Rail transit unmanned aerial vehicle data protection system and method, electronic equipment and medium

Abstract

The invention relates to a rail transit unmanned aerial vehicle data protection system and method, electronic equipment and a medium. The system comprises a grading and classifying module, a batch processing module and an encryption module which are connected in sequence. The grading and classifying module is used for carrying out classification and grading processing on the original data of the rail transit unmanned aerial vehicle and dividing the original data into key sensitive data and general data; the batch processing module carries out batch processing on output of the grading and classifying module, key sensitive data form a file needing to be encrypted, and general data form a plaintext file; the encryption module carries out encryption processing on the to-be-encrypted file output by the batch processing module to generate an encrypted file; the system further comprises an abstract calculation module connected with the batch processing module, a plaintext file and a file needing to be encrypted are subjected to abstract calculation through the abstract calculation module, and then the plaintext file and the encrypted file are sent to the wireless transmission module to be subjected to integrity verification. Compared with the prior art, the method has the advantages of classified protection, good safety, high flexibility and the like.

Description

Technical Field

[0001] The present invention relates to the technical field of unmanned aerial vehicle data processing, and in particular to a protection system, method, electronic equipment and medium for rail transit unmanned aerial vehicle data. Background Art

[0002] In the field of urban rail transit, drone technology is increasingly being used, playing an important role in intelligent inspections, emergency logistics, and air-rail transport. In order to improve the efficiency and safety of rail transit operations and maintenance, the data transmitted by drones during missions include control information, sensor information, and business information, and each type of data has its own specific security requirements.

[0003] Control information: including sensitive data such as flight instructions and emergency commands. In order to ensure the security of this information, encryption algorithms are needed to protect it and prevent the data from being viewed, intercepted or tampered with by unauthorized third parties.

[0004] Sensor information: including status information collected by drones, such as aircraft number, latitude and longitude, altitude, speed, etc., which is crucial for the safety monitoring of rail transit. The accuracy and integrity of these data need to be verified through a summary algorithm to ensure that the data has not been tampered with during transmission.

[0005] Business information: including video inspection data and surveying and mapping data, which are usually large in size and require high security for storage and transmission. A corresponding security mechanism is needed to protect this data from unauthorized access.

[0006] At present, a major problem facing drones used in rail transit is the lack of classification and grading management of data, which poses a risk of unauthorized access. In addition, there are insufficient protection measures for sensitive data such as flight instructions, a lack of effective digest algorithms for integrity verification, and the uncommon application of encryption algorithms, as well as imperfect key storage and update mechanisms, all of which may become security risks.

[0007] How to achieve the security and efficiency of rail transit drone data protection has become a technical problem that needs to be solved. Summary of the invention

[0008] The purpose of the present invention is to overcome the defects of the above-mentioned prior art and provide a rail transit drone data protection system, method, electronic device and medium.

[0009] The purpose of the present invention can be achieved by the following technical solutions:

[0010] According to one aspect of the present invention, there is provided a system for protecting rail transit drone data, the system comprising a hierarchical classification module, a batch processing module and an encryption module connected in sequence;

[0011] The grading and classification module performs grading and classification on the original data of the rail transit UAV, and divides it into key sensitive data and general data; wherein the general data includes at least one of the UAV sensor data and business data; and the key sensitive data includes at least one of the UAV flight instructions;

[0012] The batch processing module batch processes the general data and sensitive data output by the grading and classification module respectively, and the key sensitive data forms a file to be encrypted, and the general data forms a plain text file;

[0013] The encryption module encrypts the file to be encrypted output by the batch processing module to generate an encrypted file;

[0014] The system also includes a summary calculation module connected to the batch processing module. The plaintext file and the file to be encrypted are firstly respectively calculated using the summary calculation module to generate their respective hash integrity check values. The plaintext file, the encrypted file and their respective hash integrity check values ​​are then sent to the wireless transmission module for integrity check. After the check is successful, they are uploaded to the wireless transmission module.

[0015] Preferably, the sensor data includes the position, attitude, speed, altitude, acceleration, temperature and humidity, and battery power of the drone.

[0016] Preferably, the business data includes camera images and videos of the drone.

[0017] Preferably, the flight instructions include the flight direction, speed, altitude, attitude and emergency commands of the UAV.

[0018] Preferably, the summary calculation module performs summary calculation on the plaintext file through the SHA256 algorithm of the hash algorithm and obtains its hash value.

[0019] Preferably, the digest calculation module performs digest calculation on the file to be encrypted using the SHA256 algorithm of the hash algorithm and obtains its hash value.

[0020] More preferably, when calculating the encrypted file digest, a salted hash algorithm is used to store the ciphertext.

[0021] Preferably, the encryption module uses AES256 algorithm to encrypt the file to be encrypted and adopts a one-time pad mechanism.

[0022] Preferably, the plaintext file is in a modifiable state, and after being modified, the plaintext file needs to undergo batch processing, digest calculation, transmission upload, and integrity verification again.

[0023] According to another aspect of the present invention, a method for protecting rail transit drone data is provided, the method comprising:

[0024] Step S1, classify and process the acquired raw data of the rail transit UAV into key sensitive data and general data;

[0025] Step S2, the batch processing module performs batch processing on general data and key sensitive data respectively, and generates in batches plain text files and files to be encrypted respectively; encrypts and calculates digests of the files to be encrypted at the same time, and generates encrypted files and corresponding hash integrity check values; and calculates digests of the plain text files, and generates corresponding hash integrity check values;

[0026] Step S3, upload the plaintext file, encrypted file and their respective hash integrity check values ​​to the wireless transmission module. During uploading, the wireless transmission module will perform integrity checks on the plaintext file and the encrypted file respectively. After the integrity check is successful, the wireless transmission module receives the upload; if the integrity check fails, return to step S2; if the plaintext file is in a modifiable state during the debugging process and the plaintext file needs to be modified, return to step S2; otherwise, end.

[0027] According to a third aspect of the present invention, there is provided an electronic device, comprising a memory and a processor, wherein a computer program is stored in the memory, and the method described above is implemented when the processor executes the program.

[0028] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium having a computer program stored thereon, wherein the program implements the method described when executed by a processor.

[0029] Compared with the prior art, the present invention has the following beneficial effects:

[0030] 1) The present invention achieves confidentiality management of key sensitive data by classifying and grading the data of rail transit drones into key sensitive data and general data, and encrypting key sensitive data such as flight instructions; general data such as sensors and business data are not encrypted to facilitate debugging and modification; then summary calculations are performed on plaintext files and files to be encrypted to achieve integrity protection of important data; different levels of data are processed differently to meet different engineering requirements, thereby improving the protection capability and security of key sensitive data of drones in the rail transit field, and improving flexibility and efficiency through classification and grading while enhancing security.

[0031] 2) The present invention has good robustness and avoids the impact of tampering with rail transit drone data by using a high-strength encryption algorithm and integrity hash check on the encrypted file.

[0032] 3) The invention adopts a one-time key update mechanism, which has good timeliness and increases the difficulty of malicious decryption by the outside world, thereby improving the security of drone data.

[0033] 4) Compared with the prior art, the present invention has the advantages of wide application range, high confidentiality, and easy use, which avoids the leakage or cracking of key sensitive data of drones, thereby better ensuring the safe operation of rail transit drones. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 is a flow chart of the data protection method in the present invention;

[0035] Figure 2 It is a structural diagram of the data protection system in the present invention;

[0036] Figure 3 The data flow diagram of each module of the data protection system in the present invention is shown. DETAILED DESCRIPTION

[0037] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0038] The present embodiment relates to a rail transit drone data protection system, which involves hierarchical processing, encryption and integrity verification of data. The system makes it possible to use different data protection methods in the same drone through a selection mechanism for data classification and grading, thereby improving the protection capability of the system's key sensitive data; secondly, by flexibly setting a key storage and update mechanism, the validity of the key is enhanced, which is conducive to protecting the security of the drone's key sensitive data, preventing data leakage, interception and tampering from causing significant impact on the system, and achieving high security and high reliability of rail transit drone data.

[0039] The system can be regarded as a data processing tool. The rail transit drone data is processed by the system (data processing tool) and then uploaded to the wireless transmission module.

[0040] like Figure 2 ,The system includes a hierarchical classification module, a batch processing module and an encryption module which are ,connected in sequence.

[0041] The raw data of drones are sorted and listed. According to the search and field matching, the classification module classifies and processes the raw data of drones into key sensitive data and general data, such as Figure 3 .

[0042] The batch processing module batch processes the general data and sensitive data output by the grading and classification module respectively. The key sensitive data forms encrypted files and the general data forms plain text files. The general data includes one or more of sensor data and business data; the key sensitive data includes one or more of flight instructions.

[0043] General data includes sensor data and business data. Sensor data includes location, attitude, speed, altitude, acceleration, temperature and humidity, and battery power. Business data includes camera images and videos;

[0044] Key sensitive data include flight instructions, which include flight direction, speed, altitude, attitude and other instructions, and emergency commands: such as emergency landing, return to base and other control commands in emergency situations.

[0045] The encryption module encrypts the files to be encrypted output by the batch processing module to generate encrypted files.

[0046] Upload the plaintext file and the encrypted file to the wireless transmission module. When uploading, the wireless transmission module performs integrity checks on the plaintext file and the encrypted file respectively, and accepts the upload after the verification is successful. The wireless transmission module first decrypts the encrypted file and then performs integrity verification; the wireless transmission module directly performs integrity verification on the plaintext file; after the verification is correct, it can be uploaded to the wireless transmission module.

[0047] like Figure 2 The system also includes a summary calculation module, which is used to perform summary calculations on the plain text file and the file to be encrypted. The summary calculation module is connected to the batch processing module.

[0048] like Figure 3 Before uploading the plaintext file and the file to be encrypted to the wireless transmission module, the summary calculation module is used to perform summary calculation respectively. Then the wireless transmission module performs integrity verification on the plaintext file and the encrypted file after summary processing respectively, and uploads them after successful verification.

[0049] The SHA256 algorithm is used to calculate the digest of the plaintext file to obtain its hash value.

[0050] The file to be encrypted is digested using the SHA256 hash algorithm, and a salted hash algorithm is used to store key flight instruction data in ciphertext; and / or the encryption algorithm used for the file to be encrypted is the AES256 algorithm, and a one-time pad mechanism is used.

[0051] Both encryption and verification use 256 bits. Considering that the frequency bandwidth available to drones is limited, while the amount of business data they carry is large, this is implemented after comprehensive consideration of encryption efficiency and performance.

[0052] When the wireless transmission module performs integrity check on the encrypted file, it is necessary to first input the key for decryption and then perform integrity check; the wireless transmission module directly performs integrity check on the plaintext file.

[0053] The plain text file is in a modifiable state. After being modified, the plain text file needs to go through the batch processing, summary processing, transmission upload and integrity verification processes again.

[0054] This embodiment also relates to a method for protecting rail transit drone data, which involves a method for grading, classifying, encrypting and verifying the integrity of the data, such as Figure 1 , the method comprises:

[0055] Step S1, collecting and listing the original data of rail transit drones;

[0056] Step S2: The rail transit drone data is classified and processed through the classification module, and divided into key sensitive data and general data. Sensitive data corresponds to encrypted files, and general data corresponds to plaintext files.

[0057] Step S3, the batch processing module performs batch processing on general data and key sensitive data respectively, and generates plain text files and files to be encrypted in batches. The encryption and digest calculation of the files to be encrypted are completed simultaneously in this step, that is, the digest calculation is performed on the files to be encrypted while the encryption is being processed. Specifically, the digest calculation is performed on the files to be encrypted by the digest calculation module, and the encryption module is used to encrypt the files to be encrypted to generate encrypted files.

[0058] In this embodiment, the encryption algorithm used for the file to be encrypted is the AES256 algorithm, which is encrypted according to the set key. The function is set to set a different key for each encryption, that is, a one-time one-key mechanism, and the debugger does not have the authority to use the encryption module. At the same time, the file to be encrypted is calculated by the SHA256 algorithm of the hash algorithm to obtain its hash value, and the key password is stored in ciphertext using the salted hash algorithm.

[0059] Step S4: upload the plaintext file and the encrypted file to the wireless transmission module. During uploading, the wireless transmission module will perform integrity verification on the plaintext file and the encrypted file respectively. After the verification is successful, the file will be uploaded to the wireless transmission module.

[0060] In this embodiment, before the plaintext file and the encrypted file are uploaded to the wireless transmission module, the summary calculation module needs to perform summary calculations respectively. The wireless transmission module performs integrity checks on the plaintext file and the encrypted file after summary processing respectively (the hash values ​​can be input for verification respectively). After the verification is correct, they can be uploaded to the wireless transmission module.

[0061] In this embodiment, the hash value of the plain text file is obtained by performing a digest calculation on the plain text file using the SHA256 algorithm of the hash algorithm. The digest calculation of the encrypted file has been realized in step S3.

[0062] In this embodiment, when the wireless transmission module performs integrity check on the encrypted file, it is necessary to first input the key (encryption password) for decryption, and then perform integrity check. The wireless transmission module directly performs integrity check on the plaintext file. Then the wireless transmission module completes the upload of each file that has been verified to be correct.

[0063] The plaintext file is in a modifiable state, and the debugger can modify the plaintext file according to the debugging situation. After the plaintext file is modified, it needs to be re-batch processed, digest processed, uploaded, and integrity checked to complete the upload of the file. Considering the sensitivity of the data, the debugger does not have the authority to modify the encrypted file.

[0064] Compared with the prior art, the hierarchical processing, encryption and integrity verification method of rail transit UAV data of the present invention has the advantages of wide application range, high confidentiality and easy use, which avoids the leakage or cracking of key sensitive data of UAV, thereby better ensuring the safe operation of rail transit UAV.

[0065] The present invention achieves confidentiality management of sensitive data by adopting a method of classifying and grading various data in the drone and encrypting key sensitive data. General data is not encrypted to facilitate debugging and modification. Then, summary calculations are performed on plaintext files and encrypted files to achieve data integrity protection.

[0066] The electronic device of the present invention includes a central processing unit (CPU), which can perform various appropriate actions and processes according to computer program instructions stored in a read-only memory (ROM) or loaded from a storage unit into a random access memory (RAM). In the RAM, various programs and data required for device operation can also be stored. The CPU, ROM and RAM are connected to each other via a bus. An input / output (I / O) interface is also connected to the bus.

[0067] Multiple components in the device are connected to the I / O interface, including: input units, such as keyboards, mice, etc.; output units, such as various types of displays, speakers, etc.; storage units, such as disks, optical disks, etc.; and communication units, such as network cards, modems, wireless communication transceivers, etc. The communication unit allows the device to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunication networks.

[0068] The processing unit performs the various methods and processes described above. For example, in some embodiments, methods S1 to S4 may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit. In some embodiments, part or all of the computer program may be loaded and / or installed on the device via a ROM and / or a communication unit. When the computer program is loaded into the RAM and executed by the CPU, one or more steps of methods S1 to S4 described above may be performed. Alternatively, in other embodiments, the CPU may be configured to perform methods S1 to S4 in any other appropriate manner (e.g., by means of firmware).

[0069] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0070] The program code for implementing the method of the present invention can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code can be executed entirely on the machine, partially on the machine, partially on the machine as a stand-alone software package and partially on a remote machine, or entirely on a remote machine or server.

[0071] In the context of the present invention, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0072] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A rail transit drone data protection system, characterized in that: The system includes a hierarchical classification module, a batch processing module and an encryption module connected in sequence; The grading and classification module performs grading and classification processing on the original data of the rail transit UAV, dividing it into key sensitive data and general data; The general data includes at least one of the drone sensor data and business data; the key sensitive data includes at least one of the drone flight instructions; The batch processing module batch processes the general data and sensitive data output by the grading and classification module respectively, and the key sensitive data forms a file to be encrypted, and the general data forms a plain text file; The encryption module encrypts the file to be encrypted output by the batch processing module to generate an encrypted file; The system also includes a summary calculation module connected to the batch processing module. The plaintext file and the file to be encrypted are firstly respectively calculated using the summary calculation module to generate their respective hash integrity check values. The plaintext file, the encrypted file and their respective hash integrity check values ​​are then sent to the wireless transmission module for integrity check. After the check is successful, they are uploaded to the wireless transmission module.

2. A rail transit drone data protection system according to claim 1, characterized in that: The sensor data includes the position, attitude, speed, altitude, acceleration, temperature and humidity, and battery power of the drone.

3. A rail transit drone data protection system according to claim 1, characterized in that: The business data includes camera images and videos of the drone.

4. A rail transit drone data protection system according to claim 1, characterized in that: The flight instructions include the flight direction, speed, altitude, attitude and emergency commands of the UAV.

5. A rail transit drone data protection system according to claim 1, characterized in that: The summary calculation module performs summary calculation on the plaintext file through the SHA256 algorithm of the hash algorithm and obtains its hash value.

6. A rail transit drone data protection system according to claim 1, characterized in that: The summary calculation module performs summary calculation on the file to be encrypted through the SHA256 algorithm of the hash algorithm and obtains its hash value.

7. A rail transit drone data protection system according to claim 6, characterized in that: When the encrypted file digest is calculated, a salted hash algorithm is used to store the ciphertext.

8. A rail transit drone data protection system according to claim 1, characterized in that: The encryption module uses the AES256 algorithm to encrypt the files to be encrypted and adopts a one-time pad mechanism.

9. A rail transit drone data protection system according to claim 1, characterized in that: The plaintext file is in a modifiable state. After being modified, the plaintext file needs to go through the batch processing, summary calculation, transmission upload and integrity verification processes again.

10. A method for using the rail transit drone data protection system according to any one of claims 1 to 9, the method comprising: Step S1, classify and process the acquired raw data of the rail transit UAV into key sensitive data and general data; Step S2, the batch processing module performs batch processing on general data and key sensitive data, and generates batches of plain text files and files to be encrypted respectively; Encrypt and calculate the digest of the file to be encrypted at the same time to generate the encrypted file and the corresponding hash integrity check value; Perform digest calculation on the plaintext file to generate the corresponding hash integrity check value; Step S3, uploading the plaintext file, the encrypted file and their respective hash integrity check values ​​to the wireless transmission module. During uploading, the wireless transmission module will perform integrity checks on the plaintext file and the encrypted file respectively. After the check is successful, the wireless transmission module receives the upload; If the integrity check fails, return to step S2; if the plaintext file is in a modifiable state during the debugging process and the plaintext file needs to be modified, return to step S2; otherwise, end.

11. An electronic device comprising a memory and a processor, wherein a computer program is stored in the memory, wherein: When the processor executes the program, the method according to claim 10 is implemented.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to claim 10 is implemented.

Images