Smart contract driven drone operational data sharing method and related apparatus

Abstract

The application provides a smart contract driven unmanned aerial vehicle operation data sharing method and related device, and relates to the unmanned aerial vehicle field. The unmanned aerial vehicle respectively converts the identity information of each subscription user of the unmanned aerial vehicle into the anonymous identifier of each subscription user, and generates a broadcast header including the anonymous identifier of each subscription user; selects a key generation element from a large prime order integer group, and generates a symmetric key of shared data according to the key generation element and a preset bilinear mapping value; converts the shared data into encrypted ciphertext through the symmetric key, and generates signature information of the encrypted ciphertext and the broadcast header; encapsulates the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcasts to the terminal equipment of each subscription user. In this way, the unmanned aerial vehicle supports dynamic subscription, and hides the identity information of the subscription user through a one-way anonymous key agreement. In addition, a lightweight accountability mechanism is realized through an accountability smart contract and a short signature deployed on a private chain.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of unmanned aerial vehicles, in particular, to an intelligent contract driven unmanned aerial vehicle operation data sharing method and related device. BACKGROUND

[0002] At present, data sharing technology mostly uses cryptography and blockchain-based technology for data sharing. However, these sharing methods often require unmanned aerial vehicles to perform excessive computing operations, such as consensus and homomorphic encryption, which will bring huge computing overhead to unmanned aerial vehicles. However, due to the limitations of the endurance and computing power of unmanned aerial vehicles, unmanned aerial vehicles often cannot bear the overhead of requiring large amounts of computation in the data sharing process. In addition, these existing schemes use attribute-based encryption or identity-based broadcast encryption algorithms to achieve point-to-multipoint ciphertext sharing. However, when the attributes of the access strategy change, the attribute-based encryption scheme will generate a large amount of key management overhead, which is not suitable for dynamic unmanned aerial vehicle networks.

[0003] Therefore, identity-based broadcast encryption technology is proposed in the related art, which allows data to be encrypted and decrypted based on the identity of the user, rather than based on traditional public key infrastructure, thereby simplifying key management and being more suitable for multi-user scenarios. However, it is found in practice that although the identity-based broadcast encryption scheme supports stateless reception, allowing unmanned aerial vehicles to directly construct a sharing group based on the identity of the receiver, the sharing group has a capacity limit, and the identity information contained in the sharing group is prone to cause the risk of privacy leakage of the receiver. SUMMARY

[0004] In order to overcome at least one deficiency in the prior art, the present application provides an intelligent contract driven unmanned aerial vehicle operation data sharing method and related device, specifically including:

[0005] In a first aspect, the present application provides an intelligent contract driven unmanned aerial vehicle operation data sharing method, the method comprising:

[0006] Converting the identity information of each subscription user of the unmanned aerial vehicle into an anonymous identifier of each subscription user, and generating a broadcast header including the anonymous identifier of each subscription user, wherein the identity information of each subscription user and the identity key are pre-generated by an identity-based broadcast encryption method, and the identity-based broadcast encryption method relies on a bilinear mapping of a large prime order integer group and a base group;

[0007] Selecting a key generation element from the large prime order integer group, and generating a symmetric key of shared data according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained by bilinear mapping of an element selected from the base group;

[0008] convert the shared data into encrypted ciphertext through the symmetric key, and generate a signature information of the encrypted ciphertext and the broadcast header;

[0009] encapsulate the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcast the broadcast ciphertext to each terminal device of the subscription user, so that each terminal device restores the symmetric key from the broadcast header by using the identity key of the corresponding subscription user, and decrypts the encrypted ciphertext.

[0010] According to the optional implementation of the first aspect, the identity information of each subscription user of the unmanned aerial vehicle is converted into an anonymous identifier of each subscription user, respectively, including:

[0011] For each subscription user, the identity information of the subscription user is bilinearly mapped with a preset master public key to obtain an identity parameter of the identity information of the subscription user, wherein the master public key is obtained by mapping an element selected from the base group with a master private key selected from the large prime order integer group;

[0012] According to the identity parameter, the key generation element and an anonymous generation element selected from the preset large prime order integer group, the anonymous identifier of the subscription user is generated, wherein the relationship between the identity parameter, the key generation element, the anonymous generation element and the anonymous identifier is:

[0013]

[0014] In the formula, k represents the key generation element, θ represents the anonymous generation element, represents the preset large prime order integer group, represents the θ power of the identity parameter, represents that the is mapped into anonymous auxiliary information in by a hash function. represents that the is mapped into a binary string of fixed length by a hash function, g represents the element selected from the base group, represents the anonymous identifier.

[0015] According to the optional implementation of the first aspect, the broadcast header further includes a timestamp;

[0016] The identity information of the unmanned aerial vehicle generating the shared data;

[0017] The restoration identifier of the symmetric key, wherein the expression of the restoration identifier is:

[0018] h3=g θ

[0019] wherein h3 represents the reduction mark, g represents an element selected from the base group, and θ represents the anonymous generation element.

[0020] In combination with the optional implementation of the first aspect, the relationship between the key generation element, the bilinear mapping value, and the symmetric key is as follows:

[0021] K = L k

[0022] wherein K represents the symmetric key, L represents the bilinear mapping value, and k represents the key generation element.

[0023] In combination with the optional implementation of the first aspect, the method further comprises a decryption method of the broadcast ciphertext, and the decryption method comprises:

[0024] receiving the broadcast ciphertext sent by the UAV;

[0025] judging whether the broadcast ciphertext satisfies a preset check condition;

[0026] if the preset check condition is satisfied, obtaining the reduction mark of the broadcast ciphertext from a broadcast header of the broadcast ciphertext;

[0027] obtaining the symmetric key of the broadcast ciphertext according to the reduction mark of the broadcast ciphertext and the identity key of the UAV;

[0028] decrypting the shared data from the broadcast ciphertext through the symmetric key.

[0029] In combination with the optional implementation of the first aspect, the obtaining of the symmetric key of the broadcast ciphertext according to the reduction mark of the broadcast ciphertext and the identity key of the UAV comprises:

[0030] obtaining the anonymous auxiliary information according to the reduction mark and the identity key of the subscription user, wherein the relationship among the reduction mark, the identity key of the subscription user, and the anonymous auxiliary information is as follows:

[0031]

[0032] wherein represents the anonymous auxiliary information, represents the identity key of the subscription user, h3 represents the reduction mark of the broadcast ciphertext, represents that a result of the bilinear mapping is mapped into the anonymous auxiliary information in by a hash function;

[0033] obtaining the anonymous mark of the subscription user from the broadcast header of the broadcast ciphertext;

[0034] obtain a key generation element required for generating the symmetric key according to the anonymous auxiliary information of the unmanned aerial vehicle and the anonymous identifier of the subscription user;

[0035] obtain the symmetric key of the broadcast ciphertext according to the key generation element required for generating the symmetric key and the anonymous auxiliary information, wherein a relationship among the key generation element required for generating the symmetric key, the anonymous auxiliary information and the symmetric key is:

[0036]

[0037] wherein K represents the symmetric key, represents the anonymous auxiliary information, k represents the key generation element required for generating the symmetric key, and g represents an element selected from a base group obtained from the broadcast ciphertext.

[0038] With reference to the optional implementation manner of the first aspect, the unmanned aerial vehicle further pays a deposit through an accountability smart contract deployed in a private chain, the accountability smart contract is deployed by a management device, and the method further comprises:

[0039] if the preset verification condition is not met, sending a report information to the management device, so that the management device rewards the deposit to the subscription user who initiates the report through the accountability smart contract.

[0040] In a second aspect, the application further provides an unmanned aerial vehicle operation data sharing device driven by a smart contract, the device comprises:

[0041] a broadcast header module, which converts identity information of each subscription user of an unmanned aerial vehicle into an anonymous identifier of each subscription user, and generates a broadcast header comprising the anonymous identifier of each subscription user, wherein the identity information of each subscription user and an identity key are pre-generated through an identity-based broadcast encryption manner, and the identity-based broadcast encryption manner depends on a bilinear mapping of a large prime order integer group and a base group;

[0042] a key generation module, which selects a key generation element from the large prime order integer group, and generates a symmetric key of shared data according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained through a bilinear mapping of an element selected from the base group;

[0043] a ciphertext signature module, which converts shared data into encrypted ciphertext through the symmetric key, and generates signature information of the encrypted ciphertext and the broadcast header;

[0044] a ciphertext broadcast module, configured to encapsulate the signature information, the encrypted ciphertext and the broadcast header into a broadcast ciphertext, and broadcast the broadcast ciphertext to each terminal device of the subscription users, so that each terminal device restores the symmetric key from the broadcast header by using the identity key of the corresponding subscription user, and decrypts the encrypted ciphertext.

[0045] With reference to the optional implementation of the second aspect, the broadcast header module is further specifically configured to:

[0046] For each subscription user, bilinear map the identity information of the subscription user and a preset master public key to obtain an identity parameter of the identity information of the subscription user, wherein the master public key is obtained by mapping an element selected from the base group and a master private key selected from the large prime order integer group;

[0047] generate an anonymous identity of the subscription user according to the identity parameter, the key generation element and an anonymous generation element selected from the preset large prime order integer group, wherein the relationship between the identity parameter, the key generation element, the anonymous generation element and the anonymous identity is:

[0048]

[0049] wherein k represents the key generation element, θ represents the anonymous generation element, represents the preset large prime order integer group, represents θ times of the identity parameter, represents mapping by a hash function, into anonymous auxiliary information located in represents mapping by a hash function, into a fixed-length binary string, g represents the element selected from the base group, represents the anonymous identity.

[0050] With reference to the optional implementation of the second aspect, the broadcast header further comprises a timestamp;

[0051] generate the identity information of the unmanned aerial vehicle that generates the shared data;

[0052] restore the identity of the symmetric key, wherein the expression of the restored identity is:

[0053] h3=g θ

[0054] wherein h3 represents the restored identity, g represents the element selected from the base group, and θ represents the anonymous generation element. ​

[0055] In combination with the optional implementation of the second aspect, the relationship between the key generation element, the bilinear mapping value and the symmetric key is:

[0056]

[0057] wherein K represents the symmetric key, L represents the bilinear mapping value, and k represents the key generation element.

[0058] In combination with the optional implementation of the second aspect, the apparatus further comprises:

[0059] a ciphertext receiving module configured to receive broadcast ciphertext sent by the UAV;

[0060] a ciphertext verifying module configured to determine whether the broadcast ciphertext satisfies a preset verification condition;

[0061] If the preset verification condition is satisfied, a ciphertext decrypting module is configured to obtain a restoration identifier of the broadcast ciphertext from a broadcast header of the broadcast ciphertext, obtain a symmetric key of the broadcast ciphertext according to the restoration identifier of the broadcast ciphertext and an identity key of the UAV, and decrypt the shared data from the broadcast ciphertext through the symmetric key.

[0062] In combination with the optional implementation of the second aspect, the ciphertext decrypting module is further specifically configured to:

[0063] obtain the anonymous auxiliary information according to the restoration identifier and an identity key of the subscription user, wherein the relationship between the restoration identifier, the identity key of the subscription user and the anonymous auxiliary information is:

[0064]

[0065] wherein, represents the anonymous auxiliary information, represents the identity key of the subscription user, and h3 represents the restoration identifier of the broadcast ciphertext, represents that a result of the bilinear mapping is mapped into the anonymous auxiliary information in by a hash function;

[0066] obtain the anonymous identifier of the subscription user from the broadcast header of the broadcast ciphertext;

[0067] obtain a key generation element required for generating the symmetric key according to the anonymous auxiliary information of the UAV and the anonymous identifier of the subscription user;

[0068] According to the key generation element required for generating the symmetric key and the anonymous auxiliary information, a symmetric key of the broadcast ciphertext is obtained, wherein a relationship among the key generation element required for generating the symmetric key, the anonymous auxiliary information and the symmetric key is:

[0069]

[0070] wherein K represents the symmetric key, represents the anonymous auxiliary information, k represents the key generation element required for generating the symmetric key, and g represents an element selected from a base group obtained from the broadcast ciphertext.

[0071] With reference to the optional implementation of the second aspect, the unmanned aerial vehicle further pays a deposit through an accountability smart contract deployed in a private chain, the accountability smart contract is deployed by a management device, and the ciphertext verification module is further configured to:

[0072] If the preset verification condition is not met, report information is sent to the management device, so that the management device rewards the deposit to a subscription user who initiates the report through the accountability smart contract.

[0073] In a third aspect, the present application further provides a storage medium, wherein the storage medium stores a computer program, and the computer program is executed by a processor to implement the smart contract driven unmanned aerial vehicle operation data sharing method.

[0074] In a fourth aspect, the present application further provides an electronic device, wherein the electronic device comprises a processor and a memory, the memory stores a computer program, and the computer program is executed by the processor to implement the smart contract driven unmanned aerial vehicle operation data sharing method.

[0075] Compared with the prior art, the present application has the following beneficial effects:

[0076] The application provides a smart contract driven unmanned aerial vehicle operation data sharing method and related device. Wherein, the unmanned aerial vehicle converts the identity information of each subscription user of the unmanned aerial vehicle into the anonymous identifier of each subscription user, and generates a broadcast header including the anonymous identifier of each subscription user, wherein the identity information of each subscription user and the identity key are pre-generated by identity-based broadcast encryption, which relies on the bilinear mapping of large prime order integer group and base group; a key generation element is selected from the large prime order integer group, and a symmetric key of shared data is generated according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained by bilinear mapping of the selected element in the base group; the shared data is converted into encrypted ciphertext by the symmetric key, and the signature information of the encrypted ciphertext and the broadcast header is generated; the signature information, the encrypted ciphertext and the broadcast header are encapsulated into broadcast ciphertext, and the broadcast ciphertext is broadcast to the terminal equipment of each subscription user. In this way, the unmanned aerial vehicle supports dynamic subscription, and the identity information of the subscription user is hidden through the one-way anonymous key agreement. In addition, a lightweight accountability mechanism is realized through the accountability smart contract and the short signature deployed on the private chain. BRIEF DESCRIPTION OF DRAWINGS

[0077] In order to more clearly illustrate the technical solutions of the embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiments. It should be understood that the following drawings only show some embodiments of the application, and therefore should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.

[0078] Figure 1 Method flowchart provided for the embodiments of the application;

[0079] Figure 2 Interaction schematic diagram of the initialization phase provided for the embodiments of the application;

[0080] Figure 3 Interaction schematic diagram of the sharing phase provided for the embodiments of the application;

[0081] Figure 4 Structure schematic diagram of the virtual device provided for the embodiments of the application;

[0082] Figure 5 Structure schematic diagram of the electronic device provided for the embodiments of the application.

[0083] Icon: 11-broadcast header module; 12-key generation module; 13-ciphertext signature module; 14-ciphertext broadcast module; 21-memory; 22-processor; 23-communication unit; 24-system bus. DETAILED DESCRIPTION

[0084] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the following will be combined with the accompanying drawings for the embodiments of the present application to make a clear and complete description of the technical solutions of the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. The components of the embodiments of the present application described and shown in the accompanying drawings can be arranged and designed in various different configurations.

[0085] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present application.

[0086] It should be noted that: similar reference numbers and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings.

[0087] In the description of the present application, it should be noted that the terms "first", "second", "third" and the like are only used to distinguish description, and cannot be understood as indicating or implying relative importance. In addition, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or device. Without more limitations, the element defined by the statement "including a" does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0088] Based on the above statement, as introduced in the background, although the identity-based broadcast encryption scheme supports stateless reception, so that the UAV can directly construct a shared group according to the identity of the receiver, the shared group has a capacity limit, and the identity information contained in the shared group is easy to cause the risk of leakage of the receiver's privacy.

[0089] In order to make the implementation mode introduced by the present embodiment more easily understood, the identity-based broadcast encryption (IBBE) scheme related to the present embodiment will be described first. The encryption mode includes the following links:

[0090] 1. Key generation: The key generator generates a pair of base keys for the entire system, including a master private key and a master public key. The master private key is confidential and is strictly kept, while the master public key is publicly released as a key parameter in the encryption process for use when encrypting messages.

[0091] 2. User registration: To obtain encryption services, users need to register with the key generator through the terminal device, providing their own unique identity identifier, such as an email address, during registration. The user's unique identity identifier will be used to generate an identity key corresponding to it, allowing the terminal device to decrypt received encrypted data using the user's identity key.

[0092] 3. Key extraction: After successful user registration, the key generator uses the user-provided identity identifier and the master private key to generate the user's identity key through a specific private key extraction algorithm. This identity key is then distributed to the user's terminal device in a secure manner to ensure that the identity key is not compromised during the entire process.

[0093] 4. Encryption: When sending encrypted messages, the sender will use the recipient's identity identifier and the system's master public key to encrypt the message. This encrypted message can only be decrypted by the recipient who possesses the corresponding identity key, ensuring the confidentiality of the message.

[0094] 5. Decryption: After receiving the encrypted message, the terminal device uses the corresponding user's identity key to decrypt the message. This process ensures that only users with the correct identity key can decrypt and read the message content, thereby maintaining the security and privacy of information transmission.

[0095] In this way, the above-mentioned identity-based broadcast encryption scheme allows the UAV to encrypt data by using the unique identity of the recipient in the system when sending messages to the recipient. Therefore, the UAV can directly construct a shared group based on the recipient's identity, but the shared group has a capacity limit. In addition, directly using the identity information contained in the user recipient shared group can easily lead to the risk of revealing the recipient's privacy.

[0096] It should be noted that based on the discovery of the above technical problems, the inventors have proposed the following technical solutions after creative labor to solve or improve the above problems. It should be noted that the defects in the above prior art solutions are the result of the inventors' careful research and practice, and therefore the discovery process of the above problems and the solutions proposed by the embodiments of the present application to solve the above problems should be the contribution of the inventors to the present application, and should not be understood as technical content known to those skilled in the art.

[0097] In view of the above problems, the traditional identity-based broadcast encryption mode is improved in the embodiment, and an unmanned aerial vehicle operation data sharing method driven by a smart contract is proposed. In the method, the unmanned aerial vehicle converts the identity information of each subscription user of the unmanned aerial vehicle into an anonymous identifier of each subscription user, and generates a broadcast header including the anonymous identifier of each subscription user, wherein the identity information of each subscription user and the identity key are pre-generated by an identity-based broadcast encryption mode, and the identity-based broadcast encryption mode relies on the bilinear mapping of the large prime order integer group and the base group; a key generation element is selected from the large prime order integer group, and a symmetric key of shared data is generated according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained by bilinear mapping of the selected element in the base group; the shared data is converted into encrypted ciphertext by the symmetric key, and signature information of the encrypted ciphertext and the broadcast header is generated; the signature information, the encrypted ciphertext and the broadcast header are encapsulated into broadcast ciphertext, and the broadcast ciphertext is broadcast to the terminal equipment of each subscription user. In this way, the unmanned aerial vehicle supports dynamic subscription, and the identity information of the subscription user is hidden through a one-way anonymous key agreement.

[0098] It should be noted that the Internet in the embodiment refers to a system composed of a plurality of unmanned aerial vehicles, ground control stations, unmanned aerial vehicle traffic management systems, cloud storage servers, terminal equipment of a plurality of subscription users and the like through a network. In order to have a clearer understanding of the Internet in the embodiment, the above-mentioned each entity object will be described in detail as follows:

[0099] Unmanned aerial vehicle: The unmanned aerial vehicle is operated by the ground control station through wireless communication, and is usually equipped with a sensor array such as a camera to collect various data. The unmanned aerial vehicle usually has weak capabilities in terms of endurance and computing.

[0100] Ground control station (GCS): The GCS has sufficient communication and computing capabilities to control the operation of the unmanned aerial vehicle, and can be a large workstation. Usually, one-to-one or one-to-many control modes are supported, which are used for real-time monitoring, path planning, task setting, operation playback and the like.

[0101] Unmanned aerial vehicle traffic management system (UTM): The UTM is managed by the government, and is responsible for authenticating and distributing keys to new system users. At the same time, the UTM provides air services such as meteorological data, intelligence and restriction information through network infrastructure such as cell sites.

[0102] Cloud Storage Server (CSS), CSS integrates a large number of storage devices into the network through technologies such as cluster application and distributed file system. Therefore, system entities can store or access data at any time and anywhere using any networked device.

[0103] Subscription user, which represents a user registered with the UTM, for example, a user of an entity object such as a drone, an information service provider, a data company, a ground vehicle, and a terminal device registers with the UTM and subscribes to the drone using the identity information obtained by registration to obtain access permission to the operation data of the drone.

[0104] In addition, a private chain (PBC for short) is also provided in the embodiment, the PBC is operated by a plurality of enterprises or organizations (i.e. consensus nodes), so as to realize fast and cost-effective transactions, and non-majority consensus nodes cannot arbitrarily tamper with blockchain data. In the embodiment, all entity devices are nodes in the PBC.

[0105] In the above Internet, the UTM initializes the entire system, and all system users must register their identities with the UTM, which are called registered users. The registered users send a subscription request to the GCS to obtain the operation data of the drone, including flight data, sensor data, control data, and fault data. The GCS can verify the legality of the user's identity through an on-chain smart contract. After verification, the GCS adds the user's identity to the shared group of drones. During the task, the drone encrypts the operation data using all the identities in the shared group. Then, the drone broadcasts the encrypted text and synchronously uploads it to the CSS, so that the user can receive the encrypted text through the wireless channel, or download the encrypted text from the CSS on demand.

[0106] To make the scheme provided by the embodiment more clear, the following will be combined with Figure 1 The various steps of the method are described in detail. However, it should be understood that the operations of the flowchart can not be implemented in sequence, and the steps without logical context relationship can be reversed in sequence or implemented simultaneously. In addition, one or more other operations can be added to the flowchart or one or more operations can be removed from the flowchart under the guidance of the content of the present application. For example, Figure 1 As shown in the figure, the method comprises:

[0107] S1, respectively converting the identity information of each subscription user of the drone into an anonymous identifier of each subscription user, and generating a broadcast header comprising the anonymous identifier of each subscription user.

[0108] In this embodiment, the identity information and identity key of each subscriber are pre-generated using an identity-based broadcast encryption method, which relies on a bilinear mapping between a large prime-order integer group and its base group. This can be understood as including an initialization phase for pre-generating the identity information and identity key of subscribers, and a sharing phase where the drone broadcasts shared data.

[0109] like Figure 2 As shown, during the initialization phase, UTM initializes the system by generating a set of public system parameters and a master key pair. Furthermore, UTM deploys an accountability smart contract SC on its private blockchain. acc This is used to provide an accountability mechanism. Users of all entities on the Internet are required to report to the SC. acc Register an identity and pay a deposit. Upon successful verification, UTM distributes an identity key to the registered user and records their identity on the private blockchain, thus establishing a lightweight accountability mechanism through short signatures. Furthermore, when the registered entity is a drone, its flight smart contract SC must also be deployed and published on the private blockchain. uav This is to record flight data. As shown in the table below, the two smart contracts provide the following callable functions, and the objects to which these functions are called:

[0110]

[0111] The above implementation provides an overview of the entire Internet. The initialization phase of the system will be described in detail below:

[0112] Similar to traditional identity-based broadcast encryption methods, this embodiment provides four deterministic algorithms for initializing the entire shared system: ParamsGen, MasterGen, IdentityGen, and Register. The following describes each of these four algorithms involved in initializing the entire shared system in detail:

[0113] ParamsGen(κ)→Params is an algorithm that takes a security parameter κ representing the encryption strength (e.g., indicating a 256-bit key strength) as an example. The algorithm chooses a prime number p and a group of integers of order p. In addition, a bilinear mapping e was initialized: and three hash functions and It should be understood that, in the specific fields of cryptography and mathematics, e denotes performing a bilinear mapping , used to transform the base group The elements in the map are mapped to the multiplicative cyclic group. One of the elements. The first hash function is used to map binary strings of arbitrary length to a base group. One element; the second hash function is used to... An element in a group maps to a group of p-order integers containing non-negative integers. Hereinafter referred to as the large prime number order integer group; the third hash function is used to map a binary string of arbitrary length to a fixed-length 256-bit binary string. Finally, the algorithm also uses an element g selected from the base group to perform a bilinear mapping to obtain the bilinear mapping value L = e(g, g), and outputs a set of common system parameters.

[0114] MasterGen(Params) → (MSK, MPK) is an algorithm that starts from the group of large prime integers. Randomly select an integer Use this as the master private key, and then use it to calculate the master public key MPK = g. MSK The resulting master key pair (MSK, MPK) is then output.

[0115] IdentityGen(Params) → (sig, id) is an algorithm that, for each registered entity object, calculates a value from a group of large prime integers. A short signature (Boneh-Lynn-Shacham) is randomly selected from the BLS (Boneh-Lynn-Shacham) for use as...

[0116] For signing private key And use the signing private key to calculate the signing public key. As the identity information id of the entity object, the algorithm outputs a signature key pair (sk). sig ,id=pk sig ).

[0117] Register(MSK, id) → sk id Given the master private key (MSK) and identity information (id), the algorithm will calculate the corresponding identity key. The calculation method is expressed as follows:

[0118]

[0119] The algorithm outputs sk. id This serves as the identity key. It's important to note that the identity key and the signing private key are different keys and serve different functions. Thus, during the initialization phase, the master public key and master private key for the entire system are generated, and each registered entity is assigned corresponding identity information (id) and identity key (sk). id Signature key pair (sk sig ,id=pk sig ).

[0120] Based on the above embodiments describing the initialization phase of the entire Internet, the sharing phase will be described in detail below:

[0121] The sharing phase is further divided into the pre-flight, in-flight, and post-flight stages of the drone. For example... Figure 3 As shown, before flight, subscribers can send a subscription request to GCS via their terminal devices to obtain drone operational data. The ground control station uses the accountability smart contract SC... acc After verifying the subscriber's identity, GCS adds the subscriber to the drone's sharing group, allowing GCS to dynamically update the sharing group. Additionally, the CSS address is returned to the subscriber's terminal device. During flight, the drone uses the encrypted sharing method provided in this embodiment to encrypt the generated shared data, broadcasts it, and simultaneously uploads the broadcast ciphertext to CSS. Therefore, all users can verify the broadcast ciphertext. After the flight ends, the drone continues to process the flight smart contract SC it has deployed. uav Record the task number and data summary.

[0122] The encrypted sharing method provided in this embodiment will be described in detail below. Unlike the traditional identity-based broadcast encryption method, this embodiment does not directly use the identity information of the subscriber to encrypt the shared data of the drone. Instead, the identity information is further converted into an anonymous identifier to enhance the privacy when sharing data.

[0123] In a specific implementation, for each subscriber, the drone performs a bilinear mapping between the subscriber's identity information and a preset master public key to obtain the subscriber's identity information identification parameters. The corresponding expression is:

[0124]

[0125] In the formula, the identifier i distinguishes the identity information of each subscriber, and id i MPK represents the identity information of the i-th subscriber, and MPK represents the master public key, which is obtained by mapping an element g selected from the base group to the master private key MSK selected from the group of large prime integers. MPK = g MSK . This means using a hash function to hash the ID. i Mapping to base group One of the elements, e, represents a bilinear mapping. Indicates identity information ID i The identifier parameter. Therefore, if there are multiple subscribers, this embodiment treats these subscribers as a shared group, which can be represented as S = {id1, id2, ..., id...} n The identifier parameters for the corresponding multiple subscribers can be represented as follows:

[0126] Then, the unmanned aerial vehicle generates an anonymous identity of the subscription user according to the identification parameter, the key generation element, and the anonymous generation element selected from the large prime order integer group, wherein the relationship among the identification parameter, the key generation element, the anonymous generation element, and the anonymous identity is:

[0127]

[0128] In the formula, k represents the key generation element, θ represents the anonymous generation element, represents a preset large prime order integer group, represents θ power of the identification parameter, represents that the hash function is used to map to the anonymous auxiliary information located in represents that the hash function is used to map to a fixed-length binary string, and g represents an element selected from the base group, represents the anonymous identity, and || represents a connection operation in this embodiment, which is used to connect two data before and after into one data.

[0129] In addition, the broadcast header further includes a timestamp, identity information of the unmanned aerial vehicle generating the shared data, and a restoration identity of the symmetric key, wherein the expression of the restoration identity is:

[0130] h3=g θ

[0131] In the formula, h3 represents the restoration identity, g represents an element selected from the base group, and θ represents the anonymous generation element.

[0132] For example, the broadcast header is denoted as hdr in this embodiment, hdr=(h1,h2,h3,h4), wherein h1=id i represents the identity information of the unmanned aerial vehicle, h2=timestamp represents the timestamp, and h3=g θ represents the restoration identity of the symmetric key, The anonymous identities of n subscription users are included.

[0133] Based on the introduction of the broadcast header in the above embodiment, it is continued to be seen that Figure 1 The unmanned aerial vehicle operation data sharing method driven by the smart contract provided in this embodiment further includes:

[0134] S2, a key generation element is selected from a large prime order integer group, and a symmetric key of shared data is generated according to the key generation element and a preset bilinear mapping value.

[0135] ​Wherein, the bilinear mapping value is obtained by performing bilinear mapping on the selected element in the base group. Specifically, the relationship between the key generation element, the bilinear mapping value and the symmetric key is as follows:

[0136]

[0137] In the formula, K represents the symmetric key, L represents the bilinear mapping value, and k represents the key generation element selected from the large prime order integer group.

[0138] S3, the shared data is converted into encrypted ciphertext by the symmetric key, and the signature information of the encrypted ciphertext and the broadcast header is generated.

[0139] For example, assuming that the shared data is represented by m, it is encrypted using the symmetric encryption algorithm ε(-), which can resist the ciphertext attack to obtain the broadcast plaintext, and the expression is as follows:

[0140] ctt = ε(K, m)

[0141] In the formula, K represents the calculated symmetric key, and ctt represents the encrypted ciphertext.

[0142] In addition, in order to verify whether the data is tampered during transmission, the embodiment further generates the signature information of the shared data through the signature private key sk sig The encrypted ciphertext and the broadcast header are signed, and the specific expression is as follows:

[0143]

[0144] In the formula, vin represents the signature information, hdr represents the broadcast header, ctt represents the encrypted ciphertext, and sk sig represents the signature private key of the UAV, represents that hdr||ctt is mapped into an element in the base group by the hash function.

[0145] S4, the signature information, the encrypted ciphertext and the broadcast header are encapsulated into the broadcast ciphertext, and the broadcast ciphertext is broadcast to the terminal device of each subscription user.

[0146] Continuing with the signature information vin, the encrypted ciphertext ctt and the broadcast header hdr in the above example, the above broadcast ciphertext can be represented as c = (hdr, ctt, vin).

[0147] This allows each terminal device to recover the symmetric key from the broadcast header using the identity key of the corresponding subscriber, which can then be used to decrypt the encrypted ciphertext. It should be noted that in this embodiment, the drone uses the identity information of all subscribers in the shared group to encrypt the data. The number of subscribers in this shared group can be increased or decreased arbitrarily. When the number of subscribers changes, newly added subscribers cannot decrypt historical broadcast ciphertexts sent by the drone before they subscribed.

[0148] See also Figure 2 Because during registration, the drone also deployed a flight smart contract SC on the private blockchain. uav This is used to record flight data. For this, assume that the broadcast ciphertext sequence generated by the UAV during a single flight is represented as C = {c1, c2, ..., c...}. l}. For c i Each encrypted ciphertext vin in (1≤i≤l) i UAV Computational Summary Then, based on the task number (taskno, a 256-bit string) and the hash value... Drone calls SC uav The WriteHash function records the flight process. Any user can read it by calling the ReadHash function. This function is used to verify the integrity of the data.

[0149] The above embodiments described encryption methods for broadcast ciphertext. This embodiment also provides a decryption method for broadcast ciphertext, which is applied to a subscription device, where the subscription device refers to the terminal device used by the subscribing user. The method specifically includes:

[0150] S5 receives the broadcast ciphertext sent by the drone.

[0151] S6, determine whether the broadcast ciphertext meets the preset verification conditions.

[0152] The verification in this embodiment involves two aspects: verifying the sender's identity and the integrity of the broadcast ciphertext. For example, assume that the function Verify(id, c) → (true / false) is used to determine whether the broadcast ciphertext meets the preset verification conditions. In this function, given an identity identifier id and a broadcast ciphertext c = (h1, h2, h3, h4), ctt, vin), consisting of signature information vin, a broadcast header hdr, and encrypted ciphertext ctt, the function first checks if id = h1. If it does, it continues to verify the integrity of the broadcast ciphertext. The expression for the verification algorithm is:

[0153]

[0154] In the formula, e represents performing a bilinear mapping, and if the expression of the above verification algorithm is correct, a true indicating that the preset check condition is met is output; otherwise, a false indicating that the preset check condition is not met is output.

[0155] As introduced in the above embodiment, in the embodiment, a private chain is further provided, and the unmanned aerial vehicle sending the broadcast ciphertext is one of the nodes, and the user of the unmanned aerial vehicle pays a deposit to the accountability smart contract deployed in the private chain when registering. Therefore, if the subscription device detects that the broadcast ciphertext does not meet the preset check condition, the subscription device sends the reporting information to the management device, so that the management device rewards the subscription user who initiates the reporting through the accountability smart contract. Continuing to refer to Figure 2 , the management device can be a UTM in Figure 2 , and the UTM rewards the subscription user who initiates the reporting by calling the deployed accountability smart contract and using the deposit when the unmanned aerial vehicle registers.

[0156] The above embodiment introduces the processing mode when the preset check condition is not met, and when the preset check condition is met, the shared data needs to be further decrypted from the broadcast ciphertext. Therefore, the decryption method introduced in the embodiment further includes:

[0157] S7, if the preset check condition is met, obtaining the restoration identifier of the broadcast ciphertext from the broadcast header of the broadcast ciphertext.

[0158] S8, obtaining the symmetric key of the broadcast ciphertext according to the restoration identifier of the broadcast ciphertext and the identity key of the unmanned aerial vehicle.

[0159] In the specific implementation, the subscription device obtains the anonymous auxiliary information according to the restoration identifier and the identity key of the subscription user, and the relationship among the restoration identifier, the identity key of the subscription user, and the anonymous auxiliary information of the unmanned aerial vehicle is:

[0160]

[0161] In the formula, the anonymous auxiliary information is represented by h2, the identity key of the subscription user is represented by h3, and the restoration identifier of the broadcast ciphertext is represented by h4. h2 represents that the result of the bilinear mapping is mapped to the anonymous auxiliary information in by a hash function;

[0162] Then, the subscription device obtains the anonymous identifier of the subscription user from the broadcast header of the broadcast ciphertext, and obtains the key generation element required for generating the symmetric key according to the anonymous auxiliary information of the unmanned aerial vehicle and the anonymous identifier of the subscription user.

[0163] For example, continuing the anonymous auxiliary information For example, the corresponding element is found from the h4 component in the broadcast header hdr of the broadcast ciphertext satisfies Therefore, the key generation element k in it can be inversely solved.

[0164] Finally, the subscription device obtains the symmetric key of the broadcast ciphertext according to the key generation element required for generating the symmetric key and the anonymous auxiliary information of the unmanned aerial vehicle, wherein the relationship between the key generation element required for generating the symmetric key, the anonymous auxiliary information of the unmanned aerial vehicle, and the symmetric key is:

[0165]

[0166] In the formula, K represents the symmetric key, represents the anonymous auxiliary information of the unmanned aerial vehicle, k represents the key generation element required for generating the symmetric key, and g represents an element selected from a base group obtained from the broadcast ciphertext.

[0167] S9, decrypt the shared data from the broadcast ciphertext by using the symmetric key.

[0168] Taking the broadcast ciphertext c = (h1, h2, h3, h4), ctt, vin) in the above embodiment as an example, after obtaining the symmetric key K by using the above embodiment, the encrypted ciphertext ctt is decrypted by using the symmetric decryption algorithm D(-) to obtain the shared data m in the form of plaintext m = D(K, ctt).

[0169] For the above embodiment, after actual testing, it is found that for a shared group containing 100 subscription users, the unmanned aerial vehicle encryption only takes 120 milliseconds, which is superior to the existing scheme, and the calculation overhead of each subscription device during decryption is only about 2 milliseconds. Therefore, the key calculation and communication overhead of the unmanned aerial vehicle can be ignored and is a fixed value. In addition, the test further finds that the identity legality verification on the chain has a lower calculation cost, only 4304 gas (in comparison, a basic transaction on a private chain needs about 21000 gas).

[0170] Based on the same inventive concept as the smart contract driven unmanned aerial vehicle operation data sharing method provided in the embodiment, the embodiment also provides a smart contract driven unmanned aerial vehicle operation data sharing device. The device includes at least one software form stored in the memory 21 or solidified in the electronic device. The processor 22 in the electronic device is used to execute the executable modules stored in the memory 21. For example, the device includes software functional modules and computer programs. Please refer to Figure 4 Functionally, the device can include:

[0171] The broadcast head module 11 converts the identity information of each subscriber of the UAV into the anonymous identifier of each subscriber and generates a broadcast head including the anonymous identifier of each subscriber. The identity information and identity key of each subscriber are pre-generated through an identity-based broadcast encryption method, which relies on the bilinear mapping between the large prime order integer group and the base group.

[0172] The key generation module 12 is used to select key generation elements from a group of integers of large prime order, and generate a symmetric key for shared data based on the key generation elements and a preset bilinear mapping value. The bilinear mapping value is obtained by performing a bilinear mapping on the elements selected from the base group.

[0173] The ciphertext signature module 13 is used to convert shared data into encrypted ciphertext using a symmetric key and generate signature information for the encrypted ciphertext and the broadcast header;

[0174] The ciphertext broadcast module 14 is used to encapsulate the signature information, encrypted ciphertext, and broadcast header into broadcast ciphertext, and broadcast the broadcast ciphertext to the terminal devices of each subscriber, so that each terminal device can use the identity key of the corresponding subscriber to recover the symmetric key from the broadcast header for decryption of the encrypted ciphertext.

[0175] In this embodiment, the broadcast head module 11 is used to implement Figure 1 In step S1, the key generation module 12 is used to implement... Figure 1 In step S2, the ciphertext signature module 13 is used to generate... Figure 1 In step S3, the encrypted broadcast module 14 is used to implement... Figure 1 Step S4 in the above steps. Therefore, a detailed description of each module can be found in the specific implementation of the corresponding step. Of course, in some implementations, the device may also include other modules, and the above modules may also be used to implement other steps or sub-steps of the method.

[0176] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0177] It should also be understood that the above-mentioned embodiments, if implemented in the form of software functional modules and sold or used as independent products, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or part of the technical solutions that make contributions to the prior art or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application.

[0178] Therefore, the present embodiment also provides a storage medium, which is a computer readable storage medium. The storage medium stores a computer program. When the computer program is executed by a processor, the method for sharing operation data of a UAV driven by a smart contract is implemented. The storage medium can be a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0179] Please refer to Figure 5 The present embodiment also provides an electronic device for implementing the above method. The electronic device can be a UAV or a subscription device. The electronic device can include a processor 22 and a memory 21. The memory 21 stores a computer program. The processor reads and executes the computer program corresponding to the above embodiments in the memory 21 to implement the method for sharing operation data of a UAV driven by a smart contract.

[0180] Please continue to refer to Figure 5 The electronic device also includes a communication unit 23. The memory 21, the processor 22 and the communication unit 23 are directly or indirectly electrically connected to each other through a system bus 24 to realize data transmission or interaction.

[0181] The memory 21 can be an information recording device based on any electronic, magnetic, optical or other physical principles for recording execution instructions, data, etc. In some embodiments, the memory 21 can be, but is not limited to, a volatile memory, a non-volatile memory, a storage drive, etc.

[0182] In some embodiments, the volatile memory can be a Random Access Memory (RAM); in some embodiments, the non-volatile memory can be a Read Only Memory (ROM), a Programmable Read-Only Memory (PROM), an Erasable Programmable Read-Only Memory (EPROM), an Electric Erasable Programmable Read-Only Memory (EEPROM), a flash memory, or the like; in some embodiments, the storage drive can be a magnetic disk drive, a solid state drive, any type of storage disk (such as an optical disk, a DVD, and the like), or a similar storage medium, or a combination thereof, and the like.

[0183] The communication unit 23 is configured to transceive data over a network. In some embodiments, the network can include a wired network, a wireless network, a fiber optic network, a telecommunications network, an intranet, the Internet, a Local Area Network (LAN), a Wide Area Network (WAN), a Wireless Local Area Network (WLAN), a Metropolitan Area Network (MAN), a Wide Area Network (WAN), a Public Switched Telephone Network (PSTN), a Bluetooth network, a ZigBee network, or a Near Field Communication (NFC) network, or the like, or any combination thereof. In some embodiments, the network can include one or more network access points. For example, the network can include wired or wireless network access points, such as base stations and / or network switching nodes, through which one or more components of the service request processing system can connect to the network to exchange data and / or information.

[0184] The processor 22 may be an integrated circuit chip with signal processing capabilities, and may include one or more processing cores (e.g., a single-core processor or a multi-core processor). By way of example only, the processor described above may include a Central Processing Unit (CPU), an Application Specific Integrated Circuit (ASIC), an Application Specific Instruction-set Processor (ASIP), a Graphics Processing Unit (GPU), a Physics Processing Unit (PPU), a Digital Signal Processor (DSP), a Field Programmable Gate Array (FPGA), a Programmable Logic Device (PLD), a controller, a microcontroller unit, a Reduced Instruction Set Computing (RISC) computer, or a microprocessor, or any combination thereof.

[0185] Understandable. Figure 5 The structure shown is for illustrative purposes only. Electronic devices may also have more advanced features. Figure 5 Showing more or fewer components, or having with Figure 5 The different configurations shown. Figure 5 The components shown can be implemented using hardware, software, or a combination thereof.

[0186] It should be understood that all the devices and methods disclosed in the above embodiments can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the drawings show the possible implementation architectures, functions and operations of the devices, methods and computer program products according to the embodiments of the present application. In this regard, each block in the flowcharts or block diagrams can represent a module, a program segment or a part of code, which contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur in different orders from those noted in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and sometimes they can be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and the combination of blocks in the block diagrams and / or flowcharts, can be implemented by a dedicated hardware-based system that performs the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0187] The above describes only various embodiments of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by the present application, which should be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method for sharing drone operation data driven by a smart contract, characterized in that, The method comprises: Converting the identity information of each subscription user of the unmanned aerial vehicle into an anonymous identifier of each subscription user, respectively, comprising: For each subscription user, performing bilinear mapping on the identity information of the subscription user and a preset master public key to obtain an identity parameter of the identity information of the subscription user, wherein the master public key is obtained by mapping an element selected from a base group and a master private key selected from a large prime order integer group; According to the identity parameter, a key generation element and an anonymous generation element selected from the large prime order integer group, the anonymous identifier of the subscription user is generated, wherein the relationship among the identity parameter, the key generation element, the anonymous generation element and the anonymous identifier is: In the formula, denotes a key generation element required for generating a symmetric key, denotes the anonymous generation element, denotes the large prime order integer group, denotes the identity parameter of power, denotes mapping of to anonymous auxiliary information located in , denotes mapping of to a fixed-length binary string by a hash function, denotes an element selected from the base group, denotes the anonymous identity;​​ Generating a broadcast header comprising the anonymous identifier of each subscription user, wherein the identity information of each subscription user and the identity key are pre-generated by an identity-based broadcast encryption method, and the identity-based broadcast encryption method depends on the bilinear mapping of the large prime order integer group and the base group; Selecting a key generation element from the large prime order integer group, and generating a symmetric key of shared data according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained by bilinear mapping an element selected from the base group; Converting shared data into encrypted ciphertext by the symmetric key, and generating signature information of the encrypted ciphertext and the broadcast header; Encapsulating the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcasting the broadcast ciphertext to the terminal device of each subscription user, so that each terminal device restores the symmetric key from the broadcast header by using the identity key of the corresponding subscription user, for decrypting the encrypted ciphertext. 2.The smart contract-driven UAV operation data sharing method of claim 1, wherein, The broadcast header further comprises a timestamp; The identity information of the unmanned aerial vehicle generating the shared data; The restoration identifier of the symmetric key, wherein the expression of the restoration identifier is: wherein denotes the reduced identity, denotes the selected element from the base group, denotes the anonymous generation element. 3.The smart contract-driven UAV operation data sharing method of claim 1, wherein, The relationship among the key generation element, the bilinear mapping value and the symmetric key is: wherein denotes the symmetric key, denotes the bilinear map value, denotes the key generation element, denotes the base group the multiplicative cyclic group of bilinear map. 4.The smart contract-driven UAV operation data sharing method of claim 1, wherein, The method further comprises a decryption method of the broadcast ciphertext, and the decryption method comprises: Receiving the broadcast ciphertext sent by the unmanned aerial vehicle; Judging whether the broadcast ciphertext satisfies a preset check condition; If the preset check condition is satisfied, obtaining the restoration identifier of the broadcast ciphertext from the broadcast header of the broadcast ciphertext; According to the restoration identifier of the broadcast ciphertext and the identity key of the unmanned aerial vehicle, obtaining the symmetric key of the broadcast ciphertext; Decrypting the shared data from the broadcast ciphertext by the symmetric key. 5.The smart contract-driven drone operational data sharing method of claim 4, wherein, According to the restoration identifier of the broadcast ciphertext and the identity key of the unmanned aerial vehicle, obtaining the symmetric key of the broadcast ciphertext, comprising: According to the restoration identifier and the identity key of the subscription user, obtaining anonymous auxiliary information, wherein the relationship among the restoration identifier, the identity key of the subscription user and the anonymous auxiliary information is: In the formula, denotes the anonymous auxiliary information, denotes the identity key of the subscription user, denotes the restoration identifier of the broadcast ciphertext, denotes that the result of the bilinear mapping is mapped to the anonymous auxiliary information in by a hash function; and denotes that the result of the bilinear mapping Obtaining the anonymous identifier of the subscription user from the broadcast header of the broadcast ciphertext; According to the anonymous auxiliary information of the unmanned aerial vehicle and the anonymous identifier of the subscription user, obtaining the key generation element required for generating the symmetric key; According to the key generation element required for generating the symmetric key and the anonymous auxiliary information, the symmetric key of the broadcast ciphertext is obtained, wherein the relationship among the key generation element required for generating the symmetric key, the anonymous auxiliary information and the symmetric key is: wherein denotes the symmetric key, denotes the anonymous helper information, denotes the derivation of an element chosen from the base group from the broadcast ciphertext. 6.The smart contract-driven UAV operation data sharing method of claim 4, wherein, The unmanned aerial vehicle also pays a deposit through an accountability smart contract deployed in a private chain, the accountability smart contract is deployed by a management device, and the method further comprises: If the preset check condition is not met, report information is sent to the management device, so that the management device rewards the deposit to the subscription user who initiates the report through the accountability smart contract. 7.A smart contract driven unmanned aerial vehicle operation data sharing apparatus, characterized in that, The device comprises: A broadcast header module is configured to convert the identity information of each subscription user of the unmanned aerial vehicle into an anonymous identifier of each subscription user, and the broadcast header module is specifically configured to: For each subscription user, the identity information of the subscription user is bilinearly mapped with a preset master public key to obtain an identity parameter of the identity information of the subscription user, wherein the master public key is obtained by mapping an element selected from a base group with a master private key selected from a large prime order integer group; According to the identity parameter, a key generation element and an anonymous generation element selected from the large prime order integer group, the anonymous identifier of the subscription user is generated, wherein the relationship among the identity parameter, the key generation element, the anonymous generation element and the anonymous identifier is: wherein, denotes a key generation element required for generating a symmetric key, denotes the anonymous generation element, denotes the large prime order integer group, denotes the identity parameter, to the power of, denotes mapping of to anonymous auxiliary information located in by a hash function, denotes mapping of to a fixed-length binary string by a hash function, denotes an element selected from the base group, denotes the anonymous identity,​ The broadcast header module is also configured to generate a broadcast header comprising the anonymous identifier of each subscription user, wherein the identity information of each subscription user and the identity key are pre-generated through an identity-based broadcast encryption manner, and the identity-based broadcast encryption manner depends on the bilinear mapping of the large prime order integer group and the base group; A key generation module is configured to select a key generation element from the large prime order integer group, and generate a symmetric key of shared data according to the key generation element and a preset bilinear mapping value, wherein the bilinear mapping value is obtained by bilinearly mapping an element selected from the base group; A ciphertext signature module is configured to convert shared data into encrypted ciphertext through the symmetric key, and generate signature information of the encrypted ciphertext and the broadcast header; A ciphertext broadcast module is configured to encapsulate the signature information, the encrypted ciphertext and the broadcast header into broadcast ciphertext, and broadcast the broadcast ciphertext to the terminal device of each subscription user, so that each terminal device restores the symmetric key from the broadcast header using the identity key of the corresponding subscription user, and decrypts the encrypted ciphertext.

8. A storage medium, characterized by The storage medium stores a computer program, and the computer program is executed by the processor to implement the unmanned aerial vehicle operation data sharing method driven by the smart contract in any one of claims 1-6.

9. An electronic device, comprising: The electronic device comprises a processor and a memory, and the memory stores a computer program, and the computer program is executed by the processor to implement the unmanned aerial vehicle operation data sharing method driven by the smart contract in any one of claims 1-6.

Images