A Disaster Resilient Emergency Communication Method and System Based on Authentication and Key Agreement Protocols

Abstract

This invention discloses a disaster-resilient emergency communication method and system based on an authentication and key negotiation protocol, including steps such as system initialization, UAV registration, two-way authentication and key negotiation, share calculation, and group session key recovery. This invention achieves secure communication among UAV groups through a designed threshold secret-sharing group authentication and key negotiation protocol, and allows the group authentication and key negotiation protocol to remain usable even when a few UAVs are offline or disconnected, providing theoretical support for UAV-enabled resilient disaster-relief. Security analysis and performance evaluation show that this invention has significant advantages in security level, computational overhead, and communication overhead.

Description

Technical Field

[0001] This invention relates to the field of post-disaster emergency communication technology, and to a post-disaster resilient emergency communication method and system, particularly to a post-disaster resilient emergency communication method and system based on authentication and key negotiation protocols. Background Technology

[0002] Natural disasters such as earthquakes, forest fires, and typhoons damage ground infrastructure, disrupting communication services that rely solely on terrestrial networks and hindering post-disaster emergency rescue efforts. Drones, due to their high reliability and ease of deployment, are used to resupply ground networks from the air and assist emergency communication vehicles in completing emergency rescue missions.

[0003] Chinese invention patent application number 202111031360.4 discloses an emergency communication system and method based on dynamic deployment of UAV swarms. This invention relates to the technical field of UAV base station communication systems and methods. The emergency communication system based on dynamic deployment of UAV swarms includes a UAV swarm and a UAV ground station. The UAV swarm is formed by networking UAV base stations, each of which includes a UAV and an airborne small base station. The communication method of the emergency communication system based on dynamic deployment of UAV swarms includes the following steps: Step 1: Deploying UAVs to designated locations via the UAV ground station, and using the airborne small base stations carried by the UAVs to form a UAV swarm, establishing temporary large-area mobile communication network coverage; Step 2: The UAV swarm connects to the Internet small base station gateway through the airborne small base stations, connecting to the operator's core network to provide communication services to users.

[0004] Existing technologies focus on point-to-point authentication and key negotiation, which are unsuitable for time-sensitive and computationally intensive disaster relief operations requiring drone swarm collaboration. Furthermore, existing technologies require drones to be synchronized; drones going offline or disconnecting from the network renders the authentication and key negotiation protocol unusable. Therefore, designing an authentication and key negotiation protocol that supports secure communication among drone swarms while allowing a small number of drones to communicate asynchronously (i.e., offline or disconnected) remains a challenge in this field. Proposing a resilient disaster relief method based on a swarm authentication and key negotiation protocol can effectively fill the gaps in existing technologies and is a pressing technical problem that needs to be solved in this field. Summary of the Invention

[0005] To address the aforementioned technical problems, this invention provides a disaster recovery resilient emergency communication method and system based on authentication and key negotiation protocols.

[0006] The technical solution adopted by the method of the present invention is: a post-disaster resilient emergency communication method based on authentication and key negotiation protocol, the entity including an emergency communication vehicle and several drones, and communication is possible between the emergency communication vehicle and the drones, as well as between the drones;

[0007] The method includes the following steps:

[0008] Step 1: Emergency Communication Vehicle Generating a temporary private key Temporary public key Long-term private key and long-term public keys ;

[0009] Step 2: In the emergency communication vehicle With assistance, drones Complete registration to obtain a temporary private key Temporary public key Long-term private key Long-term public key and kana Then drone To emergency communication vehicle Send message ,in, , It is the number of drones. As an intermediate variable, For drone timestamps;

[0010] Step 3: Multiple drones form a drone swarm. The drone swarm and the emergency communication vehicle complete two-way authentication and key negotiation to generate a group session key. ;

[0011] Step 4: Emergency Communication Vehicle Calculate shares And send to the drone ;

[0012] Step 5: Calculate the group session key ;in, The drones collaborated to calculate , .

[0013] As a preferred option, in step 1, the emergency communication vehicle Choose a large prime number order Elliptic curve addition cycle group cyclic group of elliptic curve multiplication , and yes The generator, then select a random number. As a temporary private key, calculate the temporary public key. Choose a random number As a long-term private key, calculate the long-term public key. Finally, the bilinear mapping is defined as The hash function is , greater than 0 and less than The integer field.

[0014] As a preferred embodiment, step 2 includes the following sub-steps:

[0015] Step 2.1: Drone Select random number Calculate intermediate variables and Then drone To emergency communication vehicle send ,in For drones His true identity Indicates the XOR operation;

[0016] Step 2.2: Emergency Communication Vehicle Computational drones true identity and intermediate variables Then emergency communication vehicle Send kana For drones ;

[0017] Step 2.3: Drone Select random number As a temporary private key, calculate the temporary public key. Choose a random number As a long-term private key, calculate the long-term public key. intermediate variables Then drone To emergency communication vehicle Send message ;in, Indicates a connector.

[0018] As a preferred embodiment, step 3 includes the following sub-steps:

[0019] Step 3.1: Emergency Communication Vehicle Received from drone swarm Then, through equations For the authentication of drone swarms, if the equation is true, the drone swarm is successfully authenticated; otherwise, the authentication and key negotiation protocol is terminated.

[0020] Step 3.2: Emergency Communication Vehicle Calculate intermediate variables Group session key Then calculate Send to drones in the group ,in It is an emergency communication vehicle. For emergency communication vehicle timestamps;

[0021] Step 3.3: The drone passes through the equation For emergency communication vehicles If the identity authentication equation is not true, the authentication and key negotiation protocol will terminate; otherwise, the drone will compute intermediate variables. .

[0022] As a preferred option, in step 4... ,coefficient , , greater than zero and less than integer field, , The threshold value is used.

[0023] This invention also includes a disaster recovery and emergency communication system based on authentication and key negotiation protocols, comprising:

[0024] One or more processors;

[0025] A storage device for storing one or more programs, which, when executed by one or more processors, enable the one or more processors to implement the disaster resilience emergency communication method based on authentication and key negotiation protocols.

[0026] The present invention also includes a non-volatile computer-readable storage medium containing a computer program that, when executed by one or more processors, causes the processors to perform the disaster resilience emergency communication method based on the authentication and key negotiation protocol.

[0027] The present invention also includes a computer program product comprising computer program instructions that, when the computer program instructions are executed on a computer, cause the computer to execute the disaster resilience emergency communication method based on authentication and key negotiation protocol.

[0028] The resilient post-disaster emergency response method proposed in this invention is based on a threshold-secret sharing group authentication and key negotiation protocol. This protocol enables secure communication among drone swarms and allows the group authentication and key negotiation protocol to remain available even when a few drones are offline or disconnected, providing theoretical support for drone-enabled resilient post-disaster emergency response. Security analysis and performance evaluation show that this invention has significant advantages in terms of security level, computational overhead, and communication overhead. Attached Figure Description

[0029] The technical solutions of the present invention will be further illustrated below using embodiments and specific implementation methods. In addition, some accompanying drawings are used in the description of the technical solutions. Those skilled in the art can obtain other drawings and the intent of the present invention from these drawings without any creative effort.

[0030] Figure 1 This is a flowchart illustrating the method of an embodiment of the invention.

[0031] Figure 2 This is a comparison diagram of the communication overhead of the resilient post-disaster emergency communication method according to an embodiment of the present invention;

[0032] Figure 3 This is a comparison diagram showing the computational overhead of the resilient post-disaster emergency communication method according to an embodiment of the present invention. Detailed Implementation

[0033] To facilitate understanding and implementation of the present invention by those skilled in the art, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the embodiments described herein are for illustration and explanation only and are not intended to limit the present invention.

[0034] This embodiment includes multiple drone wireless servers and one emergency communication vehicle wireless server; each drone wireless server is deployed on each drone, and the emergency communication vehicle wireless server is deployed on one emergency communication vehicle; each drone communicates wirelessly with one emergency communication vehicle, and each drone communicates wirelessly with each other.

[0035] Unmanned Aerial Vehicles (UAVs) As relay nodes, they form an aerial emergency network, responsible for collecting rescue information such as survivor locations, rescue routes, and disaster area conditions. Drones cooperate to form groups and assist emergency vehicles in completing emergency rescue missions.

[0036] Emergency Communication Vehicle It is responsible for system initialization and drone registration, and uses the rescue information collected by drones for post-disaster emergency rescue.

[0037] Please see Figure 1 This embodiment provides a disaster recovery and emergency communication method based on authentication and key negotiation protocols, which includes the following steps:

[0038] Step 1: System initialization;

[0039] In one implementation, in step 1, the emergency communication vehicle Choose a large prime number order Elliptic curve addition cycle group cyclic group of elliptic curve multiplication , and yes The generator, then select a random number. As a temporary private key, calculate the temporary public key. Choose a random number As a long-term private key, calculate the long-term public key. Finally, the bilinear mapping is defined as The hash function is , greater than 0 and less than The integer field.

[0040] Step 2: Drone registration;

[0041] In one implementation, step 2 specifically includes the following sub-steps:

[0042] 1) Drones Select random number Calculate intermediate variables and Then drone To emergency communication vehicle send ,in For drones true identity ; Indicates the XOR operation;

[0043] 2) Emergency communication vehicle Computational drones true identity and intermediate variables Then emergency communication vehicle Send kana For drones ,in For timestamps;

[0044] 3) Drones Select random number As a temporary private key, calculate the temporary public key. Choose a random number As a long-term private key, calculate the long-term public key. intermediate variables Then drone To emergency communication vehicle send ;in, Indicates a connector.

[0045] Step 3: Two-way authentication and key negotiation;

[0046] In one implementation, step 3 specifically includes the following sub-steps:

[0047] 1) Emergency Communication Vehicle Received from drone swarm Then, through equations For the authentication of drone swarms, if the equation is true, the drone swarm is successfully authenticated; otherwise, the authentication and key negotiation protocol is terminated.

[0048] 2) Emergency communication vehicle Calculate intermediate variables Group session key Then calculate Send to drones in the group ,in It is an emergency communication vehicle. For emergency communication vehicle timestamps;

[0049] 3) Drones pass through equations For emergency communication vehicles If the identity authentication equation is not true, the authentication and key negotiation protocol will terminate; otherwise, the drone will compute intermediate variables. .

[0050] Step 4: Share Calculation;

[0051] In one implementation, an emergency communication vehicle Calculate shares And send to the drone ;in, ,coefficient , , greater than zero and less than integer field, , The threshold value is used.

[0052] Step 5: Group session key recovery;

[0053] In one implementation, the group session key is calculated; wherein... The drones collaborated to calculate , .

[0054] This embodiment also provides a disaster recovery and emergency communication system based on authentication and key negotiation protocols, including:

[0055] One or more processors;

[0056] A storage device for storing one or more programs, which, when executed by one or more processors, enable the one or more processors to implement the disaster resilience emergency communication method based on authentication and key negotiation protocols.

[0057] This embodiment also provides a non-volatile computer-readable storage medium containing a computer program, which, when executed by one or more processors, causes the processors to perform the disaster resilience emergency communication method based on authentication and key negotiation protocols.

[0058] This embodiment also provides a computer program product, including computer program instructions, which, when executed on a computer, cause the computer to perform the disaster resilience emergency communication method based on authentication and key negotiation protocol.

[0059] This embodiment further includes a safety assessment of the present invention;

[0060] Please refer to Table 1, which evaluates the security of the resilient post-disaster emergency communication method designed in this invention, and compares it with existing research schemes (Zhengyi Shang et al. in IEEE Transactions on Wireless Communications 2020, “A Secure Group-Oriented Device-To-Device Authentication Protocol for 5G Wireless Networks”; Haowen Tan et al. in IEEE Transactions on Intelligent Transportation Systems 2023, “Secure and Efficient Authentication Key Management Scheme for UAV-assisted Infrastructure-less IoVs”).

[0061] Table 1 Security Assessment

[0062]

[0063] (1) Secure group communication

[0064] Each drone in the group collaboratively negotiates and generates a group session key to achieve secure communication within the group. Existing point-to-point authentication and key negotiation protocols are only suitable for secure communication between two drones and cannot be applied to disaster relief and emergency rescue missions involving multiple drones.

[0065] (2) Elastic Network

[0066] The group authentication and key negotiation protocol that integrates threshold secret sharing can tolerate a small number of drones losing connection or disconnecting from the network due to factors such as mobility and battery life. This ensures that the group authentication and key negotiation protocol proposed asynchronously by drones remains available, thus guaranteeing the resilience of drone-enabled disaster relief networks.

[0067] The present invention further analyzes the communication overhead.

[0068] Please see Table 2, which compares the communication overhead of the flexible post-disaster emergency rescue method of this invention with existing solutions, where the cyclic group... Elements on, cyclic group Elements, timestamps, hash outputs, integer fields The elements, signature, and identity identifier on the screen are represented as follows: , , , , , and . , , , , , and The corresponding bytes are 40 bytes, 128 bytes, 4 bytes, 20 bytes, 20 bytes, 40 bytes, and 10 bytes. Figure 2 A comparison chart of communication overhead for resilient disaster emergency response methods.

[0069] Table 2 Comparison of communication overhead (unit: bytes)

[0070]

[0071] The present invention further analyzes the computational overhead.

[0072] Assumption , , , , , , , and These are hash operations, multiplication on elliptic curves, addition on elliptic curves, bilinear pairing, and cyclic groups. Multiplication operations and cyclic groups Multiplication operations and cyclic groups The experiment simulates addition, modular arithmetic, and exponentiation. It utilizes a laptop with 16GB of RAM and a 3.1GHz clock speed, along with the Java pairing-based cryptography (jPBC) library. , , , , , , , and The computational costs were 0.0012ms, 0.4018ms, 0.0132ms, 4.301ms, 2.8640ms, 2.6784ms, 0.0342ms, 0.626ms, and 0.715ms, respectively. Table 3 shows the comparison results of the computational costs. Figure 3 This is a comparison chart of the computational costs of resilient disaster emergency response methods.

[0073] Table 3 Comparison of computational costs (unit: ms)

[0074]

[0075] The above security analysis and performance evaluation show that the present invention has significant advantages in terms of security level, computational overhead, and communication overhead.

[0076] It should be understood that the embodiments described above are only some, not all, of the embodiments of the present invention. Furthermore, the technical features of the various embodiments or individual embodiments provided by the present invention can be arbitrarily combined to form feasible technical solutions. Such combinations are not constrained by the order of steps and / or structural composition patterns, but must be based on the ability of those skilled in the art to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed by the present invention.

[0077] It should be understood that the above description of the preferred embodiments is quite detailed, but it should not be considered as a limitation on the scope of protection of this invention. Those skilled in the art, under the guidance of this invention, can make substitutions or modifications without departing from the scope of protection of the claims of this invention, and all such substitutions or modifications fall within the scope of protection of this invention. The scope of protection of this invention should be determined by the appended claims.

Claims

1. A disaster relief resilient emergency communication method based on authentication and key negotiation protocol, comprising an emergency communication vehicle and several drones, wherein the emergency communication vehicle and the drones, as well as the drones themselves, can communicate with each other; Its features are, The method includes the following steps: Step 1: Emergency Communication Vehicle Generating a temporary private key Temporary public key Long-term private key and long-term public keys ; Among them, emergency communication vehicle Choose a large prime number order Elliptic curve addition cycle group cyclic group of elliptic curve multiplication , and yes The generator, then select a random number. As a temporary private key, calculate the temporary public key. Select random number As a long-term private key, calculate the long-term public key. Finally, the bilinear mapping is defined as The hash function is , greater than 0 and less than The integer field; Step 2: In the emergency communication vehicle With assistance, drones Complete registration to obtain a temporary private key Temporary public key Long-term private key Long-term public key and kana Then drone To emergency communication vehicle Send message ,in, , It is the number of drones. As an intermediate variable, For drone timestamps; Step 2 includes the following sub-steps: Step 2.1: Drone Select random number Calculate intermediate variables and Then drone To emergency communication vehicle send ,in For drones His true identity Indicates the XOR operation; Step 2.2: Emergency Communication Vehicle Computational drones true identity and intermediate variables Then emergency communication vehicle Send kana For drones ; Step 2.3: Drone Select random number As a temporary private key, calculate the temporary public key. Select random number As a long-term private key, calculate the long-term public key. intermediate variables Then drone To emergency communication vehicle Send message ,in, Indicates a connector; Step 3: Multiple drones form a drone swarm. The drone swarm completes two-way authentication and key negotiation with the emergency communication vehicle. Generate group session key ; Step 3 includes the following sub-steps: Step 3.1: Emergency Communication Vehicle Received from drone swarm Then, through equations For the authentication of drone swarms, if the equation is true, the drone swarm is successfully authenticated; otherwise, the authentication and key negotiation protocol is terminated. Step 3.2: Emergency Communication Vehicle Calculate intermediate variables Group session key Then calculate Send to drones in the group ,in It is an emergency communication vehicle. For emergency communication vehicle timestamps; Step 3.3: The drone passes through the equation For emergency communication vehicles If the identity authentication equation is not true, the authentication and key negotiation protocol will terminate; otherwise, the drone will compute intermediate variables. ; Step 4: Emergency Communication Vehicle Calculate shares And send to the drone ; in, ,coefficient , , greater than zero and less than integer field, , For the threshold; Step 5: Group session key recovery, calculate the group session key. ;in, The drones collaborated to calculate , .

2. A disaster-resistant emergency communication system based on authentication and key negotiation protocols, characterized in that, include: One or more processors; A storage device for storing one or more programs, which, when executed by one or more processors, enable the one or more processors to implement the disaster resilience emergency communication method based on authentication and key negotiation protocol as described in claim 1.

3. A non-volatile computer-readable storage medium containing a computer program, characterized in that: When the computer program is executed by one or more processors, the processors perform the disaster resilience emergency communication method based on authentication and key negotiation protocol as described in claim 1.

4. A computer program product, comprising computer program instructions, characterized in that: When the computer program instructions are executed on the computer, the computer performs the disaster recovery and emergency communication method based on authentication and key negotiation protocol as described in claim 1.

Images