Access authentication method based on unmanned aerial vehicle nest, terminal equipment and storage medium

Abstract

The invention relates to the technical field of quantum communication, and provides an access authentication method based on an unmanned aerial vehicle nest, a terminal device and a storage medium, and the access authentication method comprises the following steps: carrying a randomly generated and distributed password, obtaining the authentication of an encryption terminal and a data terminal of an unmanned aerial vehicle, and requesting to access the unmanned aerial vehicle nest; the encryption equipment authenticates whether the secret key is correct or not in a one-time pad mode; after the secret key is verified, access work is carried out; the invention discloses an access authentication method based on an unmanned aerial vehicle nest, terminal equipment and a storage medium. The encryption device establishes secure communication with the remote control center through an MQTT protocol; it can be understood that a safer, more reliable and more efficient scheme is provided for task execution and data transmission of the unmanned aerial vehicle by integrating a quantum encryption technology, a dual security mechanism, a quantum random number generator, a one-time pad protection strategy and an efficient MQTT communication security module and combining hardware advantages of unmanned aerial vehicle nest terminal equipment.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication, and more specifically, to an access authentication method, terminal equipment and storage medium based on a drone nest. Background Art

[0002] With the rapid development of information technology, data security and privacy protection have become the focus of global attention. Although traditional encryption methods have guaranteed data security to a certain extent, their security is facing severe challenges as computing power continues to increase. As an emerging information security technology, quantum encryption technology, with its unique quantum entanglement and non-cloning properties, provides a more solid guarantee for data security. Quantum encryption technology uses the characteristics of quantum mechanics and realizes encrypted communications that are theoretically unbreakable through protocols such as quantum key distribution (QKD). In the process of quantum encryption, the sender and receiver share a set of quantum entangled states and use the interdependence of quantum entanglement to generate and distribute keys. Due to the non-cloning of quantum, any third party who attempts to steal the key cannot obtain the key information without changing the quantum state, thus ensuring the absolute security of communication.

[0003] However, existing quantum encryption technology still faces many challenges in practical applications. On the one hand, quantum key distribution systems usually rely on fixed infrastructure such as optical fibers or satellites, which are expensive to deploy and have poor flexibility. On the other hand, the maturity of quantum encryption technology needs to be improved, especially in long-distance communications and applications in complex environments. As an automated aviation infrastructure designed specifically for drones, drone nests provide centralized take-off and landing, charging, maintenance, and storage space for drones. The introduction of drone nests not only improves the operating efficiency and management level of drones, but also provides new ideas for the application of quantum encryption technology. By combining quantum encryption technology with drone nests, a flexible and efficient quantum encryption communication system can be built to achieve secure data transmission and storage. However, there are still some problems and difficulties in applying quantum encryption technology to edge terminal devices of drone nests.

[0004] First, the complex environment of the drone nest places higher demands on the stability and reliability of the quantum encryption system. Second, the mobility and flexibility of the drone nest require the quantum encryption system to have the ability to quickly adapt and dynamically adjust. In addition, how to reduce the cost and complexity of the quantum encryption system while ensuring its security is also a problem that needs to be solved urgently. Secondly, one of the main challenges facing current data encryption technology is the security of keys. The keys used in traditional encryption algorithms are often based on mathematical problems, but these problems have gradually become crackable as computing power has increased. In addition, for equipment with limited communications or remote geographical locations, such as power towers and water conservancy dams in remote areas, traditional key distribution methods are not only costly, but also difficult to achieve real-time key updates and distribution. In addition, a single encryption mechanism often cannot adapt to changing communication environments and business needs, and lacks sufficient flexibility and reliability. Finally, the introduction of encryption technology often leads to a decrease in data transmission speed, affecting real-time and concurrent performance, which is particularly evident in scenarios such as drone nests that require efficient communication.

[0005] In order to solve the above problems, this application proposes an access authentication method, terminal device and storage medium based on a drone nest. Summary of the invention

[0006] The purpose of the present invention is to provide an access authentication method, terminal device and storage medium based on a drone nest, which solves the problems in the prior art by using the unpredictability and randomness of quantum keys, a double encryption mechanism and a remote key injection function, and a one-time encryption strategy.

[0007] The purpose of the present invention can be achieved through the following technical solutions: An access authentication method based on a drone nest comprises the following steps: S1. Carry the randomly generated and distributed password, obtain the encryption terminal and the drone's data terminal authentication, and request access to the drone nest; S2. The encryption device verifies whether the key is correct through a one-time password method; S3. Access is performed after key verification.

[0008] A data quantum encryption and decryption method comprises the following steps: S1. The encryption device establishes secure communication with the remote control center through the MQTT protocol; S2. Send a set of unclonable quantum entangled states through a quantum random number generator and distribute them to the required encryption devices using the interdependence of quantum entanglement; S3. Combine quantum key encryption technology to protect data transmission; S4. After the device receives the MQTT message encrypted by quantum key encryption technology through the security terminal, it decrypts it accordingly and parses the message content to perform the corresponding task; In the above technical solution, the unpredictability and randomness of quantum keys greatly improve the security of data encryption, making it significantly more difficult to crack; the adaptability optimization of the MQTT communication protocol improves the speed and efficiency of data transmission, so that encrypted communications can still remain efficient and real-time.

[0009] The keys are randomly generated and distributed as follows: the quantum random number generator communicates with the main controller through the bus to achieve the generation, distribution and synchronization of quantum keys. According to the required task type and security requirements, a key distribution strategy is formulated, and a policy engine is used to dynamically adjust the key life cycle and distribution frequency.

[0010] In the above technical solutions, advanced quantum random number generators (QRNG) or quantum state generators based on physical principles are used to generate true random numbers as quantum keys locally on the terminal device. These keys are unpredictable and highly secure, fundamentally improving the protection capabilities of data encryption. For devices with limited communication or in remote areas, a remote key injection function is provided, and quantum keys are generated and distributed in real time through a quantum key management machine to ensure key updates and synchronization for all terminal devices.

[0011] The key has a dual security mechanism, as follows: it integrates two encryption mechanisms, traditional key and quantum key, to form dual-channel security protection. At the same time, the two mechanisms back up each other. When any channel fails, the other channel can take over seamlessly.

[0012] In the above technical solution, two encryption mechanisms, traditional key and quantum key, are integrated to form dual-channel security protection. The traditional key mechanism provides flexibility, while the quantum key mechanism provides the highest level of security. The two mechanisms back up each other. When one channel fails, the other channel can take over seamlessly to ensure the continuity and security of data transmission.

[0013] The encryption protection mechanism is one-time one-key, as follows: the encryption for each communication is different, and the key will not be used again after it is used once. It also supports quantum key update technology based on time period and session length, and key updates can be dynamically adjusted according to needs and security levels; In the above technical solution, a one-time-one-pad protection mechanism is adopted, that is, the key of the quantum enhanced security encryption gateway is randomly generated and used only once. This one-time-one-pad encryption and decryption technology provides a complete backward confidentiality measure for data. Even if the key of the current session is leaked, future communications can remain absolutely secure.

[0014] The security terminal set in the device combines the quantum random number generator to transmit data, optimizes the data processing process through multi-core processor parallel processing and asynchronous communication technology, and combines MQTT's SCRAM to enhance the authentication mechanism; In the above technical solution, the quantum random number generator has a built-in efficient MQTT communication security module, combined with quantum encryption technology to achieve efficient and secure data transmission, and optimizes the data processing process through multi-core processor parallel processing and asynchronous communication technology, significantly improving communication efficiency and alleviating the problem of slow communication transmission speed after encryption. Combined with MQTT's SCRAM enhanced authentication mechanism, the security of communication is further improved to ensure that the data transmission between the drone and the remote control center is not tampered with or intercepted.

[0015] An access authentication terminal device based on a drone nest comprises: a drone nest, wherein the drone nest comprises a high-performance processor, a large-capacity memory, a high-speed storage device, a multi-interface network card and a drone communication interface, and each component is connected via a PCIe bus; a quantum random number generator, wherein the quantum random number generator is installed in the drone nest, and the quantum random number generator is composed of a quantum light source, a single-photon detector, an optical modulator, a signal processing circuit and a controller; and a security terminal, wherein the security terminal is installed in the drone nest, and the security terminal completes the distribution of quantum keys via an interface, and is connected to the quantum random number generator to obtain quantum keys in real time.

[0016] In the above technical solution, the decryption method combines the hardware advantages of the drone nest terminal equipment to provide a safer, more reliable and efficient solution for the execution of drone missions and data transmission.

[0017] A storage medium stores a computer program, and when the computer program is executed, the steps of the above method are performed.

[0018] Beneficial effects of the present invention: 1. The unpredictability and randomness of quantum keys greatly improve the security of data encryption, making it significantly more difficult to crack; 2. The dual encryption mechanism and remote key injection function enhance the flexibility and reliability of the system, enabling the system to adapt to changing communication environments and business needs; 3. The one-time encryption strategy provides complete backward confidentiality for data transmission. Even if a key is leaked, it will not affect the security of future communications. 4. The adaptability optimization of the MQTT communication protocol improves the speed and efficiency of data transmission, so that encrypted communication can still remain efficient and real-time; Combining the above beneficial effects, they work together in application scenarios such as drone nests, providing a safer, more reliable and efficient solution for drone mission execution and data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0020] Figure 1 It is a structural schematic diagram of the present invention; Figure 2 A schematic flow chart for data encryption, decryption and transmission; Figure 3 The following is a flowchart showing the access authentication method of the drone nest; In the accompanying drawings, the components represented by the reference numerals are listed as follows: In the picture: 1. Drone nest; 2. Quantum random number generator; 3. Security terminal. DETAILED DESCRIPTION

[0021] In order to make the purpose, technical scheme and advantages of the present invention clearer, the present invention is further described in detail below in conjunction with specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0022] An access authentication method based on a drone nest comprises the following steps: S1. Carry the randomly generated and distributed password, obtain the encryption terminal and the drone's data terminal authentication, and request access to the drone nest; S2. The encryption device verifies whether the key is correct through a one-time password method; S3. Access is performed after key verification.

[0023] A data quantum encryption and decryption method comprises the following steps: S1. The encryption device establishes secure communication with the remote control center through the MQTT protocol; S2. Send a set of unclonable quantum entangled states through a quantum random number generator and distribute them to the required encryption devices using the interdependence of quantum entanglement; S3. Combine quantum key encryption technology to protect data transmission; S4. After the device receives the MQTT message encrypted by quantum key encryption technology through the security terminal, it performs corresponding decryption and parses the message content to perform corresponding tasks.

[0024] As an implementation mode of the present invention, the key is randomly generated and distributed, specifically as follows: the quantum random number generator communicates with the main controller through a bus to realize the generation, distribution and synchronization of the quantum key, formulates a key distribution strategy according to the mission type and security requirements of the drone, and uses a policy engine to dynamically adjust the life cycle and distribution frequency of the key; Specifically, a TF card with high security, low power consumption and high reliability is selected as the storage medium. After the key is generated, the quantum security encryption gateway can achieve deep integration with the unified cryptographic service platform and the quantum platform, and realize the acquisition of quantum keys and the online distribution of quantum keys. The quantum enhanced security encryption gateway supports quantum key update technology based on time period and session duration. It can be set to update quantum encryption keys at certain intervals (such as 30 minutes) or based on each session according to the security level of the business. In addition, the quantum security encryption gateway has achieved deep integration with the unified cryptographic service platform and the quantum platform, and realized the acquisition of quantum keys and the online distribution of quantum keys, solving various risks in the offline filling and manual review process.

[0025] As an embodiment of the present invention, the key has a dual security mechanism, as follows: integrating two encryption mechanisms, traditional key and quantum key, to form dual-channel security protection, and the two mechanisms back up each other. When either channel fails, the other channel can take over seamlessly; the encryption protection mechanism is one-time one-key, as follows: the encryption of each communication is different, and the key will not be used a second time after being used once. At the same time, it supports quantum key update technology based on time period and session duration, and the key update can be dynamically adjusted according to demand and security level.

[0026] Specifically, the quantum key distribution is completed through a dedicated communication interface, and a connection is established with the quantum key management machine to obtain the quantum key in real time. Quantum key encryption and authentication mechanisms are used during the communication process to ensure the security of data transmission. The HMAC key synchronization protocol is used to ensure the key consistency between the MQTT communication security edge terminal and the quantum key management machine. The integrity and authenticity of the key are verified by the key fingerprint or hash value, and a unique index is generated for each key and stored in a local encrypted database. A hardware security module (HSM) is used to protect the storage and access of the key. During the sending and receiving of MQTT messages, the quantum key is used to encrypt and decrypt the message. The key exchange protocol (such as ECDH) is used for key negotiation, and the SCRAM mechanism is combined to enhance the authentication process. In addition, the multi-threading capability of the multi-core processor is used to parallelly process the MQTT messages through task allocation and thread pool management. The data structure and algorithm are optimized to reduce processing delays. Asynchronous I / O and event-driven models are used to improve the efficiency of message processing. The callback mechanism is used to process messages to reduce thread blocking time.

[0027] As an implementation mode of the present invention, the security terminal provided in the device transmits data in combination with a quantum random number generator, optimizes the data processing flow through multi-core processor parallel processing and asynchronous communication technology, and combines the SCRAM enhanced authentication mechanism of MQTT; Specifically, the quantum key management machine is used as a terminal device of the device, and communicates with the main controller through the internal bus to achieve the generation, distribution and synchronization of quantum keys. According to the task type and security requirements, a key distribution strategy is formulated. A policy engine is used to dynamically adjust the life cycle and distribution frequency of the key.

[0028] Establish secure communication with the remote control center through the MQTT protocol, and use quantum key encryption technology to protect data transmission. After receiving the MQTT message encrypted by quantum key encryption technology, the device will decrypt it accordingly, parse the message content and perform the corresponding tasks.

[0029] like Figure 1 As shown: an access authentication terminal device based on a drone nest, comprising: a drone nest 1, which includes a high-performance processor, a large-capacity memory, a high-speed storage device, a multi-interface network card and a drone communication interface, and each component is connected through a PCIe bus; a quantum random number generator 2, which is installed in the drone nest 1, and is composed of a quantum light source, a single-photon detector, an optical modulator, a signal processing circuit and a controller. The quantum light source emits photons, and the single-photon detector detects the arrival time or existence of the photons. The signal processing circuit converts the output of the detector into an electrical signal, and the controller processes the electrical signal to generate a random number sequence. The random number generated by the random number generator based on the quantum tunneling effect using the tunneling behavior of electrons in semiconductor materials is subjected to a series of statistical tests using the NIST statistical test suite, including frequency test, intra-block frequency test, running time test, autocorrelation test, etc., to verify its randomness. Among them, the generation of random numbers is by calculating and measuring the fluctuation of electron tunneling time or tunneling current. These tests can ensure that the random numbers meet high standards of randomness requirements. The method of random number generation requires precise electronic control and measurement technology to ensure that the generation of random numbers is not affected by the external environment; the security terminal 3 is installed in the drone nest 1, and the security terminal 3 completes the distribution of quantum keys through the interface, and is connected to the quantum random number generator 2 to obtain the quantum key in real time.

[0030] A storage medium stores a computer program, and when the computer program is executed, the steps of the above method are executed.

[0031] It can be understood that the present invention integrates quantum encryption technology, dual security mechanism, one-time pad protection strategy and efficient MQTT communication security module, combined with the hardware advantages of drone nest terminal equipment, to provide a safer, more reliable and efficient solution for drone mission execution and data transmission.

[0032] In the description of the present invention, unless otherwise specified, "plurality" means two or more than two; it should be understood that the terms "opening", "upper", "lower", "thickness", "top", "middle", "length", "inside", "around" and the like indicate orientation or positional relationship, which is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the components or elements referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention.

[0033] Finally, it should be noted that the above is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. An access authentication method based on a drone nest, characterized in that: The steps include: S1. Carry the randomly generated and distributed password, obtain the encryption terminal and the drone's data terminal authentication, and request access to the drone nest; S2. The encryption device verifies whether the key is correct through a one-time password method; S3. Access is performed after key verification.

2. A data quantum encryption and decryption method, characterized in that: The steps include: S1. The encryption device establishes secure communication with the remote control center through the MQTT protocol; S2. Send a set of unclonable quantum entangled states through a quantum random number generator and distribute them to the required encryption devices using the interdependence of quantum entanglement; S3. Combine quantum key encryption technology and MQTT communication security module to protect data transmission; S4. After the device receives the MQTT message encrypted by quantum key encryption technology through the security terminal, it performs corresponding decryption and parses the message content to perform corresponding tasks.

3. A data quantum encryption and decryption method according to claim 2, characterized in that: The keys are randomly generated and distributed as follows: the quantum random number generator communicates with the main controller through the bus to achieve the generation, distribution and synchronization of quantum keys. According to the mission type and security requirements of the drone, a key distribution strategy is formulated, and a policy engine is used to dynamically adjust the key life cycle and distribution frequency.

4. A data quantum encryption and decryption method according to claim 2, characterized in that: The key has a dual security mechanism, as follows: it integrates two encryption mechanisms, traditional key and quantum key, to form dual-channel security protection. At the same time, the two mechanisms back up each other. When any channel fails, the other channel can take over seamlessly.

5. A data quantum encryption and decryption method according to claim 2, characterized in that: The encryption protection mechanism is one-time one-key, as follows: the encryption for each communication is different, and the key will not be used a second time after being used once. It also supports quantum key update technology based on time period and session duration, and key updates can be dynamically adjusted according to demand and security level.

6. A data quantum encryption and decryption method according to claim 2, characterized in that: The security terminal set up in the device combines with the quantum random number generator to transmit data, optimizes the data processing process through multi-core processor parallel processing and asynchronous communication technology, and combines with MQTT's SCRAM enhanced authentication mechanism.

7. A data quantum encryption and decryption method according to claim 2, characterized in that: The quantum encryption technology is combined with the MQTT communication security module to achieve efficient and secure data transmission.

8. An access authentication terminal device based on a drone nest, according to the encryption and decryption method according to any one of claims 1 to 6, characterized in that: include: A drone nest, wherein the drone nest includes a high-performance processor, a large-capacity memory, a high-speed storage device, a multi-interface network card and a drone communication interface, and each component is connected via a PCIe bus; A quantum random number generator, which is installed in the drone nest and consists of a quantum light source, a single photon detector, an optical modulator, a signal processing circuit and a controller; The security terminal is installed in the drone nest. The security terminal completes the distribution of quantum keys through an interface and is connected to a quantum random number generator to obtain quantum keys in real time.

9. A storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed, it runs the steps described in any one of claims 1 to 6.

Images