Certificate-based drone data auditing methods, devices, equipment, and media

Abstract

This application relates to a certificate-based method, apparatus, device, and medium for auditing drone data. The method includes: generating system parameters and a master key pair for a preset certificate center; obtaining user key pairs and identity information for at least one target drone, and receiving a valid digital certificate from the certificate center in conjunction with the system parameters and the master public key; collecting corresponding drone data from the target drone, and generating a homomorphic verifiable tag for the drone data when the valid digital certificate meets preset certificate verification conditions; and auditing the drone data corresponding to one or more target drones through a preset challenge-response interactive auditing mechanism when the drone data and the homomorphic verifiable tag meet preset validity verification conditions to obtain the data audit result. This solves the problems of high key leakage risk, difficulty in homomorphically aggregating verifiable tags from different users, and high audit overhead in existing data auditing schemes.

Description

Technical Field

[0001] This application relates to the field of data auditing technology, and in particular to a certificate-based method, apparatus, equipment and medium for auditing data from unmanned aerial vehicles (UAVs). Background Technology

[0002] In the context of rapid societal development, people's demands for efficiency, convenience, environmental friendliness, and intelligent information technology are growing stronger. Traditional transportation modes and services are facing numerous constraints and challenges, such as congestion, pollution, resource waste, and inefficiency. Therefore, the low-altitude economy is gradually emerging as a new solution to meet these needs, finding applications in areas such as urban logistics, agricultural plant protection, and smart cities. In high-density, high-capacity drone systems, cloud platforms provide computing and storage services for drones. Drones act as data acquisition devices, performing various tasks such as monitoring and reconnaissance. Due to limited storage and computing resources, drones outsource the collected data to the cloud in real time. Cloud servers can store this data and provide data analysis services, such as image analysis, path planning, and traffic flow detection. However, uncertified drones may insert false information or malicious viruses into cloud data, potentially corrupting the original data files. Furthermore, software or hardware failures can also compromise the integrity of outsourced data. Cloud server providers may even exploit their privileges to delete infrequently used data to save storage space, which also impairs data availability. Therefore, achieving efficient data auditing is a pressing issue for future drone networks.

[0003] Existing data auditing solutions typically employ identity-based or certificate-free signature mechanisms, using challenge-response protocols to audit data integrity. In these solutions, a user's private key is generated and distributed by a central entity that verifies their identity. Furthermore, to improve auditing efficiency, existing data auditing solutions often construct homomorphic verifiable tags (HVTs) for data blocks, enabling auditors to aggregate tags and thus audit multiple different data files from a single user simultaneously.

[0004] However, in open and untrusted wireless networks, having a central entity manage keys may increase the risk of key leakage in existing technologies, and how to securely distribute private keys to legitimate users is also a challenge. In addition, the multiplicative homomorphism of existing technologies not only requires expensive bilinear mapping for verification, but also cannot homomorphically aggregate verifiable tags from different users, which may lead to huge auditing overhead in networks with a large number of users.

[0005] In summary, the existing data auditing scheme has a high risk of key leakage, is difficult to homomorphically aggregate verifiable labels from different users, and has a large auditing overhead, which needs to be solved urgently. SUMMARY

[0006] The present application provides a certificate-based unmanned aerial vehicle data auditing method, device, equipment and medium to solve the problems of high risk of key leakage, difficulty in homomorphically aggregating verifiable labels from different users, and large auditing overhead of the existing data auditing scheme.

[0007] The first aspect of the present application provides a certificate-based unmanned aerial vehicle data auditing method, comprising the following steps: generating system parameters and a master key pair of a preset certificate center; obtaining a user key pair and identity information corresponding to at least one target unmanned aerial vehicle, and receiving a valid digital certificate sent by the preset certificate center based on the system parameters, a master public key in the master key pair, a user public key in the user key pair, and the identity information; collecting corresponding unmanned aerial vehicle data through the at least one target unmanned aerial vehicle, and generating a homomorphic verifiable label of the unmanned aerial vehicle data in the case that the valid digital certificate meets a preset certificate verification condition, and storing target unmanned aerial vehicle data in the unmanned aerial vehicle data that meets a preset validity verification condition and a target homomorphic verifiable label corresponding to the target unmanned aerial vehicle data; auditing target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through a preset challenge-response interaction auditing mechanism to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle.

[0008] Optionally, in an embodiment of the present application, the obtaining of the key pair and the identity information corresponding to at least one target unmanned aerial vehicle, and the receiving of the valid digital certificate sent by the preset certificate center based on the system parameters, the master public key in the master key pair, the user public key in the user key pair, and the identity information, comprises: calculating a user key pair corresponding to each target unmanned aerial vehicle in the at least one target unmanned aerial vehicle; sending a user public key in the user key pair and the identity information to the preset certificate center, and calculating a digital certificate corresponding to each target unmanned aerial vehicle through the preset certificate center based on the user public key and the identity information; verifying whether the digital certificate meets a first preset validity verification equation requirement, wherein when the digital certificate meets the first preset validity verification equation requirement, the digital certificate is the valid digital certificate.

[0009] Optionally, in an embodiment of the present application, the generating the homomorphic verifiable label of the UAV data, and storing the target UAV data in the UAV data satisfying a preset validity verification condition and the target homomorphic verifiable label corresponding to the target UAV data, comprises: sending the UAV data and the homomorphic verifiable label to a preset cloud server, and judging whether the UAV data and the homomorphic verifiable label satisfy a second preset validity verification equation requirement through the cloud server; if the UAV data and the homomorphic verifiable label do not satisfy the second preset validity verification equation requirement, the UAV data is unqualified data; if the UAV data and the homomorphic verifiable label satisfy the second preset validity verification equation requirement, the UAV data is the target UAV data, and the target UAV data and the target homomorphic verifiable label are stored.

[0010] Optionally, in an embodiment of the present application, the auditing the target UAV data corresponding to the single or multiple target UAVs in the at least one target UAV through a preset challenge-response interaction auditing mechanism to obtain the data auditing result corresponding to the at least one target UAV, comprises: randomly constructing any subset of the target UAV data of the at least one target UAV, and generating a challenge corresponding to the target UAV data of the single or multiple target UAVs in the any subset according to the any subset, and sending the challenge to the cloud server through a preset third-party auditor; generating a single-data proof of the challenge corresponding to the single UAV data through the cloud server, and verifying the integrity of the single-data proof according to a first preset data integrity equation requirement by the third-party auditor, to obtain the data auditing result corresponding to the single UAV data satisfying the first preset data integrity equation requirement; generating a multi-data proof of the challenge corresponding to the multiple UAV data through the cloud server, and verifying the integrity of the multi-data proof according to a second preset data integrity equation requirement by the third-party auditor, to obtain the data auditing result corresponding to the multiple UAV data satisfying the second preset data integrity equation requirement.

[0011] The second aspect embodiment of the application provides a certificate-based unmanned aerial vehicle data auditing device, comprising: a generation module configured to generate system parameters and a master key pair of a preset certificate center; an acquisition module configured to acquire a user key pair and identity information corresponding to at least one target unmanned aerial vehicle, and receive a valid digital certificate sent by the preset certificate center based on the system parameters, a master public key in the master key pair, a user public key in the user key pair, and the identity information; an outsourcing module configured to collect corresponding unmanned aerial vehicle data through the at least one target unmanned aerial vehicle, and generate a homomorphic verifiable tag of the unmanned aerial vehicle data if the valid digital certificate meets a preset certificate verification condition, and store target unmanned aerial vehicle data in the unmanned aerial vehicle data that meets a preset validity verification condition and a target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data; and an auditing module configured to audit target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through a preset challenge-response interaction auditing mechanism to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle.

[0012] Optionally, in an embodiment of the application, the acquisition module comprises: a first calculation unit configured to calculate a user key pair corresponding to each target unmanned aerial vehicle in the at least one target unmanned aerial vehicle; a second calculation unit configured to send a user public key in the user key pair and the identity information to the preset certificate center, and calculate a digital certificate corresponding to each target unmanned aerial vehicle through the preset certificate center based on the user public key and the identity information; and a verification unit configured to verify whether the digital certificate meets a first preset validity verification equation requirement, wherein when the digital certificate meets the first preset validity verification equation requirement, the digital certificate is the valid digital certificate.

[0013] Optionally, in an embodiment of the application, the outsourcing module comprises: a judgment unit configured to send the unmanned aerial vehicle data and the homomorphic verifiable tag to a preset cloud server, and judge whether the unmanned aerial vehicle data and the homomorphic verifiable tag meet a second preset validity verification equation requirement through the cloud server; an unqualified unit configured to, if the unmanned aerial vehicle data and the homomorphic verifiable tag do not meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is unqualified data; and a storage unit configured to, if the unmanned aerial vehicle data and the homomorphic verifiable tag meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is the target unmanned aerial vehicle data, and the target unmanned aerial vehicle data and the target homomorphic verifiable tag are stored.

[0014] Optionally, in an embodiment of the present application, the audit module comprises: a challenge unit configured to randomly build any subset of target UAV data of the at least one target UAV, generate a challenge corresponding to the target UAV data of a single or multiple target UAVs in the any subset according to the any subset, and send the challenge to the cloud server through a third-party auditor; a single-data unit configured to generate a single-data proof of the challenge corresponding to the single UAV data through the cloud server, and perform integrity verification on the single-data proof according to a first preset data integrity equation requirement by the third-party auditor to obtain a data audit result of the single UAV data satisfying the first preset data integrity equation requirement; and a multi-data unit configured to generate a multi-data proof of the challenge corresponding to the multiple UAV data through the cloud server, and perform integrity verification on the multi-data proof according to a second preset data integrity equation requirement by the third-party auditor to obtain a data audit result of the multiple UAV data satisfying the second preset data integrity equation requirement.

[0015] The third aspect of the present application provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the certificate-based UAV data auditing method according to the above embodiments.

[0016] The fourth aspect of the present application provides a computer readable storage medium, which stores a computer program executable by a processor to implement the certificate-based UAV data auditing method according to the above embodiments.

[0017] Therefore, the embodiments of the present application have the following beneficial effects:

[0018] Embodiments of the present application can generate a system parameter and a master key pair of a preset certificate center, obtain a user key pair and identity information corresponding to at least one target unmanned aerial vehicle, and receive an effective digital certificate sent by the preset certificate center based on the system parameter, a master public key in the master key pair, a user public key in the user key pair, and the identity information; collect corresponding unmanned aerial vehicle data through the at least one target unmanned aerial vehicle, and generate a homomorphic verifiable tag of the unmanned aerial vehicle data in a case where the effective digital certificate meets a preset certificate verification condition, and store target unmanned aerial vehicle data in the unmanned aerial vehicle data that meets a preset validity verification condition and a target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data; and audit target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through a preset challenge-response interaction auditing mechanism, to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle. The present application reduces the burden of unmanned aerial vehicle identity verification by using the implicit use of certificates in the construction of certificate-hidden additive homomorphic verifiable tags, greatly reduces the calculation overhead by using addition instead of expensive bilinear pairing operations, and effectively ensures the integrity of long-term stored data. Thus, the problems of the prior art, such as high key leakage risk, difficulty in homomorphic aggregation of verifiable tags from different users, and large auditing overhead, are solved.

[0019] Additional aspects and advantages of the present application will be made apparent by the following description and the accompanying drawings. BRIEF DESCRIPTION OF DRAWINGS

[0020] The above and / or additional aspects and advantages of the present application will become apparent and be readily understood from the following description, taken in conjunction with the accompanying drawings, in which:

[0021] Figure 1 A flowchart of a certificate-based unmanned aerial vehicle data auditing method according to an embodiment of the present application;

[0022] Figure 2 An execution logic schematic diagram of a certificate-based unmanned aerial vehicle data auditing method according to an embodiment of the present application;

[0023] Figure 3 A logic architecture schematic diagram of a certificate-based unmanned aerial vehicle data auditing method according to an embodiment of the present application;

[0024] Figure 4 An example diagram of a certificate-based unmanned aerial vehicle data auditing apparatus according to an embodiment of the present application;

[0025] Figure 5 A structural schematic diagram of an electronic device according to an embodiment of the present application.

[0026] 10 - certificate-based unmanned aerial vehicle data auditing device; 100 - generation module, 200 - acquisition module, 300 - outsourcing module, 400 - auditing module; 501 - memory, 502 - processor, 503 - communication interface. DETAILED DESCRIPTION

[0027] Embodiments of the present application are described in detail below with reference to examples illustrated in the accompanying drawings, in which the same or similar reference numerals represent the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by reference to the accompanying drawings are exemplary and are intended to explain the present application, and cannot be understood as a limitation of the present application.

[0028] A certificate-based unmanned aerial vehicle data auditing method, device, equipment and medium of embodiments of the present application are described below with reference to the accompanying drawings. In view of the problems mentioned in the above background art, the present application provides a certificate-based unmanned aerial vehicle data auditing method, in which the system parameters and the master key pair of the preset certificate center are generated; the user key pair and the identity information corresponding to at least one target unmanned aerial vehicle are acquired, and the valid digital certificate sent by the preset certificate center is received based on the system parameters, the master public key in the master key pair, the user public key in the user key pair and the identity information; the corresponding unmanned aerial vehicle data is collected by at least one target unmanned aerial vehicle, and the homomorphic verifiable tag of the unmanned aerial vehicle data is generated under the condition that the valid digital certificate meets the preset certificate verification condition, and the target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data and the target unmanned aerial vehicle data meeting the preset validity verification condition in the unmanned aerial vehicle data are stored; the target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in at least one target unmanned aerial vehicle is audited by a preset challenge-response interaction auditing mechanism to obtain a data auditing result corresponding to at least one target unmanned aerial vehicle. The present application reduces the burden of unmanned aerial vehicle identity verification by using the implicit use of certificates in the construction of certificate-hidden additive homomorphic verifiable tags, and greatly reduces the computational overhead by using addition instead of expensive bilinear pairing operations, thereby effectively ensuring the integrity of long-term stored data. Thus, the problems of the existing data auditing scheme, such as high key leakage risk, difficulty in homomorphic aggregation of verifiable tags from different users, and large auditing overhead, are solved.

[0029] Specifically, Figure 1 A flowchart of a certificate-based unmanned aerial vehicle data auditing method provided by embodiments of the present application is shown in FIG. 1.

[0030] As Figure 1 shown, the certificate-based unmanned aerial vehicle data auditing method includes the following steps:

[0031] In step S101, the system parameters and the master key pair of the preset certificate center are generated.

[0032] The embodiment of the present application can first generate a system parameter and a master key pair by a certificate center, an expression of a public key in the system parameter and the master key pair is:

[0033]

[0034] mpk = msk P;

[0035] wherein p is a preset large prime number, p > 2 k , represents an integer group of order p, represents a preset multiplication cyclic group on an elliptic curve, a hash function a hash function Params is the system parameter, mpk is a public key (i.e., a master public key) in the master key pair, msk is a random number in the master key pair.

[0036] Therefore, the embodiment of the present application generates a system parameter and a master key pair, thereby providing a reliable basis and guidance for subsequent generation of valid digital certificates.

[0037] In step S102, a user key pair and identity information corresponding to at least one target unmanned aerial vehicle are acquired, and a valid digital certificate sent by a preset certificate center is received based on the system parameter, a master public key in the master key pair, a user public key in the user key pair, and the identity information.

[0038] After the system parameter and the master key pair are generated, further, the embodiment of the present application can further calculate a key pair corresponding to an unmanned aerial vehicle user by the unmanned aerial vehicle, and acquire a digital certificate from the certificate center to authenticate the identity of the unmanned aerial vehicle user, and verify the validity of the certificate, as shown in Figure 2 .

[0039] Therefore, the embodiment of the present application generates its own key pair by the unmanned aerial vehicle to cope with the key escrow and distribution problem; and the unmanned aerial vehicle submits its public key (i.e., a user public key) and identity information to the certificate center, and verifies the identity of the unmanned aerial vehicle by the certificate center, and issues a valid digital certificate to the unmanned aerial vehicle, thereby realizing authentication of the identity of the unmanned aerial vehicle.

[0040] Optionally, in an embodiment of the present application, the key pair and identity information corresponding to the at least one target UAV are acquired, and based on the system parameter, the master public key in the master key pair, the user public key in the user key pair, and the identity information, an effective digital certificate sent by a preset certificate center is received, including: calculating the user key pair corresponding to each target UAV in the at least one target UAV; sending the user public key in the user key pair and the identity information to the preset certificate center, and calculating the digital certificate corresponding to each target UAV through the preset certificate center based on the user public key and the identity information; verifying whether the digital certificate meets the first preset validity verification equation requirement, wherein when the digital certificate meets the first preset validity verification equation requirement, the digital certificate is an effective digital certificate.

[0041] It should be noted that the specific process of acquiring the effective digital certificate by the embodiments of the present application is as follows:

[0042] 1. Each UAV user id i needs to calculate the corresponding key pair, and obtain the digital certificate from the certificate center to verify the identity, and the expression of the key pair calculated by the UAV user is as follows:

[0043]

[0044] 2. The UAV user submits the user public key in the user key pair and the identity information to the certificate center, and the certificate center calculates the digital certificate for the user as follows:

[0045]

[0046] The digital certificate output by the certificate center is

[0047] 3. The UAV user verifies the validity of the digital certificate output by the certificate center by the following formula, i.e. the first preset validity verification equation:

[0048]

[0049] wherein when the equation is established, it means that the digital certificate is qualified, and it is an effective digital certificate.

[0050] Therefore, the embodiments of the present application allow the UAV user to generate the key pair independently to cope with the key escrow and distribution problem, and provide the public key and identity information of the UAV user to obtain the corresponding digital certificate from the certificate authority to authenticate the identity information of the UAV user, which effectively guarantees the execution of the subsequent audit operation of the UAV data.

[0051] In step S103, the corresponding unmanned aerial vehicle data is collected by at least one target unmanned aerial vehicle, and a homomorphic verifiable tag of the unmanned aerial vehicle data is generated if the valid digital certificate meets the preset certificate verification condition, and the target unmanned aerial vehicle data meeting the preset validity verification condition in the unmanned aerial vehicle data and the target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data are stored.

[0052] In step S104, the target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle is audited by a preset challenge-response interactive auditing mechanism to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle.

[0053] Further, the embodiment of the present application can also generate a homomorphic verifiable tag for the data that needs to be outsourced to a cloud service provider (i.e. a cloud server) by an unmanned aerial vehicle user, as shown in the figure, the tag supports public verification and multi-unmanned aerial vehicle aggregation, allows a third-party auditor to simultaneously batch audit data from different unmanned aerial vehicles, provides a certificate for subsequent periodic inspection of the authenticity and integrity of outsourced data, and combines a challenge-response interactive auditing mechanism supporting multi-user aggregation to obtain a data auditing result corresponding to each target unmanned aerial vehicle. Figure 3

[0054] Optionally, in an embodiment of the present application, the homomorphic verifiable tag of the unmanned aerial vehicle data is generated, and the target unmanned aerial vehicle data meeting the preset validity verification condition in the unmanned aerial vehicle data and the target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data are stored, including: sending the unmanned aerial vehicle data and the homomorphic verifiable tag to a preset cloud server, and judging whether the unmanned aerial vehicle data and the homomorphic verifiable tag meet the second preset validity verification equation requirement by the cloud server; if the unmanned aerial vehicle data and the homomorphic verifiable tag do not meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is unqualified data; if the unmanned aerial vehicle data and the homomorphic verifiable tag meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is target unmanned aerial vehicle data, and the target unmanned aerial vehicle data and the target homomorphic verifiable tag are stored.

[0055] In actual execution process, each unmanned aerial vehicle user id i A homomorphic verifiable tag can be generated for each unmanned aerial vehicle data, and the specific process is as shown in the following formula:

[0056]

[0057] Wherein, the user id i The homomorphic verifiable tag of the output message m i,j is σ i,j = (u i,j , s i,j ), where 1≤j≤d, d is the user id​i Total number of messages.

[0058] Further, the embodiments of the present application can check the validity of the message (i.e., the drone data) and the homomorphic verifiable label according to the following formula, i.e., the second preset validity verification equation:

[0059]

[0060] When the above equation is established, it means that the verification is qualified, i.e., the authenticity and integrity of the data source are verified, and the cloud service provider will receive and store the qualified message (i.e., the target drone data) and the corresponding homomorphic verifiable label (i.e., the target homomorphic verifiable label).

[0061] Thus, the embodiments of the present application collect the corresponding drone data of each target drone and generate the corresponding homomorphic verification label as the proof of the subsequent data integrity verification, and at the same time, the implicit use of the certificate in the construction of the homomorphic verifiable label with the hidden certificate makes it possible to verify the authenticity of the drone identity while verifying the data integrity, and the cloud service provider will store the corresponding data after verifying the validity of the data, thereby reducing the burden of drone identity verification and self-storage.

[0062] Optionally, in an embodiment of the present application, the target drone data corresponding to a single or multiple target drones in the at least one target drone is audited through a preset challenge-response interaction auditing mechanism to obtain a data audit result corresponding to the at least one target drone, including: randomly constructing any subset of the target drone data of the at least one target drone, and generating a challenge corresponding to the target drone data of the single or multiple target drones in the any subset according to the any subset, and sending the challenge to the cloud server through a preset third-party auditor; generating a single-data proof corresponding to the challenge of the single drone data through the cloud server, and verifying the integrity of the single-data proof according to the first preset data integrity equation requirement by the third-party auditor to obtain a data audit result corresponding to the single drone data that satisfies the first preset data integrity equation requirement; generating a multi-data proof corresponding to the challenge of the multiple drone data through the cloud server, and verifying the integrity of the multi-data proof according to the second preset data integrity equation requirement by the third-party auditor to obtain a data audit result corresponding to the multiple drone data that satisfies the second preset data integrity equation requirement.

[0063] The embodiments of the present application can audit the drone data corresponding to a single or multiple target drones, and the specific process is as follows:

[0064] 1. The third-party auditor initiates a challenge to the outsourced data: first, the embodiments of the present application randomly construct any subset of the target drone data of the at least one target drone Then, the cloud service provider generates the corresponding challenge according to the target UAV data of any single or multiple target UAVs in any subset for any subset Wherein Finally, the third-party auditor sends the challenge to the cloud service provider;

[0065] 2. For the challenge from the single UAV data, the cloud service provider calculates the specific process of the proof as follows:

[0066]

[0067] For the challenge initiated by the third-party auditor to the data of the user id i , the cloud service provider can generate the proof and send it to the third-party auditor;

[0068] 3. The third-party auditor verifies the proof about the single UAV data according to the following formula, i.e. the first preset data integrity equation, as follows:

[0069]

[0070] Wherein, when the equation is established, it means that the verification is qualified, i.e. the outsourcing UAV data integrity is verified;

[0071] 4. For the challenge from the multiple UAV data, the cloud service provider calculates the specific process of the proof as follows:

[0072]

[0073] For the challenge initiated by the third-party auditor to the data of multiple users {id1,…,id z}, the cloud service provider generates the proof and sends it to the third-party auditor;

[0074] 5. The third-party auditor verifies the proof about the multiple UAV data according to the following formula, i.e. the second preset data integrity equation, as follows:

[0075]

[0076] Wherein, when the equation is established, it means that the verification is qualified, i.e. the outsourcing UAV data integrity is verified.

[0077] Therefore, the embodiment of the present application can effectively ensure the integrity of the long-term stored data by authorizing a third-party auditor to audit the data and obtain the corresponding data audit result for the user with limited resources; meanwhile, the data audit of the embodiment of the present application can greatly reduce the calculation overhead by using addition instead of the expensive bilinear pairing operation, thereby ensuring the security under the adaptive chosen-message attack.

[0078] According to the certificate-based UAV data auditing method proposed in the embodiment of the present application, the system parameters and the master key pair of the preset certificate center are generated; the user key pair and the identity information corresponding to at least one target UAV are obtained, and the valid digital certificate sent by the preset certificate center is received based on the system parameters, the master public key in the master key pair, the user public key in the user key pair and the identity information; the corresponding UAV data is collected by at least one target UAV, and the homomorphic verifiable tag of the UAV data is generated under the condition that the valid digital certificate meets the preset certificate verification condition, and the target UAV data meeting the preset validity verification condition in the UAV data and the target homomorphic verifiable tag corresponding to the target UAV data are stored; the target UAV data corresponding to a single or multiple target UAVs in the at least one target UAV is audited through the preset challenge-response interactive auditing mechanism, so as to obtain the data audit result corresponding to the at least one target UAV. The certificate-based UAV data auditing method proposed in the embodiment of the present application reduces the burden of UAV identity verification by using the implicit use of the certificate in the construction of the additive homomorphic verifiable tag hidden by the certificate, and greatly reduces the calculation overhead by using addition instead of the expensive bilinear pairing operation, thereby effectively ensuring the integrity of the long-term stored data.

[0079] Secondly, the certificate-based UAV data auditing device proposed in the embodiment of the present application is described with reference to the accompanying drawings.

[0080] Figure 4 is a block schematic diagram of the certificate-based UAV data auditing device in the embodiment of the present application.

[0081] As shown in Figure 4 , the certificate-based UAV data auditing device 10 comprises a generation module 100, an acquisition module 200, an outsourcing module 300 and an auditing module 400.

[0082] The generation module 100 is configured to generate the system parameters and the master key pair of the preset certificate center.

[0083] The acquisition module 200 is configured to acquire the user key pair and the identity information corresponding to at least one target UAV, and receive the valid digital certificate sent by the preset certificate center based on the system parameters, the master public key in the master key pair, the user public key in the user key pair and the identity information.

[0084] The outsourcing module 300 is configured to collect the unmanned aerial vehicle data of the at least one target unmanned aerial vehicle, and generate a homomorphic verifiable tag of the unmanned aerial vehicle data if the valid digital certificate meets the preset certificate verification condition, and store the target unmanned aerial vehicle data meeting the preset validity verification condition and the target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data in the unmanned aerial vehicle data.

[0085] The auditing module 400 is configured to audit the target unmanned aerial vehicle data corresponding to the single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through a preset challenge-response interaction auditing mechanism to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle.

[0086] Optionally, in an embodiment of the present application, the obtaining module 200 comprises a first calculation unit, a second calculation unit and a verification unit.

[0087] The first calculation unit is configured to calculate a user key pair corresponding to each target unmanned aerial vehicle in the at least one target unmanned aerial vehicle.

[0088] The second calculation unit is configured to send a user public key in the user key pair and identity information to a preset certificate center, and calculate a digital certificate corresponding to each target unmanned aerial vehicle based on the user public key and the identity information through the preset certificate center.

[0089] The verification unit is configured to verify whether the digital certificate meets a first preset validity verification equation requirement, wherein the digital certificate is a valid digital certificate when the digital certificate meets the first preset validity verification equation requirement.

[0090] Optionally, in an embodiment of the present application, the outsourcing module 300 comprises a judgment unit, an unqualified unit and a storage unit.

[0091] The judgment unit is configured to send the unmanned aerial vehicle data and the homomorphic verifiable tag to a preset cloud server, and judge whether the unmanned aerial vehicle data and the homomorphic verifiable tag meet a second preset validity verification equation requirement through the cloud server.

[0092] The unqualified unit is configured to determine that the unmanned aerial vehicle data is unqualified data if the unmanned aerial vehicle data and the homomorphic verifiable tag do not meet the second preset validity verification equation requirement.

[0093] The storage unit is configured to determine that the unmanned aerial vehicle data is target unmanned aerial vehicle data if the unmanned aerial vehicle data and the homomorphic verifiable tag meet the second preset validity verification equation requirement, and store the target unmanned aerial vehicle data and the target homomorphic verifiable tag.

[0094] Optionally, in an embodiment of the present application, the auditing module 400 comprises a challenge unit, a single data unit and a multiple data unit.

[0095] The challenge unit is configured for randomly constructing any subset of target UAV data of at least one target UAV, generating a challenge corresponding to the target UAV data of a single or multiple target UAVs in any subset according to any subset, and sending the challenge to the cloud server through a third-party auditor.

[0096] The single-data unit is configured for generating a single-data proof of the challenge corresponding to the single-UAV data through the cloud server, and performing integrity verification on the single-data proof by the third-party auditor according to a first preset data integrity equation requirement, to obtain a data audit result of the single-UAV data satisfying the first preset data integrity equation requirement.

[0097] The multi-data unit is configured for generating a multi-data proof of the challenge corresponding to the multiple-UAV data through the cloud server, and performing integrity verification on the multi-data proof by the third-party auditor according to a second preset data integrity equation requirement, to obtain a data audit result of the multiple-UAV data satisfying the second preset data integrity equation requirement.

[0098] It should be noted that the foregoing explanation and description of the certificate-based UAV data auditing method embodiment also applies to the certificate-based UAV data auditing device of the embodiment, which will not be described here again.

[0099] The certificate-based UAV data auditing device according to the embodiment of the application comprises a generation module configured for generating system parameters and a master key pair of a preset certificate center; an acquisition module configured for acquiring a user key pair and identity information corresponding to at least one target UAV, and receiving a valid digital certificate sent by the preset certificate center based on the system parameters, a master public key in the master key pair, a user public key in the user key pair, and the identity information; an outsourcing module configured for collecting corresponding UAV data through the at least one target UAV, and generating a homomorphic verifiable tag of the UAV data in a case where the valid digital certificate satisfies a preset certificate verification condition, and storing target UAV data in the UAV data that satisfies a preset validity verification condition and a target homomorphic verifiable tag corresponding to the target UAV data; and an auditing module configured for auditing target UAV data corresponding to a single or multiple target UAVs in the at least one target UAV through a preset challenge-response interaction auditing mechanism, to obtain a data audit result corresponding to the at least one target UAV. The certificate-based UAV data auditing device of the application reduces the burden of UAV identity verification by using the implicit use of the certificate in the construction of the homomorphic verifiable tag hidden by the certificate, and greatly reduces the calculation overhead by using addition instead of expensive bilinear pairing operations, thereby effectively ensuring the integrity of long-term stored data.

[0100] Figure 5 A structural schematic diagram of an electronic device is provided for the embodiment of the application. The electronic device can comprise:

[0101] The memory 501, the processor 502 and the computer program stored in the memory 501 and executable on the processor 502.

[0102] The processor 502 implements the certificate-based UAV data auditing method provided in the above embodiments when executing the program.

[0103] Further, the electronic device further comprises:

[0104] The communication interface 503 is used for communication between the memory 501 and the processor 502.

[0105] The memory 501 is used for storing the computer program executable on the processor 502.

[0106] The memory 501 can include a high-speed RAM memory, and can also include a non-volatile memory, for example, at least one disk memory.

[0107] If the memory 501, the processor 502 and the communication interface 503 are independently implemented, the communication interface 503, the memory 501 and the processor 502 can be connected to each other through a bus and complete communication between each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, Figure 5 Only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0108] Optionally, in a specific implementation, if the memory 501, the processor 502 and the communication interface 503 are integrated on a chip, the memory 501, the processor 502 and the communication interface 503 can complete communication between each other through an internal interface.

[0109] The processor 502 can be a Central Processing Unit (CPU), or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement one or more embodiments of the present application.

[0110] The embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the program is executed by a processor to realize the certificate-based UAV data auditing method.

[0111] In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "an example", "a specific example", or "some examples" and the like means that the specific features, structures, materials or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present application. In the present specification, the illustrative description of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any appropriate manner in any one or N embodiments or examples. In addition, the person skilled in the art can combine and combine the different embodiments or examples described in the present specification and the features of the different embodiments or examples without contradiction.

[0112] In addition, the terms "first", "second" are only for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include at least one of the features. In the description of the present application, the meaning of "N" is at least two, for example, two, three, etc., unless otherwise specifically limited.

[0113] Any process or method descriptions in flow charts or otherwise described herein represent embodiments that can be understood as a set of steps, operations, or stages of implementing the functionality described, and that such a set of steps, operations, or stages can be performed in the order described, in a different order than described, or concurrently. An "operation" as used herein can include a step, a method, a function, a procedure, a process, a routine, a subroutine, or the like. The scope of preferred embodiments of the present application encompasses an additional implementation in which the functions described can be performed in an order different than described, in substantially simultaneous fashion, or in reverse order.

[0114] The logic and / or steps represented in the flowcharts and / or described herein, for example, can be considered as a sequence of executable instructions stored in a computer readable medium, which can be executed by an instruction execution system, apparatus or device, such as a computer-based system, a processor-based system, or other system that can fetch the instructions from the instruction execution system, apparatus or device and execute the instructions, or a combination of them. For the purposes of this specification, a "computer readable medium" can be any apparatus that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus or device. The computer readable medium can be a computer readable storage medium or a computer readable signal medium. The computer readable storage medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or a propagation medium. The computer readable signal medium can include, but is not limited to, a computer readable medium that facilitates transfer of the program from one place to another. A specific example of a computer readable medium is a non-transitory computer-readable storage medium. A specific example of a computer readable signal medium is a source or destination of the computer readable medium. Another specific example of a computer readable signal medium is a computer readable signal travelling through space. Thus, a computer readable medium can take many forms of hardware to carry out the program for use by or in connection with the instruction execution system, apparatus or device.

[0115] It should be understood that aspects of the application can be implemented in hardware, software, firmware or a combination thereof. In the above embodiments, the N steps or methods can be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. If implemented in hardware and in another embodiment, the implementation can be carried out using any or a combination of the following technologies, which are all well known in the art: discrete logic circuitry having logic gates for implementing logic functions upon an application of data signals, application specific integrated circuits having appropriate combinational logic gates, programmable gate arrays (PGA), field programmable gate arrays (FPGA), and the like.

[0116] Those of skill in the art would understand that the steps carried out by the above-mentioned embodiments can be implemented by a program instructing the relevant hardware to complete all or part of the steps, and the program can be stored in a computer readable storage medium. When the program is executed, it includes one of the steps of the method embodiments or a combination thereof.

[0117] In addition, each of the functional units in the various embodiments of the present application can be integrated in one processing module, or each of the units can be physically present separately, or two or more units can be integrated in one module. The integrated module can be implemented in the form of hardware or in the form of a software functional module. When the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer readable storage medium.

[0118] The storage medium mentioned above can be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it should be understood that the above embodiments are exemplary and should not be construed as limiting the present application, and those skilled in the art can make changes, modifications, replacements and variations to the above embodiments within the scope of the present application.

Claims

1. A certificate-based unmanned aerial vehicle data auditing method, characterized in that, The method comprises the following steps: generating system parameters and a master key pair of a preset certificate center; obtaining a user key pair and identity information corresponding to at least one target unmanned aerial vehicle, and receiving a valid digital certificate sent by the preset certificate center based on the system parameters, a master public key in the master key pair, a user public key in the user key pair, and the identity information; collecting corresponding unmanned aerial vehicle data through the at least one target unmanned aerial vehicle, and generating a homomorphic verifiable tag of the unmanned aerial vehicle data under the condition that the valid digital certificate meets a preset certificate verification condition, and storing target unmanned aerial vehicle data in the unmanned aerial vehicle data that meets a preset validity verification condition and a target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data; auditing target unmanned aerial vehicle data corresponding to a single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through a preset challenge-response interactive auditing mechanism to obtain a data auditing result corresponding to the at least one target unmanned aerial vehicle; wherein the generating of the homomorphic verifiable tag of the unmanned aerial vehicle data and the storing of the target unmanned aerial vehicle data in the unmanned aerial vehicle data that meets the preset validity verification condition and the target homomorphic verifiable tag corresponding to the target unmanned aerial vehicle data comprise: sending the unmanned aerial vehicle data and the homomorphic verifiable tag to a preset cloud server, and judging whether the unmanned aerial vehicle data and the homomorphic verifiable tag meet a second preset validity verification equation requirement through the cloud server; if the unmanned aerial vehicle data and the homomorphic verifiable tag do not meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is unqualified data; if the unmanned aerial vehicle data and the homomorphic verifiable tag meet the second preset validity verification equation requirement, the unmanned aerial vehicle data is the target unmanned aerial vehicle data, and the target unmanned aerial vehicle data and the target homomorphic verifiable tag are stored; a mathematical expression of the homomorphic verifiable tag is: wherein, represents the th UAV user; represents the output message of the th UAV user; is the total number of messages for the th UAV user; is a preset prime number, ; represents an integer group of order ; a hash function ; a mathematical expression of the second preset validity verification equation is: wherein, represents a master public key; represents a universal hash function: :{0,1}* × → ; the auditing of the target unmanned aerial vehicle data corresponding to the single or multiple target unmanned aerial vehicles in the at least one target unmanned aerial vehicle through the preset challenge-response interactive auditing mechanism to obtain the data auditing result corresponding to the at least one target unmanned aerial vehicle comprises: randomly constructing any subset of target unmanned aerial vehicle data of the at least one target unmanned aerial vehicle, and generating a challenge corresponding to target unmanned aerial vehicle data of a single or multiple target unmanned aerial vehicles in the any subset according to the any subset, and sending the challenge to the cloud server through a preset third-party auditor; generating a single-data proof of the challenge corresponding to the single unmanned aerial vehicle data through the cloud server, and verifying the integrity of the single-data proof according to a first preset data integrity equation requirement by the third-party auditor to obtain a data auditing result corresponding to the single unmanned aerial vehicle data that meets the first preset data integrity equation requirement; The cloud server generates multi-data proofs of challenges corresponding to the plurality of UAV data, and a third-party auditor verifies the integrity of the multi-data proofs according to a second preset data integrity equation, to obtain a data audit result corresponding to the plurality of UAV data that satisfies the second preset data integrity equation; The mathematical expression of the data audit result is: ; Among them, (1) represents the aggregation proof of multi-unmanned aerial vehicle data. ) represents the aggregation proof of multi-unmanned aerial vehicle data.

2. The method of claim 1, wherein, The key pair and the identity information corresponding to the at least one target UAV are obtained, and based on the system parameter, the master public key in the master key pair, the user public key in the user key pair, and the identity information, an effective digital certificate sent by the preset certificate center is received, including: The user key pair corresponding to each target UAV in the at least one target UAV is calculated; The user public key in the user key pair and the identity information are sent to the preset certificate center, and based on the user public key and the identity information, a digital certificate corresponding to each target UAV is calculated by the preset certificate center; The digital certificate is verified whether it satisfies a first preset validity verification equation, wherein when the digital certificate satisfies the first preset validity verification equation, the digital certificate is the effective digital certificate.

3. A certificate-based unmanned aerial vehicle data auditing apparatus, characterized by, Including: A generation module is configured to generate system parameters and a master key pair of a preset certificate center; An acquisition module is configured to acquire a user key pair and identity information corresponding to at least one target UAV, and receive an effective digital certificate sent by the preset certificate center based on the system parameter, a master public key in the master key pair, a user public key in the user key pair, and the identity information; An outsourcing module is configured to collect corresponding UAV data by the at least one target UAV, and generate a homomorphic verifiable tag of the UAV data when the effective digital certificate satisfies a preset certificate verification condition, and store target UAV data in the UAV data that satisfies a preset validity verification condition and a target homomorphic verifiable tag corresponding to the target UAV data; An audit module is configured to audit target UAV data corresponding to a single or multiple target UAVs in the at least one target UAV through a preset challenge-response interaction audit mechanism, to obtain a data audit result corresponding to the at least one target UAV; The outsourcing module includes: A judgment unit is configured to send the UAV data and the homomorphic verifiable tag to a preset cloud server, and judge whether the UAV data and the homomorphic verifiable tag satisfy a second preset validity verification equation through the cloud server; An unqualified unit is configured to, if the UAV data and the homomorphic verifiable tag do not satisfy the second preset validity verification equation, the UAV data is unqualified data; A storage unit is configured to, if the UAV data and the homomorphic verifiable tag satisfy the second preset validity verification equation, the UAV data is the target UAV data, and the target UAV data and the target homomorphic verifiable tag are stored; The mathematical expression of the homomorphic verifiable tag is: wherein, represents the th drone user; represents the th drone user's output message; is the th drone user's message total; is a preset prime number, ; represents an integer group of order ; a hash function ; A mathematical expression of the second preset validity verification equation is: wherein, represents a master public key; represents a universal hash function: :{0,1}* × → ; The audit module comprises: The challenge unit randomly constructs any subset of target UAV data of the at least one target UAV, generates a challenge corresponding to the target UAV data of a single or multiple target UAVs in the any subset according to the any subset, and sends the challenge to the cloud server through a third-party auditor; The single-data unit generates a single-data proof of the challenge corresponding to the single UAV data through the cloud server, and performs integrity verification on the single-data proof according to a first preset data integrity equation requirement by the third-party auditor, to obtain a data audit result of the single UAV data satisfying the first preset data integrity equation requirement; The multi-data unit generates a multi-data proof of the challenge corresponding to the multiple UAV data through the cloud server, and performs integrity verification on the multi-data proof according to a second preset data integrity equation requirement by the third-party auditor, to obtain a data audit result of the multiple UAV data satisfying the second preset data integrity equation requirement; A mathematical expression of the data audit result is: ; Among them, (1) represents the aggregation proof of multi-unmanned aerial vehicle data. ) represents the aggregation proof of multi-unmanned aerial vehicle data.

4. The apparatus of claim 3, wherein, The obtaining module comprises: The first calculation unit calculates a user key pair corresponding to each target UAV in the at least one target UAV; The second calculation unit sends a user public key in the user key pair and the identity information to the preset certificate center, and calculates a digital certificate corresponding to each target UAV through the preset certificate center based on the user public key and the identity information; The verification unit verifies whether the digital certificate satisfies a first preset validity verification equation requirement, wherein when the digital certificate satisfies the first preset validity verification equation requirement, the digital certificate is the valid digital certificate.

5. An electronic device, comprising: comprise: A memory, a processor, and a computer program stored on the memory and executable on the processor, the processor executing the program to implement the certificate-based UAV data audit method according to any one of claims 1-2.

6. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the certificate-based UAV data audit method according to any one of claims 1-2.

Images