Networked drone control system with quantum encryption

Abstract

The present application discloses a networked drone control system with quantum encryption, which is used to identify and control networked drones in a preset area. The preset area has multiple security defense target areas. The networked drone control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC, multiple universal client devices uCPE and multiple regional control centers. The mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in sequence. The mobile edge computing devices MEC and universal client devices uCPE are both set close to the mobile communication base stations. The regional control centers correspond one-to-one with the security defense target areas. The present application can use edge computing technology and quantum encryption technology to realize early warning, identification, control and data security transmission of networked drones, effectively improve the real-time performance of networked drone control in the security defense area, and better ensure the information security of the security defense area.

Description

Technical Field

[0001] The present application relates to the field of low-altitude security defense technology, and in particular to a networked drone control system with quantum encryption. Background Art

[0002] A connected drone refers to a drone that uses the 4G / 5G mobile communication network instead of the drone manufacturer's self-built communication and data links. The drone is connected to the real-time, ubiquitous, and wide-coverage 4G / 5G mobile communication network through an onboard 4G / 5G dedicated communication module with a SIM card, and then the drone manufacturer's self-developed management and operation cloud platform realizes remote beyond-visual-range flight control of the drone and real-time backhaul processing of large-bandwidth high-definition video data.

[0003] The emergence and development of networked drones not only solves the bottleneck of limited flight and control distance of traditional drones, but also solves the long-standing industry problem of slow transmission and processing speed of large amounts of high-definition video and other information data, narrow bandwidth, and inability to be transmitted and processed in real time.

[0004] In February 2022, the 4G / 5G networked drone, first introduced by Shenzhen DJI Innovations Technology Co., Ltd., a leading drone company, officially entered commercial service, achieving technological breakthroughs in ultra-long-range flight and robust anti-interference capabilities. This has enormous potential for application scenarios and practical implications across many industries.

[0005] But the two sides of things tell us that this new technology will also bring many negative problems, such as illegal long-range reconnaissance, attacks, drug trafficking, smuggling, etc., which will cause great security risks to important targets, facilities, restricted areas, key areas and other security defense areas, and will affect national security and social stability.

[0006] The existing control and management system for defending against drones usually consists of radars, spectrum detection equipment, infrared night vision optoelectronic equipment, electromagnetic suppression equipment and other detection equipment set up in various security defense areas, combined with technical means such as protocol cracking and black and white lists to form a defense system. This defense system can only partially solve the defense problem of non-networked drones. In order to completely solve the security risks brought by networked drones, only through targeted technology research and development and equipment can a comprehensive defense system be fully and effectively formed. Summary of the Invention

[0007] In order to solve at least one of the above problems, the present application provides a networked drone control system with quantum encryption, which can use edge computing technology and quantum encryption technology to realize early warning, identification and control of networked drones, thereby solving the shortcomings of existing drone defense systems.

[0008] The above-mentioned application objectives of this application are achieved through the following technical solutions:

[0009] A networked drone control system with quantum encryption is used to identify and control networked drones within a preset area, where the preset area has multiple security defense target areas.

[0010] The networked drone management and control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC, multiple universal client devices uCPE and multiple regional control centers, and the mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in communication in sequence.

[0011] The mobile edge computing device MEC and the universal client device uCPE are both set close to the mobile communication base station, and the regional control center corresponds to the security defense target area one by one.

[0012] in,

[0013] The mobile edge computing device MEC is used to monitor and parse the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message analysis result. If so, it generates networked drone warning information and sends it to the universal client device uCPE connected to it;

[0014] The universal customer premises equipment (uCPE) is configured to encrypt the networked drone warning information based on a preset quantum encryption algorithm and then send the encrypted information to a regional control center connected thereto;

[0015] The regional control center is used to decrypt the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instruction, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

[0016] Preferably, the networked drone control system with quantum encryption further includes a command center management platform, which is communicatively connected to each of the regional control centers, wherein:

[0017] The regional control center is further configured to send the encrypted networked drone warning information and / or the encrypted networked drone control instructions to the command center management platform, and receive encrypted data information issued by the command center management platform, and perform corresponding operations according to the encrypted data information;

[0018] The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and the encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

[0019] Preferably, there are multiple drone control target areas within the preset area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area within the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

[0020] Preferably, at least one mobile edge computing device MEC is provided in each of the drone target control areas, the universal client device uCPE is communicatively connected to the mobile edge computing device MEC in a one-to-one correspondence, and each of the universal client devices uCPE is communicatively connected to at least one of the regional control centers.

[0021] Preferably, the drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center correspond one to one.

[0022] Preferably, each of the mobile edge computing devices MEC has a first networked drone database, and each of the regional control centers has a second networked drone database.

[0023] The regional control center is further configured to update the first networked drone database according to an update status of the second networked drone database.

[0024] Preferably, the mobile edge computing device MEC and the universal client equipment uCPE are both installed in the machine room of the corresponding mobile communication base station.

[0025] Preferably, the networked drone management and control system identifies and controls the networked drones within the preset area according to the following process:

[0026] S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminals connected to its corresponding mobile communication base station through the software-defined wide area network SD-WAN;

[0027] S2, when monitoring the communication message of the mobile communication terminal, the corresponding mobile edge computing device MEC parses the communication message and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result. If so, execute S3;

[0028] S3, the corresponding mobile edge computing device MEC generates networked drone warning information according to the message analysis result and sends it to the universal client device uCPE connected to it;

[0029] S4, the universal customer premises equipment uCPE encrypts the networked drone warning information based on a preset quantum encryption algorithm and sends the encrypted information to the regional control center connected to the uCPE;

[0030] S5, the regional control center decrypts the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If so, execute S6;

[0031] S6, the regional control center generates an encrypted networked drone control instruction based on a preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE;

[0032] S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC connected to it based on the encrypted networked drone control instruction to implement control on the target networked drone in accordance with preset drone control measures.

[0033] Preferably, in step S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result, including:

[0034] S21, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and extracts a quintuple of the communication message, wherein the quintuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type;

[0035] S22, by looking up the table, searches for an IP address in the domain name table of the drone manufacturer server in the preset networked drone database to see whether there is an IP address that is the same as the destination IP address. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

[0036] Preferably, step S7 includes:

[0037] S71, after receiving the encrypted networked drone control instruction, the corresponding universal client device uCPE decrypts the encrypted networked drone control instruction based on a preset quantum encryption algorithm to obtain a decrypted networked drone control instruction, and sends the decrypted networked drone control instruction to the corresponding mobile edge computing device MEC, wherein the decrypted networked drone control instruction includes at least the source IP address and destination IP address of the target networked drone to be controlled;

[0038] S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone, thereby completing the complete control and blocking of the networked drone.

[0039] In summary, the present application discloses a networked drone control system with quantum encryption. By installing a mobile edge computing device MEC and a universal client device uCPE near each mobile communication base station, and setting a regional control center corresponding to each security defense target area, each mobile edge computing device MEC monitors and parses the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and performs on-site analysis and processing on the message parsing results, thereby improving the data processing volume and data processing speed. When it is determined that the mobile communication terminal connected to the mobile communication base station is a networked drone, the universal client device uCPE sends the judgment result to the regional control center of the corresponding security defense target area, so that the corresponding regional control center can control the illegal networked drones that pose a security risk to the corresponding security defense target area, effectively improving the real-time control. At the same time, during the data transmission process between each universal client device uCPE and the regional control center corresponding to each security defense target area, quantum encryption technology is used for encryption, effectively avoiding the leakage of relevant information of the security defense area, and improving the security of data transmission during the networked drone control process. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments recorded in this application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0041] Figure 1 This is a schematic diagram of the structure of a networked drone control system with quantum encryption in an embodiment of the present application;

[0042] Figure 2 A diagram showing the relationship between the preset area, security defense target area, and drone control target area in the embodiment of the present application;

[0043] Figure 3 A flowchart of a networked drone control system with quantum encryption for identifying and controlling networked drones in an embodiment of the present application;

[0044] Figure 4 A system architecture diagram for communication between connected drones and drone manufacturer servers. DETAILED DESCRIPTION

[0045] In order to help those skilled in the art better understand the technical solutions in this application, the technical solutions in the embodiments of this application will be clearly and completely described below. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making any creative efforts shall fall within the scope of protection of this application.

[0046] In the embodiments provided in this application, it should be understood that the disclosed methods and systems can be implemented in other ways. The system embodiments described below are merely illustrative. For example, the division of units and modules is merely a logical function division. In actual implementation, there may be other division methods, such as: multiple units or modules can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0047] In addition, all functional units in the embodiments of the present application may be integrated into one processor, or each unit may be a separate device, or two or more units may be integrated into one device; each functional unit in the embodiments of the present application may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0048] Those skilled in the art will understand that all or part of the steps of the following method embodiments can be implemented by program instructions and related hardware. The aforementioned program instructions can be stored in a computer-readable storage medium. When the program instructions are executed, the steps of the following method embodiments are executed; and the aforementioned storage medium includes: mobile storage devices, read-only memories (ROM), magnetic disks or optical disks, and other media that can store program codes.

[0049] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be understood to indicate or imply relative importance or implicitly specify the number of technical features indicated. Thus, a feature specified as "first" or "second" may explicitly or implicitly include one or more of such features. Throughout the description of this application, "plurality" or "several" means two or more, unless otherwise specifically defined.

[0050] Traditional low-altitude flying drones generally use WiFi and other communication methods to achieve communication between the drone equipment and the drone remote control. The communication distance is generally within 3 kilometers, which is relatively short.

[0051] However, networked drones equipped with 4G, 5G and other mobile communication modules and SIM cards can communicate between drone equipment and drone remote controls through the operator's mobile communication base stations. Therefore, the communication distance is not restricted. If criminals use networked drones to perform illegal tasks such as long-range reconnaissance, attacks, drug trafficking, and smuggling, it will cause great security risks to important targets, facilities, restricted areas, key areas and other security defense areas, seriously affecting national security and social stability.

[0052] In view of the above reasons, it is necessary to implement the control of networked drones in security defense areas such as important targets, facilities, restricted areas, and key locations. The embodiment of the present application uses edge computing technology and quantum encryption technology to achieve early warning, identification, and control of networked drones.

[0053] In order to achieve the above purpose, Figure 1 As shown, the embodiment of the present application provides a networked drone control system with quantum encryption, which is used to identify and control networked drones in a preset area, such as Figure 2 As shown, there are multiple security defense target areas in the preset area.

[0054] The networked drone control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC (MobileEdge Computing), multiple universal customer premises equipment uCPE (Universal Customer Premises Equipment) and multiple regional control centers. The mobile communication base stations, mobile edge computing devices MEC, universal customer premises equipment uCPE and regional control centers are connected in sequence.

[0055] The mobile edge computing device MEC and the universal client device uCPE are both set up close to the mobile communication base station, and the regional control center corresponds one-to-one with the security defense target area.

[0056] Specifically, the mobile edge computing device MEC is used to monitor and analyze the communication messages of the mobile communication terminal connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message analysis result. If so, it generates networked drone warning information, and encrypts the networked drone warning information based on a preset quantum encryption algorithm and sends it to the universal client device uCPE connected to it;

[0057] The universal customer premises equipment (uCPE) is used to encrypt the networked drone warning information based on a preset quantum encryption algorithm and send it to the regional control center connected to it;

[0058] The regional control center is used to decrypt the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instruction, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

[0059] The working principle of the networked drone control system with quantum encryption in this embodiment is as follows:

[0060] Each mobile edge computing device MEC monitors the communication messages of the mobile communication terminals connected to its corresponding mobile communication base station. When the communication messages of the mobile communication terminals are monitored, the corresponding mobile edge computing device MEC parses the communication messages and determines whether the mobile communication terminals connected to the mobile communication base station are networked drones based on the message parsing results. If it is determined to be a networked drone, the corresponding mobile edge computing device MEC generates networked drone warning information based on the message parsing results and sends it to the universal client device uCPE connected to it. The universal client device uCPE encrypts the networked drone warning information based on the preset quantum encryption algorithm and sends it to the uCPE connected to it. The regional control center decrypts the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If it is determined that control is required, the regional control center generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE. The corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC based on the encrypted networked drone control instruction to control the target networked drone according to the preset drone control measures.

[0061] In summary, the networked drone control system with quantum encryption of this embodiment installs mobile edge computing devices MEC and universal client devices uCPE near each mobile communication base station, and sets up regional control centers corresponding to each security defense target area. Each mobile edge computing device MEC monitors and parses the communication messages of the mobile communication terminals connected to the mobile communication base station corresponding to the mobile edge computing device MEC, and performs on-site analysis and processing on the message parsing results, thereby distributing the communication messages uniformly processed by the existing drone security defense control platform to the mobile edge computing devices MEC of each base station for processing. The mobile edge computing device MEC only needs to process the communication messages of the mobile communication base station connected to it, and the amount of data calculation is reduced. Smaller, thereby effectively improving the data processing speed and realizing rapid judgment on whether the mobile communication terminal is a networked drone. When it is determined that the mobile communication terminal connected to the mobile communication base station is a networked drone, the judgment result is sent to the regional control center of the corresponding security defense target area through the universal client device uCPE, so that the illegal networked drones that cause security risks to the corresponding security defense target area can be controlled through the corresponding regional control center, effectively reducing the control delay and improving the real-time nature of the control. At the same time, in the process of data transmission between each universal client device uCPE and the regional control center corresponding to each security defense target area, quantum encryption technology is used for encryption, which effectively avoids the leakage of relevant information of the security defense area and improves the security of data transmission during the control of networked drones.

[0062] Specifically, in this embodiment, each regional control center can be set up in the corresponding security defense target area. In this way, each security defense target area can control the networked drones that may pose a safety hazard to its area through the regional control center in its own area, which is more targeted and has higher control efficiency and real-time performance.

[0063] It should be noted that the quantum encryption algorithm is a mature existing technology. In the embodiments of this application, the specific algorithm of the preset quantum encryption algorithm used is not limited. The existing quantum encryption algorithm can be used and will not be described in detail here.

[0064] In one embodiment, the networked drone control system with quantum encryption also includes a command center management platform, which is connected to each regional control center in communication.

[0065] The regional control center is also used to send encrypted networked drone warning information and / or encrypted networked drone control instructions to the command center management platform, and receive encrypted data information issued by the command center management platform, and perform corresponding operations based on the encrypted data information;

[0066] The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send the corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

[0067] In this embodiment, a command center management platform is set up to summarize and analyze the networked drone warning information and encrypted networked drone control instructions of each security defense target area, so as to facilitate unified monitoring of the security status of each security defense target area, thereby enabling unified control of networked drones that pose safety hazards to each security defense target area, and better grasp the situation of each security defense area from a global perspective.

[0068] In addition, when a regional control center fails to control the connected drones that need to be controlled in real time due to a malfunction, the command center management platform can control the connected drones that need to be controlled at a higher level of control, thereby better ensuring the safety of various security defense target areas.

[0069] In this embodiment, the communication data between the command center management platform and each regional control center is also encrypted using quantum encryption technology, effectively ensuring the security and reliability of information transmission.

[0070] It should be noted that the control authority of the command center management platform is higher than that of the regional control center. When the regional control center determines that the discovered networked drone should not be controlled, but the command center management platform determines through summary analysis that control is required, the command center management platform can also send control instructions to the corresponding regional control center to control the networked drone in real time through the regional control center.

[0071] It should be noted that the security defense target areas in this embodiment refer to security defense areas such as important targets, facilities, restricted areas, key areas, etc. that require networked drone control, such as civil aviation airports, military restricted areas, flammable and explosive product manufacturers, etc., which are security defense areas that require drone control. The regional control centers are set up one by one in each security defense target area to implement one-to-one control of the corresponding security defense target area, and the command center management platform refers to a system platform with unified management of each security defense target area. The system can be deployed in the highest management agency for drone control in the preset area.

[0072] In one embodiment, there are multiple drone control target areas in a preset area, each drone target control area has at least one security defense target area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area in the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

[0073] In this embodiment, a plurality of drone control target areas are divided within a preset area, and each drone control target area has at least one security defense target area, and the drone control target area has a larger range than the security defense target area. Therefore, when a networked drone is detected in a drone control target area, networked drone warning information is sent to the regional control center of the security defense target area within the drone control target area. On the one hand, networked drones can be identified and controlled in advance when they enter the drone control target area but do not enter the security defense target area, thereby better ensuring the real-time control and reducing safety hazards. On the other hand, when a networked drone is detected in a drone control target area, the mobile edge computing device MEC in the area sends the networked drone warning information to the regional control centers corresponding to all security defense target areas within the drone control target area, so that all regional control centers within the drone control target area can control the detected networked drones, thereby improving the real-time and reliability of drone control.

[0074] In one embodiment, when there is only one security defense target area within a drone target control area, the security defense target area can be set in the central area of ​​the drone target control area, so that the area between the boundary of the security defense target area and the boundary of the drone target control area forms a circular safety buffer area. As long as a networked drone is detected in the circular safety buffer area, the mobile edge computing device MEC outputs a networked drone warning signal, thereby better ensuring the safety of the security defense target area.

[0075] In one embodiment, at least one mobile edge computing device MEC is set in each drone target control area, and the universal client device uCPE is communicatively connected to the mobile edge computing device MEC in a one-to-one correspondence, and each universal client device uCPE is communicatively connected to at least one regional control center.

[0076] By setting the universal client device uCPE and the mobile edge computing device MEC in a one-to-one correspondence, the universal client device uCPE and the mobile edge computing device MEC of the same mobile communication base station can be set close to each other, reducing network wiring and system complexity. It also enables the networked drone warning signal of the universal client device uCPE to be quickly transmitted to the corresponding mobile edge computing device MEC, thereby improving the speed and reliability of the networked drone warning signal transmission and further improving the real-time performance of networked drone management and control.

[0077] When there are multiple security defense areas close to each other and are all within the signal coverage range of the same mobile communication base station, the regional control centers of the multiple security defense areas can be connected to a universal client device uCPE corresponding to the mobile communication base station, reducing the number of universal client devices uCPE, thereby reducing the equipment cost of the system.

[0078] In one embodiment, there is a one-to-one correspondence between the drone target control area, the security defense target area, the mobile edge computing device MEC, and the regional control center.

[0079] In this embodiment, by setting up the drone target control area, security defense target area, mobile edge computing device MEC and regional control center in a one-to-one correspondence, it is convenient to better carry out targeted control of each security defense target area, thereby improving the reliability and efficiency of control.

[0080] In one embodiment, each mobile edge computing device MEC has a first networked drone database, and each regional control center has a second networked drone database.

[0081] The regional control center is also used to update the first networked drone database based on the update status of the second networked drone database.

[0082] It should be noted that in this embodiment, by pre-setting the feature data of all networked drones in the first networked drone database of each mobile edge computing device MEC, when the mobile edge computing device MEC determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result, the message parsing result can be compared with the feature data of all networked drones pre-set in the first networked drone database, thereby quickly realizing the judgment of the networked drone.

[0083] By setting up a second networked drone database in each regional control center, the second networked drone database of the regional control center can be updated through the corresponding regional control center as needed, and the updated data can be synchronized to the first networked drone database of each mobile edge computing device MEC connected to the regional control center, thereby ensuring the accuracy of the judgment of the networked drone.

[0084] In one embodiment, the mobile edge computing device MEC and the universal customer premises equipment uCPE are both installed in the machine room of the corresponding mobile communication base station.

[0085] In this embodiment, by installing both the mobile edge computing device MEC and the universal client device uCPE in the machine room of the corresponding mobile communication base station, there is no need to re-erect the installation facilities for the mobile edge computing device MEC and the universal client device uCPE, thereby reducing the system cost, and ensuring the convenience and speed of communication between the mobile edge computing device MEC and the mobile communication base station, thereby improving the timeliness of the communication message processing of the mobile communication base station, and further ensuring the real-time nature of the networked drone control.

[0086] In one embodiment, Figure 3 As shown in the figure, the networked drone control system identifies and controls networked drones in a preset area according to the following process:

[0087] S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminals connected to its corresponding mobile communication base station through the software defined wide area network SD-WAN (Software Defined Wide Area Network);

[0088] S2: When a communication message from a mobile communication terminal is detected, the corresponding mobile edge computing device MEC parses the communication message and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result. If so, S3 is executed.

[0089] S3, the corresponding mobile edge computing device MEC generates networked drone warning information based on the message analysis results and sends it to the universal client device uCPE connected to it;

[0090] S4: The universal customer premises equipment (uCPE) encrypts the networked drone warning information based on a preset quantum encryption algorithm and sends it to the regional control center to which it is communicating.

[0091] S5, the regional control center decrypts the encrypted networked drone warning information based on the preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If so, execute S6; specifically, when the regional control center determines whether to control the networked drone based on the decrypted networked drone warning information, it can check whether the flight mission of the networked drone in the period has been approved in the preset networked drone flight approval table. If approved, it is a legal flight and the networked drone will not be controlled. Otherwise, control measures will be taken.

[0092] S6: The regional control center generates encrypted networked drone control instructions based on the preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instructions to the corresponding universal client device uCPE;

[0093] S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC connected to it based on the encrypted networked drone control instructions to implement control on the target networked drone in accordance with the preset drone control measures.

[0094] In one embodiment, in step S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result, including:

[0095] S21, extracting a five-tuple of the communication message, where the five-tuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type;

[0096] S22, by looking up the table, find out whether there is an IP address that is the same as the destination IP address in the IP address in the drone manufacturer server domain name table in the preset networked drone database. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

[0097] Specifically, in this embodiment, the domain name table (part) of the drone manufacturer server of the current mainstream manufacturers of networked drones is shown in the following table:

[0098]

[0099]

[0100] like Figure 4 As shown in the figure, it is a system architecture diagram for the communication between the networked drone and the drone manufacturer's server. From this figure, we can see that the networked drone ( Figure 4 When the drone in the Figure 4 Base stations in the network) and operator core networks ( Figure 4 The core network in the UAV) and the drone manufacturer's server ( Figure 4 Therefore, the communication message of the networked drone ( Figure 4The destination IP address that must be carried in the network message in the network packet is the IP address of the networked drone manufacturer's server. Therefore, by looking up the IP addresses in the drone manufacturer's server domain name table in the preset networked drone database to find out whether there is an IP address that is the same as the destination IP address, it is possible to quickly determine whether the mobile communication terminal communicating with the mobile communication base station is a networked drone. This determination method is simple and the determination result is reliable.

[0101] In one embodiment, step S7 includes:

[0102] S71, after receiving the encrypted networked drone control command, the corresponding universal client device uCPE decrypts the encrypted networked drone control command based on a preset quantum encryption algorithm to obtain a decrypted networked drone control command, and sends the decrypted networked drone control command to the corresponding mobile edge computing device MEC.

[0103] The decrypted networked drone control command includes at least the source IP address and destination IP address of the target networked drone that needs to be controlled;

[0104] S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone.

[0105] This implementation uses the mobile edge computing device MEC to block the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the target networked drone's onboard 4G / 5G communication module, thereby completing the complete control and blocking of the networked drone, with simple control and reliable management.

[0106] In some other embodiments, the present application may also determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone by the following methods:

[0107] 1. Analyze the uplink or downlink signaling information of the mobile communication terminal through the signaling plane of mobile cellular communication to determine whether it is a drone.

[0108] 2. Analyze the log information of the mobile communication terminal through the data plane of mobile cellular communication, read out useful information, such as the serial number of the drone, bandwidth usage, video traffic, etc., to determine whether it is a networked drone.

[0109] 3. Through WiFi Beacon broadcast, the drone periodically broadcasts its call sign during flight. The SSID is the manufacturer's default and contains the manufacturer's MAC (Multiple Access Channel) address, drone model, serial number and other information to determine whether it is a networked drone.

[0110] 4. By performing deep packet inspection (DPI) on drone data transmission, key information can be extracted, such as IP address, destination IP address, transmission protocol, port number, serial port number, etc. to determine whether it is a networked drone.

[0111] Through the above scheme, it can be seen that the quantum encryption technology and key distribution technology in the networked drone control system with quantum encryption in the embodiment of the present application implement the most stringent encryption means for the data information of low-altitude security defense projects, and encrypt the entire process of single-level or multi-level information transmission from the communication operation base station room to the control center to the command center.

[0112] Specifically, the quantum-encrypted networked drone control system of the present application embodiment can adopt a dedicated network deployment solution to build an independent discovery and control system for key defense projects, which is beneficial to the security and confidentiality of the project and is more flexible and can meet temporary mission requirements. The system can be applied to deployment solutions with urban defense areas or to establish a grid-based defense system with telecommunications operators' communication base stations (macro), comprehensively improving the overall security of the city and unified management and scheduling.

[0113] It should be noted that the networked drone control system with quantum encryption technology of this application can also be applied to other related industries to control corresponding mobile terminal equipment, such as smart networked vehicles, smart drone ships, smart robots, etc.

[0114] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Reference can be made to the common and similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple, and the relevant parts can be referred to the method description.

[0115] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0116] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, software modules executed by a processor, or a combination of the two. The software modules may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the art.

[0117] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present application. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application is not limited to the embodiments shown herein, but is intended to conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A networked drone control system with quantum encryption, characterized by: The networked drone control system is used to identify and control networked drones within a preset area, where there are multiple security defense target areas. The networked drone management and control system includes multiple mobile communication base stations, multiple mobile edge computing devices MEC, multiple universal client devices uCPE and multiple regional control centers, and the mobile communication base stations, mobile edge computing devices MEC, universal client devices uCPE and regional control centers are connected in communication in sequence. The mobile edge computing device MEC and the universal client device uCPE are both set close to the mobile communication base station, and the regional control center corresponds to the security defense target area one by one. in, The mobile edge computing device MEC is used to monitor and parse the communication messages of the mobile communication terminal connected to the mobile communication base station of the mobile edge computing device MEC, and determine whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message analysis result. If so, it generates networked drone warning information and sends it to the universal client device uCPE connected to the communication device; The universal customer premises equipment (uCPE) is used to encrypt the networked drone warning information based on a preset quantum encryption algorithm and then send it to the regional control center connected to it; The regional control center is used to decrypt the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determine whether to control the networked drone based on the decrypted networked drone warning information. If so, it generates an encrypted networked drone control instruction based on the preset quantum encryption algorithm, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE, so that after receiving the encrypted networked drone control instruction, the universal client device uCPE controls the mobile edge computing device MEC to control the networked drone according to the preset drone control measures.

2. The networked drone control system with quantum encryption according to claim 1 is characterized in that: It also includes a command center management platform, which is connected to each of the regional control centers in communication, wherein: The regional control center is further configured to send the encrypted networked drone warning information and / or the encrypted networked drone control instructions to the command center management platform, and receive encrypted data information issued by the command center management platform, and perform corresponding operations according to the encrypted data information; The command center management platform is used to decrypt and summarize and analyze the encrypted networked drone warning information and the encrypted networked drone control instructions based on a preset quantum encryption algorithm, and to send corresponding encrypted data information to the corresponding regional control center based on the summary and analysis results.

3. The networked drone control system with quantum encryption according to claim 1 is characterized in that: There are multiple drone control target areas in the preset area, the area of ​​the drone target control area is larger than the area of ​​each security defense target area in the area, and each drone target control area is within the signal coverage range of the mobile communication base station corresponding to the mobile edge computing device MEC.

4. The networked drone control system with quantum encryption according to claim 3 is characterized in that: At least one mobile edge computing device MEC and a universal client device uCPE are provided in each of the drone target control areas, and each of the universal client devices uCPE is communicatively connected to at least one of the regional control centers.

5. The networked drone control system with quantum encryption according to claim 3 is characterized in that: The drone target control area, the security defense target area, the mobile edge computing device MEC and the regional control center correspond one to one.

6. The networked drone control system with quantum encryption according to claim 1, characterized in that: Each of the mobile edge computing devices MEC has a first networked drone database, and each of the regional control centers has a second networked drone database. The regional control center is further configured to update the first networked drone database according to an update status of the second networked drone database.

7. The networked drone control system with quantum encryption according to claim 1, characterized in that: The mobile edge computing device MEC and the universal client equipment uCPE are both installed in the machine room of the corresponding mobile communication base station.

8. The networked drone control system with quantum encryption according to any one of claims 1 to 7, characterized in that: The networked drone control system identifies and controls the networked drones within the preset area according to the following process: S1, each mobile edge computing device MEC monitors the communication messages of the mobile communication terminals connected to its corresponding mobile communication base station through the software-defined wide area network SD-WAN; S2, when monitoring the communication message of the mobile communication terminal, the corresponding mobile edge computing device MEC parses the communication message and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result. If so, execute S3; S3, the corresponding mobile edge computing device MEC generates networked drone warning information according to the message analysis result and sends it to the universal client device uCPE connected to it; S4, the universal customer premises equipment uCPE sends the networked drone warning information to the regional control center connected to it based on a preset quantum encryption algorithm; S5, the regional control center decrypts the encrypted networked drone warning information based on a preset quantum encryption algorithm, and determines whether to control the networked drone based on the decrypted networked drone warning information. If so, execute S6; S6, the regional control center generates an encrypted networked drone control instruction based on a preset quantum encryption algorithm and the decrypted networked drone warning information, and sends the encrypted networked drone control instruction to the corresponding universal client device uCPE; S7, the corresponding universal client device uCPE controls the corresponding mobile edge computing device MEC connected to it based on the encrypted networked drone control instruction to implement control on the target networked drone in accordance with preset drone control measures.

9. The networked drone control system with quantum encryption according to claim 8, characterized in that: In step S2, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message, and determines whether the mobile communication terminal connected to the mobile communication base station is a networked drone based on the message parsing result, including: S21, when a communication message of a mobile communication terminal is monitored, the corresponding mobile edge computing device MEC parses the communication message and extracts a quintuple of the communication message, wherein the quintuple includes a source IP address, a source port, a destination IP address, a destination port, and a protocol type; S22, by looking up the table, searches for an IP address in the domain name table of the drone manufacturer server in the preset networked drone database to see whether there is an IP address that is the same as the destination IP address. If so, it is determined that the mobile communication terminal corresponding to the communication message is a networked drone.

10. The networked drone control system with quantum encryption according to claim 8, characterized in that: Step S7 includes: S71, after receiving the encrypted networked drone control instruction, the corresponding universal client device uCPE decrypts the encrypted networked drone control instruction based on a preset quantum encryption algorithm to obtain a decrypted networked drone control instruction, and sends the decrypted networked drone control instruction to the corresponding mobile edge computing device MEC, wherein the decrypted networked drone control instruction includes at least the source IP address and destination IP address of the target networked drone to be controlled; S72, the corresponding mobile edge computing device MEC blocks the connection link between the source IP address and the destination IP address of the target networked drone to shut down the communication function of the onboard 4G / 5G communication module of the target networked drone.

Images