Safety design method and device for main control system of UAV surveying and mapping remote sensing sensor

Abstract

The present application relates to the technical field of data transmission, and in particular to a method and device for designing a security system for a drone mapping remote sensing sensor main control system. The method includes: based on a preset encryption method, encrypting the collected mapping remote sensing sensor data to determine the encrypted data; based on a predetermined transmission channel that is unidirectionally connected to the data receiving end, transmitting the encrypted data to the data receiving end; and verifying the receiving end to be detected to determine the data receiving end. The present application reduces the risk of leakage of mapping remote sensing sensor data, prevents unencrypted mapping remote sensing sensor data from being attacked, further improves the security of the mapping remote sensing sensor main control system, prevents data acquisition and sensor control environment, and the storage environment of mapping remote sensing sensor data from being threatened, and effectively isolates external attacks.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a method and device for designing a safety system for a main control system of an unmanned aerial vehicle surveying and mapping remote sensing sensor. Background Art

[0002] With the continuous development of drone technology, the advantages of drone remote sensing data have gradually emerged. At present, drone remote sensing data has played a very important role in terrain surveying and mapping, resource investigation and monitoring, line inspection, etc.

[0003] In the prior art, when the remote sensing data of the UAV needs to be transmitted, the remote sensing data can be copied or forwarded by the staff to achieve the purpose of data transmission.

[0004] However, the existing method of transmitting UAV remote sensing data is prone to safety hazards. Summary of the invention

[0005] Based on this, it is necessary to provide a safety design method and device for the main control system of an unmanned aerial vehicle surveying and remote sensing sensor to address the above technical problems.

[0006] In the first aspect, the present application provides a method for designing the safety of the main control system of a drone surveying and remote sensing sensor. The method includes:

[0007] Based on a preset encryption method, the collected surveying and mapping remote sensing sensor data is encrypted to determine the encrypted data;

[0008] Transmitting the encrypted data to the communication processing unit based on a predetermined transmission channel that is unidirectionally connected to the data receiving end;

[0009] The receiving end to be detected is verified, the data receiving end is determined, and the surveying and mapping remote sensing sensor data is transmitted to the data receiving end.

[0010] In one embodiment, performing verification processing on the receiving end to be detected to determine the data receiving end includes:

[0011] Receiving a feedback message sent by the receiving end to be detected, where the feedback message includes at least a public key and signature information, wherein the signature information is generated by the receiving end to be detected based on a private key;

[0012] Based on the signature information, the data receiving end is determined.

[0013] In one embodiment, the signature information is obtained by the receiving end to be detected performing a signature operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm; determining the data receiving end based on the signature information includes:

[0014] Decrypt the signature information based on the preset public key to obtain summary information;

[0015] Generate comparison summary information based on the encryption algorithm;

[0016] Based on the summary information and the comparison summary information, a data receiving end is determined.

[0017] In one embodiment, the data of the surveying and mapping remote sensing sensor is transmitted to a data receiving end, including:

[0018] Determine a data transmission package based on encrypted data obtained after encrypting the surveying and mapping remote sensing sensor data and the encrypted first key, where the first key is a key for encrypting the encrypted data;

[0019] Based on the transmission channel, the data transmission packet with encrypted data is transmitted to the data receiving end.

[0020] In one embodiment, after encrypting the surveying and mapping remote sensing sensor data and determining the encrypted data, the method further includes:

[0021] Backing up the encrypted data and determining the backup file of the encrypted data;

[0022] The backup files are stored locally.

[0023] In the second aspect, the present application also provides a safety design device for the main control system of a drone surveying and remote sensing sensor. The device includes:

[0024] The first determination module encrypts the collected surveying and mapping remote sensing sensor data based on a preset encryption method to determine the encrypted data;

[0025] A transmission module transmits the encrypted data to the communication processing unit based on a predetermined transmission channel that is unidirectionally connected to the data receiving end;

[0026] The second determination module verifies the receiving end to be detected, determines the data receiving end, and transmits the surveying and mapping remote sensing sensor data to the data receiving end.

[0027] In one embodiment, the second determination module includes:

[0028] A receiving unit, configured to receive a feedback message sent by a receiving end to be detected, wherein the feedback message includes at least signature information, wherein the signature information is generated by the receiving end to be detected based on a private key;

[0029] The first determination unit is used to sign the information and determine the data receiving end.

[0030] In one embodiment, the signature information is obtained by the receiving end to be detected performing a signature operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm. The first determination unit is specifically used to:

[0031] Decrypt the signature information based on the preset public key to obtain summary information;

[0032] Generate comparison summary information based on the encryption algorithm;

[0033] Based on the summary information and the comparison summary information, a data receiving end is determined.

[0034] In one embodiment, the second determination module includes:

[0035] A second determining unit is used to determine the data transmission packet based on the encrypted data obtained after the surveying and mapping remote sensing sensor data is encrypted and the encrypted first key, where the first key is a key for encrypting the encrypted data;

[0036] The transmission unit is used to transmit the data transmission packet with encrypted data to the data receiving end based on the transmission channel.

[0037] In one embodiment, the device further comprises:

[0038] A backup module, used to back up the encrypted data and determine the backup file of the encrypted data;

[0039] The storage module is used to store the backup files locally.

[0040] According to the technical solution of the present application, by determining the encrypted data, encryption processing of surveying and mapping remote sensing sensor data is achieved, the security of the data is guaranteed, and the risk of leakage of surveying and mapping remote sensing sensor data is reduced; and based on the pre-set one-way connected transmission channel, it is guaranteed that the encrypted data can only be transmitted in one direction, preventing the unencrypted surveying and mapping remote sensing sensor data from being attacked; the receiving end to be detected is verified and the data receiving end is determined, which further improves the security of the main control system of the UAV surveying and mapping remote sensing sensor, prevents the data collection and sensor control environment, and the storage environment of the surveying and mapping remote sensing sensor data from being threatened, and effectively isolates external attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A schematic diagram of a safety design method for a main control system of a UAV surveying and mapping remote sensing sensor provided in an embodiment of the present application;

[0042] Figure 2 A flowchart of a method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application;

[0043] Figure 3 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application;

[0044] Figure 4 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application;

[0045] Figure 5 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application;

[0046] Figure 6 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application;

[0047] Figure 7 A schematic diagram of the structure of a safety design method for a main control system of a UAV surveying and mapping remote sensing sensor provided in an embodiment of the present application;

[0048] Figure 8 A structural block diagram of a safety design device for a main control system of a UAV surveying and mapping remote sensing sensor provided in an embodiment of the present application;

[0049] Fig. 9 A structural block diagram of another safety design device for a main control system of a UAV surveying and mapping remote sensing sensor provided in an embodiment of the present application;

[0050] Fig.10 A structural block diagram of another safety design device for a main control system of a UAV surveying and mapping remote sensing sensor provided in an embodiment of the present application;

[0051] Fig.11 A structural block diagram of another UAV surveying and remote sensing sensor main control system safety design device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0052] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0053] It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. In the description of the present application, the description of the reference terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representation of the above terms is not necessarily for the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples without contradicting each other.

[0054] Because of its real-time, high-resolution, multi-source and heterogeneous characteristics, UAV remote sensing data has been increasingly widely used in topographic surveying and mapping, cadastral surveying, resource investigation and monitoring, line inspection, road design, engineering surveying and mapping, urban planning, etc.

[0055] Usually, in the actual production process, the data collected by drone surveying and remote sensing sensors is usually stored in plain text and copied offline. However, the data collected by these drones are often sensitive or even confidential data, and the people who come into contact with them may copy or forward the data. The confidentiality of the data mainly depends on relevant rules and regulations and moral constraints, which are prone to leaks due to factors such as the safety awareness of operators, the standardization of operations, and the standardization of data management, and the security of the data cannot be reliably guaranteed.

[0056] The safety design method of the main control system of the UAV surveying and mapping remote sensing sensor provided in the embodiment of the present application can be applied to Figure 1 In one embodiment, a computer device is provided, which is usually an embedded computer module, and its internal structure diagram can be shown as follows Figure 1As shown. The computer device includes a processor, a memory, a network interface, a serial port, and a general input and output interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The memory of the computer device is used to store data acquired by the main control system of the unmanned aerial vehicle surveying and remote sensing sensor. The network interface of the computer device is used to communicate with the unmanned aerial vehicle surveying and remote sensing sensor through the network interface of the computer device through a local area network connection, or to communicate serially through a serial port and a general input and output interface to realize the control and data collection of the unmanned aerial vehicle surveying and remote sensing sensor. When the computer program is executed by the processor, the safety of the main control system of the unmanned aerial vehicle surveying and remote sensing sensor is realized.

[0057] The present application discloses a method and device for designing a security system for a main control system of an unmanned aerial vehicle surveying and remote sensing sensor. The computer equipment of the staff encrypts the surveying and remote sensing sensor data, determines the encrypted data, and authenticates the data receiving end. If the authentication is successful, the encrypted data is transmitted to the data receiving end based on a transmission channel that is unidirectionally connected to the data receiving end.

[0058] Figure 2 A flowchart of a method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application is shown in FIG. Figure 2 As shown, the safety design method of the main control system of the UAV mapping remote sensing sensor can include the following steps:

[0059] Step 201, based on a preset encryption method, encrypt the surveying and mapping remote sensing sensor data to determine the encrypted data.

[0060] It should be noted that the surveying and mapping remote sensing sensor data may include collected data and symmetric keys; further, the collected data refers to the data collected by the sensor, where the sensor may include but is not limited to lidar, digital camera, multispectrometer and SAR (Synthetic Aperture Radar), etc.

[0061] In one embodiment of the present application, when encrypting surveying and mapping remote sensing sensor data, the collected data can be encrypted according to the SM4 symmetric key encryption algorithm; the symmetric key is encrypted using the SM2 asymmetric key encryption algorithm; and the ciphertext data corresponding to the collected data and the ciphertext data corresponding to the symmetric key are obtained.

[0062] In one embodiment of the present application, when it is necessary to encrypt and transmit the surveying and mapping remote sensing sensor data collected by the drone, an encryption processing unit can be added to implement encryption processing of the surveying and mapping remote sensing sensor data, thereby ensuring the smooth progress of subsequent encrypted transmission. Specifically, when the drone collects data, the encryption processing unit encrypts the acquired surveying and mapping remote sensing sensor data based on the internal encryption chip to obtain encrypted data, thereby ensuring the smooth progress of subsequent encrypted transmission.

[0063] Step 202: transmitting the encrypted data to the communication processing unit based on a predetermined transmission channel that is unidirectionally connected to the data receiving end.

[0064] In one embodiment of the present application, the encrypted data is sent to the data receiving end by setting a communication processing unit, and a one-way data transmission interface can be set for the communication processing unit to ensure that the communication processing unit can only obtain the encrypted data in one direction, and the data obtained by the communication processing unit can only be the encrypted surveying and mapping remote sensing sensor data. Among them, the one-way data transmission interface can realize the one-way rapid transmission of data.

[0065] In one embodiment of the present application, the unidirectional data transmission interface can be a unidirectional PCIE interface; further explained, when it is necessary to transmit encrypted data to a communication processing unit: the encrypted data is sent to the communication processing unit by setting up a communication processing unit, wherein the communication processing unit is provided with a unidirectional PCIE interface; specifically, by setting up a unidirectional PCIE interface on the communication processing unit, data transmission based on the unidirectional PCIE interface is achieved, ensuring that the communication processing unit can only passively receive data but cannot actively request data, thereby improving the security of subsequently sending the encrypted data to the communication processing unit.

[0066] Step 203, verifying the receiving end to be detected, determining the data receiving end, and transmitting the surveying and mapping remote sensing sensor data to the data receiving end.

[0067] It should be noted that when the receiving end to be detected is verified, if the verification of the receiving end to be detected is passed, the receiving end to be detected can be determined as a data receiving end, and can then receive encrypted data; if the verification of the receiving end to be detected is not passed, it can be determined that the receiving end to be detected is not a data receiving end, and can then not receive encrypted data.

[0068] Furthermore, there are many reasons why the receiving end to be detected fails verification, for example: the receiving end to be detected does not have the conditions or functions to receive encrypted data, the receiving end to be detected is not the data receiving end corresponding to the encrypted data, etc.

[0069] The duration of the unit time may be adjusted according to actual conditions and is not limited here; the verification information refers to information used to verify the receiving end to be detected, and the receiving end to be detected may generate feedback information based on the verification information.

[0070] In one embodiment of the present application, when it is necessary to verify whether the receiving end to be detected is the data receiving end corresponding to the encrypted data, first determine the key of the data receiving end corresponding to the encrypted data, encrypt the verification information according to the key, and obtain the encrypted verification information; send the encrypted verification information to the receiving end to be detected, if the receiving end to be detected can decrypt the encrypted verification information and send feedback information, it proves that the receiving end to be detected is the data receiving end corresponding to the encrypted data; if the receiving end to be detected cannot decrypt the encrypted verification information, it proves that the receiving end to be detected is not the data receiving end corresponding to the encrypted data.

[0071] According to the security design method for the main control system of the UAV surveying and remote sensing sensor proposed in this application, by determining the encrypted data, the encryption processing of the collected surveying and remote sensing sensor data is realized, the security of the data is guaranteed, and the risk of leakage of the surveying and remote sensing sensor data is reduced; and based on the pre-set one-way connected transmission channel, it is guaranteed that the encrypted data can only be transmitted in one direction, preventing the unencrypted surveying and remote sensing sensor data from being attacked, further improving the security of the surveying and remote sensing sensor main control system, preventing the storage environment of the surveying and remote sensing sensor data from being threatened, and effectively isolating it from external attacks.

[0072] It should be noted that, specifically, Figure 3 As shown, Figure 3 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application. Determining a data receiving end may include the following steps:

[0073] Step 301: receiving a feedback message sent by a receiving end to be detected, wherein the feedback message at least includes signature information.

[0074] The signature information is generated by the receiving end to be detected based on the private key.

[0075] In one embodiment of the present application, when verification processing is required for the receiving end to be detected, a connection request is first sent to the receiving end to be detected, and the connection request may include a preset encryption method. The receiving end to be detected determines the encryption method, generates a public key and a private key based on the encryption algorithm, generates signature information based on the private key, and the receiving end to be detected generates a feedback message based on the encryption method, public key and signature information confirmed to be used.

[0076] Step 302: Determine the data receiving end based on the signature information.

[0077] In one embodiment of the present application, the signature information is obtained by the receiving end to be detected performing a signing operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm; when it is necessary to determine the data receiving end, the signature information is decrypted based on a preset public key to obtain the summary information; the comparison summary information is generated based on the encryption algorithm; and the data receiving end is determined based on the summary information and the comparison summary information.

[0078] To clarify, a public key is the non-secret half of a key pair used with a private key algorithm. Public keys are typically used to encrypt session keys, verify digital signatures, or encrypt data that can be decrypted with the corresponding private key.

[0079] The signature information may include, but is not limited to: a national secret certificate; wherein the national secret certificate is a certificate that is algorithmically encrypted using a national secret algorithm.

[0080] It should be noted that after receiving the national secret certificate, the national secret certificate is decrypted and the decrypted national secret certificate is verified. Furthermore, the verification of the national secret certificate refers to the verification of the legitimacy of the certificate. The verification of the legitimacy of the certificate may include but is not limited to the following aspects: (1) The credibility of the certificate chain, where the certificate chain is used to establish a trust relationship between certificate issuing authorities in the public key infrastructure. (2) Whether the certificate is revoked. (3) Whether the certificate is within the valid time range. (4) Verify whether the certificate domain name matches the current access domain name.

[0081] According to the security design method of the main control system of the UAV surveying and remote sensing sensor proposed in this application, the verification processing of the receiving end to be detected is realized through feedback messages, which ensures that data transmission is only carried out when the data receiving end is determined, increases the security of data transmission, ensures the smooth progress of subsequent data transmission, reduces the possibility of errors in the data transmission process, and reduces the risk of leakage of surveying and mapping remote sensing sensor data.

[0082] It should be noted that data transmission is completed by determining the data transmission packet. Specifically, Figure 4 As shown, Figure 4 A flowchart of another method for designing a safety system for a drone surveying and remote sensing sensor main control system provided in an embodiment of the present application. Transmitting surveying and remote sensing sensor data to a data receiving end may include the following steps:

[0083] Step 401, based on the encrypted data obtained after encrypting the surveying and mapping remote sensing sensor data and the encrypted first key, a data transmission package is determined, where the first key is a key for encrypting the encrypted data.

[0084] It should be noted that, in order to ensure that the encrypted data can be normally recognized in the communication processing unit, the encrypted first key needs to be transmitted to the data receiving end. In order to ensure that the encrypted data can be transmitted together with its corresponding encrypted first key, a data transmission packet is determined based on the encrypted data and the encrypted first key, and the data transmission is completed by transmitting the data transmission packet.

[0085] Step 402: Based on the transmission channel, the data transmission packet with the encrypted data is transmitted to the data receiving end.

[0086] In one embodiment of the present application, a communication processing unit with a unidirectional data transmission interface and a 5G (fifth-generation mobile communication network) module can be provided to achieve transmission of a data transmission packet with encrypted data to a data receiving end; specifically, the communication processing unit achieves unidirectional connectivity with the data receiving end through the unidirectional data transmission interface, and when a data transmission packet needs to be transmitted, the communication processing unit obtains the data transmission packet through the unidirectional data transmission interface, and transmits the data transmission packet to the data receiving end based on the 5G module.

[0087] According to the security design method of the UAV surveying and remote sensing sensor main control system proposed in this application, by determining the data transmission package, it is ensured that the data to be transmitted can be transmitted to the data receiving end, thereby ensuring the smooth transmission of the surveying and mapping remote sensing sensor data, further improving the security of data transmission, and reducing the risk of leakage of the surveying and mapping remote sensing sensor data.

[0088] It should be noted that before the data receiving end is verified, the encrypted data may be stored first. Specifically, Figure 5 As shown, Figure 5 A flowchart of another method for designing a security system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application. Storing encrypted data may include the following steps:

[0089] Step 501, backing up the encrypted data and determining a backup file of the encrypted data.

[0090] It should be noted that by backing up the encrypted data, the protection of the encrypted data is further improved, ensuring that when the encrypted data is lost, the encrypted data can still be restored through the backup file, thereby ensuring the security of the encrypted data.

[0091] Step 502: local storage of the backup file.

[0092] It should be noted that by storing the backup files locally, the security of the encrypted data is further improved, and the backup files are encrypted surveying and mapping remote sensing sensor data. Therefore, if the storage space is attacked and the backup files are lost, the lost backup files have been encrypted, so the data will not be disclosed or lost.

[0093] According to the security design method for the main control system of the unmanned aerial vehicle surveying and remote sensing sensor proposed in this application, by determining the backup file corresponding to the encrypted data, the protection processing of the backup file is further improved, preventing the inability to transmit important data due to the loss of encrypted data, and ensuring the smooth transmission of data; by storing the backup file locally, it is ensured that when the storage space is attacked and the backup file is lost, the lost backup file is also encrypted, further preventing the leakage of surveying and mapping remote sensing sensor data.

[0094] In one embodiment of the present application, Figure 6 and Figure 7 As shown, Figure 6 A flowchart of another method for designing a safety system for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application, Figure 7 A schematic diagram of the structure of a safety design method for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application, when data transmission is required:

[0095] Step 601, collecting surveying and mapping remote sensing sensor data according to a preset collection unit;

[0096] Step 602, according to the pre-set encryption processing unit, the surveying and mapping remote sensing sensor data collected by the collection unit is encrypted to obtain encrypted data.

[0097] Step 603, according to the pre-set communication processing unit and 5G module, the encrypted data is transmitted to the data receiving end, wherein the communication processing unit realizes unidirectional connection with the data receiving end by setting a unidirectional data transmission interface.

[0098] According to the security design method for the main control system of the UAV surveying and remote sensing sensor proposed in this application, by determining the encrypted data, the encryption processing of the surveying and remote sensing sensor data is realized, the security of the data is guaranteed, and the risk of leakage of the surveying and remote sensing sensor data is reduced; and based on the pre-set one-way connected transmission channel, it is guaranteed that the encrypted data can only be transmitted in one direction, preventing the unencrypted surveying and remote sensing sensor data from being attacked, further improving the security of the security design of the main control system of the UAV surveying and remote sensing sensor, preventing the storage environment of the surveying and remote sensing sensor data from being threatened, and effectively isolating it from external attacks.

[0099] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0100] Based on the same inventive concept, the embodiment of the present application also provides a UAV surveying and remote sensing sensor main control system safety design device for implementing the UAV surveying and remote sensing sensor main control system safety design method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more UAV surveying and remote sensing sensor main control system safety design device embodiments provided below can refer to the limitations of the UAV surveying and remote sensing sensor main control system safety design method above, and will not be repeated here.

[0101] In one embodiment, Figure 8 As shown, Figure 8 The structural block diagram of a safety design device for a drone mapping remote sensing sensor main control system provided in an embodiment of the present application provides a safety design device for a drone mapping remote sensing sensor main control system, including: a first determination module 810, a transmission module 830 and a second determination module 830, wherein:

[0102] The first determination module 810 is used to encrypt the collected surveying and mapping remote sensing sensor data based on a preset encryption method to determine encrypted data;

[0103] A transmission module 820, configured to transmit the encrypted data to the communication processing unit based on a predetermined transmission channel that is unidirectionally connected to the data receiving end;

[0104] The second determination module 830 is used to verify the receiving end to be detected, determine the data receiving end, and transmit the surveying and mapping remote sensing sensor data to the data receiving end.

[0105] It should be noted that the data transmission packet is determined based on the encrypted data and the encrypted first key; and the data transmission packet with the encrypted data is transmitted to the data receiving end based on the transmission channel.

[0106] According to the security design device of the main control system of the unmanned aerial vehicle surveying and remote sensing sensor proposed in this application, by determining the encrypted data, the encryption processing of the surveying and mapping remote sensing sensor data is realized, the security of the data is guaranteed, and the risk of leakage of the surveying and mapping remote sensing sensor data is reduced; and based on the pre-set one-way connected transmission channel, it is guaranteed that the encrypted data can only be transmitted in one direction, preventing the unencrypted surveying and mapping remote sensing sensor data from being attacked, further improving the security of the security design of the main control system of the unmanned aerial vehicle surveying and remote sensing sensor, preventing the storage environment of the surveying and mapping remote sensing sensor data from being threatened, and effectively isolating it from external attacks.

[0107] In one embodiment, Fig. 9 As shown, Fig. 9 A structural block diagram of another unmanned aerial vehicle surveying and mapping remote sensing sensor main control system safety design device provided in an embodiment of the present application provides a unmanned aerial vehicle surveying and mapping remote sensing sensor main control system safety design device, in which the second determination module 930 of the unmanned aerial vehicle surveying and mapping remote sensing sensor main control system safety design device is used to include: a receiving unit 931 and a first determination unit 932, wherein:

[0108] The receiving unit 931 is used to receive a feedback message sent by the receiving end to be detected, where the feedback message at least includes signature information, wherein the signature information is generated by the receiving end to be detected based on a private key;

[0109] The first determining unit 932 is used to sign the information and determine the data receiving end.

[0110] In one embodiment of the present application, the signature information is obtained by the receiving end to be detected through a signature operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm; determining the data receiving end may include: decrypting the signature information based on the public key to obtain the summary information; generating comparison summary information based on the encryption algorithm; and determining the data receiving end based on the summary information and the comparison summary information.

[0111] in, Fig. 9 in 910 and 930 and Figure 8 810 and 830 have the same function and structure.

[0112] According to the security design device of the main control system of the unmanned aerial vehicle surveying and remote sensing sensor proposed in this application, by determining the first key and the second key, the verification processing of the receiving end to be detected is realized, which ensures that data transmission is only performed when the data receiving end is determined, increases the security of data transmission, ensures the smooth progress of subsequent data transmission, reduces the possibility of errors in the data transmission process, and reduces the risk of leakage of surveying and mapping remote sensing sensor data.

[0113] In one embodiment, Fig.10 As shown, Fig.10 The structural block diagram of another unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device provided in an embodiment of the present application provides a unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device, and the second determination module 1030 in the unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device includes: a second determination unit 1031 and a transmission unit 1032, wherein:

[0114] The second determining unit 1031 is used to determine the data transmission packet based on the encrypted data obtained after the surveying and mapping remote sensing sensor data is encrypted and the encrypted first key, where the first key is a key for encrypting the encrypted data;

[0115] The transmission unit 1032 is used to transmit the data transmission packet with encrypted data to the data receiving end based on the transmission channel.

[0116] in, Fig.10 1010 and 1020 and Fig. 9 910 and 920 have the same function and structure.

[0117] The security design device for the main control system of the unmanned aerial vehicle surveying and remote sensing sensor proposed in this application further improves the protection processing of backup files, prevents the inability to transmit important data due to the loss of encrypted data, and ensures smooth data transmission.

[0118] In one embodiment, Fig.11 As shown, Fig.11 The structural block diagram of another unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device provided in the embodiment of the present application provides a unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device, and the unmanned aerial vehicle surveying and mapping remote sensing sensor main control system security design device also includes: a backup module 1140 and a storage module 1150, wherein:

[0119] The backup module 1140 is used to perform backup processing on the encrypted data and determine the backup file of the encrypted data.

[0120] The storage module 1150 is used to store the backup files locally.

[0121] in, Fig.11 1110-1030 and Fig.10 1010-1030 have the same function and structure.

[0122] According to the security design device of the main control system of the unmanned aerial vehicle surveying and remote sensing sensor proposed in this application, by determining the backup file corresponding to the encrypted data, the protection processing of the backup file is further improved, preventing the inability to transmit important data due to the loss of encrypted data, and ensuring the smooth transmission of data; by storing the backup file locally, it is ensured that when the storage space is attacked and the backup file is lost, the lost backup file is also encrypted, further preventing the leakage of surveying and mapping remote sensing sensor data.

[0123] Each module in the above-mentioned safety design device of the main control system of the drone mapping remote sensing sensor can be implemented in whole or in part by software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the corresponding operations of the above modules.

[0124] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0125] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0126] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A safety design method for the main control system of an unmanned aerial vehicle surveying and remote sensing sensor, characterized in that: Applied to a main control system, the method comprises: Collecting surveying and mapping remote sensing sensor data; wherein the surveying and mapping remote sensing sensor data includes collected data and a symmetric key; The collected data is encrypted based on a symmetric key encryption method, and the symmetric key is encrypted based on an asymmetric key encryption method to obtain encrypted data corresponding to the surveying and mapping remote sensing sensor data; Based on a predetermined transmission channel unidirectionally connected to a data receiving end, the encrypted data is transmitted to a communication processing unit; the communication processing unit is arranged in a main control system, and a unidirectional PCIE interface is arranged on the communication processing unit to ensure that the communication processing unit can only obtain the encrypted data unidirectionally; The verification information is used to verify the receiving end to be detected, and when the feedback message from the receiving end to be detected indicates that the verification is passed, the receiving end to be detected is determined to be the data receiving end, and based on a transmission channel that is unidirectionally connected to the data receiving end, the encrypted data is transmitted to the data receiving end.

2. The method according to claim 1, characterized in that The verification process of the receiving end to be detected includes: Receiving a feedback message sent by the receiving end to be detected, wherein the feedback message includes at least signature information, wherein the signature information is generated by the receiving end to be detected based on a private key; Based on the signature information, the receiving end to be detected is verified.

3. The method according to claim 2, characterized in that The signature information is obtained by the receiving end to be detected performing a signature operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm; The verifying process of the receiving end to be detected based on the signature information includes: Decrypting the signature information based on a preset public key to obtain summary information; Generate comparison summary information based on the encryption algorithm; Based on the summary information and the comparison summary information, a verification process is performed on the receiving end to be detected, and when the summary information and the comparison summary information are the same, it is determined that the receiving end to be detected has passed the verification.

4. The method according to claim 1, characterized in that: The transmitting the encrypted data to the data receiving end comprises: Determine a data transmission packet based on the encrypted data and an encrypted first key, wherein the first key is a key used to encrypt the encrypted data; Based on the transmission channel, the data transmission packet carrying the encrypted data is transmitted to the data receiving end.

5. The method according to claim 1, characterized in that After obtaining the encrypted data corresponding to the surveying and mapping remote sensing sensor data, the method further includes: Backing up the encrypted data and determining a backup file of the encrypted data; The backup file is stored locally.

6. A safety design device for the main control system of an unmanned aerial vehicle surveying and remote sensing sensor, characterized in that: The device comprises: A first determination module is used to collect surveying and mapping remote sensing sensor data; wherein the surveying and mapping remote sensing sensor data includes collected data and a symmetric key; based on a symmetric key encryption method, the collected data is encrypted, and based on an asymmetric key encryption method, the symmetric key is encrypted to obtain encrypted data corresponding to the surveying and mapping remote sensing sensor data; A transmission module, used for transmitting the encrypted data to a communication processing unit based on a predetermined transmission channel unidirectionally connected to a data receiving end; the communication processing unit is arranged in a main control system, and by setting a unidirectional PCIE interface for the communication processing unit, it is ensured that the communication processing unit can only obtain the encrypted data unidirectionally; The second determination module is used to use the verification information to verify the receiving end to be detected, and when the feedback message of the receiving end to be detected indicates that the verification is passed, determine that the receiving end to be detected is the data receiving end, and transmit the encrypted data to the data receiving end based on the transmission channel unidirectionally connected to the data receiving end.

7. The device according to claim 6, characterized in that The second determining module includes: A receiving unit, configured to receive a feedback message sent by a receiving end to be detected, wherein the feedback message includes at least signature information, wherein the signature information is generated by the receiving end to be detected based on a private key; The first determining unit is used to verify the signature information on the receiving end to be detected.

8. The device according to claim 7, characterized in that The signature information is obtained by the receiving end to be detected performing a signature operation on the summary information based on a private key, and the summary information is obtained by the receiving end to be detected based on an encryption algorithm. The first determining unit is specifically used to: Decrypting the signature information based on a preset public key to obtain summary information; Generate comparison summary information based on the encryption algorithm; Based on the summary information and the comparison summary information, a verification process is performed on the receiving end to be detected, and when the summary information and the comparison summary information are the same, it is determined that the receiving end to be detected has passed the verification.

9. The device according to claim 6, characterized in that The second determining module includes: A second determining unit, configured to determine a data transmission packet based on the encrypted data and an encrypted first key, wherein the first key is a key used to encrypt the encrypted data; A transmission unit is used to transmit the data transmission packet carrying the encrypted data to the data receiving end based on the transmission channel.

10. The device according to claim 6, characterized in that The device also includes: A backup module, used to perform backup processing on the encrypted data and determine a backup file for the encrypted data; The storage module is used to locally store the backup file.

Images