【摘要】 现有的卫星网络节点间的身份认证大多依赖于一个证书颁发机构，即授权认证服务器，很容易出现中央瓶颈和单点故障，而且经过身份认证的节点很可能在之后遭受恶意攻击，导致关键配置文件被篡改而留下固件后门。本文利用区块链和智能合约构建了一个卫星网络系统安全通信框架，通过区块链为网络中的所有节点提供一个相同的防篡改可追溯分布式账本，使身份认证不再需要可信中介，直接通过点对点实现分布式身份认证，还可以通过智能合约定期验证节点关键数据的完整性来加强系统安全防护。最后，本文在一个开源的区块链平台上实现了一个原型来验证该安全通信机制。更多还原

【Abstract】 The identity authentication between the existing satellite network nodes mostly relies on a certificate authority,i. e.,an authorized authentication server,which is prone to central bottlenecks and single points of failure.Moreover,the authenticated nodes are likely to suffer malicious attacks in the future,leading to the tampering of key configuration files and thus leaving firmware backdoors. In this paper,the blockchain and smart contracts are used to build a secure communication framework for satellite network systems. Through the blockchain,an identical tamperproof and traceable distributed ledger is provided for all nodes in the network,so that identity authentication no longer requires a trusted intermediary.The distributed identity authentication can be realized directly through point-to-point,and the integrity of the key data of nodes can be regularly verified through smart contracts to strengthen the system security protection.Finally,a prototype is implemented on an open source blockchain platform,and verifies the secure communication mechanism.更多还原