Networked unmanned aerial vehicle management and control system with quantum encryption

Abstract

The invention discloses a networked unmanned aerial vehicle management and control system with quantum encryption, and the system is used for carrying out the recognition and management and control of a networked unmanned aerial vehicle in a preset region, and the preset region is provided with a plurality of security defense target regions. The network connection unmanned aerial vehicle management and control system comprises a plurality of mobile communication base stations, a plurality of mobile edge computing devices MEC, a plurality of universal client devices uCPE and a plurality of area control centers, and the mobile communication base stations, the mobile edge computing devices MEC, the universal client devices uCPE and the area control centers are in communication connection in sequence. The MEC and the uCPE are arranged close to the mobile communication base station, and the area control centers are in one-to-one correspondence with the security defense target areas. According to the invention, the edge computing technology and the quantum encryption technology can be utilized to realize early warning, identification, management and control and secure data transmission of the networked unmanned aerial vehicle, the real-time performance of management and control of the networked unmanned aerial vehicle in the security defense area is effectively improved, and the information security of the security defense area is better ensured.

Description

Technical Field

[0001] The present application relates to the field of low-altitude security defense technology, and in particular to a networked drone control system based on quantum encryption. Background Art

[0002] A connected drone refers to a drone that uses the 4G / 5G mobile communication network instead of the drone manufacturer's self-built communication and data links. The drone is connected to the real-time, ubiquitous, and wide-coverage 4G / 5G mobile communication network through an onboard 4G / 5G dedicated communication module with a SIM card, and then the drone manufacturer's self-developed management and operation cloud platform is used to achieve remote beyond-visual-range flight control of the drone and real-time return processing of large-bandwidth high-definition video data.

[0003] The emergence and development of networked drones not only solves the bottleneck of limited flight and control distance of traditional drones, but also solves the long-standing industry problems of slow transmission and processing of large amounts of high-definition video and other information data, narrow bandwidth, and the inability to be transmitted and processed in real time.

[0004] In February 2022, the 4G / 5G networked drone launched by Shenzhen DJI Innovations Technology Co., Ltd., a leading drone company, was officially put into commercial use, achieving a technological breakthrough in ultra-long-distance flight and strong anti-interference capabilities. This has huge application scenarios and practical effects in many industries.

[0005] But the two sides of things tell us that this new technology will also bring many negative problems, such as illegal long-range reconnaissance, attacks, drug trafficking, smuggling, etc., which will cause great security risks to important targets, facilities, restricted areas, key areas and other security defense areas, and will affect national security and social stability.

[0006] The existing control and management system for defending against drones usually consists of radars, spectrum detection equipment, infrared night vision optoelectronic equipment, electromagnetic suppression equipment and other detection equipment set up in various security defense areas, combined with technical means such as protocol cracking and black and white lists. This defense system can only partially solve the defense problem of non-networked drones. In order to completely solve the security risks brought by networked drones, only through targeted technology research and development and equipment can a comprehensive defense system be perfected and effectively formed. Summary of the invention

[0007] In order to solve at least one of the above problems, the present application provides a networked drone control system with quantum encryption, which can use edge computing technology and quantum encryption technology to achieve early warning, identification and control of networked drones, thereby solving the shortcomings of existing drone defense systems.

[0008] The above-mentioned application purpose of this application is achieved through the following technical solutions:

[0009] A networked drone control system based on quantum encryption, the networked drone control system is used to identify and control networked drones in a preset area, wherein the preset area has multiple security defense target areas.

[0010] The networked drone control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC, multiple universal client devices uCPE and multiple regional control centers. The mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in communication in sequence.

[0011] The mobile edge computing device MEC and the universal client device uCPE are both arranged close to the mobile communication base station, and the regional control center corresponds to the security defense target area one by one.

[0012] in,

[0013] The mobile edge computing device MEC is used to monitor and parse the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result. If so, generate networked drone warning information and send it to the universal client device uCPE connected to the communication device;

[0014] The universal client device uCPE is used to encrypt the networked drone warning information based on a preset quantum encryption algorithm and send it to a regional control center that is in communication with it;

[0015] The regional control center is used to decrypt the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instruction, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

[0016] Preferably, the networked drone control system with quantum encryption further includes a command center management platform, which is communicatively connected to each of the regional control centers, wherein:

[0017] The regional control center is also used to send the encrypted networked drone warning information and / or the encrypted networked drone control instructions to the command center management platform, and receive the encrypted data information issued by the command center management platform, and perform corresponding operations according to the encrypted data information;

[0018] The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and the encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

[0019] Preferably, there are multiple drone control target areas in the preset area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area in the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

[0020] Preferably, at least one mobile edge computing device MEC is arranged in each of the drone target prevention and control areas, the universal client device uCPE is communicatively connected to the mobile edge computing device MEC in a one-to-one correspondence, and each of the universal client devices uCPE is communicatively connected to at least one of the regional control centers.

[0021] Preferably, the drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center correspond one to one.

[0022] Preferably, each of the mobile edge computing devices MEC has a first networked drone database, and each of the regional control centers has a second networked drone database.

[0023] The regional control center is also used to update the first networked drone database according to the update status of the second networked drone database.

[0024] Preferably, the mobile edge computing device MEC and the universal client equipment uCPE are both installed in a machine room of the corresponding mobile communication base station.

[0025] Preferably, the networked drone control system identifies and controls the networked drones in the preset area according to the following process:

[0026] S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminal connected to its corresponding mobile communication base station through the software defined wide area network SD-WAN;

[0027] S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result, and if so, executes S3;

[0028] S3, the corresponding mobile edge computing device MEC generates networked drone warning information according to the message parsing result and sends it to the universal client device uCPE connected to it;

[0029] S4, the universal client device uCPE encrypts the networked drone warning information based on a preset quantum encryption algorithm and sends it to the regional control center connected to it;

[0030] S5, the regional control center decrypts the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determines whether to control the networked drone according to the decrypted networked drone warning information, and if so, executes S6;

[0031] S6, the regional control center generates an encrypted networked drone control instruction based on a preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE;

[0032] S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC that is communicatively connected to it based on the encrypted networked drone control and management instruction, and implements control on the target networked drone according to preset drone control measures.

[0033] Preferably, in step S2, when the communication message of the mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result, including:

[0034] S21, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and extracts a quintuple of the communication message, wherein the quintuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type;

[0035] S22, searching the IP addresses in the domain name table of the drone manufacturer server in the preset networked drone database to see whether there is an IP address that is the same as the target IP address. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

[0036] Preferably, step S7 comprises:

[0037] S71, after receiving the encrypted networked drone control instruction, the corresponding universal client device uCPE decrypts the encrypted networked drone control instruction based on a preset quantum encryption algorithm to obtain a decrypted networked drone control instruction, and sends the decrypted networked drone control instruction to the corresponding mobile edge computing device MEC, wherein the decrypted networked drone control instruction includes at least the source IP address and the destination IP address of the target networked drone to be controlled;

[0038] S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone, thereby completing the complete control and blocking of the networked drone.

[0039] In summary, the present application discloses a networked drone control system with quantum encryption, which installs a mobile edge computing device MEC and a universal client device uCPE at a location close to each mobile communication base station, and sets a regional control center corresponding to each security defense target area. Through each mobile edge computing device MEC, the communication message of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC is monitored and parsed, and the message parsing result is analyzed and processed on the spot, thereby improving the data volume and data processing speed of data processing. When it is determined that the mobile communication terminal connected to the mobile communication base station is a networked drone, the determination result is sent to the regional control center of the corresponding security defense target area through the universal client device uCPE, so that the illegal networked drones that cause security risks to the corresponding security defense target area are controlled by the corresponding regional control center, effectively improving the real-time control. At the same time, in the data transmission process between each universal client device uCPE and the regional control center corresponding to each security defense target area, quantum encryption technology is used for encryption, which effectively avoids the leakage of relevant information in the security defense area and improves the security of data transmission during the networked drone control process. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0041] Figure 1 This is a schematic diagram of the structure of a networked drone control system with quantum encryption in an embodiment of the present application;

[0042] Figure 2 A relationship diagram of the preset area, the security defense target area, and the drone prevention and control target area in the embodiment of the present application;

[0043] Figure 3 A flowchart of a networked drone control system with quantum encryption for identifying and controlling networked drones in an embodiment of the present application;

[0044] Figure 4 A system architecture diagram for the connected drone to communicate with the drone manufacturer's server. DETAILED DESCRIPTION

[0045] In order to enable those skilled in the art to better understand the technical solutions in this application, the technical solutions in the embodiments of this application will be clearly and completely described below. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0046] In the embodiments provided in the present application, it should be understood that the disclosed methods and systems can be implemented in other ways. The system embodiments described below are merely schematic. For example, the division of units and modules is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or modules can be combined, or can be integrated into another system, or some features can be ignored, or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0047] In addition, all functional units in the embodiments of the present application may be integrated into one processor, or each unit may be a separate device, or two or more units may be integrated into one device; each functional unit in the embodiments of the present application may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0048] A person skilled in the art can understand that all or part of the steps of the following method embodiments can be completed by program instructions and related hardware. The aforementioned program instructions can be stored in a computer-readable storage medium. When the program instructions are executed, the steps of the following method embodiments are executed; and the aforementioned storage medium includes: a mobile storage device, a read-only memory (ROM), a magnetic disk or an optical disk, and other media that can store program codes.

[0049] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, "multiple" and "several" mean two or more, unless otherwise clearly and specifically defined.

[0050] Traditional low-altitude flying drones generally use WiFi and other communication methods to achieve communication between drone equipment and drone remote controls. The communication distance is generally within 3 kilometers, which is relatively short.

[0051] However, networked drones equipped with 4G, 5G and other mobile communication modules and SIM cards can communicate between drone equipment and drone remote controls through the operator's mobile communication base stations. Therefore, the communication distance is not restricted. If criminals use networked drones to perform illegal tasks such as long-range reconnaissance, attacks, drug trafficking, and smuggling, it will cause great security risks to important targets, facilities, restricted areas, key locations and other security defense areas, seriously affecting national security and social stability.

[0052] In view of the above reasons, it is necessary to implement the control of networked drones in security defense areas such as important targets, facilities, restricted areas, and key areas. The embodiment of the present application uses edge computing technology and quantum encryption technology to achieve early warning, identification and control of networked drones.

[0053] In order to achieve the above purpose, Figure 1 As shown, the embodiment of the present application provides a networked drone control system based on quantum encryption, which is used to identify and control networked drones in a preset area, such as Figure 2 As shown, there are multiple security defense target areas in the preset area.

[0054] The networked drone control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC (MobileEdge Computing), multiple universal client devices uCPE (Universal Customer Premises Equipment) and multiple regional control centers. The mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in sequence.

[0055] The mobile edge computing device MEC and the universal client device uCPE are both set up close to the mobile communication base station, and the regional control center corresponds one-to-one to the security defense target area.

[0056] Specifically, the mobile edge computing device MEC is used to monitor and analyze the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message analysis result. If so, the networked drone warning information is generated, and the networked drone warning information is encrypted based on a preset quantum encryption algorithm and sent to the universal client device uCPE connected to the communication device;

[0057] The universal client device uCPE is used to encrypt the networked drone warning information based on a preset quantum encryption algorithm and send it to the regional control center that is connected to it;

[0058] The regional control center is used to decrypt the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates encrypted networked drone control instructions based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instructions to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instructions, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

[0059] The working principle of the networked drone control system with quantum encryption in this embodiment is as follows:

[0060] Each mobile edge computing device MEC monitors the communication messages of the mobile communication terminal connected to its corresponding mobile communication base station. When the communication message of the mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result. If it is determined to be a networked drone, the corresponding mobile edge computing device MEC generates networked drone warning information based on the message parsing result and sends it to the universal client device uCPE connected to it. The universal client device uCPE encrypts the networked drone warning information based on the preset quantum encryption algorithm and sends it to the networked drone communication terminal connected to it. The regional control center decrypts the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If it is determined that control is required, the regional control center generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE. The corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC based on the encrypted networked drone control instruction to implement control on the target networked drone according to the preset drone control measures.

[0061] To summarize, the networked drone control system with quantum encryption of this embodiment installs a mobile edge computing device MEC and a universal client device uCPE near each mobile communication base station, and sets a regional control center corresponding to each security defense target area. Each mobile edge computing device MEC monitors and parses the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and performs on-site analysis and processing on the message parsing results, thereby distributing the communication messages uniformly processed by the existing drone security defense control platform to the mobile edge computing devices MEC of each base station for processing. The mobile edge computing device MEC only needs to process the communication messages of the mobile communication base station connected to it, and the data calculation amount is reduced. Smaller, thereby effectively improving the data processing speed and realizing rapid judgment on whether the mobile communication terminal is a networked drone. When it is determined that the mobile communication terminal connected to the mobile communication base station is a networked drone, the judgment result is sent to the regional control center of the corresponding security defense target area through the universal client device uCPE, so that the illegal networked drones that cause security risks to the corresponding security defense target area are controlled through the corresponding regional control center, effectively reducing the control delay and improving the real-time nature of the control. At the same time, in the process of data transmission between each universal client device uCPE and the regional control center corresponding to each security defense target area, quantum encryption technology is used for encryption, which effectively avoids the leakage of relevant information in the security defense area and improves the security of data transmission during the control of networked drones.

[0062] Specifically, in this embodiment, each regional control center can be set up in the corresponding security defense target area. In this way, each security defense target area can control the networked drones that may pose a safety hazard to its area one by one through the regional control center in its own area, which is more targeted and has higher control efficiency and real-time performance.

[0063] It should be noted that the quantum encryption algorithm is a mature existing technology. In the embodiments of the present application, the specific algorithm of the preset quantum encryption algorithm used is not limited. The existing quantum encryption algorithm can be used and will not be elaborated here.

[0064] In one embodiment, the networked drone control system with quantum encryption also includes a command center management platform, which is connected to each regional control center in communication, wherein:

[0065] The regional control center is also used to send encrypted networked drone warning information and / or encrypted networked drone control instructions to the command center management platform, and receive encrypted data information issued by the command center management platform, and perform corresponding operations according to the encrypted data information;

[0066] The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send the corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

[0067] In this embodiment, a command center management platform is set up to summarize and analyze the networked drone warning information and encrypted networked drone control instructions in each security defense target area, so as to facilitate unified monitoring of the security status of each security defense target area, thereby enabling unified control of networked drones that pose a safety hazard to each security defense target area, and better grasp the situation of each security defense area from a global perspective.

[0068] In addition, when a regional control center fails to control the connected drones that need to be controlled in real time due to a malfunction, the command center management platform can control the connected drones that need to be controlled at a higher level, thereby better ensuring the safety of various security defense target areas.

[0069] In this embodiment, the communication data between the command center management platform and each regional control center is also encrypted using quantum encryption technology, effectively ensuring the security and reliability of information transmission.

[0070] It should be noted that the control authority of the command center management platform is higher than that of the regional control center. When the regional control center determines that the discovered networked drone should not be controlled, but the command center management platform determines through summary analysis that control is required, the command center management platform can also send control instructions to the corresponding regional control center to control the networked drone in real time through the regional control center.

[0071] It should be noted that the security defense target area in this embodiment refers to security defense areas such as important targets, facilities, restricted areas, key areas, etc. that require networked drone control, such as civil aviation airports, military restricted areas, flammable and explosive product manufacturers, etc., which are security defense areas that require drone control. The regional control centers are set up one by one in each security defense target area to implement one-to-one control of the corresponding security defense target area, and the command center management platform refers to a system platform that has unified management of each security defense target area. The system can be deployed in the highest management agency for drone control in the preset area.

[0072] In one embodiment, there are multiple drone control target areas in a preset area, each drone target control area has at least one security defense target area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area in the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

[0073] In this embodiment, a plurality of drone control target areas are divided within a preset area, and each drone control target area has at least one security defense target area, and the drone control target area has a larger range than the security defense target area. Therefore, when a networked drone is detected in a drone control target area, a networked drone early warning information is sent to the regional control center of the security defense target area in the drone control target area. On the one hand, the networked drone can be identified and controlled in advance when it enters the drone control target area but does not enter the security defense target area, so as to better ensure the real-time control and reduce safety hazards. On the other hand, when a networked drone is detected in a drone control target area, the mobile edge computing device MEC in the area sends the networked drone early warning information to the regional control centers corresponding to all the security defense target areas in the drone control target area, so that all the regional control centers in the drone control target area can control the monitored networked drones, thereby improving the real-time and reliability of drone control.

[0074] In one embodiment, when there is only one security defense target area in a drone target control area, the security defense target area can be set in the central area of ​​the drone target control area, so that the area between the boundary of the security defense target area and the boundary of the drone target control area forms a circular security buffer area. As long as a networked drone is detected in the circular security buffer area, the mobile edge computing device MEC outputs a networked drone warning signal, thereby better ensuring the safety of the security defense target area.

[0075] In one embodiment, at least one mobile edge computing device MEC is set in each drone target control area, and the universal client device uCPE is communicatively connected to the mobile edge computing device MEC in a one-to-one correspondence, and each universal client device uCPE is communicatively connected to at least one regional control center.

[0076] By setting the universal client device uCPE and the mobile edge computing device MEC in a one-to-one correspondence, the universal client device uCPE and the mobile edge computing device MEC of the same mobile communication base station can be set close to each other, reducing network wiring, reducing system complexity, and enabling the networked drone warning signal of the universal client device uCPE to be quickly transmitted to the corresponding mobile edge computing device MEC, thereby improving the speed and reliability of the transmission of the networked drone warning signal and further improving the real-time performance of networked drone management and control.

[0077] When there are multiple security defense areas adjacent to each other and all within the signal coverage of the same mobile communication base station, the regional control centers of the multiple security defense areas can be connected to a universal client device uCPE corresponding to the mobile communication base station, reducing the number of universal client devices uCPE, thereby reducing the equipment cost of the system.

[0078] In one embodiment, the drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center correspond one to one.

[0079] In this embodiment, by setting up the drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center in a one-to-one correspondence, it is convenient to better carry out targeted control of each security defense target area, thereby improving the reliability and efficiency of control.

[0080] In one embodiment, each mobile edge computing device MEC has a first networked drone database, and each regional control center has a second networked drone database.

[0081] The regional control center is also used to update the first networked drone database according to the update status of the second networked drone database.

[0082] It should be noted that in the present embodiment, by pre-setting the feature data of all networked drones in the first networked drone database of each mobile edge computing device MEC, when the mobile edge computing device MEC determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result, the message parsing result can be compared with the feature data of all networked drones pre-set in the first networked drone database, thereby quickly realizing the judgment of the networked drone.

[0083] By setting up a second networked drone database in each regional control center, the second networked drone database of the regional control center can be updated through the corresponding regional control center as needed, and the updated data can be synchronized to the first networked drone database of each mobile edge computing device MEC connected to the regional control center, thereby ensuring the accuracy of the judgment of the networked drone.

[0084] In one embodiment, the mobile edge computing device MEC and the universal client device uCPE are both installed in the machine room of the corresponding mobile communication base station.

[0085] In this embodiment, by installing both the mobile edge computing device MEC and the universal client device uCPE in the computer room of the corresponding mobile communication base station, there is no need to re-install the installation facilities of the mobile edge computing device MEC and the universal client device uCPE, thereby reducing the system cost, and ensuring the convenience and speed of communication between the mobile edge computing device MEC and the mobile communication base station, thereby improving the timeliness of communication message processing of the mobile communication base station, thereby further ensuring the real-time nature of networked drone control.

[0086] In one embodiment, Figure 3 As shown in the figure, the networked drone control system identifies and controls networked drones in the preset area according to the following process:

[0087] S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminal connected to its corresponding mobile communication base station through the software defined wide area network SD-WAN (Software Defined Wide Area Network);

[0088] S2, when the communication message of the mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result. If so, execute S3;

[0089] S3, the corresponding mobile edge computing device MEC generates networked drone warning information based on the message analysis results and sends it to the universal client device uCPE connected to it;

[0090] S4, the universal client device uCPE encrypts the networked drone warning information based on the preset quantum encryption algorithm and sends it to the regional control center connected to it;

[0091] S5, the regional control center decrypts the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If so, execute S6; specifically, when the regional control center determines whether to control the networked drone based on the decrypted networked drone warning information, it can check whether the flight mission of the networked drone in the period has been approved in the preset networked drone flight approval table. If approved, it is a legal flight and the networked drone will not be controlled. Otherwise, control measures will be taken.

[0092] S6, the regional control center generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE;

[0093] S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC connected to it based on the encrypted networked drone control instructions to implement control on the target networked drone according to the preset drone control measures.

[0094] In one embodiment, in step S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result, including:

[0095] S21, extracting a five-tuple of the communication message, wherein the five-tuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type;

[0096] S22, by looking up the table, find out whether there is an IP address that is the same as the target IP address in the IP address in the domain name table of the drone manufacturer server in the preset networked drone database. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

[0097] Specifically, in this embodiment, the domain name table (part) of the drone manufacturer server of the mainstream manufacturers of the current networked drones is shown in the following table:

[0098]

[0099]

[0100] like Figure 4 As shown in the figure, it is a system architecture diagram for the communication between the networked drone and the drone manufacturer's server. From this figure, it can be seen that the networked drone ( Figure 4 When the drone in the Figure 4 Base stations in the network) and operator core networks ( Figure 4 The core network in the drone) and the drone manufacturer's server ( Figure 4 Therefore, the communication message of the networked drone ( Figure 4The target IP address that must be carried in the network message in the network is the IP address of the networked drone manufacturer's server. Therefore, by looking up the table to find out whether there is an IP address that is the same as the target IP address in the IP address in the drone manufacturer's server domain name table in the preset networked drone database, it is possible to quickly determine whether the mobile communication terminal communicating with the mobile communication base station is a networked drone. This determination method is simple and the determination result is reliable.

[0101] In one embodiment, step S7 includes:

[0102] S71, after receiving the encrypted networked drone control instruction, the corresponding universal client device uCPE decrypts the encrypted networked drone control instruction based on a preset quantum encryption algorithm to obtain a decrypted networked drone control instruction, and sends the decrypted networked drone control instruction to the corresponding mobile edge computing device MEC.

[0103] The decrypted networked drone control instruction at least includes the source IP address and the destination IP address of the target networked drone that needs to be controlled;

[0104] S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone.

[0105] This implementation uses the mobile edge computing device MEC to block the connection link of the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone, thereby completing the complete control and blocking of the networked drone, with simple control and reliable management.

[0106] In some other embodiments, the present application may also determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone in the following manner:

[0107] 1. Analyze the uplink or downlink signaling information of the mobile communication terminal through the signaling plane of mobile cellular communication to determine whether it is a drone.

[0108] 2. Analyze the log information of the mobile communication terminal through the data plane of mobile cellular communication, and read out useful information, such as the serial number of the drone, bandwidth usage, video traffic, etc. to determine whether it is a networked drone.

[0109] 3. Through the Beacon broadcast of WiFi, the drone periodically broadcasts the call sign during flight. The SSID is the manufacturer's default, which contains the manufacturer's MAC (multiple access channel) address and the drone model, serial number and other information to determine whether it is a networked drone.

[0110] 4. Through deep packet inspection (DPI) of drone data transmission, key information can be extracted, such as IP address, target IP address, transmission protocol, port number, serial port number, etc., to determine whether it is a networked drone.

[0111] Through the above scheme, it can be seen that the quantum encryption technology and key distribution technology in the networked drone control system with quantum encryption in the embodiment of the present application implement the most stringent encryption means for the data information of the low-altitude security defense project, and encrypt the entire process of single-level or multi-level information transmission from the communication operation base station room to the control center to the command center.

[0112] Specifically, the networked drone control system with quantum encryption in the embodiment of the present application can adopt a dedicated network deployment solution, build an independent discovery and control system for key defense projects, which is beneficial to the security and confidentiality of the project, and is more flexible and has temporary task requirements. The system can be applied to deployment solutions with cities as defense areas, or to establish a grid-based defense system with telecommunications operators' communication base stations (macro), comprehensively improving the overall security and unified management and scheduling of the city.

[0113] It should be noted that the networked drone control system with quantum encryption technology of the present application can also be applied to the control of corresponding mobile terminal equipment in other related industries, such as smart networked vehicles, smart drone ships, smart robots, etc.

[0114] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0115] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0116] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, software modules executed by a processor, or a combination of the two. The software modules may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0117] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A networked drone control system with quantum encryption, characterized in that: The networked drone control system is used to identify and control networked drones in a preset area, where there are multiple security defense target areas. The networked drone control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC, multiple universal client devices uCPE and multiple regional control centers. The mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in communication in sequence. The mobile edge computing device MEC and the universal client device uCPE are both arranged close to the mobile communication base station, and the regional control center corresponds to the security defense target area one by one. in, The mobile edge computing device MEC is used to monitor and analyze the communication messages of the mobile communication terminal of the mobile communication base station connected to the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message analysis result, and if so, generate networked drone warning information and send it to the universal client device uCPE connected to the communication therewith; The universal client device uCPE is used to encrypt the networked drone warning information based on a preset quantum encryption algorithm and then send it to the regional control center connected to it; The regional control center is used to decrypt the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instruction, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

2. The networked drone control system with quantum encryption according to claim 1 is characterized in that: It also includes a command center management platform, which is connected to each of the regional control centers in communication, wherein: The regional control center is also used to send the encrypted networked drone warning information and / or the encrypted networked drone control instructions to the command center management platform, and receive the encrypted data information issued by the command center management platform, and perform corresponding operations according to the encrypted data information; The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and the encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

3. The networked drone control system with quantum encryption according to claim 1 is characterized in that: There are multiple drone control target areas in the preset area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area in the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

4. The networked drone control system with quantum encryption according to claim 3 is characterized in that: At least one mobile edge computing device MEC and one universal client device uCPE are arranged in each of the drone target prevention and control areas, and each of the universal client devices uCPE is communicatively connected to at least one of the regional control centers.

5. The networked drone control system based on quantum encryption according to claim 3 is characterized in that: The drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center correspond one to one.

6. The networked drone control system with quantum encryption according to claim 1, characterized in that: Each of the mobile edge computing devices MEC has a first networked drone database, and each of the regional control centers has a second networked drone database, The regional control center is also used to update the first networked drone database according to the update status of the second networked drone database.

7. The networked drone control system with quantum encryption according to claim 1, characterized in that: The mobile edge computing device MEC and the universal client device uCPE are both installed in the machine room of the corresponding mobile communication base station.

8. The networked drone control system with quantum encryption according to any one of claims 1 to 7, characterized in that: The networked drone control system identifies and controls the networked drones in the preset area according to the following process: S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminal connected to its corresponding mobile communication base station through the software defined wide area network SD-WAN; S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result, and if so, executes S3; S3, the corresponding mobile edge computing device MEC generates networked drone warning information according to the message parsing result and sends it to the universal client device uCPE connected to it; S4, the universal client device uCPE sends the networked drone warning information to the regional control center connected to it based on a preset quantum encryption algorithm; S5, the regional control center decrypts the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determines whether to control the networked drone according to the decrypted networked drone warning information, and if so, executes S6; S6, the regional control center generates an encrypted networked drone control instruction based on a preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE; S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC that is communicatively connected to it based on the encrypted networked drone control and management instruction, and implements control on the target networked drone according to preset drone control measures.

9. The networked drone control system with quantum encryption according to claim 8, characterized in that: In step S2, when the communication message of the mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone according to the message parsing result, including: S21, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and extracts a quintuple of the communication message, wherein the quintuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type; S22, searching the IP addresses in the domain name table of the drone manufacturer server in the preset networked drone database to see whether there is an IP address that is the same as the target IP address. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

10. The networked drone control system with quantum encryption according to claim 8, characterized in that: Step S7 includes: S71, after receiving the encrypted networked drone control instruction, the corresponding universal client device uCPE decrypts the encrypted networked drone control instruction based on a preset quantum encryption algorithm to obtain a decrypted networked drone control instruction, and sends the decrypted networked drone control instruction to the corresponding mobile edge computing device MEC, wherein the decrypted networked drone control instruction includes at least the source IP address and the destination IP address of the target networked drone to be controlled; S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone.

Images