Split type design method and system suitable for password equipment of unmanned platform

Abstract

The invention discloses a split type design method and system for password equipment suitable for an unmanned platform, and belongs to the field of password equipment.The split type design method comprises the steps that the password protection function, achieved by the unmanned platform through integrated password equipment, is disassembled and divided into a password resource management part and a password application service part; respectively and correspondingly forming management end password equipment and application end password equipment; near-field wireless communication modules are configured in the two split parts of equipment respectively, before a task is executed, a security management channel based on a password mechanism is established between the split parts through a near-field wireless communication means in a short-distance security controllable environment, and automatic key resource guarantee of an unmanned platform end according to the task is achieved. According to the invention, there is no need to reserve or modify a filling interface on the appearance of the unmanned platform, the key convenient guarantee and safe anti-out-of-control capability of the unmanned platform is improved, the capability requirement on guarantee personnel is reduced, and the authentication control on the use legality of the unmanned platform is improved.

Description

Technical Field

[0001] The present invention relates to the field of cryptographic equipment, and more specifically, to a split-type design method and system for cryptographic equipment suitable for unmanned platforms. Background Art

[0002] Compared with traditional manned equipment, unmanned platforms also face multiple risks such as data theft, identity cloning, and being deceived and entrapped when in use, and require security protection based on cryptographic means. At the same time, unmanned platforms have unique characteristics such as long-distance application, high openness, and easy loss of control, which makes them have new special requirements for password-based security protection. At present, unmanned platforms generally use internal integrated cryptographic components or adapt to the whole machine's cryptographic equipment for password protection, which has the following problems:

[0003] (1) To adapt to the key resource protection of cryptographic equipment, unmanned platforms usually need to change their appearance structure and separately modify or reserve a key resource injection interface.

[0004] (2) Unmanned platforms are prone to losing control, and because of their decentralized nature, they are difficult to be directly secured on a large scale by traditional centralized management systems. To prevent the risk of losing control of key resources loaded on a single unmanned platform and spreading to previous businesses or other unmanned platforms, single-machine resource security is generally achieved by manually adding keys once per mission. Frequent one-by-one security brings tremendous work pressure to security personnel.

[0005] (3) There are differences in the security processes, methods, and frequencies between unmanned cryptographic equipment and general cryptographic equipment. Security personnel need to change their original security habits, which increases the burden of adapting to, switching between, and training different types of equipment. Summary of the invention

[0006] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a split-type design method and system for cryptographic equipment suitable for unmanned platforms. There is no need to reserve or modify the filling interface on the appearance of the unmanned platform, which improves the convenient key protection and security against loss of control of the unmanned platform, reduces the ability requirements for security personnel, and improves the authentication control of the legality of the use of the unmanned platform.

[0007] The object of the present invention is achieved through the following solutions:

[0008] A split design method for cryptographic equipment applicable to an unmanned platform comprises the following steps:

[0009] The password protection function of the unmanned platform relying on the integrated password equipment is disassembled into two parts: password resource management and password application service, which correspond to the management-side password equipment and application-side password equipment respectively;

[0010] Near-field wireless communication modules are respectively configured in the two parts of the separated equipment. Before executing the task, the two parts establish a security management channel based on the cryptographic mechanism through near-field wireless communication in a close, safe and controllable environment, so as to realize the task-based and automated key resource protection for the unmanned platform.

[0011] Furthermore, after the separation, the management-end cryptographic equipment is deployed in a manned environment to maintain a daily management and security method consistent with conventional general-purpose cryptographic equipment.

[0012] Furthermore, after the separation, the application-side cryptographic equipment is installed on the unmanned platform side. Before executing the task, the management-side cryptographic equipment distributes the task key to it in real time online as needed. The key resources used for a single task are only cached in the memory and disappear when the power is off. The unmanned platform side no longer needs to load the cryptographic program and algorithm resources for resource management.

[0013] Furthermore, the near-field wireless communication module includes a WIFI module.

[0014] Furthermore, the near-field wireless communication module includes a Bluetooth module.

[0015] A split design method for cryptographic equipment suitable for unmanned platforms is based on a split system for cryptographic equipment suitable for unmanned platforms. The system includes a split-design cryptographic resource management module and a cryptographic application service module, which are respectively deployed on the management-end cryptographic equipment and the application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the splits establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, so as to realize task-based and automated key resource protection for the unmanned platform; and the following steps are also included:

[0016] In the actual application process of the split password equipment, it includes the end-to-end password resource initialization process between the management end and the application end:

[0017] S1, the key resource that the management end password equipment matches when it generates near-field wireless management security. The keys used by the management end and application end password equipment are recorded as K1 and K2 respectively. The management end password equipment stores K1 locally;

[0018] S2, before the application-side cryptographic equipment is installed on the unmanned platform, the K2 resources are directly imported into the application-side cryptographic equipment and stored locally by combining the two ends or using the filling equipment;

[0019] S3: The management-side cryptographic equipment is filled with key resources for business protection as conventional cryptographic equipment, and the application-side cryptographic equipment is installed on the unmanned platform.

[0020] Further, in step S1, the relationship between K1 and K2 is the same or different; they do not have a password-based matching relationship with each other at the same time, and the matching relationship includes using a hash cryptographic algorithm to perform a digest calculation on K1 and intercepting the digest value to generate K2.

[0021] A split design method for cryptographic equipment suitable for unmanned platforms is based on a split system for cryptographic equipment suitable for unmanned platforms. The system includes a split-design cryptographic resource management module and a cryptographic application service module, which are respectively deployed on the management-end cryptographic equipment and the application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the splits establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, so as to realize task-based and automated key resource protection for the unmanned platform; and the following steps are also included:

[0022] In the actual application process of the split cryptographic equipment, including the daily management and guarantee process of the unmanned platform:

[0023] SS1, the management end cryptographic equipment follows the key management rules formulated by the unmanned platform and performs routine maintenance and management of the task keys used by the unmanned platform, including generation, transformation and addition;

[0024] SS2, before executing the task, the application end and the management end cryptographic equipment establish a secure transmission channel through the wireless channel by key negotiation. The key negotiation process uses the end-to-end matching K1 and K2 keys for integrity protection to ensure the authentication between the two end devices;

[0025] SS3: The management-side cryptographic equipment uses the negotiated key to encrypt and protect the task key to be used, and then automatically distributes it to the application-side cryptographic equipment wirelessly;

[0026] SS4, the application-side cryptographic equipment caches the task key in the memory to encrypt and protect the business information of the unmanned platform.

[0027] Further, in step SS2, the key negotiation method includes a public key-based key exchange protocol.

[0028] A split cryptographic equipment system suitable for an unmanned platform comprises: a split cryptographic resource management module and a cryptographic application service module, which are respectively deployed on a management-end cryptographic equipment and an application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the split units establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, thereby achieving task-based and automated key resource protection for the unmanned platform.

[0029] The beneficial effects of the present invention include:

[0030] (1) The present invention can realize that there is no need to reserve or modify a refueling interface on the appearance of the unmanned platform. The key resources used by the unmanned platform are automatically distributed wirelessly from the management end to the application end, and there is no need to add a refueling interface on the unmanned platform.

[0031] (2) The present invention splits the conventional integrated cryptographic equipment and proposes a new method flow to unify the protection methods and processes of unmanned cryptographic equipment and general cryptographic equipment for daily security personnel, and realizes the automated key resource protection of the unmanned platform. When the cryptographic resources loaded on the unmanned platform are out of control, while ensuring that the security impact is controlled to the smallest possible range, the burden of daily security operations, training and learning for security personnel is reduced.

[0032] (3) The present invention improves the convenient key protection and security against loss of control capabilities of unmanned platforms. Password management is separated from application services. The unmanned platform with a high risk of loss of control no longer loads resources such as password programs and algorithms for resource management. The task key is automatically distributed and protected by the password equipment on the management side wirelessly before the task is executed. Once a task is executed, it is distributed without manual intervention and disappears when the power is off. This not only reduces the frequency and pressure of manual protection of keys, but also further reduces the scope of out-of-control resources. At the same time, it also controls the safety impact of the unmanned platform's loss of control within a single task, and has good forward and backward safety protection capabilities.

[0033] (4) The present invention reduces the capability requirements for security personnel. The management-side cryptographic equipment is not deployed on the unmanned platform, and conventional and overall key resource management and maintenance can be performed in the manned environment according to the general cryptographic equipment. The unmanned platform does not require manual security, and the security personnel do not need to distinguish between manned and unmanned equipment, and there are no additional requirements for their security capabilities.

[0034] (5) The present invention improves the authentication control of the legality of the use of unmanned platforms. When it is difficult for unmanned platforms to perform additional authentication through authentication media, passwords, etc., the key used to protect the key negotiation process between the management end and the application end is generated by the management end cryptographic equipment and shared between the two ends. No third party can obtain the key. Only the legitimate application end cryptographic equipment can normally negotiate keys with the management end cryptographic equipment and obtain the key used for this task, ensuring the legality of the use of the unmanned platform based on the cryptographic mechanism. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0036] Figure 1 It is a schematic diagram of the split design of the integrated unmanned password equipment in the embodiment of the present invention;

[0037] Figure 2 This is the end-to-end cryptographic resource initialization process in an embodiment of the present invention;

[0038] Figure 3 The key management process for the unmanned platform in the embodiment of the present invention;

[0039] Figure 4 This is the end-to-end cryptographic resource initialization process steps between the management end and the application end in the embodiment of the present invention;

[0040] Figure 5 These are the steps of the daily management and support process of the unmanned platform in the embodiment of the present invention. DETAILED DESCRIPTION

[0041] All features disclosed in all embodiments in this specification, or steps in all methods or processes implicitly disclosed, except for mutually exclusive features and / or steps, can be combined and / or expanded or replaced in any manner.

[0042] In order to adapt to the application characteristics of unmanned platforms, the present invention makes adaptive improvements to the design of cryptographic equipment, aiming to solve the following problems:

[0043] (1) When adapting to cryptographic equipment, the unmanned platform does not need to change its appearance structure, nor does it need to reserve resources and add interfaces for the cryptographic equipment externally.

[0044] (2) Separate the conventional integrated cryptographic equipment and design new steps to unify the security methods and processes of unmanned cryptographic equipment and general cryptographic equipment for daily security personnel, and realize automated key resource security on the unmanned platform. When the cryptographic resources loaded on the unmanned platform are out of control, while ensuring that the security impact is controlled to the smallest possible range, the burden of daily security operations and training and learning for security personnel is reduced.

[0045] The specific implementation process of the present invention is as follows:

[0046] The present invention provides a split-type design method for cryptographic equipment suitable for unmanned platforms, which disassembles the cryptographic protection function realized by the unmanned platform relying on the integrated cryptographic equipment into two parts: cryptographic resource management and cryptographic application service, which respectively correspond to the management-end cryptographic equipment and the application-end cryptographic equipment. Near-field wireless communication modules are respectively configured in the two parts of the split equipment. Before executing the task, the split parts can establish a secure management channel based on the cryptographic mechanism through near-field wireless communication means (including but not limited to WIFI, Bluetooth, etc.) in a close-range safe and controllable environment, so as to realize the key resource protection of the unmanned platform according to the task and automation.

[0047] After the separation, the management-side password equipment will be deployed in a manned environment, and the daily management and protection method can be maintained in line with conventional general-purpose password equipment; the application-side password equipment is installed on the unmanned platform. Before executing the task, the management-side password equipment distributes the task key to it in real time online as needed. The key resources for a task are only cached in the memory and disappear when the power is off. The unmanned platform no longer needs to load resources such as password programs and algorithms for resource management, which further reduces the scope and risk of unmanned platform out-of-control resources. Figure 1 shown.

[0048] In the actual application process of the split cryptographic equipment, it is divided into two processes: end-to-end cryptographic resource initialization between the management end and the application end, and daily management and guarantee on the unmanned platform end.

[0049] (1) End-to-end cryptographic resource initialization process, such as Figure 2 As shown, specifically including:

[0050] 1) The management-end cryptographic equipment generates end-to-end matching key resources when generating near-field wireless management security. The keys used by the management-end and application-end cryptographic equipment are respectively recorded as K1 and K2 (K1 and K2 may be the same or different. When they are different, they should have a password-based matching relationship with each other, including but not limited to using a hash cryptographic algorithm to calculate the summary of K1 and intercepting the summary value to generate K2). The management-end cryptographic equipment stores K1 locally.

[0051] 2) Before the application-side cryptographic equipment is installed on the unmanned platform, the K2 resources are directly imported into the application-side cryptographic equipment and stored locally by combining the two ends or using filling equipment.

[0052] 3) The management-side cryptographic equipment is added with key resources for business protection like conventional cryptographic equipment, and the application-side cryptographic equipment is installed on the unmanned platform.

[0053] (2) Daily management and support process of the unmanned platform, such as Figure 3 As shown, specifically including:

[0054] 1) The cryptographic equipment on the management side follows the key management rules formulated by the unmanned platform and performs routine maintenance and management such as generation, transformation, and addition of mission keys used by the unmanned platform.

[0055] 2) Before executing the task, the application end and the management end cryptographic equipment establish a secure transmission channel through a wireless channel by means of key negotiation. The key negotiation process uses the end-to-end matching K1 and K2 keys for integrity protection to ensure the authenticity of the devices at both ends. The key negotiation method includes but is not limited to the key exchange protocol based on the public key, but the freshness, confidentiality and forward security of the negotiated generated key should be ensured.

[0056] 3) The management-side cryptographic device uses the negotiated generated key to encrypt and protect the task key to be used, and then automatically distributes it wirelessly to the application-side cryptographic device.

[0057] 4) The application-side cryptographic equipment caches the added task key in the memory to encrypt and protect the unmanned platform business information.

[0058] When unmanned platforms use cryptographic equipment for security protection, the present invention solves the problems that the unmanned platform needs to reserve resource filling interfaces for the cryptographic equipment, the difficulty of key resource protection on the unmanned platform side, and the high requirements on the ability of the protection personnel. It has the following advantages:

[0059] (1) There is no need to reserve or modify the recharging interface on the unmanned platform. The key resources used by the unmanned platform are automatically distributed wirelessly from the management end to the application end, without adding a recharging interface on the unmanned platform.

[0060] (2) Improved the convenience of key protection and security against loss of control of unmanned platforms. Separating password management from application services, unmanned platforms with high risk of loss of control no longer load resources such as password programs and algorithms used for resource management. Mission keys are automatically distributed and protected by the password equipment on the management side wirelessly before executing the mission. Once a mission is executed, the keys are distributed without manual intervention and disappear when the power is off. This reduces the frequency and pressure of manual key protection, further reduces the scope of out-of-control resources, and also controls the safety impact of unmanned platform loss of control within a mission, with good forward and backward security protection capabilities.

[0061] (3) Reduced capability requirements for support personnel. The management-side cryptographic equipment is not deployed on the unmanned platform. Conventional and overall key resource management and maintenance can be performed in the manned environment as general cryptographic equipment. No manual support is required on the unmanned platform, and support personnel do not need to distinguish between manned and unmanned equipment, and there are no additional requirements for their support capabilities.

[0062] (4) Improved authentication control of the legitimacy of the use of unmanned platforms. When it is difficult for unmanned platforms to perform additional authentication through authentication media, passwords, etc., the key used to protect the key negotiation process between the management end and the application end is generated by the management end cryptographic equipment and shared between the two ends. No third party can obtain the key. Only the legitimate application end cryptographic equipment can normally negotiate keys with the management end cryptographic equipment and obtain the key used for this task, ensuring the legitimacy of the use of the unmanned platform based on the cryptographic mechanism.

[0063] It should be noted that within the scope of protection defined in the claims of the present invention, the following embodiments can be combined and / or expanded or replaced in any logical way from the above specific implementation methods, such as disclosed technical principles, disclosed technical features or implicitly disclosed technical features.

[0064] Example 1

[0065] A split design method for cryptographic equipment applicable to an unmanned platform comprises the following steps:

[0066] The password protection function of the unmanned platform relying on the integrated password equipment is disassembled into two parts: password resource management and password application service, which correspond to the management-side password equipment and application-side password equipment respectively;

[0067] Near-field wireless communication modules are respectively configured in the two parts of the separated equipment. Before executing the task, the two parts establish a security management channel based on the cryptographic mechanism through near-field wireless communication in a close, safe and controllable environment, so as to realize the task-based and automated key resource protection for the unmanned platform.

[0068] After the separation, the management-end cryptographic equipment is deployed in a manned environment to maintain the same daily management and security method as conventional general cryptographic equipment. The application-end cryptographic equipment is installed on the unmanned platform. Before executing the task, the management-end cryptographic equipment distributes the task key to it in real time online as needed. The key resource for a one-time task is only cached in the memory and disappears when the power is off. The unmanned platform does not need to load the cryptographic program and algorithm resources for resource management.

[0069] The near-field wireless communication module includes a WIFI module and a Bluetooth module.

[0070] Example 2

[0071] A split design method for cryptographic equipment suitable for unmanned platforms is based on a split system for cryptographic equipment suitable for unmanned platforms. The system includes a split-design cryptographic resource management module and a cryptographic application service module, which are respectively deployed on the management-end cryptographic equipment and the application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the splits establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, so as to realize task-based and automated key resource protection for the unmanned platform; and the following steps are also included:

[0072] like Figure 4 As shown in the figure, in the actual application process of the split password equipment, the end-to-end password resource initialization process between the management end and the application end is included:

[0073] S1, the key resource that the management end password equipment matches when it generates near-field wireless management security. The keys used by the management end and application end password equipment are recorded as K1 and K2 respectively. The management end password equipment stores K1 locally;

[0074] S2, before the application-side cryptographic equipment is installed on the unmanned platform, the K2 resources are directly imported into the application-side cryptographic equipment and stored locally by combining the two ends or using the filling equipment;

[0075] S3: The management-side cryptographic equipment is filled with key resources for business protection as conventional cryptographic equipment, and the application-side cryptographic equipment is installed on the unmanned platform.

[0076] In a preferred embodiment, in step S1, the relationship between K1 and K2 is the same or different; they do not have a password-based matching relationship with each other at the same time, and the matching relationship includes using a hash cryptographic algorithm to perform a digest calculation on K1 and intercepting the digest value to generate K2.

[0077] Example 3

[0078] A split design method for cryptographic equipment suitable for unmanned platforms is based on a split system for cryptographic equipment suitable for unmanned platforms. The system includes a split-design cryptographic resource management module and a cryptographic application service module, which are respectively deployed on the management-end cryptographic equipment and the application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the splits establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, so as to realize task-based and automated key resource protection for the unmanned platform; and the following steps are also included:

[0079] like Figure 5 As shown in the figure, in the actual application process of the split cryptographic equipment, the daily management and guarantee process of the unmanned platform is included:

[0080] SS1, the management end cryptographic equipment follows the key management rules formulated by the unmanned platform and performs routine maintenance and management of the task keys used by the unmanned platform, including generation, transformation and addition;

[0081] SS2, before executing the task, the application end and the management end cryptographic equipment establish a secure transmission channel through the wireless channel by key negotiation. The key negotiation process uses the end-to-end matching K1 and K2 keys for integrity protection to ensure the authentication between the two end devices;

[0082] SS3: The management-side cryptographic equipment uses the negotiated key to encrypt and protect the task key to be used, and then automatically distributes it to the application-side cryptographic equipment wirelessly;

[0083] SS4, the application-side cryptographic equipment caches the task key in the memory to encrypt and protect the business information of the unmanned platform.

[0084] In a preferred embodiment, in step SS2, the key negotiation method includes a public key-based key exchange protocol.

[0085] Example 4

[0086] A split cryptographic equipment system suitable for an unmanned platform comprises: a split cryptographic resource management module and a cryptographic application service module, which are respectively deployed on a management-end cryptographic equipment and an application-end cryptographic equipment; near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the split units establish a secure management channel based on a cryptographic mechanism by means of near-field wireless communication in a close, secure and controllable environment, thereby achieving task-based and automated key resource protection for the unmanned platform.

[0087] The units involved in the embodiments of the present invention may be implemented by software or hardware, and the units described may also be arranged in a processor. The names of these units do not, in some cases, limit the units themselves.

[0088] According to one aspect of an embodiment of the present invention, a computer program product or a computer program is provided, the computer program product or the computer program includes a computer instruction, and the computer instruction is stored in a computer-readable storage medium. A processor of a computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the method provided in the above various optional implementations.

[0089] As another aspect, an embodiment of the present invention further provides a computer-readable medium, which may be included in the electronic device described in the above embodiment; or may exist independently without being assembled into the electronic device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by an electronic device, the electronic device implements the method described in the above embodiment.

Claims

1. A split design method for cryptographic equipment suitable for unmanned platforms, characterized in that: The following steps are involved: The password protection function of the unmanned platform relying on the integrated password equipment is disassembled into two parts: password resource management and password application service, which correspond to the management-side password equipment and application-side password equipment respectively; Near-field wireless communication modules are respectively configured in the two parts of the separated equipment. Before executing the task, the two parts establish a security management channel based on the cryptographic mechanism through near-field wireless communication in a close, safe and controllable environment, so as to realize the task-based and automated key resource protection for the unmanned platform.

2. The split design method for cryptographic equipment suitable for unmanned platforms according to claim 1 is characterized in that: After the separation, the management-end cryptographic equipment is deployed in a manned environment to maintain the same daily management and protection method as conventional general-purpose cryptographic equipment.

3. The split design method for cryptographic equipment suitable for unmanned platforms according to claim 1 is characterized in that: After separation, the application-side cryptographic equipment is installed on the unmanned platform. Before executing the task, the management-side cryptographic equipment distributes the task key to it in real time online as needed. The key resources used for a single task are only cached in the memory and disappear when the power is off. The unmanned platform no longer needs to load the cryptographic program and algorithm resources for resource management.

4. The split design method for cryptographic equipment applicable to unmanned platforms according to claim 1 is characterized in that: The near field wireless communication module includes a WIFI module.

5. The split design method for cryptographic equipment applicable to unmanned platforms according to claim 1 is characterized in that: The near field wireless communication module includes a Bluetooth module.

6. A split design method for cryptographic equipment suitable for unmanned platforms, characterized in that: Based on the split-type cryptographic equipment system suitable for unmanned platforms, the system includes a split-design cryptographic resource management module and a cryptographic application service module, which are deployed on the management-end cryptographic equipment and the application-end cryptographic equipment respectively; A near-field wireless communication module is respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the split units establish a secure management channel based on a cryptographic mechanism through near-field wireless communication in a close, secure and controllable environment to achieve task-based and automated key resource protection for the unmanned platform; and the following steps are also included: In the actual application process of the split password equipment, it includes the end-to-end password resource initialization process between the management end and the application end: S1, the key resource that the management end password equipment matches when it generates near-field wireless management security. The keys used by the management end and application end password equipment are recorded as K1 and K2 respectively. The management end password equipment stores K1 locally; S2, before the application-side cryptographic equipment is installed on the unmanned platform, the K2 resources are directly imported into the application-side cryptographic equipment and stored locally by combining the two ends or using the filling equipment; S3: The management-side cryptographic equipment is filled with key resources for business protection as conventional cryptographic equipment, and the application-side cryptographic equipment is installed on the unmanned platform.

7. The split design method for cryptographic equipment applicable to unmanned platforms according to claim 6 is characterized in that: In step S1, the relationship between K1 and K2 is the same or different; they do not have a password-based matching relationship with each other at the same time, and the matching relationship includes using a hash cryptographic algorithm to perform a digest calculation on K1 and intercepting the digest value to generate K2.

8. A split design method for cryptographic equipment suitable for unmanned platforms, characterized in that: Based on the split-type cryptographic equipment system suitable for unmanned platforms, the system includes a split-design cryptographic resource management module and a cryptographic application service module, which are deployed on the management-end cryptographic equipment and the application-end cryptographic equipment respectively; A near-field wireless communication module is respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the split units establish a secure management channel based on a cryptographic mechanism through near-field wireless communication in a close, secure and controllable environment to achieve task-based and automated key resource protection for the unmanned platform; and the following steps are also included: In the actual application process of the split cryptographic equipment, including the daily management and guarantee process of the unmanned platform: SS1, the management end cryptographic equipment follows the key management rules formulated by the unmanned platform and performs routine maintenance and management of the task keys used by the unmanned platform, including generation, transformation and addition; SS2, before executing the task, the application end and the management end cryptographic equipment establish a secure transmission channel through the wireless channel by key negotiation. The key negotiation process uses the end-to-end matching K1 and K2 keys for integrity protection to ensure the authentication between the two end devices; SS3: The management-side cryptographic equipment uses the negotiated key to encrypt and protect the task key to be used, and then automatically distributes it to the application-side cryptographic equipment wirelessly; SS4, the application-side cryptographic equipment caches the task key in the memory to encrypt and protect the business information of the unmanned platform.

9. The split design method for cryptographic equipment applicable to unmanned platforms according to claim 8 is characterized in that: In step SS2, the key negotiation method includes a public key-based key exchange protocol.

10. A split-type cryptographic equipment system suitable for unmanned platforms, characterized in that: include: Separately designed cryptographic resource management modules and cryptographic application service modules are deployed on management-side cryptographic equipment and application-side cryptographic equipment respectively; Near-field wireless communication modules are respectively configured in the management-end cryptographic equipment and the application-end cryptographic equipment; before executing a task, the split units establish a secure management channel based on a cryptographic mechanism through near-field wireless communication in a close, secure and controllable environment, thereby achieving task-based and automated key resource protection for the unmanned platform.

Images