Unmanned aerial vehicle and unmanned aerial vehicle encryption communication method
By integrating hardware encryption units into the drone, the security risks of sensitive data leakage during the drone's work are solved, the encryption processing and secure transmission of sensitive data are realized, and data security is improved.
Patent Information
- Application Number
- CN202411953119.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-27
- Publication Date
- 2025-04-18
AI Technical Summary
During the operation, drones involve sensitive data, such as coordinates, images, cruise routes, cruise time, etc. If sensitive data is leaked, it may endanger data security and create safety hazards.
Design a drone, including flight control unit, hardware encryption unit and wireless communication unit. The flight control unit is used to generate sensitive data, the hardware encryption unit is used to receive and encrypt these data, and the wireless communication unit is used to send the encrypted data. The hardware encryption unit includes a true random number generator, a pseudo-random number generator, a key management module and an encryption processing unit. It processes sensitive data through an encryption algorithm to generate an encrypted data file.
By setting up a hardware encryption unit in the drone, we ensure that sensitive data is encrypted before transmission, thereby avoiding data leakage and improving data security during drone operation.
Smart Images

Figure CN119853985A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data security technology, and in particular to a drone and a drone encryption communication method. Background Art
[0002] Unmanned Aerial Vehicle (UAV) is an aircraft that does not require a pilot on board and can operate through remote control or autonomous flight systems. With the development of drone technology, drones have gradually been applied to various industries, improving the work efficiency and production level of the industry. However, in some special scenarios, such as application scenarios involving regional geographic information, drones may involve sensitive data during operation, such as coordinates, images, cruise routes, cruise time, etc. If sensitive data is leaked, it may endanger data security and create security risks.
[0003] Therefore, there is an urgent need for a solution that can ensure the data security of drones during operation. Summary of the invention
[0004] In view of this, an object of the present invention is to provide a drone and a drone encryption communication method to solve the problem of low data security of drones during work.
[0005] In a first aspect, the present invention provides a drone, the drone comprising a flight control unit, a hardware encryption unit, and a wireless communication unit;
[0006] The flight control unit is used to perform flight control on the UAV;
[0007] The hardware encryption unit is used to receive the sensitive data generated by the flight control unit and encrypt the sensitive data;
[0008] The wireless communication unit is used to send the data encrypted by the hardware encryption unit.
[0009] In an optional implementation, the hardware encryption unit includes a true random number generator, a pseudo-random number generator, a key management module, and an encryption processing unit;
[0010] The true random number generator and the pseudo random number generator are used to collaboratively generate a random number sequence and correspondingly generate a data key;
[0011] The key management module is used to store the data key;
[0012] The encryption processing unit generates an encrypted data file according to the data key and the sensitive data.
[0013] In an optional implementation, the hardware encryption unit further includes an MCU coprocessor; the MCU coprocessor is used to control the true random number generator and the pseudo random number generator to work in coordination.
[0014] In an optional implementation, the hardware encryption unit further includes a bridge chip, a timer, and a watchdog;
[0015] The true random number generator, pseudo random number generator, timer and watchdog are respectively connected to the bridge chip through an APB bus; the bridge chip is communicatively connected with the MCU coprocessor.
[0016] In an optional implementation, the hardware encryption unit further includes an AHB bus;
[0017] The symmetric encryption engine and the asymmetric encryption engine are connected to the bridge chip through the AHB bus.
[0018] In a second aspect, the present invention provides a method for encrypted communication of a drone, the method being applied to the drone as described in the first aspect or any corresponding embodiment thereof, the method comprising:
[0019] When the flight control unit generates sensitive data, the sensitive data is transmitted to the hardware encryption unit;
[0020] Generate a data key through a hardware encryption unit, and process the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file;
[0021] The encrypted data file is sent to a corresponding server through the wireless communication unit.
[0022] In a third aspect, the present invention provides a drone encryption communication device, the device being applied to the drone as described in the first aspect or any corresponding embodiment thereof, the device comprising:
[0023] A data transmission module, used for transmitting sensitive data to the hardware encryption unit after the flight control unit generates the sensitive data;
[0024] An encryption module, used to generate a data key through a hardware encryption unit, and process the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file;
[0025] The sending module is used to send the encrypted data file to the corresponding server through the wireless communication unit.
[0026] In a fourth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the drone encryption communication method of the above-mentioned second aspect or any corresponding embodiment thereof by executing the computer instructions.
[0027] In a fifth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the drone encryption communication method of the above-mentioned second aspect or any corresponding embodiment thereof.
[0028] In a sixth aspect, the present invention provides a computer program product, comprising computer instructions, which are used to enable a computer to execute the drone encryption communication method of the above-mentioned second aspect or any corresponding embodiment thereof.
[0029] The technical solution provided by the present invention may include the following beneficial effects:
[0030] The drone provided by the present invention includes a flight control unit, a hardware encryption unit and a wireless communication unit. The flight control unit is used to control the flight of the drone. The hardware encryption unit is used to receive sensitive data generated by the flight control unit and encrypt the sensitive data. The wireless communication unit is used to send the data encrypted by the hardware encryption unit. The above scheme, by setting the hardware encryption unit, encrypts the sensitive data after the flight control unit generates the sensitive data, and then sends the encrypted data through the wireless communication unit, thereby avoiding the leakage of sensitive data generated during the operation of the drone and improving the data security during the operation of the drone. BRIEF DESCRIPTION OF THE DRAWINGS
[0031] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0032] Figure 1 is a schematic diagram of the hardware mainboard structure of a drone according to an embodiment of the present invention;
[0033] Figure 2 is a schematic diagram of the structure of a hardware encryption unit according to an embodiment of the present invention;
[0034] Figure 3 is a circuit diagram of a hardware encryption unit according to an embodiment of the present invention;
[0035] Figure 4is a schematic flow chart of a method for encrypted communication of a drone according to an embodiment of the present invention;
[0036] Figure 5 is a flow chart of another UAV encryption communication method according to an embodiment of the present invention;
[0037] Figure 6 is a flow chart of another method for encrypted communication of a drone according to an embodiment of the present invention;
[0038] Figure 7 is a flow chart of another UAV encryption communication method according to an embodiment of the present invention;
[0039] Figure 8 is a structural block diagram of a drone encryption communication device according to an embodiment of the present invention;
[0040] Fig. 9 is a structural block diagram of another UAV encryption communication device according to an embodiment of the present invention;
[0041] Fig.10 is a structural block diagram of another UAV encryption communication device according to an embodiment of the present invention;
[0042] Fig.11 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION
[0043] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.
[0044] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.
[0045] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
[0046] Unmanned Aerial Vehicle (UAV) is an aircraft that does not require a pilot on board and can operate through remote control or autonomous flight systems. With the development of drone technology, drones have gradually been applied to various industries, improving the work efficiency and production level of the industry. However, in some special scenarios, such as application scenarios involving regional geographic information, drones may involve sensitive data during operation, such as coordinates, images, cruise routes, cruise time, etc. If sensitive data is leaked, it may endanger data security and create security risks.
[0047] Therefore, an embodiment of the present invention provides a drone, which achieves the effect of ensuring the data security of the drone by setting a hardware encryption unit.
[0048] In this embodiment, a drone is provided. Figure 1 is a schematic diagram of the hardware mainboard structure of a drone according to an embodiment of the present invention. Figure 1 As shown, the UAV includes a flight control unit, a hardware encryption unit and a wireless communication unit.
[0049] The flight control unit (Flight Control System) is used to control the flight of the drone to ensure the stability and safety of the drone's working process. The drone also includes a data acquisition unit for collecting external data and transmitting it to the flight control unit. When the drone performs a work task, the flight control unit can collect data such as the attitude, position and speed of the drone through sensors in the data acquisition unit, such as gyroscopes, accelerometers, magnetometers, barometers, GPS, etc. The data acquisition unit can also include cameras, infrared sensors, laser radars, etc. mounted on the drone to obtain images and video data of the target area of the work task. These data may be the target data required for the drone to perform the work task, and need to be fed back to the external system to which the drone belongs, such as a ground control station, a big data platform or a database, etc. However, these data may contain sensitive data, and if the sensitive data is leaked, it will cause harm. Therefore, the drone can send the collected sensitive data to the hardware encryption unit through the flight control unit.
[0050] The hardware encryption unit is used to receive the sensitive data generated by the flight control unit and encrypt the sensitive data. The hardware encryption unit includes an encryption algorithm with data encryption function, which can encrypt the received sensitive data according to a preset encryption method to generate encrypted data. The encryption method can be set according to actual needs, such as using symmetric encryption, asymmetric encryption, etc.
[0051] The wireless communication unit is used to send the data encrypted by the hardware encryption unit. After the hardware encryption unit encrypts the sensitive data, the generated encrypted data can be sent to the external system through the wireless communication unit to complete the work task. The wireless communication unit can also receive instructions from the external system and forward them to the flight control unit.
[0052] The UAV also includes a power unit, which includes a plurality of motors and an electronic speed regulator for controlling the speed of the motors. The power unit is used to provide the UAV with thrust and power required for flight. The electronic speed regulator in the power unit is connected to the flight control unit in communication. The electronic speed regulator can report the power data of the UAV to the flight control unit. The flight control unit can issue a power adjustment instruction (for example, a pulse width modulation signal) to the electronic speed regulator according to the power data and the current target power. The electronic speed regulator can adjust the speed of each motor according to the power adjustment instruction, thereby controlling the flight state of the UAV.
[0053] The drone also includes a battery pack for supplying power to a power unit, a flight control unit, and a hardware encryption unit respectively.
[0054] Figure 2 Schematic diagram of the structure of the hardware encryption unit according to an embodiment of the present invention. Figure 2 As shown, in an optional implementation, the hardware encryption unit includes a true random number generator, a pseudo-random number generator, a key management module, and an encryption processing unit.
[0055] The true random number generator (TRNG) can generate completely unpredictable random numbers based on essentially random physical processes, and the pseudo-random number generator (PRNG) can generate random numbers that appear random but are actually generated by a deterministic algorithm. The true random number generator and the pseudo-random number generator are used to collaboratively generate random number sequences and generate data keys accordingly. The types of the true random number generator and the pseudo-random number generator can be selected according to actual needs. For example, the true random number generator can be a thermal noise generator, a photoelectric generator, a quantum generator, an atmospheric noise generator, etc. The pseudo-random number generator can choose to generate pseudo-random numbers through algorithms such as the linear congruential algorithm, the middle square algorithm, or the Mersenne rotation algorithm.
[0056] The key management module is used to store the data key and provide the data key when encryption is required. When the data key needs to be updated, the key management module can also automatically update the data key.
[0057] The encryption processing unit generates an encrypted data file based on the data key and the sensitive data. When encryption is required, the flight control unit sends the sensitive data (original sensitive data) to the encryption processing unit, and the encryption processing unit sends an instruction to call the data key to the key management module. After receiving the instruction to call the data key, the key management module outputs the data key to the encryption processing unit. The encryption processing unit encrypts the sensitive data using the data key to generate an encrypted data file, and sends the encrypted data file to the flight control unit. The encrypted data file contains the data key ciphertext and the encrypted sensitive data (corresponding to Figure 2 confidential data in the
[0058] In an optional embodiment, the hardware encryption unit also includes an MCU (Microcontroller Unit) coprocessor. The MCU coprocessor is used to control the true random number generator and the pseudo-random number generator to work together. The MCU coprocessor can control the true random number generator and the pseudo-random number generator to collaborate to generate a random number sequence, and process the random number sequence through a key generation algorithm (such as a symmetric encryption algorithm and an asymmetric encryption algorithm) to generate a data key, which is sent to a key management module for storage. The hardware encryption unit also includes a timer and a dynamic memory, the timer is used to assist the MCU coprocessor in controlling the true random number generator and the pseudo-random number generator to work together, and the dynamic memory is used to provide storage support in the process of generating data keys.
[0059] In an optional implementation, the hardware encryption unit also includes a bridge chip, a timer, and a watchdog. Figure 3 is a circuit diagram of a hardware encryption unit according to an embodiment of the present invention. Figure 3As shown, the true random number generator, pseudo-random number generator, timer, and watchdog timer are respectively connected to the bridge chip Bridge through the APB (Advanced Peripheral Bus, a low-power interface protocol) bus, and the bridge chip Bridge is communicated with the MCU coprocessor. The dynamic memory includes ROM (Read-Only Memory), RAM (Random Access Memory) and flash memory FLASH. The MCU coprocessor is connected to ROM, RAM and flash memory FLASH respectively. ROM is used to store information such as firmware, RAM is used to provide dynamic cache support, and flash memory is used to provide functions such as data key storage.
[0060] In an optional implementation, the hardware encryption unit further includes an AHB (Advanced High Performance Bus, used for connection between high-performance modules) bus, and the encryption engine is connected to the bridge chip via the AHB bus. Specifically, the encryption engine includes a symmetric encryption engine and an asymmetric encryption engine, and the symmetric encryption engine and the asymmetric encryption engine are connected to the bridge chip via the AHB bus.
[0061] The drone provided in this embodiment includes a flight control unit, a hardware encryption unit and a wireless communication unit. The flight control unit is used to control the flight of the drone. The hardware encryption unit is used to receive sensitive data generated by the flight control unit and encrypt the sensitive data. The wireless communication unit is used to send the data encrypted by the hardware encryption unit. The above scheme, by setting a hardware encryption unit, encrypts the sensitive data after the flight control unit generates sensitive data, and then sends the encrypted data through the wireless communication unit, thereby avoiding the leakage of sensitive data generated during the operation of the drone and improving the data security during the operation of the drone.
[0062] According to an embodiment of the present invention, an embodiment of a method for encrypted communication of a drone is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in an order different from that shown here.
[0063] In this embodiment, a method for encrypted communication of a drone is provided. Figure 1 The drone in the illustrated embodiment performs, Figure 4 is a flow chart of a method for encrypted communication of a drone according to an embodiment of the present invention. Figure 4 As shown, the process includes the following steps:
[0064] Step S401, after the flight control unit generates sensitive data, the sensitive data is transmitted to the hardware encryption unit.
[0065] The flight control unit in the drone can collect external data required to perform work tasks through the drone's data acquisition unit. These external data may contain sensitive data. Therefore, after the sensitive data is generated in the flight control unit, the sensitive data is transmitted to the hardware encryption unit.
[0066] Step S402, generating a data key through a hardware encryption unit, and processing the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file.
[0067] The hardware encryption unit includes components and algorithms with key generation functions, and can generate data keys through a preset key generation method. The hardware encryption unit also includes an encryption algorithm with data encryption function, which can generate an encrypted data file based on the data key and sensitive data, and the encrypted data file contains data key information and encrypted sensitive data. The drone generates a data key through the components and algorithms in the hardware encryption unit, and processes the data key and sensitive data based on the encryption algorithm through the hardware encryption unit to generate an encrypted data file.
[0068] In an optional implementation, the hardware encryption unit includes a true random number generator, a pseudo-random number generator, a key management module, and an encryption processing unit. The true random number generator and the pseudo-random number generator are used to collaboratively generate a random number sequence and correspondingly generate a data key; the key management module is used to store the data key; and the encryption processing unit generates an encrypted data file based on the data key and the sensitive data.
[0069] In an optional embodiment, the hardware encryption unit also includes an MCU coprocessor, which is used to control the true random number generator and the pseudo-random number generator to work together to generate a random number sequence, and process the random number sequence through a key generation algorithm to generate a data key, which is sent to the key management module for storage.
[0070] In an optional implementation, the hardware encryption unit further includes a bridge chip, a timer and a watchdog, and the true random number generator, the pseudo-random number generator, the timer and the watchdog are respectively connected to the bridge chip via an APB bus. The bridge chip is communicatively connected to the MCU coprocessor.
[0071] In an optional implementation, the hardware encryption unit further includes an AHB bus, and the symmetric encryption engine and the asymmetric encryption engine are connected to the bridge chip via the AHB bus.
[0072] Step S403: sending the encrypted data file to the corresponding server via the wireless communication unit.
[0073] After obtaining the encrypted data file, the drone sends the encrypted data file to an external system, such as a corresponding server, through a wireless communication unit to complete the work task.
[0074] The drone encryption communication method provided in this embodiment is applied to the above-mentioned drone, which includes a flight control unit, a hardware encryption unit and a wireless communication unit. When the flight control unit generates sensitive data, the sensitive data is first transmitted to the hardware encryption unit, and then a data key is generated by the hardware encryption unit, and an encryption algorithm is used to process the sensitive data according to the data key and the sensitive data to obtain an encrypted data file, and finally the encrypted data file is sent to the corresponding server through the wireless communication unit. The above scheme encrypts the sensitive data after the flight control unit generates the sensitive data, and then sends the encrypted data through the wireless communication unit, thereby avoiding the leakage of sensitive data generated during the operation of the drone and improving the data security during the operation of the drone.
[0075] In this embodiment, a method for encrypted communication of a drone is provided. Figure 1 The hardware encryption unit in the drone in the illustrated embodiment executes, Figure 5 is a flow chart of a method for encrypted communication of a drone according to an embodiment of the present invention. Figure 5 As shown, the process includes the following steps:
[0076] Step S501, receiving sensitive data transmitted by the flight control unit.
[0077] The flight control unit in the drone can collect external data required to perform work tasks through the drone's data acquisition unit. These external data may contain sensitive data. Therefore, after the sensitive data is generated in the flight control unit, the sensitive data is transmitted to the hardware encryption unit, and the hardware encryption unit receives the sensitive data transmitted by the flight control unit.
[0078] Step S502, generate a data key, and process the data key and sensitive data through an encryption algorithm to obtain an encrypted data file.
[0079] The hardware encryption unit includes components and algorithms with key generation functions, and can generate data keys through a preset key generation method. The hardware encryption unit also includes an encryption algorithm with data encryption functions, which can generate an encrypted data file based on the data key and sensitive data, and the encrypted data file contains data key information and encrypted sensitive data.
[0080] Step S503, sending the encrypted data file to the flight control unit, so that the flight control unit sends the encrypted data file to the corresponding server through the wireless communication unit.
[0081] After generating the encrypted data file, the hardware encryption unit sends the encrypted data file to the flight control unit. After receiving the encrypted data file, the flight control unit sends the encrypted data file to the corresponding server through the wireless communication unit.
[0082] In this embodiment, a method for encrypted communication of a drone is provided. Figure 1 The flight control unit in the drone in the embodiment shown executes, Figure 6 is a flow chart of a method for encrypted communication of a drone according to an embodiment of the present invention. Figure 6 As shown, the process includes the following steps:
[0083] Step S601, generating sensitive data.
[0084] For details, please see Figure 5 Step S501 of the illustrated embodiment will not be described in detail here.
[0085] Step S602: The sensitive data is transmitted to the hardware encryption unit, so that the hardware encryption unit processes the sensitive data through an encryption algorithm according to the data key and the sensitive data to obtain an encrypted data file.
[0086] The data key is generated by the hardware encryption unit.
[0087] For details, please see Figure 5 Step S502 of the illustrated embodiment will not be described in detail here.
[0088] Step S603, receiving the encrypted data file sent by the hardware encryption unit, and sending the encrypted data file to the corresponding server through the wireless communication unit.
[0089] For details, please see Figure 5 Step S503 of the illustrated embodiment will not be described in detail here.
[0090] In this embodiment, a method for encrypted communication of a drone is provided. Figure 1 The flight control unit and the hardware encryption unit in the drone in the embodiment shown are executed together. Figure 7 is a flow chart of a method for encrypted communication of a drone according to an embodiment of the present invention. Figure 7 As shown, the process includes the following steps:
[0091] Step S701: The flight control unit generates sensitive data.
[0092] For details, please see Figure 5 Step S501 of the illustrated embodiment will not be described in detail here.
[0093] Step S702: The flight control unit transmits the sensitive data to the hardware encryption unit.
[0094] For details, please see Figure 5 Step S501 of the illustrated embodiment will not be described in detail here.
[0095] Step S703: The hardware encryption unit generates a data key, and processes the data key and sensitive data through an encryption algorithm to obtain an encrypted data file.
[0096] For details, please see Figure 5 Step S502 of the illustrated embodiment will not be described in detail here.
[0097] Step S704: the hardware encryption unit sends the encrypted data file to the flight control unit.
[0098] For details, please see Figure 5 Step S503 of the illustrated embodiment will not be described in detail here.
[0099] Step S705: The flight control unit receives the encrypted data file and sends the encrypted data file to the corresponding server through the wireless communication unit.
[0100] For details, please see Figure 5 Step S503 of the illustrated embodiment will not be described in detail here.
[0101] In this embodiment, a drone encryption communication device is also provided, which is used to implement the above-mentioned embodiments and preferred implementations, and will not be repeated here. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.
[0102] This embodiment provides a drone encryption communication device that can be used Figure 1 The drone shown in the embodiment, such as Figure 8 As shown, including:
[0103] The data transmission module 801 is used to transmit the sensitive data to the hardware encryption unit after the flight control unit generates the sensitive data;
[0104] The encryption module 802 is used to generate a data key through a hardware encryption unit, and process the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file;
[0105] The sending module 803 is used to send the encrypted data file to the corresponding server through the wireless communication unit.
[0106] This embodiment provides a drone encryption communication device that can be used Figure 1 The hardware encryption unit in the drone in the illustrated embodiment, such as Fig. 9 As shown, including:
[0107] The data receiving module 901 is used to receive sensitive data transmitted by the flight control unit;
[0108] The first encryption module 902 is used to generate a data key, and process the data key and sensitive data through an encryption algorithm to obtain an encrypted data file;
[0109] The first sending module 903 is used to send the encrypted data file to the flight control unit, so that the flight control unit sends the encrypted data file to the corresponding server through the wireless communication unit.
[0110] This embodiment provides a drone encryption communication device that can be used Figure 1 The flight control unit in the drone in the embodiment shown, such as Fig.10 As shown, including:
[0111] Data generation module 1001, used to generate sensitive data;
[0112] The second transmission module 1002 is used to transmit the sensitive data to the hardware encryption unit, so that the hardware encryption unit processes the sensitive data through an encryption algorithm according to the data key and the sensitive data to obtain an encrypted data file;
[0113] The second sending module 1003 is used to receive the encrypted data file sent by the hardware encryption unit, and send the encrypted data file to the corresponding server through the wireless communication unit.
[0114] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.
[0115] The drone encryption communication device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.
[0116] The embodiment of the present invention also provides a computer device having the above Figures 8 to 10 Any of the drone encrypted communication devices shown.
[0117] See also Fig.11 , Fig.11 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Fig.11 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Fig.11 A processor 10 is taken as an example.
[0118] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.
[0119] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.
[0120] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0121] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.
[0122] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.
[0123] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.
[0124] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.
[0125] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations shall all fall within the scope of protection of the present invention.
Claims
1. A drone, characterized in that: The drone includes a flight control unit, a hardware encryption unit and a wireless communication unit; The flight control unit is used to perform flight control on the UAV; The hardware encryption unit is used to receive the sensitive data generated by the flight control unit and encrypt the sensitive data; The wireless communication unit is used to send the data encrypted by the hardware encryption unit.
2. The drone according to claim 1, characterized in that: The hardware encryption unit includes a true random number generator, a pseudo-random number generator, a key management module, and an encryption processing unit; The true random number generator and the pseudo random number generator are used to collaboratively generate a random number sequence and correspondingly generate a data key; The key management module is used to store the data key; The encryption processing unit generates an encrypted data file according to the data key and the sensitive data.
3. The drone according to claim 2, characterized in that: The hardware encryption unit also includes an MCU coprocessor; the MCU coprocessor is used to control the true random number generator and the pseudo random number generator to work in coordination.
4. The drone according to claim 3, characterized in that: The hardware encryption unit also includes a bridge chip, a timer and a watchdog; The true random number generator, pseudo random number generator, timer and watchdog are respectively connected to the bridge chip through an APB bus; the bridge chip is communicatively connected with the MCU coprocessor.
5. The drone according to claim 4, characterized in that: The hardware encryption unit also includes an AHB bus; The symmetric encryption engine and the asymmetric encryption engine are connected to the bridge chip through the AHB bus.
6. A method for encrypted communication of a drone, characterized in that: The method is applied to the drone according to any one of claims 1 to 5, and the method comprises: When the flight control unit generates sensitive data, the sensitive data is transmitted to the hardware encryption unit; Generate a data key through a hardware encryption unit, and process the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file; The encrypted data file is sent to a corresponding server through the wireless communication unit.
7. An encrypted communication device for a drone, characterized in that: The device is applied to the drone according to any one of claims 1 to 5, and the device comprises: A data transmission module, used for transmitting sensitive data to the hardware encryption unit after the flight control unit generates the sensitive data; An encryption module, used to generate a data key through a hardware encryption unit, and process the data key and the sensitive data through an encryption algorithm to obtain an encrypted data file; The sending module is used to send the encrypted data file to the corresponding server through the wireless communication unit.
8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the drone encryption communication method described in claim 6 by executing the computer instructions.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the drone encryption communication method described in claim 6.
10. A computer program product, characterized in that It includes computer instructions, which are used to cause a computer to execute the drone encryption communication method described in claim 6.