can maintain stable connections within a preset time window to form a consensus group. This fundamentally solves the consensus stability problem caused by the high dynamism of satellite networks.

[0008] Trust-enhanced consensus: Within a stable consensus group, a dynamic reputation model based on node historical behavior is introduced to achieve weighted voting consensus. Reputable nodes have greater weight in the consensus process, while the influence of abnormal nodes is automatically suppressed, thereby significantly improving the system's security and efficiency.

[0009] Graceful degradation survival guarantee: The consensus node's temperature, power consumption and health status data are collected in real time by the status monitoring unit. GPU parallel path planning and pre-reconstruction technology are used to realize millisecond-level thermal control reconstruction of overheated nodes, ensuring the survivability of the consensus node in extreme space environments.

[0010] Through the synergistic effect of the above mechanisms, Internet root service data reaches a consensus in the satellite network, forming a distributed root service authoritative instance that is consistent with the logical state of the ground system and has equivalent service capabilities, thus realizing a truly integrated air-space-ground root service system.

[0011] Secondly, the present invention provides a system for implementing the above-described method.

[0012] Thirdly, the present invention provides a computing device and a computer-readable storage medium.

[0013] The beneficial effects of this invention are as follows: (1) Significantly improved consensus stability: By proactively constructing stable consensus groups through spatiotemporal prediction, dynamic networks are transformed into quasi-static environments, significantly improving the consensus success rate; (2) Enhanced security performance: The dynamic reputation mechanism enables the system to have the security capabilities of self-learning and self-evolution, and can effectively identify and isolate Byzantine nodes; (3) Seamless service coexistence: The space-based root service instance maintains logical consistency with the ground system, providing transparent and equal root resolution services to global users; (4) Global coverage and low latency: Globally distributed satellites ensure that users anywhere can enjoy a low-latency, highly available root service experience; (5) Consensus node survivability guarantee: By integrating graceful degradation survivability guarantee technology, millisecond-level thermal control reconstruction of consensus nodes is achieved, effectively coping with hardware failure in extreme space environments. Attached Figure Description

[0014] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0015] Figure 1 This is a schematic diagram of the overall architecture of the system of the present invention; Figure 2 This is a flowchart illustrating the overall process of the method of the present invention. Figure 3 This is a detailed flowchart of the spatiotemporal driven networking steps of the present invention; Figure 4 A detailed flowchart of the trust-enhancing consensus steps of this invention; Figure 5 This is a flowchart of the graceful degradation survival assurance steps of the present invention; Figure 6 This is a schematic diagram of the pre-reconstruction model of the present invention; Figure 7 This is a schematic diagram of the three-dimensional temperature field map and pre-reconstruction trigger of the consensus node in this invention. Detailed Implementation

[0016] The present invention will now be described in detail with reference to the accompanying drawings and specific embodiments.

[0017] like Figure 1 As shown, this system is deployed in a constellation of low-Earth orbit satellites. Satellite nodes are interconnected via inter-satellite laser links, forming a space-based network. Globally distributed trusted ground anchor stations are responsible for injecting digitally signed root zone file updates into the satellite network. Ground users can directly access space-based root service instances via satellite links.

[0018] Figure 2 The overall process of this method is demonstrated: system initialization, loading orbital ephemeris data of each satellite; execution of spatiotemporal driven networking, dynamically forming a stable consensus group; receiving root service data update proposals from ground anchor stations; executing trust-enhanced consensus within the consensus group; updating the distributed root service instance after successful consensus; continuous monitoring and timely reorganization of the consensus group; and parallel operation of the graceful degradation survival guarantee module to continuously monitor the health status of consensus nodes.

[0019] Example 1: Secure and smooth transition of root zone key rolling

[0020] Scenario: The Internet Corporation for Assigned Names and Numbers (ICANN) performs a scheduled rolling update of the root zone key signing key (KSK). This is one of the most critical and risky operations in the DNS Security Extension (DNSSEC).

[0021] Implementation process: 1. Update Injection: ICANN distributes the root zone file, signed with the new KSK, to trusted ground anchor stations worldwide. These anchor stations then broadcast the update proposal to the satellite nodes they cover via secure links.

[0022] 2. Spatiotemporal driven networking: The system management core uses ephemeris prediction to form a stable consensus group for satellites currently covering a specific area.

[0023] 3. Trust-enhanced consensus: The leader node broadcasts the KSK update proposal; each member node rigorously verifies the DNSSEC signature chain; weighted voting is conducted based on node reputation values; and the root zone data instance is updated after consensus is reached.

[0024] 4. Instance Update and Synchronization: Nodes within the consensus group immediately update their root area data instances and rapidly flood the updates to the entire satellite constellation via inter-satellite links.

[0025] 5. Reputation Update: The reputation value of all nodes that voted correctly is increased.

[0026] Technical benefits: The space-based root service system can quickly complete authoritative and consistent updates of KSKs worldwide, keeping it synchronized with ground systems.

[0027] Example 2: Seamless service relay in response to satellite node mobility

[0028] Scenario: A passenger plane flying across the Pacific Ocean needs to continuously perform DNS queries. The satellite consensus group providing root resolution services is about to leave the airspace due to orbital motion.

[0029] Implementation process: 1. Continuous monitoring: The system monitor, based on ephemeris predictions, detects that the current service cluster is about to become unstable due to node departure.

[0030] 2. Predictive Reorganization: The system immediately triggers the reorganization process. Based on updated ephemeris data, it predicts that a new satellite cluster will stably cover the airspace in the future.

[0031] 3. Seamless failover: During the last period when the old cluster can still work stably, the system will synchronize the session context of the current service to the new cluster; after the new cluster completes the assembly and state synchronization, it will immediately take over the root resolution requests.

[0032] 4. Service continuity: The resolver on the passenger aircraft only detects minor network jitter, and all DNS query sessions continue to be served without interruption by the new cluster.

[0033] Technical results: Through spatiotemporal prediction and proactive reorganization, the root resolution service is "always online" in high-speed dynamic networks, significantly improving service availability.

[0034] Example 3: Identifying and Isolating Intermittent Byzantine Nodes

[0035] Scenario: Due to long-term space radiation, the satellite node causes memory bit flipping, and its behavior manifests as intermittent Byzantine faults: it is normal most of the time, but occasionally sends incorrect votes or invalid proposals.

[0036] Implementation process: 1. Abnormal behavior emerges: In multiple rounds of consensus, the voting behavior of nodes recorded by the system begins to deviate significantly from that of the high-reputation node cluster.

[0037] 2. Reputation value decays dynamically: In the initial stage, its reputation value decreases slowly; when a wrong vote is cast in a key consensus, a multiplicative penalty is triggered, and the reputation value drops sharply below the isolation threshold.

[0038] 3. Influence Suppression and Isolation: When a node's reputation value falls below the isolation threshold, the system will automatically exclude it from the consensus group candidate list in subsequent "spatiotemporal driven networking" and downgrade it to a regular node that can only provide read-only root query services.

[0039] 4. Fault reporting: The system sends alarm information to the ground control center.

[0040] Technical effect: Through the dynamic reputation model, the system has the ability to "diagnose" and "immunize", and achieves the gradual suppression and even automatic isolation of Byzantine nodes.

[0041] Example 4: Providing low-latency root resolution for remote areas

[0042] Scenario: A research vessel in a remote area needs to perform real-time domain name resolution. This region is far from any ground-based root server mirror, resulting in high latency for traditional DNS resolution.

[0043] Implementation process: 1. Global coverage access: The research vessel establishes a link directly with satellites covering the airspace above through its onboard satellite communication terminal.

[0044] 2. Authoritative Resolution on Satellite: The local DNS resolver sends the query request to the satellite. Upon receiving the query, the distributed root service instance module on the satellite directly queries its locally stored, consensus-compliant latest root zone image and returns an authoritative response.

[0045] 3. Low latency response: The entire root recursive parsing process is completed in the spatial network.

[0046] 4. Graceful degradation protection: The status monitoring unit monitors the temperature in real time to ensure stable node operation under long-term high-load parsing tasks.

[0047] Technical benefits: By leveraging the global uniformity of satellite distribution and onboard processing capabilities, resolution latency in remote areas is significantly reduced.

[0048] Example 5: Verification of Space-Based Consensus Nodes with Graceful Degradation Survival Guarantee

[0049] This embodiment is used to verify the performance of the graceful degradation survival guarantee steps on a space-based consensus node.

[0050] like Figure 5 As shown, the graceful degradation survival assurance module runs on the space-based consensus node, simulating a multi-point failure scenario caused by micrometeoroid impact.

[0051] The status monitoring unit collects the temperature of each computing unit of the consensus node in real time at a high sampling rate, forming a data structure such as... Figure 7 The three-dimensional temperature field map shown.

[0052] The thermal control path planning unit employs a GPU-based parallel shortest path algorithm to replan the computational task path for overheated components. The new path satisfies the following conditions: connecting the heat sink unit with all healthy components, ensuring that the computational load on each edge does not exceed a preset percentage of its maximum capacity, and ensuring that the temperature difference between adjacent components does not exceed a preset threshold.

[0053] The local thermal control unit adjusts the heat dissipation power of the components surrounding the damaged area through a MEMS variable thermal resistance structure.

[0054] The pre-reconfiguration unit predicts high-failure-risk areas based on a hybrid neural network model. The model takes historical temperature fluctuations, vibration characteristics, cumulative operating time, and consensus participation frequency as input, and outputs a predicted failure probability. Pre-reconfiguration is triggered when the predicted probability exceeds a preset threshold, allowing for advance planning of alternative computation paths.

[0055] The performance evaluation unit calculates temperature uniformity and heat dissipation efficiency indicators to determine whether a secondary reconstruction is triggered.

[0056] Test results show that this graceful degradation survival guarantee step can achieve millisecond-level thermal control reconstruction in multi-point failure scenarios, effectively maintaining the heat dissipation capacity and service continuity of consensus nodes.

[0057] Example 6: Resource Cooperative Scheduling under Multiple Priority Tasks

[0058] This embodiment is used to verify the ability to dynamically allocate and reconfigure resources based on the priority instructions of the upper-layer system.

[0059] In a space event, multiple consensus nodes overheated simultaneously. Node A was the leader node (highest priority) of the current consensus cycle, Node B was a core node with high reputation (medium priority), and Node C was an ordinary consensus node (low priority).

[0060] Step 1: Priority Identification. The Trust Enhancement Consensus Module sends priority instructions to the Graceful Degradation Survival Guarantee Module, marking the priority level of each node.

[0061] Step 2: Resource Allocation. The graceful degradation survival assurance module dynamically allocates reconstruction resources based on priority instructions, ensuring that the leader node completes hot-control reconstruction first and maintains consensus functionality.

[0062] Step 3: Reconstruction Execution. The reconstruction of each node is carried out in parallel, and the leader node completes the reconstruction in the shortest possible time to successfully maintain the consensus function.

[0063] Step 4: Effect Evaluation. After reconstruction, the consensus group showed good overall temperature uniformity, and the system operated stably.

[0064] This embodiment verifies that the graceful degradation survival assurance steps can dynamically allocate reconstruction resources according to task priority, ensuring that the survival of critical nodes is guaranteed first.

[0065] Example 7: Comparison and verification with existing technologies

[0066] This embodiment compares and verifies the present invention with the prior art, as shown in Table 1.

[0067] Table 1

[0068] Industrial applicability

[0069] This invention provides a satellite network data consensus method and system based on spatiotemporal dynamic trust, which has broad industrial applicability. The method is based on mature orbital mechanics, graph theory, and artificial intelligence technologies, and can be implemented on an onboard computer. The state monitoring unit can be implemented using a high-speed ADC and FPGA in collaboration; the thermal control path planning unit can adopt a GPU parallel computing architecture; and the pre-reconstruction unit can deploy a hybrid neural network model using an inference engine. Hardware-in-the-loop simulation has verified that the system is fully functional and can be directly applied to the consensus nodes of the space-based root service system, providing survivability assurance in extreme space environments.

Claims

1. A satellite network data consensus method based on spatiotemporal dynamic trust, applied to a constellation composed of low-Earth orbit satellites, characterized in that, The method includes: Spatiotemporal driven networking steps: Based on the orbital ephemeris data of satellite nodes, predict the network topology relationship within a future preset time window, calculate the continuous visibility time between satellite nodes, compare the continuous visibility time with a preset stability threshold, and prioritize the nodes whose continuous visibility time exceeds the stability threshold to jointly and dynamically form a consensus group. Trust-enhanced consensus steps: Within the consensus group, consensus is reached on Internet root service data from trusted data sources based on the dynamic reputation values ​​of each node; wherein, the dynamic reputation values ​​are calculated and updated according to the node's historical behavior in participating in consensus, and the dynamic reputation values ​​of the nodes are used to weight their voting weight in the consensus voting phase; Consensus instance synchronization steps: After consensus is reached, the Internet root service data forms a distributed root service authoritative instance in the satellite network that is consistent with the logical state and has equivalent service capabilities to the terrestrial Internet root service system; Graceful degradation survival assurance steps: The system collects temperature, power consumption and health status data of consensus nodes in real time through the status monitoring unit, re-plans the calculation task path for overheated components using a GPU-based parallel shortest path algorithm, and adjusts the heat dissipation power of components around the damaged area through a MEMS variable thermal resistance structure, so that the system can maintain core functions in the event of hardware failure.

2. The method according to claim 1, characterized in that, The spatiotemporal driven networking steps specifically include: Based on the orbital ephemeris data, the duration of continuous visibility between satellite nodes within a future preset time window is calculated; The duration of continuous visibility is compared with a preset stability threshold; Nodes whose continuous visibility time exceeds the stability threshold are selected first to jointly form the consensus group.

3. The method according to claim 2, characterized in that, The method further includes: Continuously monitor the stability of the consensus group; When it is predicted that the continuous visibility time of any node in the consensus group is about to fall below the stability threshold, the consensus group reorganization process is triggered. Based on updated orbital ephemeris data, a new consensus group is formed, and unfinished consensus tasks are migrated to the new consensus group.

4. The method according to claim 1, characterized in that, In the trust-enhancing consensus step, the dynamic reputation value of a node is used to weight its voting weight in the consensus voting stage. The consensus threshold is that the total weighted votes exceed two-thirds of the total reputation value. When a node is detected to have erroneous voting behavior, a multiplicative penalty mechanism is triggered to reduce its reputation value to below the isolation threshold and exclude it from the consensus group candidate list.

5. The method according to claim 4, characterized in that, The historical behavior includes at least one of the following: The voting accuracy of nodes in historical consensus; Success rate of node proposals being adopted; The stability index of the node's communication link.

6. The method according to claim 1, characterized in that, The trusted data source consists of multiple trusted ground anchor stations distributed globally, and the Internet root service data consists of digitally signed root zone file updates.

7. The method according to claim 1, characterized in that, The distributed root service authoritative instance can independently respond to DNS root query requests from any location in the world and provide authoritative resolution services equivalent to those of the terrestrial root service system.

8. The method according to claim 1, characterized in that, The graceful degradation survival assurance steps also include: predicting high failure risk areas based on a hybrid neural network model, with input features including at least one of historical temperature fluctuations, vibration characteristics, cumulative working time, and consensus participation frequency, and outputting a failure probability prediction value. When the predicted probability exceeds a preset threshold, pre-reconstruction is triggered, and backup computing paths are planned in advance.

9. The method according to claim 1, characterized in that, The graceful degradation survival guarantee steps also include: dynamically allocating reconstruction resources according to the priority instructions of the upper layer system. When a consensus node overheats, if the node is currently a leader node or a core node with a high reputation value, its heat dissipation reconstruction will be prioritized.

10. The method according to claim 1, characterized in that, In the graceful degradation survival guarantee step, the GPU-based parallel shortest path algorithm performs path planning, and the computational task path generated by the path planning satisfies: Path integrity constraint: The new path connects the heat sink unit to all healthy components; Traffic capacity constraint: The computational load on each edge shall not exceed a preset percentage of its maximum capacity. Temperature gradient constraint: The temperature difference between adjacent components after reconstruction shall not exceed a preset threshold.

11. The method according to claim 1, characterized in that, The state monitoring unit is also configured to: collect temperature data of each computing unit of the consensus node in real time, generate a three-dimensional temperature field map of the consensus node based on the collected data, and use the three-dimensional temperature field map as the input feature of the pre-reconstruction unit.

12. A system for implementing the method of any one of claims 1-11, characterized in that, The system is deployed in a constellation of low-Earth orbit satellites, including: The spatiotemporal driven networking module is used to predict network topology based on satellite node orbital ephemeris data and dynamically form consensus groups. The Trust Enhancement Consensus Module is used to reach consensus on Internet root service data within a consensus group based on the dynamic reputation value of nodes. The distributed root service instance module is used to store root service data that has been formed through consensus and is consistent with the logical state of the terrestrial Internet root service system, and to provide authoritative DNS root resolution services. The graceful degradation survival protection module, integrated into the consensus node, includes: The status monitoring subunit is used to collect consensus node temperature, power consumption, and health status data in real time. The thermal control path planning subunit uses a GPU-based parallel shortest path algorithm to replan the computation task path for overheated components; The local thermal control subunit adjusts the heat dissipation power of the components surrounding the damaged area through a MEMS variable thermal resistance structure. The pre-reconfigurable sub-unit is used to predict high-failure-risk areas and plan backup paths in advance. The performance evaluation sub-unit is used to evaluate the temperature uniformity and heat dissipation efficiency after reconstruction and to trigger a secondary reconstruction.

13. The system according to claim 12, characterized in that, The system also includes a reputation assessment module, which calculates and updates the dynamic reputation value based on the node's historical behavior in participating in consensus.

14. The system according to claim 12, characterized in that, The graceful degradation survival protection module receives priority instructions from the trust enhancement consensus module. When a consensus node fails, it prioritizes the hot-control reconstruction of the leader node and the core node with high reputation value.

15. A computing device comprising a memory and a processor, the memory storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the method as described in any one of claims 1 to 11.

16. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1 to 11.

Images