A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN​

WU Yao; JIA Ziye; ZHU Qiuming; ZHOU Fuhui

doi:10.12263/DZXB.20251175

您当前的位置：

首页 >

文章列表页 >

A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN

更新时间：2026-04-14

- A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN
- ACTA ELECTRONICA SINICA Pages: 1-13(2026)
- 作者机构：
  
  南京航空航天大学电子信息工程学院电磁频谱空间认知动态系统工信部重点实验室，江苏南京 211106
- 作者简介：
- 基金信息：
  
  National Natural Science Foundation of China(62231015;62301251);Postgraduate Research & Practice Innovation Program of Jiangsu Province(SJCX25_0152)
- DOI：10.12263/DZXB.20251175
  CLC： TN92;
- Received：12 January 2026，
  
  Accepted：26 January 2026，
  
  Online First：14 April 2026，
- 稿件说明：
移动端阅览
WU Yao, JIA Ziye, ZHU Qiuming, et al. A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN[J/OL]. ACTA ELECTRONICA SINICA, 2026, 1-13.
DOI：

WU Yao, JIA Ziye, ZHU Qiuming, et al. A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN[J/OL]. ACTA ELECTRONICA SINICA, 2026, 1-13. DOI： 10.12263/DZXB.20251175.

摘要

随着低空智联网（Low-Altitude Intelligent Network，LAIN）在空天地一体化网络中的广泛应用，服务功能链（Service Function Chain，SFC）技术通过将虚拟化网络功能按需编排与串联，成为实现跨管理域资源协同与业务按需构建的关键支撑。然而，低空智联网具有的高动态拓扑导致认证会话频繁中断，管理域的异构性使得跨域身份映射与信任传递异常复杂，开放无线信道加剧了认证信息被窃取与篡改的风险。这些独特挑战使得基于固定基础设施或集中式管理的传统认证机制难以适应跨域SFC场景对安全性、实时性与可靠性的严苛需求。传统中心化方案存在单点故障与性能瓶颈，而去中心化方案又常面临效率低下、可扩展性不足等难题。针对上述问题，本文提出了一种基于联盟区块链与灵活门限签名（Flexible Threshold Signature Scheme，FlexiTSS）的跨域SFC安全接入与认证机制。该机制首先构建一个由多管理域边缘节点共同维护的联盟链，作为分布式的全局信任锚，实现身份与策略的统一存证与验证。然后，设计了一种支持动态成员管理的FlexiTSS算法，使得多个管理域可联合完成对关键操作的签名授权，显著提升签名效率。此外，本文提出了一种轻量级动态编排器选举算法，依据网络实时拓扑与业务负载自适应选择最优编排节点，有效实现了负载均衡，避免了单点失效。实验结果表明，与典型的中心化认证、基础区块链认证等方案相比，本文提出的方案在跨域认证时延、高动态环境下的任务成功率和控制面通信开销等方面均具有显著优势，能够在大规模节点与长服务链场景下保持稳定的性能，较好地解决了安全、效率与可扩展性之间的权衡问题，为低空智联网的跨域安全协同提供了切实可行的技术途径。

Abstract

With the widespread application of the Low-Altitude Intelligent Network (LAIN) in the integrated space-air-ground network

Service Function Chain (SFC) technology has emerged as a key enabler for cross-domain resource coordination and on-demand service construction by orchestrating and chaining virtualized network functions as needed. However

the highly dynamic topology of LAIN leads to frequent interruptions of authentication sessions

while the heterogeneity of management domains complicates cross-domain identity mapping and trust propagation. Moreover

the open wireless channel heightens the risk of authentication information being stolen or tampered with. These unique challenges render traditional authentication mechanisms based on fixed infrastructure or centralized management inadequate to meet the stringent security

real-time

and reliability requirements of cross-domain SFC scenarios. Centralized solutions suffer from single points of failure and performance bottlenecks

whereas decentralized approaches often face inefficiency and scalability issues. To address these problems

this paper proposes a cross-domain SFC secure access and authentication mechanism based on consortium blockchain and a Flexible Threshold Signature Scheme (FlexiTSS). The mechanism first constructs a consortium blockchain maintained by edge nodes across multiple management domains

serving as a distributed global trust anchor to achieve unified storage and verification of identities and policies. Furthermore

a FlexiTSS algorithm supporting dynamic member management is designed

enabling multiple management domains to jointly authorize critical operations through signature

thereby significantly improving signature efficiency. Additionally

a lightweight dynamic orchestrator election algorithm is proposed

which adaptively selects the optimal orchestration node based on real-time network topology and service load

effectively achieving load balancing and avoiding single points of failure. Experimental results demonstrate that

compared to typical centralized authentication and basic blockchain authentication schemes

the proposed scheme exhibits significant advantages in cross-domain authentication latency

task success rate in highly dynamic environments

and control plane communication overhead. It maintains stable performance in large-scale node and long service chain scenarios

effectively resolving the trade-off between security

efficiency

and scalability

thereby providing a practical technical approach for cross-domain secure collaboration in LAIN.

关键词

Keywords

references

Harbi Y , Medani K , Gherbi C , et al . A systematic literature review of blockchain technology for Internet of drones security [J ] . Arabian Journal for Science and Engineering , 2023 , 48 ( 2 ): 1053 - 1074 .

Jia Z Y , Sheng M , Li J D , et al . VNF-based service provision in software defined LEO satellite networks [J ] . IEEE Transactions on Wireless Communications , 2021 , 20 ( 9 ): 6139 - 6153 .

Yazdinejad A , Parizi R M , Dehghantanha A , et al . Blockchain-enabled authentication handover with efficient privacy protection in SDN-based 5G networks [J ] . IEEE Transactions on Network Science and Engineering , 2021 , 8 ( 2 ): 1120 - 1132 .

Yang W C , Wang S , Yin X F , et al . A review on security issues and solutions of the Internet of drones [J ] . IEEE Open Journal of the Computer Society , 2022 , 3 : 96 - 110 .

吴启晖 , 董超 , 贾子晔 , 等 . 低空智联网组网与控制理论方法 [J ] . 航空学报 , 2024 , 45 ( 3 ): 028809 .

Wu Qihui , Dong Chao , Jia Ziye , et al . Networking and control mechanism for low-altitude intelligent networks [J ] . Acta Aeronautica et Astronautica Sinica , 2024 , 45 ( 3 ): 028809 . (in Chinese)

张楦杰 , 张敏 , 刘韬 , 等 . 基于区块链的无人机网络跨域身份认证研究 [J ] . 计算机应用研究 , 2024 , 41 ( 7 ): 1959 - 1964 .

Zhang Xuanjie , Zhang Min , Liu Tao , et al . Research on cross-domain identity authentication of unmanned aerial vehicle network based on blockchain [J ] . Application Research of Computers , 2024 , 41 ( 7 ): 1959 - 1964 . (in Chinese)

Xie M Y , Chang Z , Wang L , et al . Blockchain-assisted lightweight cross-domain authentication for multi-UAV wireless networks [J ] . IEEE Transactions on Mobile Computing , 2025 , 24 ( 11 ): 11449 - 11464 .

于静茹 , 姚升悦 , 陈喜群 , 等 . 面向网联自动驾驶部署的车—路—无人机跨域协同技术 [J ] . 中国图象图形学报 , 2024 , 29 ( 11 ): 3293 - 3304 .

Yu Jingru , Yao Shengyue , Chen Xiqun , et al . Cross-domain collaborative technology among vehicles, infrastructure, and drones for connected and autonomous driving deployment [J ] . Journal of Image and Graphics , 2024 , 29 ( 11 ): 3293 - 3304 . (in Chinese)

Zhao J J , Xue S T , Cai K Q , et al . Near-field integrated sensing and communications for secure UAV networks [J ] . IEEE Journal on Selected Areas in Communications , 2026 , 44 : 371 - 385 .

Wu Y , Jia Z Y , Wu Q H , et al . Adaptive QoE-aware SFC orchestration in UAV networks: A deep reinforcement learning approach [J ] . IEEE Transactions on Network Science and Engineering , 2024 , 11 ( 6 ): 6052 - 6065 .

Feng C S , Liu B , Guo Z , et al . Blockchain-based cross-domain authentication for intelligent 5G-enabled Internet of drones [J ] . IEEE Internet of Things Journal , 2022 , 9 ( 8 ): 6224 - 6238 .

Jia Z Y , He S J , Zhu Q M , et al . Trusted routing for blockchain-empowered UAV networks via multi-agent deep reinforcement learning [J ] . IEEE Transactions on Communications , 2025 , 73 ( 12 ): 14227 - 14242 .

Huang K K , Hu H D , Lin C L . BAKAS-UAV: A secure blockchain-assisted authentication and key agreement scheme for unmanned aerial vehicles networks [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 22 ): 36858 - 36883 .

Alsamhi S H , Shvetsov A V , Shvetsova S V , et al . Blockchain-empowered security and energy efficiency of drone swarm consensus for environment exploration [J ] . IEEE Transactions on Green Communications and Networking , 2023 , 7 ( 1 ): 328 - 338 .

Shahidinejad A , Abawajy J H . Anonymous blockchain-assisted authentication protocols for secure cross-domain IoD communications [J ] . IEEE Transactions on Network Science and Engineering , 2024 , 11 ( 3 ): 2661 - 2674 .

Feng C S , Liu B , Yu K P , et al . Blockchain-empowered decentralized horizontal federated learning for 5G-enabled UAVs [J ] . IEEE Transactions on Industrial Informatics , 2022 , 18 ( 5 ): 3582 - 3592 .

Tong Z H , Wang J J , Hou X W , et al . Blockchain-based trustworthy and efficient hierarchical federated learning for UAV-enabled IoT networks [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 21 ): 34270 - 34282 .

徐恪 , 凌思通 , 李琦 , 等 . 基于区块链的网络安全体系结构与关键技术研究进展 [J ] . 计算机学报 , 2021 , 44 ( 1 ): 55 - 83 .

Xu Ke , Ling Sitong , Li Qi , et al . Research progress of network security architecture and key technologies based on blockchain [J ] . Chinese Journal of Computers , 2021 , 44 ( 1 ): 55 - 83 . (in Chinese)

Chen Z G , Zhu C F , Zhang H W , et al . A lightweight UAV secure communication scheme integrating cross-domain group authentication and reputation awareness [J ] . Internet of Things , 2025 , 34 : 101781 .

Yang Y , Wang B H , Guo R X , et al . Efficient and secure service function chain deployment method for delay optimization in air traffic information network [J ] . Scientific Reports , 2024 , 14 : 25829 .

Wang W M , Zhang S M , Liu G J , et al . A blockchain-based cross-domain authentication scheme for unmanned aerial vehicle-assisted vehicular networks [J ] . World Electric Vehicle Journal , 2025 , 16 ( 4 ): 2155 - 2166 .

Hossain M I , Tahtali M , Turhan U , et al . Blockchain integration in UAV networks: Performance metrics and analysis [J ] . Sensors , 2024 , 24 ( 23 ): 7813 .

Xie H , Zheng J , Wei S J , et al . Blockchain-and-6G-based ubiquitous UAV task security management architecture [J ] . Computer Communications , 2024 , 217 : 259 - 267 .

Chen J X , Wang Z X , Srivastava G , et al . Industrial blockchain threshold signatures in federated learning for unified space-air-ground-sea model training [J ] . Journal of Industrial Information Integration , 2024 , 39 : 100593 .

He L , Gan Y , Yin Y F . Efficient threshold attribute-based signature scheme for unmanned aerial vehicle (UAV) networks [J ] . Electronics , 2025 , 14 ( 2 ): 339 .

Wang S Y , Yang L X . Securing dynamic service function chain orchestration in EC-IoT using federated learning [J ] . Sensors , 2022 , 22 ( 23 ): 9041 .

曹怡璐 , 贾子晔 , 尤嘉豪 , 等 . 基于SDN和NFV的空天地一体化网络任务部署与恢复综述 [J ] . 电信科学 , 2025 , 41 ( 5 ): 1 - 16 .

Cao Yilu , Jia Ziye , You Jiahao , et al . A survey of task deployment and recovery in space-air-ground integrated networks based on SDN and NFV [J ] . Telecommunications Science , 2025 , 41 ( 5 ): 1 - 16 . (in Chinese)

习宁 , 周晓琳 , 孙聪 , 等 . 支持物理交互的无人机飞控系统安全测试方法 [J ] . 电子学报 , 2025 , 53 ( 3 ): 765 - 781 .

Xi Ning , Zhou Xiaolin , Sun Cong , et al . Security testing method for unmanned aerial vehicle flight control system supporting physical interaction [J ] . Acta Electronica Sinica , 2025 , 53 ( 3 ): 765 - 781 . (in Chinese)

徐勇军 , 鲁承壮 , 董燚恒 , 等 . 低轨卫星通信系统面向安全通信的鲁棒资源分配算法 [J ] . 电子学报 , 2025 , 53 ( 5 ): 1482 - 1490 .

Xu Yongjun , Lu Chengzhuang , Dong Yiheng , et al . Robust resource allocation algorithm for secure communication in LEO-based satellite communication systems [J ] . Acta Electronica Sinica , 2025 , 53 ( 5 ): 1482 - 1490 . (in Chinese)

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

GAT-IL: A Service Function Chain Deployment Method Based on Graph Attention Network and Imitation Learning

A Novel Identity-Based Threshold Signature

An Efficient Inter-Enterprise Authentication Scheme for VE Based on the Elliptic Curve Cryptosystem

Delay Optimization Oriented Service Function Chain Migration and Re-deployment in Operator Network

Credit Payment for Radio Resources Transactions Based on Consortium Blockchain in SCMA mMTC

Related Author

HAO Jin-long

LI Xiu-hua

WANG Tian-fu

FAN Qi-lin

NIU Yue

YIN Hao

JIANG Nan

ZHANG Xue-di

Related Institution

School of Computer Science and Technology, University of Science and Technology of China

Beijing National Research Center for Information Science and Technology, Tsinghua University

School of Big Data and Software Engineering, Chongqing University

College of Computer Science and Technology, Beijing University of Technology

Key Laboratory of Information Security and National Computing Grid Southwest Jiaotong University Chengdu Sichuan China

⁰