A hierarchical encryption storage method and system for a drone

Abstract

The application discloses a hierarchical encryption storage method and system for a UAV. The method comprises the following steps: obtaining a dynamic security policy coded as a smart contract from a block chain network, and calling a static security policy from a local; the dynamic security policy and the static security policy both comprise a no-fly area and an execution action; obtaining a three-dimensional position of the UAV in real time, and judging whether the three-dimensional position of the UAV is in or near the no-fly area of the dynamic security policy or the static security policy; if yes, calling a pre-configured flight task type from the local, and determining a security level according to the flight task type; executing the corresponding dynamic security policy or static security policy according to the security level, and performing hierarchical data encryption storage. When the UAV enters a sensitive area, not only corresponding flight control is implemented, but also encryption of a corresponding level is triggered automatically and in real time, so that linkage protection of flight safety and data safety is realized, and data protection and flight state are ensured to be performed synchronously.

Description

Technical Field

[0001] This application relates to the field of autonomous flight control technology for unmanned aerial vehicles (UAVs), and more specifically, to a hierarchical encrypted storage method and system for UAVs. Background Technology

[0002] With the rapid development of drone technology and the booming low-altitude economy, drones are increasingly being used in aerial photography, inspection, logistics and distribution.

[0003] In existing technologies, the safety level is often determined by identifying the aerial photography data after the flight ends, and then the data is stored in a hierarchical manner according to the safety level. The linkage between flight safety and data security is poor, and data protection lags behind the flight status.

[0004] No effective solutions have yet been proposed to address the problems in the relevant technologies. Summary of the Invention

[0005] The main objective of this application is to provide a hierarchical encrypted storage method and system for unmanned aerial vehicles (UAVs) to address the following problem.

[0006] To achieve the above objectives, according to one aspect of this application, a hierarchical encrypted storage method for unmanned aerial vehicles (UAVs) is provided.

[0007] The hierarchical encrypted storage method for unmanned aerial vehicles (UAVs) according to this application includes: obtaining a dynamic security policy encoded as a smart contract from a blockchain network, and invoking a static security policy locally; both the dynamic and static security policies include no-fly zones and execution actions; obtaining the three-dimensional position of the UAV in real time, and determining whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic or static security policy; if so, invoking a pre-configured flight mission type locally, and determining a security level based on the flight mission type; executing the corresponding dynamic or static security policy according to the security level, and performing hierarchical encrypted data storage.

[0008] Furthermore, the task types include government inspections, commercial filming, and personal recording; the security levels include a high sensitivity level corresponding to government inspections, a medium sensitivity level corresponding to commercial filming, and a low sensitivity level corresponding to personal recording.

[0009] Furthermore, after obtaining the three-dimensional position of the UAV in real time and determining whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic security policy or static security policy, the method further includes: using a trained lightweight convolutional neural network model to perform content recognition on the real-time collected aerial data to obtain the security level.

[0010] Furthermore, the tiered data encryption storage based on the security level includes: writing high-sensitivity data to a hidden partition and encrypting it using AES-256 hardware; writing medium-sensitivity data to a regular partition and encrypting it using AES-128 software; writing low-sensitivity data to a regular partition and storing it using optional encryption or plaintext; and generating an operation log containing data hash values, operator information, and sensitivity levels during the data writing, reading, and sharing process, and uploading the operation log to the blockchain network for evidence preservation.

[0011] Furthermore, an emergency self-destruct mechanism is set up to trigger key erasure when an abnormal event is detected, making the data in the hidden partition unrecoverable. The emergency self-destruct mechanism includes: when there are continuous authentication failures, unauthorized device access, or the drone's GPS signal abnormally leaves the preset area, the security element performs the key erasure operation.

[0012] Furthermore, the UAV's three-dimensional position is obtained by using extended Kalman filter fusion positioning of multi-constellation GNSS and inertial navigation system, with a positioning update frequency of not less than 10Hz.

[0013] Furthermore, determining whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic or static security policy includes: using a quadtree spatial index to determine the region near or overlapping with the three-dimensional position of the UAV, obtaining a candidate region set; determining whether each region in the candidate region set is a no-fly zone; if so, determining that the three-dimensional position of the UAV is in or near the no-fly zone.

[0014] Further, executing the corresponding dynamic or static security strategy based on the security level includes: when the security level is high sensitivity, executing according to the first action, wherein the first action is to issue a flight warning when the distance between the three-dimensional position of the drone and the near-end boundary of the no-fly zone is determined to be within a preset first trigger distance, to intervene in flight at a second trigger distance, and to unlock the area restriction when the on-chain approval access conditions are met; when the security level is medium sensitivity, executing according to the first action, wherein the first action is to issue a flight warning when the distance between the three-dimensional position of the drone and the near-end boundary of the no-fly zone is determined to be within a preset third trigger distance, and to intervene in flight at a fourth trigger distance; when the security level is low sensitivity, executing according to the first action, wherein the first action is to issue a flight warning when the distance between the three-dimensional position of the drone and the near-end boundary of the no-fly zone is determined to be within a preset fifth trigger distance, and to intervene in flight at a sixth trigger distance; when the communication between the drone and the blockchain network is interrupted, the latest strategy cached locally continues to be executed, and the local strategy has a validity period, after which it enters conservative mode.

[0015] To achieve the above objectives, according to another aspect of this application, a hierarchical encrypted storage system for unmanned aerial vehicles is provided.

[0016] The hierarchical encrypted storage system for unmanned aerial vehicles (UAVs) according to this application includes: a policy acquisition module, used to acquire a dynamic security policy encoded as a smart contract from a blockchain network and to call a static security policy locally; both the dynamic and static security policies include no-fly zones and execution actions; a location determination module, used to acquire the three-dimensional position of the UAV in real time and determine whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic or static security policy; a level determination module, used to call a pre-configured flight mission type locally if the position is no-fly zone and determine the security level based on the flight mission type; and an execution module, used to execute the corresponding dynamic or static security policy according to the security level and perform hierarchical encrypted data storage.

[0017] In this embodiment, a hierarchical encryption storage method is adopted. By deeply coupling geographic location perception, sensitive area identification and hierarchical encryption storage, when the UAV enters a sensitive area, it can not only implement corresponding flight control, but also automatically and in real time trigger the corresponding level of encryption, thereby realizing the linkage protection of flight safety and data security, and ensuring that data protection and flight status are carried out simultaneously. Attached Figure Description

[0018] The accompanying drawings, which form part of this application, are used to provide a further understanding of the application and to make other features, objects, and advantages of the application more apparent. The illustrative embodiments and descriptions of this application are used to explain the application and do not constitute an undue limitation of the application. In the drawings: Figure 1 This is a flowchart illustrating the hierarchical encrypted storage method for unmanned aerial vehicles (UAVs) as described in this application. Figure 2 This is a schematic diagram of the hierarchical encrypted storage method for unmanned aerial vehicles according to this application. Detailed Implementation

[0019] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0020] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0021] In this application, the terms "upper," "lower," "left," "right," "front," "rear," "top," "bottom," "inner," "outer," "middle," "vertical," "horizontal," "lateral," and "longitudinal" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. These terms are primarily for the purpose of better describing the invention and its embodiments, and are not intended to limit the indicated device, element, or component to having a specific orientation, or to be constructed and operated in a specific orientation.

[0022] Furthermore, in addition to indicating direction or positional relationship, some of the aforementioned terms may also have other meanings. For example, the term "above" may also be used in certain situations to indicate a dependency or connection. Those skilled in the art can understand the specific meaning of these terms in this invention based on the specific circumstances.

[0023] Furthermore, the terms "installation," "setup," "equipped with," "connection," "linking," and "socketing" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral structure; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium, or an internal connection between two devices, components, or parts. Those skilled in the art can understand the specific meaning of these terms in this invention based on the specific circumstances.

[0024] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0025] According to embodiments of the present invention, a hierarchical encrypted storage method for unmanned aerial vehicles (UAVs) is provided, such as... Figure 1 As shown, the method includes the following steps S101 to S104: Step S101: Obtain the dynamic security policy encoded as a smart contract from the blockchain network, and call the static security policy from the local machine; both the dynamic security policy and the static security policy include no-fly zones and execution actions; First, various dynamic security policies are encoded into smart contracts and deployed on the consortium blockchain network. Static security policies are pre-stored in the drone's memory. Both dynamic and static security policies contain at least the following structured fields: no-fly zone (polygon or circle), trigger action (warning / speed limit / altitude limit / return to home / landing), effective time window, and authorized issuer.

[0026] Then, an encrypted communication link is established with the blockchain network to synchronize the dynamically updated dynamic security policy; ensuring that the dynamic security policy of the blockchain network can be properly synchronized to the drone.

[0027] By encoding dynamic security policies into smart contracts and deploying them on the blockchain, remote dynamic distribution and real-time effectiveness of security policies are achieved without requiring system downtime for firmware upgrades, significantly improving the flexibility and response speed of airspace management.

[0028] Step S102: Real-time positioning to obtain the three-dimensional position of the UAV, and determine whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic security policy or the static security policy; The UAV's 3D position is acquired using a multi-constellation GNSS and inertial navigation system fusion positioning with an extended Kalman filter, and the positioning update frequency is no less than 10Hz. The 3D position information of the UAV acquired using this method has high accuracy.

[0029] Specifically, determining whether the three-dimensional position of the UAV is in or near a no-fly zone under the dynamic or static security policy includes: using a quadtree spatial index to identify regions near or overlapping with the UAV's three-dimensional position, obtaining a candidate region set; determining whether each region in the candidate region set is a no-fly zone; if so, determining that the UAV's three-dimensional position is in or near a no-fly zone. Using a quadtree spatial index to determine whether the UAV is near or in a no-fly zone significantly reduces computational complexity and processor load.

[0030] Step S103: If so, retrieve the pre-configured flight mission type from the local machine and determine the safety level based on the flight mission type; The task types include government inspections, commercial filming, and personal recording; the security levels include high sensitivity for government inspections, medium sensitivity for commercial filming, and low sensitivity for personal recording.

[0031] The system automatically maps security levels based on flight mission type (government inspection, commercial filming, personal recording), providing flexible access channels for legitimate missions while ensuring that unauthorized missions cannot enter sensitive areas, thus achieving a balance between safety and efficiency.

[0032] Step S104: Execute the corresponding dynamic security policy or static security policy according to the security level, and perform hierarchical data encryption storage.

[0033] By deeply coupling geographic location awareness, sensitive area identification, and hierarchical encrypted storage, when a drone enters a sensitive area, it can not only implement corresponding flight control according to the security policy, but also automatically and in real time trigger the corresponding level of encryption, thereby achieving linkage protection of flight safety and data security, and ensuring that data protection and flight status are carried out simultaneously.

[0034] Specifically, executing the corresponding dynamic security policy or static security policy based on the security level includes: When the security level is high sensitivity, the first execution action is performed, wherein the first execution action is to issue a flight warning when the distance between the three-dimensional position of the drone and the near-end boundary of the no-fly zone is determined to be within a preset first trigger distance, to intervene in the flight when the distance is within a second trigger distance, and to unlock the area restriction when the on-chain approval access conditions are met; thus realizing the drone action execution when the security level is high sensitivity.

[0035] When the security level is medium sensitivity, the first execution action is executed, wherein the first execution action is to issue a flight warning when the distance between the three-dimensional position of the UAV and the near-end boundary of the no-fly zone is determined to be within a preset third trigger distance, and to perform flight intervention at a fourth trigger distance; thus realizing the execution of UAV actions at the medium sensitivity level.

[0036] When the security level is low sensitivity level, the first execution action is executed, wherein the first execution action is to issue a flight warning when the distance between the three-dimensional position of the UAV and the near-end boundary of the no-fly zone is determined to be within the preset fifth trigger distance, and to perform flight intervention at the sixth trigger distance; thus realizing the execution of UAV actions when the security level is low sensitivity level.

[0037] When communication between the drone and the blockchain network is interrupted, the latest locally cached strategy continues to be executed. This local strategy has a validity period; after the expiration date, it enters a conservative mode. This ensures the drone can perform actions even when communication is interrupted.

[0038] In this embodiment, preferably, performing graded data encryption storage according to the security level includes: Highly sensitive data is written to a hidden partition and encrypted using AES-256 hardware. Write medium-sensitivity data to a regular partition and encrypt it using software AES-128; Write low-sensitivity data to a regular partition and store it using optional encryption or plaintext. During the data writing, reading, and sharing process, an operation log containing data hash values, operator information, and sensitivity levels is generated, and the operation log is uploaded to the blockchain network for evidence storage.

[0039] An emergency self-destruct mechanism is set up to trigger key erasure when an abnormal event is detected, making the data in the hidden partition unrecoverable. The emergency self-destruct mechanism includes: when there are continuous authentication failures, unauthorized device access, or the drone's GPS signal abnormally leaves the preset area, the security element performs the key erasure operation.

[0040] Read the current GPS coordinates (31.2320°N, 121.4750°E) and altitude (120m).

[0041] Iterate through the basic geofencing database and dynamic policy buffers to calculate the distance between the current location and the nearest sensitive zone boundary. Assume the current location is 180 meters from the boundary of a certain military sensitive zone.

[0042] The determination is based on the trigger threshold corresponding to the task type: If the mission type is commercial filming, the intervention distance threshold is 200 meters. If the current distance is 180 meters, which is less than 200 meters, the intervention level response is triggered: the flight control limits the maximum flight speed to 5 m / s, limits the maximum roll angle to 15°, and sends an "approaching sensitive area" warning to the ground station.

[0043] If the drone continues to fly towards the sensitive area and is less than 50 meters from the boundary, a forced execution will be triggered: the flight control system will overlay the operator's input and automatically execute the return-to-home (RTH) procedure.

[0044] If the mission type is government inspection and requires entry into a sensitive area, the operator can initiate an access application in advance through the ground station. The application information (mission ID, operator ID, planned entry time, and estimated stay time) is sent to the on-chain smart contract via an encrypted channel. The smart contract automatically approves the application according to preset rules (e.g., the mission ID is already on the whitelist, and the operator possesses the necessary qualifications). Upon approval, a temporary access token is issued to the flight controller. The flight controller unlocks the area restrictions within the token's validity period, allowing entry.

[0045] When the flight control system determines that the drone has entered a sensitive area (including situations that trigger intervention or forced execution), it sends an "enter_sensitive_zone" signal to the encrypted storage card via the I²C bus, carrying a sensitivity level identifier.

[0046] The encrypted memory card uses Swissbit iShield Archive, featuring a built-in Secure Element (SE) and hidden partition functionality. After receiving a trigger signal, the memory card's main control chip: If the sensitivity level is high (e.g., government inspection missions entering military areas), subsequent data written will be automatically encrypted using a data encryption key derived from the secure element (DEK_High) with hardware AES-256-GCM and written to a hidden partition (LBA address range 0x2000-0xFFFF). The hidden partition is not visible when a regular card reader is connected.

[0047] If the sensitivity level is medium or low, write to a regular partition and use software AES-128 encryption or plaintext storage.

[0048] The flight control system communicates with the camera gimbal via a CAN bus to ensure that video streams and photo data carry the correct sensitivity level metadata.

[0049] When the drone flies more than 100 meters out of the sensitive zone boundary and does not re-enter for 10 consecutive seconds, the flight controller sends an "exit_sensitive_zone" signal to the memory card, and the memory card restores the default encryption policy corresponding to the task type.

[0050] like Figure 2 As shown, this application also relates to a hierarchical encrypted storage system for unmanned aerial vehicles (UAVs), the system comprising: The strategy acquisition module 10 is used to acquire dynamic security policies encoded as smart contracts from the blockchain network and to invoke static security policies locally; both the dynamic and static security policies include no-fly zones and execution actions. The location determination module 20 is used to acquire the three-dimensional position of the drone in real time and determine whether the drone's three-dimensional position is within or near the no-fly zone of the dynamic or static security policy. The level determination module 30, if so, invokes a pre-configured flight mission type locally and determines the security level based on the flight mission type. The execution module 40 is used to execute the corresponding dynamic or static security policy according to the security level and perform hierarchical data encryption storage. This achieves the same technical effect as hierarchical encrypted storage used for drones.

[0051] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A hierarchical encrypted storage method for unmanned aerial vehicles (UAVs), characterized in that, include: Retrieve dynamic security policies encoded as smart contracts from the blockchain network, and invoke static security policies locally; Both the dynamic and static security policies include no-fly zones and actions to be taken. The system can obtain the three-dimensional position of the drone in real time and determine whether the three-dimensional position of the drone is in or near the no-fly zone of the dynamic security policy or the static security policy. If so, the pre-configured flight mission type is called from the local machine, and the safety level is determined based on the flight mission type; Based on the security level, the corresponding dynamic or static security policy is executed, and the data is stored with hierarchical encryption.

2. The hierarchical encrypted storage method according to claim 1, characterized in that, The task types include government inspections, commercial filming, and personal recording; the security levels include high sensitivity for government inspections, medium sensitivity for commercial filming, and low sensitivity for personal recording.

3. The hierarchical encrypted storage method according to claim 1, characterized in that, Performing graded data encryption storage according to the security level includes: Highly sensitive data is written to a hidden partition and encrypted using AES-256 hardware. Write medium-sensitivity data to a regular partition and encrypt it using software AES-128; Write low-sensitivity data to a regular partition and store it using optional encryption or plaintext. During the data writing, reading, and sharing process, an operation log containing data hash values, operator information, and sensitivity levels is generated, and the operation log is uploaded to the blockchain network for evidence storage.

4. The hierarchical encrypted storage method according to claim 3, characterized in that, An emergency self-destruct mechanism is set up to trigger key erasure when an abnormal event is detected, making the data in the hidden partition unrecoverable. The emergency self-destruct mechanism includes: when there are continuous authentication failures, unauthorized device access, or the drone's GPS signal abnormally leaves the preset area, the security element performs the key erasure operation.

5. The hierarchical encrypted storage method according to claim 1, characterized in that, The UAV's three-dimensional position is obtained by using extended Kalman filter fusion positioning of multi-constellation GNSS and inertial navigation system, with a positioning update frequency of not less than 10Hz.

6. The hierarchical encrypted storage method according to claim 1, characterized in that, Determining whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic or static security policy includes: Quadtree spatial indexing is used to identify regions near or overlapping with the UAV's 3D position, thus obtaining a candidate region set; Determine whether each candidate region is a no-fly zone; If so, the three-dimensional position of the drone is determined to be in or near a no-fly zone.

7. The hierarchical encrypted storage method according to claim 1, characterized in that, Executing the corresponding dynamic or static security policy based on the security level includes: When the security level is high sensitivity, the first execution action is executed, wherein the first execution action is to issue a flight warning when it is determined that the distance between the three-dimensional position of the drone and the near-end boundary of the no-fly zone is within a preset first trigger distance, to intervene in the flight at the second trigger distance, and to unlock the area restriction when the on-chain approval access conditions are met. When the security level is medium sensitive, the first execution action is executed, wherein the first execution action is to issue a flight warning when the distance between the three-dimensional position of the UAV and the near-end boundary of the no-fly zone is determined to be within a preset third trigger distance, and to perform flight intervention at the fourth trigger distance; When the security level is low sensitivity level, the first execution action is executed, wherein the first execution action is to issue a flight warning when the distance between the three-dimensional position of the UAV and the near-end boundary of the no-fly zone is determined to be within the preset fifth trigger distance, and to perform flight intervention when the distance is within the sixth trigger distance; When communication between the drone and the blockchain network is interrupted, the latest policy is continued to be executed using local caching, and the local policy has an expiration period. After the expiration period, it enters conservative mode.

8. A hierarchical encrypted storage system for unmanned aerial vehicles (UAVs), characterized in that, include: The policy acquisition module is used to obtain dynamic security policies encoded as smart contracts from the blockchain network and to call static security policies from the local machine. Both the dynamic and static security policies include no-fly zones and actions to be taken. The position determination module is used to obtain the three-dimensional position of the UAV in real time and determine whether the three-dimensional position of the UAV is in or near the no-fly zone of the dynamic security policy or the static security policy. The level determination module is used to, if so, retrieve a pre-configured flight mission type from the local machine and determine the safety level based on the flight mission type; The execution module is used to execute the corresponding dynamic security policy or static security policy according to the security level, and to perform hierarchical data encryption storage.

Images