Identity management system and method for full-space unmanned system operation access

Abstract

The invention provides an identity management system for full-space unmanned system operation admission, and the system comprises a user registration and login module which is used for obtaining a registration request and a login request initiated by a user; the platform information registration and examination and approval module is used for enabling the registered users to initiate information registration and examination and approval of various unmanned systems and operators, and after the examination and approval are passed, distributing identities (ID); the information management module is used for managing information of the unmanned system and operators; meanwhile, the invention also provides an identity management method for full-space unmanned system operation access.

Description

Technical Field

[0001] This application belongs to the technical field of identity management for all-space unmanned systems, and particularly relates to an identity management system and method for the operation access of all-space unmanned systems. Background Art

[0002] The premise for the operation of an all-space unmanned system is the identity access of users and the registration of the unmanned system platform. Therefore, it is necessary to provide a set of identity management systems for users, which should have functions including account registration and login, registration and approval of various unmanned system platforms and drone pilots, ID allocation for unmanned system platforms, and management of data such as user and platform registration information.

[0003] Currently, the construction and development of all-space unmanned systems are still in the initial stage, and there are no standard specifications or ready-made experiences for the corresponding unmanned system identity management systems. Identity authentication and platform access provided by the identity management system are essential components of all-space unmanned systems. At the same time, the lack of this system has also hindered the construction and promotion of all-space unmanned systems in China. Summary of the Invention

[0004] The objective of the present invention: In response to the overall planning of future all-space unmanned system construction and the urgent market demand, an identity management system for all-space unmanned systems is proposed, which solves problems such as user registration and login, registration and management of multiple types of heterogeneous unmanned systems and drone pilots, and automatic ID allocation for unmanned system platforms, and provides services for user identity management, registration of unmanned system platforms, and account management in all-space unmanned systems.

[0005] In a first aspect, this application provides an identity management system for the operation access of all-space unmanned systems, and the system includes:

[0006] A user registration and login module, which is used to obtain registration requests and login requests initiated by users;

[0007] A platform information registration and approval module, which is used to provide information registration and approval of various unmanned systems and operators initiated by registered users, and after the approval is passed, perform identity ID allocation;

[0008] An information management module, which is used to manage the information of the unmanned systems and operators.

[0009] Preferably, the platform information registration and approval module is also used to, when a newly registered unmanned system platform needs to be allocated an ID, first attempt to match an available ID from the ID recycling pool, and if the match fails, allocate a new ID according to the ID allocation method.

[0010] Preferably, the platform information registration and approval module is also used to set a valid flag bit; among them, 0 represents the ID of an active unmanned system platform, and 1 represents a recycled ID;

[0011] The platform information registration and approval module is also used to classify a specific unmanned system layer by layer, and classify it according to the unmanned system category, unmanned system business type, and manufacturer. They are regarded as the triple attributes of a specific unmanned system respectively, and each attribute is encoded in hexadecimal in an enumerated manner;

[0012] The platform information registration and approval module is also used to splice the flag bit and the system's own number at the head and tail respectively to form the final system number; among them, the system's own number is incremented backward. In this encoding method, each attribute occupies one byte, and together with the flag bit and the system's own number, it is a total of five bytes.

[0013] Preferably, the platform information registration and approval module is also used to match available IDs from the ID recycling pool based on a preset method.

[0014] Preferably, the ID recycling pool is used to recycle the original IDs of the deactivated platforms and operators, and set the flag bits of the original IDs to 1.

[0015] In a second aspect, the present application also provides an identity management method for the operation access of a full-space unmanned system. The method includes:

[0016] The user registration and login module obtains the registration request and login request initiated by the user;

[0017] The platform information registration and approval module provides information registration and approval for various unmanned systems and operators initiated by the registered users. After the approval is passed, the identity ID is allocated;

[0018] The information management module manages the information of the unmanned system and the operator.

[0019] Preferably, the method further includes:

[0020] When the platform information registration and approval module needs to allocate an ID for a newly registered unmanned system platform, it first tries to match an available ID from the ID recycling pool. If the match fails, a new ID is allocated according to the ID allocation method.

[0021] Preferably, the method further includes:

[0022] The platform information registration and approval module sets the valid flag bit; among them, 0 represents the ID of the active unmanned system platform, and 1 represents the recycled ID;

[0023] The platform information registration and approval module classifies a specific unmanned system layer by layer, and classifies it according to the unmanned system category, unmanned system business type, and manufacturer. They are regarded as the triple attributes of a specific unmanned system respectively, and each attribute is encoded in hexadecimal in an enumerated manner;

[0024] The platform information registration and approval module adds a flag bit and the system's own number at the head and tail respectively to splice into the final system number; among them, the system's own number accumulates backward, and each attribute occupies one byte in this coding method. Together with the flag bit and the system's own number, there are a total of five bytes.

[0025] Preferably, the method further includes:

[0026] The platform information registration and approval module matches available IDs from the ID recycling pool based on a preset method.

[0027] Preferably, the ID recycling pool is used to recycle the original IDs of the deactivated platforms and operators, and set the flag bits of the original IDs to 1.

[0028] The beneficial technical effects of the present invention:

[0029] (1) Provide account registration and login interfaces for unmanned system users who hope to operate legally within the framework of the all-space unmanned system;

[0030] (2) Provide services for target users to access the all-space system by unmanned systems. Provide unified registration interfaces for various unmanned systems respectively, specify the registration information format, conduct unified approval and feedback, simplify the registration and approval processes, and improve the registration and approval efficiency;

[0031] (3) The system can automatically assign IDs to newly registered unmanned system platforms, with characteristics such as unified style and security. It hides user information, thus having a certain information protection ability. At the same time, an ID recycling pool is set up, and a clustering algorithm is used to achieve efficient matching, reuse, and management of IDs;

[0032] (4) Adopt a three-level administrator mechanism, divide administrator permissions, simplify the work process, improve work efficiency, establish permission dependency relationships, and ensure the security and efficiency of the system. Brief Description of the Drawings

[0033] Figure 1 It is a composition diagram of an identity management system for the operation access of an all-space unmanned system provided by an embodiment of the present application;

[0034] Figure 2 It is a flow chart of user registration and login provided by an embodiment of the present application;

[0035] Figure 3 It is a flow chart of ID assignment provided by an embodiment of the present application;

[0036] Figure 4 It is a flow chart of an ID coding method provided by an embodiment of the present application;

[0037] Figure 5 This is the flowchart of ID recycling and redistribution provided by the embodiment of the present application;

[0038] Figure 6 This is the schematic diagram of administrator permission allocation provided by the embodiment of the present application. Detailed implementation manners

[0039] It should be noted that this application belongs to the field of identity management for the all-space unmanned system, mainly solving the problems of user registration and login in the all-space unmanned system, ID allocation for the unmanned platform, account management, and registration of multiple types of heterogeneous unmanned system platforms and their pilots, providing services and support for building the all-space unmanned system on land, sea, and air. Specifically, it is an identity management system for operation access in the all-space unmanned system.

[0040] The design of this system realizes user registration and login, registration and approval of multiple types of heterogeneous unmanned systems and pilots, automatic allocation of ID for the unmanned system platform, management and maintenance of data such as user accounts and registration information, and hierarchical and classified setting of system administrator permissions, providing services and support for the unmanned system to access the all-space unmanned system.

[0041] The present invention designs a reliable, secure, convenient, and scalable identity management system for the all-space unmanned system, realizing functions such as user registration and login, registration and management of multiple types of heterogeneous unmanned systems and pilots, and automatic allocation of ID for the unmanned system platform. The invention solves the problems of difficulty in accessing multiple types of heterogeneous unmanned systems to the all-space unmanned system, design of ID automatic allocation and recycling and redistribution methods, and management of accounts and registration information.

[0042] The present invention has the following main technical points:

[0043] (1) Provide functions for registration, approval, and information management of three types of unmanned systems: unmanned aerial vehicles, unmanned vehicles, and unmanned ships, and realize the functions of pilot information registration, approval, and management. The system refers to existing industry standards and experiences, and sets unified registration information formats for different unmanned systems respectively, realizing unified registration and management of multiple types of heterogeneous unmanned systems;

[0044] (2) Design an automatic ID allocation method for heterogeneous and heterogeneous unmanned systems according to the idea of ​​hierarchical classification, and design an ID recovery and redistribution method using a clustering method. First, classify and number the unmanned system type (drone, unmanned vehicle, unmanned ship), manufacturer, and business category (inspection, sightseeing, distribution, etc.); secondly, unmanned systems of the same type are numbered according to natural numbers; finally, set a valid flag position at the beginning of the number to distinguish whether the number is an active number or a recovery number. All numbers are encoded in hexadecimal and assembled into a string in sequence. The hexadecimal code is unique and hidden, making it difficult for user information to be stolen. Secondly, in order to avoid the explosive growth of ID numbers due to the excessive number of access systems, the present invention creates an ID recovery pool. For the deregistered system, its ID is recovered and placed in the ID recovery pool to realize the reuse of the ID. The ID search and matching method in the recovery pool uses a clustering algorithm for classification and screening, which improves the efficiency of ID matching.

[0045] (3) In accordance with the idea of ​​safety and efficiency, three levels of administrator authority are set up to achieve unified management of all user accounts and administrator accounts in the system and maintenance of registration information, logs and other data. The system sets up three roles: system administrator, general administrator and security administrator, and grants different permissions. System business is assigned to different administrators by category to improve system efficiency and simplify the administrator's workflow.

[0046] See also Figure 1 - Figure 6 The solution provided in this application includes the following contents:

[0047] 1. System composition

[0048] The full-space unmanned system identity management system mainly includes user registration and login module, information registration and approval module and information management module. The system consists of Figure 1 shown.

[0049] The three modules in the system are interconnected and support each other. After the user initiates a registration or login request through the user registration and login module, the information registration and approval module receives the user registration or approval message data, the administrator approves the application and sends the approval result, and stores the relevant data in the information management module; the user who successfully logs in registers and submits the unmanned system platform information and pilot information through the information registration and approval module, the administrator approves the registration application in the background and sends the approval result, and finally stores the relevant data in the information management module; the administrator can retrieve the system log and user account information and registration information through the information management module at any time and perform corresponding operations.

[0050] 2. User registration, login and platform registration

[0051] 2.1. User Registration and Login

[0052] The system divides users' accounts into two types: enterprise accounts and personal accounts. Different accounts provide different registration forms. Users can choose the account type by themselves. After submitting the registration, the system will automatically review in the background and feedback the registration result. Once the registration is successful, the user can log in. The processing flow of the user login and registration component is as Figure 2 shown.

[0053] Combined with the actual situation and the experience of existing related systems, two types of login forms, one for enterprises and one for users, are set up respectively. The information that enterprise users need to submit for registration is shown in Table 1, and the information that personal users need to submit for registration is shown in Table 2.

[0054] Table 1

[0055] Serial Number Information Name Data Form Input Type 1 Account Name ASCII String INPUT 2 Password ASCII String INPUT 3 Company Name ASCII String INPUT 4 Company Registration Region Key-Value Pair SELECT 5 Registrant Name ASCII String INPUT 6 Registrant ID Number ASCII String INPUT 7 Registrant Email ASCII String INPUT 8 Registrant Contact Number ASCII String INPUT

[0056] Table 2

[0057] Serial Number Information Name Data Form Input Type 1 Account Name ASCII String INPUT 2 Password ASCII String INPUT 3 Communication Address ASCII String INPUT 4 ID Number Key-Value Pair SELECT 5 Registrant Contact Number ASCII String INPUT 6 Registrant Name ASCII String INPUT

[0058] 2.2. Platform Information Registration and Approval

[0059] Through extensive research on government documents, laws and regulations, and current market demands, the registration information of various unmanned system platforms has been unified to form a standard registration information form, as shown in Tables 3, 4, and 5 below.

[0060] Table 3 Drone Platform Registration Information

[0061] Serial Number Information Name Data Form Input Type 1 Product Name ASCII String INPUT 2 Product Type Key-Value Pair SELECT 3 Empty Machine Weight ASCII String INPUT 4 Manufacturer Key-Value Pair SELECT 5 Usage Key-Value Pair SELECT 6 Insurance Information ASCII String INPUT 7 Registrant Email ASCII String INPUT 8 Maximum Takeoff Weight ASCII String INPUT 9 Product Serial Number ASCII String INPUT 10 Product Photo Picture INPUT 11 Factory Certificate Picture INPUT 12 Policy Information Picture INPUT

[0062] Table 4 Unmanned Vehicle Platform Registration Information

[0063]

[0064]

[0065] Table 5 Unmanned Ship Platform Registration Information

[0066]

[0067]

[0068] 3. ID Automatic Allocation

[0069] When a newly registered unmanned system platform needs to be allocated an ID, the system follows the following process. First, it tries to match an available ID from the ID recycling pool. If the match fails, a new ID will be allocated according to the ID allocation method.

[0070] 3.1 Encoding Rules for ID Allocation

[0071] The present invention designs an automatic ID allocation method for the unmanned platform of the identity management system according to the idea of hierarchical classification. When a new ID needs to be allocated to an unmanned system platform, the system automatically allocates an ID for it according to the designed method. This ID serves as the identity of the platform in the full-space system, is unique, and binds the relevant information of the platform for management, tracking, and identification.

[0072] The specific allocation steps are as follows: First, set the valid flag bit, where 0 represents the ID of the active unmanned system platform and 1 represents the recycled ID; Second, classify a specific unmanned system layer by layer. Classify it according to the type of unmanned system (drone, unmanned vehicle, unmanned ship), the business type of the unmanned system (inspection, sightseeing, delivery, cleaning, etc.) and the manufacturer. They are regarded as the three attributes of a specific unmanned system respectively. Each attribute is encoded in hexadecimal in an enumerated manner; Third, add the flag bit and the system's own number at the head and tail respectively to splice into the final system number, where the system's own number is incremented backward. In this encoding method, each attribute occupies one byte, and together with the flag bit and the system's own number, it is a total of five bytes. The specific encoding rules are shown in the figure. The above encoding rules achieve the unique encoding of the unmanned system platform; hide the user information and improve the information security; the hierarchical classification encoding retains the key information of each specific unmanned system platform, which helps the system to identify and manage it.

[0073] 3.2 ID Recycling Pool

[0074] To prevent the explosive growth of ID numbers caused by too many system access users and registered platforms, and at the same time to save resources and improve the maintainability of the system, the present invention establishes an ID recycling mechanism to recycle the ID numbers of the canceled systems and reuse them. The recycled ID numbers are stored in the ID recycling pool. When a new registration application needs to allocate an ID, the system first looks for available IDs in the ID recycling pool. The ID matching method uses the clustering method. When there is no matching ID, a new ID is allocated according to the ID automatic allocation method.

[0075] The steps of the preset method are as follows:

[0076] First, preprocess the ID number. Remove the last encoding, convert the remaining four attribute fields into decimal respectively, and regard the four obtained decimal numbers as a column vector, which is called a sample. After processing n IDs, n column vectors are obtained, and they are arranged together to obtain a 4×n sample matrix X:

[0077]

[0078] Second, select the clustering method. According to the actual requirements of ID matching, use the hierarchical clustering method;

[0079] Third, define the distance. The most commonly used Minkovski distance is adopted. where d ij (i, j = 1, 2,..., n) is the distance between vector x i and x j . Note that the first row of the sample matrix is all 1, so the first row can be ignored. The distance calculation formula is simplified to For convenience of calculation, let p = 1, which is the Manhattan distance;

[0080] Fourth, define the class. To accurately locate the class to which the ID belongs, it is stipulated that when the distance between any two ID numbers in the ID set is 0, they belong to the same class, that is, when the four attributes are the same. The vectors in each class obtained by such classification are the same. Randomly select a vector from it and compare it with the three attribute values determined by the unmanned system platform to be allocated. If they are exactly the same, it is the target classification. Then, from the target classification, select the smallest ID number after sorting and assign it to the newly registered unmanned system platform. If there is no eligible old ID, a new ID will be automatically assigned according to the ID assignment method. The schematic diagram of the ID recycling mechanism is as Figure 5 shown.

[0081] 4. Multi-level administrator permission mechanism

[0082] The system has set up three levels of administrators according to different permissions, namely system administrators, ordinary administrators, and security administrators. The three types of administrators have different permissions and are interrelated. System administrators handle sensitive operations such as account deletion, account disabling and unlocking, and managing ordinary administrator accounts; ordinary administrators handle daily operations such as registration approval, message publishing, etc.; security administrators are responsible for supervising and restricting system administrators, auditing system logs and key data, etc., preventing and resolving system security risks, and improving the security of the system. The relationship among the three is as Figure 6 shown.

Claims

1. An identity management system for full-space unmanned system operation access, characterized in that: The system comprises: User registration and login module, used to obtain registration requests and login requests initiated by users; The platform information registration and approval module is used to provide registered users with the information registration and approval of various unmanned systems and operators, and to allocate identity IDs after approval; The information management module is used to manage the information of the unmanned system and operators.

2. The system according to claim 1, characterized in that The platform information registration and approval module is also used to try to match an available ID from the ID recycling pool when a newly registered unmanned system platform needs to be assigned an ID. If the match fails, a new ID is assigned according to the ID allocation method.

3. The system according to claim 2, characterized in that The platform information registration and approval module is also used to set the valid flag bit; 0 represents the active unmanned system platform ID, and 1 represents the recycled ID; The platform information registration and approval module is also used to classify a specific unmanned system layer by layer, according to the unmanned system category, unmanned system business type and manufacturer. They are respectively regarded as the triple attributes of a specific unmanned system, and each attribute is encoded in hexadecimal using enumeration; The platform information registration and approval module is also used to add a flag bit and the system's own number to the head and tail respectively to form a final system number; wherein the system's own number is accumulated later, and each attribute in this encoding method occupies one byte, plus the flag bit and the system's own number, a total of five bytes.

4. The system according to claim 3, characterized in that The platform information registration and approval module is also used to match available IDs from the ID recycling pool based on a preset method.

5. The system according to claim 4, characterized in that The ID recovery pool is used to recover the original ID of the deregistered platform and operator, and set the flag position of the original ID to 1.

6. A method for identity management of full-space unmanned system operation access, characterized in that: The method comprises: The user registration and login modules obtain the registration request and login request initiated by the user; The platform information registration and approval module allows registered users to initiate information registration and approval for various unmanned systems and operators. After approval, identity IDs are allocated; The information management module manages the information of the unmanned system and operators.

7. The method according to claim 6, characterized in that The method further comprises: Platform Information Registration and Approval Module When a newly registered unmanned system platform needs to be assigned an ID, it first attempts to match an available ID from the ID recycling pool. If the match fails, a new ID is assigned according to the ID allocation method.

8. The method according to claim 7, characterized in that The method further comprises: The platform information registration and approval module sets a valid flag; 0 represents the active unmanned system platform ID, and 1 represents the recycled ID; The platform information registration and approval module classifies a specific unmanned system layer by layer, according to the unmanned system category, unmanned system business type and manufacturer. They are respectively regarded as the triple attributes of a specific unmanned system, and each attribute is encoded in hexadecimal using enumeration; The platform information registration and approval module adds a flag bit and the system's own number to the beginning and end respectively to form the final system number; among them, the system's own number is accumulated afterwards. In this encoding method, each attribute occupies one byte, plus the flag bit and the system's own number, a total of five bytes.

9. The method according to claim 8, characterized in that The method further comprises: The platform information registration and approval module matches available IDs from the ID recycling pool based on a preset method.

10. The method according to claim 9, characterized in that The ID recovery pool is used to recover the original ID of the deregistered platform and operator, and set the flag position of the original ID to 1.

Images