南京航空航天大学电子信息工程学院电磁频谱空间认知动态系统工信部重点实验室,江苏南京 211106
[ "吴遥 男,1994年1月出生于江西省南昌市。现为南京航空航天大学电子信息工程学院博士研究生。主要研究方向为信息安全、网络功能虚拟化。E-mail: wu_yao@nuaa.edu.cn" ]
[ "贾子晔 女,1990年10月出生于山西省忻州市。现为南京航空航天大学电子信息工程学院副教授。主要研究方向为空天地一体化网络、低空智联网。E-mail: jiaziye@nuaa.edu.cn" ]
[ "朱秋明 男,1979年8月出生于江苏省苏州市。现为南京航空航天大学电子信息工程学院教授。主要研究方向为无线信道测量建模与数字孪生、电磁频谱态势可视化测绘与认知。E-mail: zhuqiuming@nuaa.edu.cn" ]
[ "周福辉 男,1988年7月出生于江西省抚州市。现为南京航空航天大学电子信息工程学院教授。主要研究方向为频谱智能管控和资源鲁棒优化、认知智能与知识图谱。E-mail: zhoufuhui@nuaa.edu.cn" ]
收稿:2026-01-12,
录用:2026-01-26,
网络首发:2026-04-14,
移动端阅览
吴遥, 贾子晔, 朱秋明, 等. 基于联盟链与门限签名的低空智联网跨域服务功能链接入机制[J/OL]. 电子学报, 2026,1-13.
WU Yao, JIA Ziye, ZHU Qiuming, et al. A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN[J/OL]. ACTA ELECTRONICA SINICA, 2026, 1-13.
吴遥, 贾子晔, 朱秋明, 等. 基于联盟链与门限签名的低空智联网跨域服务功能链接入机制[J/OL]. 电子学报, 2026,1-13. DOI: 10.12263/DZXB.20251175.
WU Yao, JIA Ziye, ZHU Qiuming, et al. A Cross-Domain Service Function Chain Access Mechanism Based on Consortium Blockchain and Threshold Signature in LAIN[J/OL]. ACTA ELECTRONICA SINICA, 2026, 1-13. DOI: 10.12263/DZXB.20251175.
随着低空智联网(Low-Altitude Intelligent Network,LAIN)在空天地一体化网络中的广泛应用,服务功能链(Service Function Chain,SFC)技术通过将虚拟化网络功能按需编排与串联,成为实现跨管理域资源协同与业务按需构建的关键支撑。然而,低空智联网具有的高动态拓扑导致认证会话频繁中断,管理域的异构性使得跨域身份映射与信任传递异常复杂,开放无线信道加剧了认证信息被窃取与篡改的风险。这些独特挑战使得基于固定基础设施或集中式管理的传统认证机制难以适应跨域SFC场景对安全性、实时性与可靠性的严苛需求。传统中心化方案存在单点故障与性能瓶颈,而去中心化方案又常面临效率低下、可扩展性不足等难题。针对上述问题,本文提出了一种基于联盟区块链与灵活门限签名(Flexible Threshold Signature Scheme,FlexiTSS)的跨域SFC安全接入与认证机制。该机制首先构建一个由多管理域边缘节点共同维护的联盟链,作为分布式的全局信任锚,实现身份与策略的统一存证与验证。然后,设计了一种支持动态成员管理的FlexiTSS算法,使得多个管理域可联合完成对关键操作的签名授权,显著提升签名效率。此外,本文提出了一种轻量级动态编排器选举算法,依据网络实时拓扑与业务负载自适应选择最优编排节点,有效实现了负载均衡,避免了单点失效。实验结果表明,与典型的中心化认证、基础区块链认证等方案相比,本文提出的方案在跨域认证时延、高动态环境下的任务成功率和控制面通信开销等方面均具有显著优势,能够在大规模节点与长服务链场景下保持稳定的性能,较好地解决了安全、效率与可扩展性之间的权衡问题,为低空智联网的跨域安全协同提供了切实可行的技术途径。
With the widespread application of the Low-Altitude Intelligent Network (LAIN) in the integrated space-air-ground network
Service Function Chain (SFC) technology has emerged as a key enabler for cross-domain resource coordination and on-demand service construction by orchestrating and chaining virtualized network functions as needed. However
the highly dynamic topology of LAIN leads to frequent interruptions of authentication sessions
while the heterogeneity of management domains complicates cross-domain identity mapping and trust propagation. Moreover
the open wireless channel heightens the risk of authentication information being stolen or tampered with. These unique challenges render traditional authentication mechanisms based on fixed infrastructure or centralized management inadequate to meet the stringent security
real-time
and reliability requirements of cross-domain SFC scenarios. Centralized solutions suffer from single points of failure and performance bottlenecks
whereas decentralized approaches often face inefficiency and scalability issues. To address these problems
this paper proposes a cross-domain SFC secure access and authentication mechanism based on consortium blockchain and a Flexible Threshold Signature Scheme (FlexiTSS). The mechanism first constructs a consortium blockchain maintained by edge nodes across multiple management domains
serving as a distributed global trust anchor to achieve unified storage and verification of identities and policies. Furthermore
a FlexiTSS algorithm supporting dynamic member management is designed
enabling multiple management domains to jointly authorize critical operations through signature
thereby significantly improving signature efficiency. Additionally
a lightweight dynamic orchestrator election algorithm is proposed
which adaptively selects the optimal orchestration node based on real-time network topology and service load
effectively achieving load balancing and avoiding single points of failure. Experimental results demonstrate that
compared to typical centralized authentication and basic blockchain authentication schemes
the proposed scheme exhibits significant advantages in cross-domain authentication latency
task success rate in highly dynamic environments
and control plane communication overhead. It maintains stable performance in large-scale node and long service chain scenarios
effectively resolving the trade-off between security
efficiency
and scalability
thereby providing a practical technical approach for cross-domain secure collaboration in LAIN.
Harbi Y , Medani K , Gherbi C , et al . A systematic literature review of blockchain technology for Internet of drones security [J ] . Arabian Journal for Science and Engineering , 2023 , 48 ( 2 ): 1053 - 1074 .
Jia Z Y , Sheng M , Li J D , et al . VNF-based service provision in software defined LEO satellite networks [J ] . IEEE Transactions on Wireless Communications , 2021 , 20 ( 9 ): 6139 - 6153 .
Yazdinejad A , Parizi R M , Dehghantanha A , et al . Blockchain-enabled authentication handover with efficient privacy protection in SDN-based 5G networks [J ] . IEEE Transactions on Network Science and Engineering , 2021 , 8 ( 2 ): 1120 - 1132 .
Yang W C , Wang S , Yin X F , et al . A review on security issues and solutions of the Internet of drones [J ] . IEEE Open Journal of the Computer Society , 2022 , 3 : 96 - 110 .
吴启晖 , 董超 , 贾子晔 , 等 . 低空智联网组网与控制理论方法 [J ] . 航空学报 , 2024 , 45 ( 3 ): 028809 .
Wu Qihui , Dong Chao , Jia Ziye , et al . Networking and control mechanism for low-altitude intelligent networks [J ] . Acta Aeronautica et Astronautica Sinica , 2024 , 45 ( 3 ): 028809 . (in Chinese)
张楦杰 , 张敏 , 刘韬 , 等 . 基于区块链的无人机网络跨域身份认证研究 [J ] . 计算机应用研究 , 2024 , 41 ( 7 ): 1959 - 1964 .
Zhang Xuanjie , Zhang Min , Liu Tao , et al . Research on cross-domain identity authentication of unmanned aerial vehicle network based on blockchain [J ] . Application Research of Computers , 2024 , 41 ( 7 ): 1959 - 1964 . (in Chinese)
Xie M Y , Chang Z , Wang L , et al . Blockchain-assisted lightweight cross-domain authentication for multi-UAV wireless networks [J ] . IEEE Transactions on Mobile Computing , 2025 , 24 ( 11 ): 11449 - 11464 .
于静茹 , 姚升悦 , 陈喜群 , 等 . 面向网联自动驾驶部署的车—路—无人机跨域协同技术 [J ] . 中国图象图形学报 , 2024 , 29 ( 11 ): 3293 - 3304 .
Yu Jingru , Yao Shengyue , Chen Xiqun , et al . Cross-domain collaborative technology among vehicles, infrastructure, and drones for connected and autonomous driving deployment [J ] . Journal of Image and Graphics , 2024 , 29 ( 11 ): 3293 - 3304 . (in Chinese)
Zhao J J , Xue S T , Cai K Q , et al . Near-field integrated sensing and communications for secure UAV networks [J ] . IEEE Journal on Selected Areas in Communications , 2026 , 44 : 371 - 385 .
Wu Y , Jia Z Y , Wu Q H , et al . Adaptive QoE-aware SFC orchestration in UAV networks: A deep reinforcement learning approach [J ] . IEEE Transactions on Network Science and Engineering , 2024 , 11 ( 6 ): 6052 - 6065 .
Feng C S , Liu B , Guo Z , et al . Blockchain-based cross-domain authentication for intelligent 5G-enabled Internet of drones [J ] . IEEE Internet of Things Journal , 2022 , 9 ( 8 ): 6224 - 6238 .
Jia Z Y , He S J , Zhu Q M , et al . Trusted routing for blockchain-empowered UAV networks via multi-agent deep reinforcement learning [J ] . IEEE Transactions on Communications , 2025 , 73 ( 12 ): 14227 - 14242 .
Huang K K , Hu H D , Lin C L . BAKAS-UAV: A secure blockchain-assisted authentication and key agreement scheme for unmanned aerial vehicles networks [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 22 ): 36858 - 36883 .
Alsamhi S H , Shvetsov A V , Shvetsova S V , et al . Blockchain-empowered security and energy efficiency of drone swarm consensus for environment exploration [J ] . IEEE Transactions on Green Communications and Networking , 2023 , 7 ( 1 ): 328 - 338 .
Shahidinejad A , Abawajy J H . Anonymous blockchain-assisted authentication protocols for secure cross-domain IoD communications [J ] . IEEE Transactions on Network Science and Engineering , 2024 , 11 ( 3 ): 2661 - 2674 .
Feng C S , Liu B , Yu K P , et al . Blockchain-empowered decentralized horizontal federated learning for 5G-enabled UAVs [J ] . IEEE Transactions on Industrial Informatics , 2022 , 18 ( 5 ): 3582 - 3592 .
Tong Z H , Wang J J , Hou X W , et al . Blockchain-based trustworthy and efficient hierarchical federated learning for UAV-enabled IoT networks [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 21 ): 34270 - 34282 .
徐恪 , 凌思通 , 李琦 , 等 . 基于区块链的网络安全体系结构与关键技术研究进展 [J ] . 计算机学报 , 2021 , 44 ( 1 ): 55 - 83 .
Xu Ke , Ling Sitong , Li Qi , et al . Research progress of network security architecture and key technologies based on blockchain [J ] . Chinese Journal of Computers , 2021 , 44 ( 1 ): 55 - 83 . (in Chinese)
Chen Z G , Zhu C F , Zhang H W , et al . A lightweight UAV secure communication scheme integrating cross-domain group authentication and reputation awareness [J ] . Internet of Things , 2025 , 34 : 101781 .
Yang Y , Wang B H , Guo R X , et al . Efficient and secure service function chain deployment method for delay optimization in air traffic information network [J ] . Scientific Reports , 2024 , 14 : 25829 .
Wang W M , Zhang S M , Liu G J , et al . A blockchain-based cross-domain authentication scheme for unmanned aerial vehicle-assisted vehicular networks [J ] . World Electric Vehicle Journal , 2025 , 16 ( 4 ): 2155 - 2166 .
Hossain M I , Tahtali M , Turhan U , et al . Blockchain integration in UAV networks: Performance metrics and analysis [J ] . Sensors , 2024 , 24 ( 23 ): 7813 .
Xie H , Zheng J , Wei S J , et al . Blockchain-and-6G-based ubiquitous UAV task security management architecture [J ] . Computer Communications , 2024 , 217 : 259 - 267 .
Chen J X , Wang Z X , Srivastava G , et al . Industrial blockchain threshold signatures in federated learning for unified space-air-ground-sea model training [J ] . Journal of Industrial Information Integration , 2024 , 39 : 100593 .
He L , Gan Y , Yin Y F . Efficient threshold attribute-based signature scheme for unmanned aerial vehicle (UAV) networks [J ] . Electronics , 2025 , 14 ( 2 ): 339 .
Wang S Y , Yang L X . Securing dynamic service function chain orchestration in EC-IoT using federated learning [J ] . Sensors , 2022 , 22 ( 23 ): 9041 .
曹怡璐 , 贾子晔 , 尤嘉豪 , 等 . 基于SDN和NFV的空天地一体化网络任务部署与恢复综述 [J ] . 电信科学 , 2025 , 41 ( 5 ): 1 - 16 .
Cao Yilu , Jia Ziye , You Jiahao , et al . A survey of task deployment and recovery in space-air-ground integrated networks based on SDN and NFV [J ] . Telecommunications Science , 2025 , 41 ( 5 ): 1 - 16 . (in Chinese)
习宁 , 周晓琳 , 孙聪 , 等 . 支持物理交互的无人机飞控系统安全测试方法 [J ] . 电子学报 , 2025 , 53 ( 3 ): 765 - 781 .
Xi Ning , Zhou Xiaolin , Sun Cong , et al . Security testing method for unmanned aerial vehicle flight control system supporting physical interaction [J ] . Acta Electronica Sinica , 2025 , 53 ( 3 ): 765 - 781 . (in Chinese)
徐勇军 , 鲁承壮 , 董燚恒 , 等 . 低轨卫星通信系统面向安全通信的鲁棒资源分配算法 [J ] . 电子学报 , 2025 , 53 ( 5 ): 1482 - 1490 .
Xu Yongjun , Lu Chengzhuang , Dong Yiheng , et al . Robust resource allocation algorithm for secure communication in LEO-based satellite communication systems [J ] . Acta Electronica Sinica , 2025 , 53 ( 5 ): 1482 - 1490 . (in Chinese)
0
浏览量
0
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621