An industry application unmanned aerial vehicle flight authorization system and method

Abstract

The present invention is an industry application unmanned aerial vehicle flight authorization system, which belongs to the field of unmanned aerial vehicle flight technology, including a flight integrated management platform, the flight integrated management platform connects the aircraft and the flight controller through cloud communication, and also includes an identity authentication authenticator, the identity authentication authenticator is connected to the flight controller by means of a USB interface; the flight controller also includes a flight authorization module, the flight controller is connected in series with the data link of the flight integrated management platform by means of the flight authorization module, and also includes a flight control recorder, the flight control recorder is embedded in the aircraft by means of a physical interface, the flight control recorder is provided with a variety of wireless communication interfaces, the power module of the flight control recorder is connected to the power supply of the unmanned aerial vehicle, and the flight control recorder is also connected to the flight controller. The system of this scheme has the characteristics of low cost and easy deployment, and the application method of the system has the characteristics of simple operation, high fault tolerance, not prone to failure, and high transmission efficiency.

Description

Technical Field

[0001] The present invention belongs to the technical field of unmanned aerial vehicle flight authorization, and relates to an aircraft flight authorization system and method, and specifically to an industry-applied unmanned aerial vehicle flight authorization system and method. Background Art

[0002] In recent years, with the development of sensor technology, communication information technology, intelligent control and other technologies and the joint promotion of the market, the number and scale of drone use have increased significantly, and their application in various fields of the economy and society has become increasingly widespread. At the same time, various safety accidents caused by illegal drone flights have occurred from time to time internationally, and some have even caused serious real harm. In recent years, some airports have also experienced incidents of drone interference in flight takeoffs and landings. Frequent illegal drone flights have affected the normal operation of civil aviation and social security. Therefore, it is urgent to take effective measures to prevent and deal with drone interference operations.

[0003] Currently, the application of drones in the industry is showing a good momentum of vigorous development, but there are still a number of problems in drone flight control, standardization of frequency usage, security and compliance of business platform access, information security, flight management, and flight dynamic monitoring.

[0004] The main issues of drone flight control include drone flight permits, dynamic certification of pilot licenses, flight management, safety control, flight service guarantees, dynamic flight monitoring, communication encryption, etc. At present, drone flight permits cannot be fully and effectively controlled from the source. Whether the drone pilot has a legal flight license and whether he has the qualifications to drive the relevant models cannot be effectively controlled according to the situation at the operation site. The flight plan, including the flight duration, cannot be effectively managed, and there are some shortcomings in control.

[0005] Deploying defenses in key areas is a way to counter drones that enter or approach defense areas. However, the detection and countermeasures of drones is a global problem, and there is currently no absolutely effective solution for different scenarios and complex environments. Existing drone countermeasures are relatively passive defense technologies that cannot prevent many illegal drones from taking off. They can generally only counter the defense deployment area, and the success rate of countermeasures is low. There are still a large proportion of drones that cannot be countered. There are still major safety risks for illegal and uncontrolled flights.

[0006] In the prior art, drones that operate remotely beyond visual range through cellular networks mainly rely on flight plans, and the drone cloud system completes the beyond visual range flight verification. This requires the drone operator to actively submit a flight plan. In addition, this type of flight authorization method is only applicable to cooperative drones within the range of the cellular network. Otherwise, the drone operator will not actively submit a flight plan, and it is impossible to determine whether the drone is allowed to fly. Therefore, there are still many uncertainties and limitations in using cellular networks for quasi-flight control. However, drones are generally not designed to be equipped with flight control recorders, nor do they use quasi-flight devices with encryption functions in the flight control system, so it is impossible to uniformly control quasi-flight from the source. Summary of the invention

[0007] The present invention proposes an industry-application unmanned aerial vehicle flight authorization system and method. The system of this solution has the characteristics of low cost and easy deployment, and the application method of the system has the characteristics of simple operation, high fault tolerance, low failure rate and high transmission efficiency.

[0008] The technical solution of the present invention is as follows:

[0009] An industry application unmanned aerial vehicle flight authorization system includes a flight integrated management platform, the flight integrated management platform is connected to the aircraft and the flight controller through cloud communication, and is used for official management of the aircraft. The flight controller is connected to the aircraft by means of a remote control module, and also includes an identity authentication device, the identity authentication device is used to verify the basic information and qualifications of the driver, and the identity authentication device is connected to the flight controller by means of a USB interface;

[0010] The flight controller also includes a flight authorization module, and the flight controller is connected in series with the data link of the flight integrated management platform by means of the flight authorization module, and the flight authorization module includes a gigabit network communication interface and multiple wireless communication interfaces;

[0011] The system also includes a flight control recorder, which is embedded in the aircraft via a physical interface. The flight control recorder is provided with a plurality of wireless communication interfaces. The power module of the flight control recorder is connected to the power supply of the UAV, and the flight control recorder is also communicatively connected to the flight controller.

[0012] As a further optimization of this solution, the wireless communication interface between the flight authorization module and the flight control recorder includes a wireless 4G or 5G network module: a 2.4G data transmission module, a 5.8G image transmission module, and for industrial drones: a 1.4G or 1.8G wireless private network module.

[0013] As a further optimization of this solution, the flight control recorder includes a processor, an information sending module and a storage module. The processor is used to control the calling and writing of information in the storage module, and the information sending module is used to realize the communication connection between the flight control recorder and the aircraft, the flight controller, the flight authorization module and the flight integrated management platform.

[0014] A method for authorizing the flight of an unmanned aerial vehicle for industrial applications is provided. The method is executed based on a system for authorizing the flight of an unmanned aerial vehicle for industrial applications, including a certification phase, a takeoff preparation phase, and a flight phase.

[0015] The authentication phase includes,

[0016] The identity authentication device is based on the PKI digital certificate authentication system. After the drone pilot completes the training assessment, the management department performs key pair identity authentication on the drone pilot based on the assessment results and the pilot's identity, and inputs the authentication information into the identity authentication device.

[0017] The flight controller is connected to the flight integrated management platform through the flight authorization module, and the aircraft is connected to the identity authentication device through the USB interface;

[0018] The takeoff preparation stage includes:

[0019] The processor of the flight control recorder divides the storage module into an authorization database, the authorization database includes an authorization token, and in the takeoff preparation stage, the authorization database sends authorization information to the flight authorization module with the help of the information sending module;

[0020] The flight authorization module retrieves the authorization information to see if it meets the authorization standard. If so, takeoff is allowed and the flight phase is executed. Otherwise, takeoff is denied and the reason for the blockage is prompted.

[0021] The flight phases include:

[0022] The processor of the flight control recorder further divides the storage module into a flight database. The flight control recorder collects flight information of the aircraft in real time and stores it in the flight database.

[0023] As a further optimization of this solution, the flight information in the flight phase includes the longitude, latitude, and altitude change data of the aircraft over time, as well as operation data and event information.

[0024] The processor of the flight control recorder converts the signal output by the sensor of the aircraft into flight information and stores it in the flight database.

[0025] As a further optimization of this solution, the authentication stage also includes:

[0026] The identity authentication device generates a key pair based on SKF, and the key pair includes a private key and a public key.

[0027] The driver's information, including identity data, driver's license, affiliated unit, flight time, and training resume, is generated into an authentication digital certificate through a national secret algorithm PKI product, and then signed and encrypted and imported into the identity authentication device.

[0028] As a further optimization of this solution, the authentication stage also includes:

[0029] The flight authorization module and the UAV flight integrated management platform establish a national secret SSL VPN tunnel with the help of a wired or wireless network to conduct national secret encrypted communication. The driver's identity and qualification authentication, flight authorization, flight data reporting, source authentication, emergency takeover and encrypted transmission are performed through the national secret SSLVPN tunnel.

[0030] As a further optimization of this solution, the authorization information of the authorization database also includes flight authorization information, frequency band authentication information, service platform access security authentication information and encryption algorithm information.

[0031] As a further optimization of this solution, the flight phase also includes:

[0032] When the flight control recorder of the aircraft detects abnormal control data, the abnormal data is transmitted to the flight authorization module or the flight integrated management platform through the information sending module. The flight authorization module or the flight integrated management platform calls an encryption algorithm to encrypt the controlled signal source and frequency band output by the flight controller. The flight controller sends the encrypted control information to the aircraft to perform encrypted control on the aircraft.

[0033] The working principle of the present invention is:

[0034] When in use, it is divided into two control points, one is the flight authorization module on the ground (with identity authentication device), and the other is the control recorder in the air for distributed control.

[0035] The identity authentication device is a device that proves the basic information and qualifications of the pilot. It can effectively control basic flight control issues such as who, where, when, what type of aircraft, flight duration, and flight area.

[0036] When the flight authorization module is working, the data link is connected in series between the ground flight controller and the flight management platform. The data of the flight authorization module, the flight management platform and the flight business platform are in a private format and transmitted through a national secret SSL VPN tunnel, realizing national secret encrypted transmission of flight management data and business data such as flight authorization, flight data reporting, source authentication and emergency takeover.

[0037] The control record starts to record flight data at regular intervals when the drone is authorized to take off, such as longitude, latitude, altitude, time, event information, etc. During the flight, if the drone is trapped by counter-unmanned equipment, it will communicate with the control recorder, flight authorization module or drone integrated management platform as a controlled source to reject the control of the trapping signal and avoid entrapment landing. After returning and landing, the drone communicates with the ground flight authorization module through Bluetooth signals using a private data format for encrypted transmission of flight data.

[0038] The beneficial effects of the present invention are:

[0039] The present invention organically combines three devices with the original UAV flight control system to form a more complete flight control management system, and designs methods for UAV control such as pilot-related identity and qualification authentication, flight authorization, flight data reporting, source authentication, emergency takeover, national secret encrypted communication, and flight data backup, so as to solve, improve and optimize the problems exposed by the existing industry UAV control systems and methods. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0041] Figure 1 This is a principle block diagram of an industry application unmanned aircraft flight authorization system of the present invention;

[0042] Figure 2 The present invention is a basic flow chart of a method for authorizing the flight of an unmanned aerial vehicle for industry application. DETAILED DESCRIPTION

[0043] The following will be combined with the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0044] Specific embodiment 1,

[0045] As the instruction manual Figure 1As shown, an industry application unmanned aerial vehicle flight authorization system includes a flight integrated management platform, which is connected to the aircraft and the flight controller through cloud communication and is used for official management of the aircraft. The flight controller controls the connection to the aircraft, and the remote control module is connected to the aircraft by means of wireless remote control. The flight integrated management platform includes a flight management system and a flight business system to uniformly manage and control the drone.

[0046] It also includes an identity authentication device, which is used to verify the basic information and qualifications of the driver, and the identity authentication device is connected to the flight controller through a USB interface;

[0047] The aircraft controller is equipped with multiple USB interfaces, which can support simultaneous cooperation between the main and co-pilot of the drone. The ground flight controller reads the information of the identity authentication device through a private interface. After the verification is passed, the pilot can effectively control the drone to fly through the ground flight controller.

[0048] The flight controller also includes a flight authorization module, and the flight controller is connected in series with the data link of the flight integrated management platform with the help of the flight authorization module. The flight authorization module includes a gigabit network communication interface and a variety of wireless communication interfaces; the flight authorization module and the flight integrated management are connected with the help of a drone access gateway, and the connection method includes wireless or wired communication.

[0049] The system also includes a flight control recorder, which is embedded in the aircraft via a physical interface, and is provided with a plurality of wireless communication interfaces, a power module of the flight control recorder is connected to a power supply of the unmanned aerial vehicle, and the flight control recorder is also connected to the flight controller in a communication manner. The flight control recorder of the present invention is embedded in the unmanned aerial vehicle using a private physical interface when working, and is used for power supply, authorization token, transmission of flight record data, etc.

[0050] The aerial part includes aircraft, namely unmanned aerial vehicles, drones, etc., as well as the control and recorders included in the drones.

[0051] The ground part includes a flight controller and an identity authentication device. The controller is connected to the flight integrated management platform with the help of a drone access gateway. The flight control recorder, flight authorization module and identity authentication device in this application are organically combined with the original drone flight control system to form a more complete flight control management system. Methods for drone control such as pilot-related identity and qualification authentication, flight authorization, flight data reporting, source authentication, emergency takeover, national secret encrypted communication, and flight data backup are designed to solve, improve and optimize the problems exposed by the existing industry drone control systems and methods.

[0052] Figure 1 The control recorder mentioned above is a flight management recorder, which includes a processor, an information sending module and a storage module. The processor is used to control the calling and writing of information in the storage module, and the information sending module is used to realize the communication connection between the flight control recorder and the aircraft, the flight controller, the flight authorization module and the flight integrated management platform.

[0053] The wireless communication interface between the flight authorization module and the flight control recorder includes a wireless 4G or 5G network module: a 2.4G data transmission module, a 5.8G image transmission module, and for industrial drones: a 1.4G or 1.8G wireless private network module.

[0054] The hardware implementation of the technology can directly adopt existing intelligent devices, including but not limited to industrial computers, PCs, smart phones, handheld stand-alone computers, floor-standing stand-alone computers, etc. Its input device preferably adopts a screen keyboard, its data storage and calculation module adopts existing memory, calculator, controller, its internal communication module adopts existing communication ports and protocols, and its remote communication adopts existing GPRS network, World Wide Internet, etc.

[0055] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0056] Specific embodiment 2,

[0057] As the instruction manual Figure 2 As shown, a method for authorization of unmanned aerial vehicle flight for industrial application, the execution of which comprises an authentication phase, a take-off preparation phase and a flight phase.

[0058] The authentication phase includes,

[0059] The identity authentication device is based on the PKI digital certificate authentication system. After the drone pilot completes the training assessment, the management department performs key pair identity authentication on the drone pilot based on the assessment results and the pilot's identity, and inputs the authentication information into the identity authentication device.

[0060] The flight controller is connected to the flight integrated management platform through the flight authorization module, and the aircraft is connected to the identity authentication device through the USB interface;

[0061] The identity authentication device generates a key pair based on SKF, and the key pair includes a private key and a public key.

[0062] The driver's information, including identity data, driver's license, affiliated unit, flight time, and training resume, is generated into an authentication digital certificate through a national secret algorithm PKI product, and then signed and encrypted and imported into the identity authentication device.

[0063] The flight authorization module and the UAV flight integrated management platform establish a national secret SSL VPN tunnel with the help of a wired or wireless network to conduct national secret encrypted communication. The driver's identity and qualification authentication, flight authorization, flight data reporting, source authentication, emergency takeover and encrypted transmission are performed through the national secret SSLVPN tunnel.

[0064] The takeoff preparation stage includes:

[0065] The processor of the flight control recorder divides the storage module into an authorization database, the authorization database includes an authorization token, and in the takeoff preparation stage, the authorization database sends authorization information to the flight authorization module with the help of the information sending module;

[0066] The flight authorization module retrieves the authorization information to see if it meets the authorization standard. If so, takeoff is allowed and the flight phase is executed. Otherwise, takeoff is denied and the reason for the blockage is prompted.

[0067] The authorization information in the authorization database also includes flight authorization information, frequency band authentication information, service platform access security authentication information and encryption algorithm information.

[0068] The flight controller reads the information of the identity authentication device through a private interface. After the verification is passed, the pilot can effectively control the drone to fly through the ground flight controller. At the same time, the identity authentication device counts the flight time of the main control and co-control pilots respectively, and encrypts and stores the above flight data and driver's license data based on the national secret algorithm. It provides effective data support for flight experience statistics, annual assessment of training time, etc.

[0069] The identity authentication device supports national secret encryption storage. The management of drone driver license is as follows:

[0070] A1: Fixed wing, senior instructor

[0071] A2: Rotorcraft, Senior Instructor

[0072] B1: Fixed wing, driving license

[0073] B2: Rotorcraft, driving license

[0074] C: Helicopter, driving license

[0075] Each functional unit can be integrated into a processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of a software functional unit. If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in the form of source code, object code, executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal and software distribution medium, etc. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media does not include electrical carrier signals and telecommunications signals.

[0076] The flight phases include:

[0077] The processor of the flight control recorder further divides the storage module into a flight database, and the flight control recorder attempts to collect flight information of the aircraft and stores it in the flight database.

[0078] The flight information during the flight phase includes the longitude, latitude, and altitude change data of the aircraft over time, as well as operation data and event information.

[0079] The processor of the flight control recorder converts the signal output by the sensor of the aircraft into flight information and stores it in the flight database.

[0080] When the flight control recorder of the aircraft detects abnormal control data, the abnormal data is transmitted to the flight authorization module or the flight integrated management platform through the information sending module. The flight authorization module or the flight integrated management platform calls an encryption algorithm to encrypt the controlled signal source and frequency band output by the flight controller. The flight controller sends the encrypted control information to the aircraft to perform encrypted control on the aircraft.

[0081] During the flight, if the drone is interfered with or trapped by illegal anti-drone equipment, it will perform encrypted verification of the controlled source and frequency band with the control recorder, flight authorization module or drone integrated management platform to reject the control of the trapping signal and avoid entrapment landing. The flight control recorder is also designed with various wireless communication interfaces: wireless 4G or 5G network module, optional 2.4G data transmission module, 5.8G image transmission module, and optional 1.4G or 1.8G wireless private network module for industrial drones. Different communication modules can be selected according to different application requirements to achieve private network encrypted communication between drones and integrated management platforms. Through the above key technologies and methods of the flight control recorder embedded in the drone, a more comprehensive and safe quasi-flight control of the drone can be achieved at the source of takeoff, providing a more complete control method for drone quasi-flight control. Provide a safer and more reliable solution for high-demand drone quasi-flight control occasions.

[0082] The devices designed by the present invention all use domestic high-performance, low-power, small-volume, low-cost ARM as processors for various control devices. They mainly include identity authentication devices, authorization modules, and control recorders. These devices are organically combined with the original flight control system to form a more complete flight control management system. When in use, they are divided into two control points, one on the ground for flight authorization module (with identity authentication devices), and one in the air for control recorders for distributed control.

[0083] The identity authentication device is a device that proves the basic information and qualifications of the pilot. It can effectively control basic flight control issues such as who, where, when, what type of aircraft, flight duration, and flight area.

[0084] In this solution, the basic process of aircraft flight authorization is as follows:

[0085] After the drone pilot completes the training and assessment, he / she takes the identity authentication device to the management department to apply for the key pair required for authentication. For example, the key pair (private key + public key) is generated using SKF (national secret interface standard).

[0086] The identity authentication device that generates the key pair attaches the necessary driver information (including identity information, driver's license, affiliated unit, flight time, training resume, etc.) to apply for a digital certificate through the PKI server.

[0087] The CA certificate server of the national secret PKI product system uses the national secret algorithm to generate an authentication digital certificate, which is then signed and encrypted and imported into the identity authentication device.

[0088] After the pilot obtains the identity authentication device with the authentication signature, he / she connects it to the flight authorization module on the ground flight controller through the USB interface before executing the flight mission to apply for a flight token.

[0089] The flight authorization module communicates with the drone flight integrated management system for flight authorization through the national secret SSLVPN tunnel of 4G / 5G network, wired network or wireless private network (such as: 1.4G / 1.8G), and obtains the flight token after the authentication and authorization are passed.

[0090] After the flight authorization module obtains the flight authorization token, it sends the flight authorization token to the remote control module in the ground flight controller through the internal serial port, network port or USB private interface.

[0091] The flight authorization module sends a flight token to the drone through the control recorder.

[0092] When the drone is operating, the control recorder records the flight data (such as longitude, latitude, altitude, time, event information, etc.) in real time. It can also support the use of wireless private network to communicate with the ground station through national secret SSL VPN, control source authentication, etc.

[0093] When a drone is operating without real-time 4G / 5G or wireless private network communication, its flight record data can be uploaded through wireless communication between the control recorder and the ground base station after the drone finishes the operation and lands.

[0094] The flight authorization module synchronizes flight data with the drone integrated management system through the national secret SSLVPN.

[0095] Attitude sensor technology mainly includes accelerometers, gyroscopes, and global satellite positioning technology, which are used to measure three-axis acceleration, three-axis rotation angular rate, longitude, latitude, altitude and other data.

[0096] Unmanned aerial vehicles use accelerometers, gyroscopes, and global satellite positioning technology to determine their heading vector and velocity vector relative to the earth.

[0097] The following is an introduction to the functions used in this application.

[0098] Drone countermeasure technologies include jamming and interception technology and deception technology.

[0099] Specially used jamming and defensive technology for illegal and reckless drones. It automatically detects drones through radio or radar, tracks and locks them, and then interferes with the drone’s data link and navigation link, cutting off the communication between the drone and the remote controller, thus forcing the drone to automatically land or drive it away, ensuring the safety of low-altitude airspace for large-scale events and important places.

[0100] Mobile cellular network drone flight control technology, by combining the drone's flight plan, configures the cellular networked drone and remote control group pair relationship and drone whitelist, and authenticates and authenticates the beyond-visual-range drones connected to the mobile cellular network, thereby achieving flight control of the cellular networked drone system.

[0101] Token, in computer identity authentication, is the meaning of token, which is generally used for invitation and login system. It is used in many large websites. Compared with traditional identity authentication methods, Token is more scalable and more secure, and is very suitable for use in Web applications or mobile applications.

[0102] VPN, currently two VPN technologies are most widely used, the first is IPSec VPN based on the IP network layer, and the other is SSLVPN technology based on the application layer.

[0103] IPSec (Internet Protocol Security) is the basic encryption protocol of VPN. It provides security for data transmission at the network layer through public networks. IPSecVPN is suitable for network-to-network connection solutions.

[0104] SSL VPN refers to a new VPN technology that uses the SSL protocol to encrypt IP data links for remote access. Since the SSL protocol is widely built into various browsers such as IE, SSLVPN, which uses the SSL protocol for authentication and data encryption, has the characteristics of simple deployment, no client, low maintenance cost, and strong network adaptability compared to traditional IPSec VPN.

[0105] National secret technology, national secret refers to the domestic cryptographic algorithm recognized by the State Cryptography Bureau. There are mainly SM1, SM2, SM3, SM4. The key length and packet length are both 128 bits. SM1 is symmetric encryption. Its encryption strength is equivalent to AES. This algorithm is not public. When calling this algorithm, it needs to be called through the interface of the encryption chip. SM2 is asymmetric encryption, based on ECC. This algorithm has been made public. Because this algorithm is based on ECC, its signature speed and key generation speed are faster than RSA. ECC 256 bits (SM2 uses a type of ECC 256 bits) has higher security strength than RSA 2048 bits, but the operation speed is faster than RSA. SM3 message digest. You can use MD5 as a comparison. This algorithm has been made public. The verification result is 256 bits. SM4 wireless LAN standard packet data algorithm. Symmetric encryption, key length and packet length are both 128 bits. Since the block size for SM1 and SM4 encryption and decryption is 128 bits, when encrypting and decrypting a message, if the message length is too long, it needs to be grouped; if the message length is insufficient, it needs to be padded.

[0106] The embodiments described above are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included in the protection scope of the present invention.

Claims

1. A method for authorizing the flight of an unmanned aerial vehicle for industrial applications, the method being executed based on a system for authorizing the flight of an unmanned aerial vehicle for industrial applications, comprising a flight integrated management platform, the flight integrated management platform connecting an aircraft and a flight controller via cloud communication, for official management of the aircraft, the flight controller controlling the aircraft with the aid of a remote control module, and also comprising an identity authentication device, the identity authentication device being used to verify the basic information and qualifications of the driver, the identity authentication device being connected to the flight controller in communication with the USB interface; The flight controller also includes a flight authorization module, and the flight controller is connected in series with the data link of the flight integrated management platform by means of the flight authorization module, and the flight authorization module includes a gigabit network communication interface and multiple wireless communication interfaces; The system also includes a flight control recorder, which is embedded in the aircraft by means of a physical interface. The flight control recorder is provided with a plurality of wireless communication interfaces. The power module of the flight control recorder is connected to the power supply of the aircraft. The flight control recorder is also communicatively connected to the flight controller. The flight control recorder includes a processor, an information sending module and a storage module. The processor is used to control the calling and writing of information in the storage module. The information sending module is used to realize the communication connection between the flight control recorder and the aircraft, the flight controller, the flight authorization module and the flight integrated management platform. The wireless communication interface between the flight authorization module and the flight control recorder includes a wireless 4G or 5G network module: a 2.4G data transmission module, a 5.8G image transmission module, and for unmanned aerial vehicles: a 1.4G or 1.8G wireless private network module; It is characterized in that Including the certification phase, take-off preparation phase and flight phase, The authentication phase includes, The identity authentication device is based on the PKI digital certificate authentication system. After the aircraft pilot completes the training assessment, the management department performs key pair identity authentication on the aircraft pilot according to the assessment results and the pilot's identity, and inputs the authentication information into the identity authentication device; The flight controller is connected to the flight integrated management platform through the flight authorization module, and the aircraft is connected to the identity authentication device through the USB interface; The takeoff preparation stage includes: The processor of the flight control recorder divides the storage module into an authorization database, the authorization database includes an authorization token, and in the takeoff preparation stage, the authorization database sends authorization information to the flight authorization module with the help of the information sending module; The flight authorization module retrieves the authorization information to see if it meets the authorization standard. If so, takeoff is allowed and the flight phase is executed. Otherwise, takeoff is denied and the reason for the blockage is prompted. The flight phases include: The processor of the flight control recorder further divides the storage module into a flight database. The flight control recorder collects the flight information of the aircraft in real time and stores it in the flight database. The authentication phase also includes that the flight authorization module and the flight integrated management platform establish a national secret SSL VPN tunnel with the help of a wired or wireless network to conduct national secret encrypted communication. The identity and qualification authentication of the pilot, flight authorization, flight data reporting, source authentication, emergency takeover and encrypted transmission are performed through the national secret SSL VPN tunnel. The authorization information of the authorization database also includes flight authorization information, frequency band authentication information, service platform access security authentication information and encryption algorithm information. In the flight phase, it also includes, When the flight control recorder of the aircraft detects abnormal control data, the abnormal data is transmitted to the flight authorization module or the flight integrated management platform through the information sending module. The flight authorization module or the flight integrated management platform calls an encryption algorithm to encrypt the controlled signal source and frequency band output by the flight controller. The flight controller sends the encrypted control information to the aircraft to perform encrypted control on the aircraft.

2. The method for authorizing the flight of an unmanned aerial vehicle for industrial applications according to claim 1, characterized in that: The flight information during the flight phase includes the longitude, latitude, and altitude change data of the aircraft over time, as well as operation data and event information. The processor of the flight control recorder converts the signal output by the sensor of the aircraft into flight information and stores it in the flight database.

3. The method for authorizing the flight of an unmanned aerial vehicle for industrial applications according to claim 1, characterized in that: The authentication stage also includes, The identity authentication device generates a key pair based on SKF, and the key pair includes a private key and a public key. The driver's information, including identity data, driver's license, affiliated unit, flight time, and training resume, is generated into an authentication digital certificate through a national secret algorithm PKI product, and then signed and encrypted and imported into the identity authentication device.

Images