Identity verification method and device for space mobile equipment, electronic equipment and storage medium

Abstract

The invention provides a space mobile equipment identity verification method and device, electronic equipment and a storage medium, and relates to the technical field of information security. The invention discloses a space mobile device identity verification method, which comprises the following steps: acquiring a motion track of a target space mobile device; decoding the motion track by using a preset decoding algorithm to obtain a to-be-verified key; and matching the to-be-verified key with an identity key pre-stored in a key library, and obtaining an identity verification result of the target space mobile device according to a matching result. According to the technical scheme provided by the embodiment of the invention, the motion track of the target space mobile device is captured, the key information embedded in the track is identified and decoded by using the preset decoding algorithm to obtain the to-be-verified key, and the to-be-verified key is compared with the pre-stored identity key to realize identity verification. The method does not need to depend on network connection or hardware equipment support, is not easy to crack, and is good in anti-interference capability and safety performance.

Description

Technical Field

[0001] This application relates to the field of information security technology, and particularly relates to a method, device, electronic device and computer-readable storage medium for authenticating the identity of a spatial mobile device. Background Art

[0002] With the rapid development of unmanned aerial vehicle (UAV) technology and its wide application in fields such as security and logistics, identity authentication has become a key link to ensure the security of task execution and the legitimacy of devices. In these application scenarios, UAVs usually need to perform identity authentication during the start of a task or the landing process to confirm that they are authorized devices and prevent unauthorized devices from accessing or executing tasks.

[0003] However, most of the existing UAV identity authentication technologies rely on remote network connections, cloud server authentication, and traditional cryptographic means (such as digital certificates, password authentication, etc.). These technologies perform relatively well under the conditions of stable network environment and good signal coverage, but face many challenges in areas with dense buildings, remote areas, or high-interference environments.

[0004] Especially with the booming development of the low-altitude economy, application scenarios such as low-altitude logistics distribution, emergency rescue, and security patrol are gradually increasing, and the lack of network infrastructure has become one of the bottlenecks restricting the development of UAV identity authentication technology. In areas where supporting facilities such as low-altitude base stations have not been fully constructed and network coverage is not perfect, traditional network-dependent identity authentication methods are easily affected by network fluctuations, delays, or even connection interruptions. In addition, network dependence also brings security risks such as the possible tampering and forgery of identity authentication information, further weakening the reliability of identity authentication. Summary of the Invention

[0005] Based on this, this application provides a method, device, electronic device and computer-readable storage medium for authenticating the identity of a spatial mobile device, realizing aircraft identity authentication with low network dependence and high security.

[0006] According to one aspect of this application, a method for authenticating the identity of a spatial mobile device is proposed, including: obtaining the movement trajectory of a target spatial mobile device; using a preset decoding algorithm to decode the movement trajectory to obtain a key to be verified; matching the key to be verified with the identity key pre-stored in a key library, and obtaining the identity authentication result of the target spatial mobile device according to the matching result.

[0007] According to some embodiments, the key to be verified is embedded in the movement trajectory based on a key encoding generation algorithm, and the parameter processing logic of the preset decoding algorithm is the same as that of the key encoding generation algorithm.

[0008] According to some embodiments, before obtaining the motion trajectory of the target spatial mobile device, it further includes: setting a uniquely corresponding authentication motion trajectory for the spatial mobile device that meets the preset conditions, where the authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions; extracting motion trajectory parameters and the spatial coordinates at the authentication moment according to the motion trajectory; using a key encoding generation algorithm to obtain an identity key corresponding to the authentication motion trajectory according to the motion trajectory parameters, the spatial coordinates at the authentication moment, and the current timestamp; and storing the identity key in the key library.

[0009] According to some embodiments, before obtaining the motion trajectory of the target spatial mobile device, it further includes: triggering an identity authentication request to cause the target spatial mobile device to execute the authentication motion trajectory; where the identity authentication request includes at least one of an identity authentication request actively sent by the target spatial mobile device, an identity authentication request actively sent by the identity authentication end, an identity authentication request triggered when the target spatial mobile device reaches a preset spatial position, and an identity authentication request triggered when reaching a preset moment.

[0010] According to some embodiments, obtaining the motion trajectory of the target spatial mobile device includes: using an image acquisition device to obtain multiple image data of the target spatial mobile device; extracting feature points of each image data among the multiple image data and determining the position coordinates of the feature points; obtaining speed information corresponding to the feature points according to the change of the position coordinates; calculating the three-dimensional spatial coordinates of each feature point according to the position coordinates of each feature point and the internal parameters of the image acquisition device; and obtaining the motion trajectory of the target spatial mobile device according to the three-dimensional spatial coordinates and speed information of the feature points.

[0011] According to some embodiments, obtaining the motion trajectory of the target spatial mobile device includes: obtaining multiple groups of image data samples when multiple spatial mobile devices execute their uniquely corresponding authentication motion trajectories; performing motion trajectory annotation on the multiple groups of image data samples; training a motion trajectory extraction model using the multiple groups of image data samples annotated with motion trajectories; using an image acquisition device to obtain multiple image data of the target spatial mobile device; and inputting the multiple image data into the motion trajectory extraction model to output the motion trajectory of the target spatial mobile device.

[0012] According to some embodiments, the motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length, and / or speed information.

[0013] According to some embodiments, triggering an identity authentication request to cause the target spatial mobile device to execute the authentication motion trajectory includes: triggering an identity authentication request to cause the target spatial mobile device to control the target spatial mobile device to reach the corresponding trajectory points in sequence according to the speeds and positions specified in the authentication motion trajectory based on its trajectory planning model.

[0014] According to some embodiments, after obtaining the identity key corresponding to the authentication motion trajectory by using the key encoding generation algorithm based on the motion trajectory parameters, the authentication moment space coordinates, and the current timestamp, the method further includes: further encrypting the identity key by using a preset encryption algorithm; and updating the identity key by using the result of the further encryption.

[0015] According to some embodiments, matching the key to be verified with the identity key pre-stored in the key library, and obtaining the identity authentication result of the target space mobile device according to the matching result, includes: matching the key to be verified with the identity key pre-stored in the key library; when the matching result is successful, the identity authentication result of the target space mobile device is verified to pass; when the matching result is unsuccessful, the identity authentication result of the target space mobile device is verified to fail.

[0016] According to some embodiments, after matching the key to be verified with the identity key pre-stored in the key library and obtaining the identity authentication result of the target space mobile device according to the matching result, the method further includes: when the identity authentication result of the target space mobile device is verified to pass, allowing the target space mobile device to continue to execute the task; when the identity authentication result of the target space mobile device is verified to fail, triggering a security mechanism.

[0017] According to one aspect of the present application, an identity authentication device for a space mobile device includes: a trajectory acquisition module, configured to acquire the motion trajectory of a target space mobile device; a trajectory decoding module, configured to decode the motion trajectory by using a preset decoding algorithm to obtain a key to be verified; and a key verification module, configured to match the key to be verified with the identity key pre-stored in the key library and obtain the identity authentication result of the target space mobile device according to the matching result.

[0018] According to one aspect of the present application, an electronic device is provided, which includes: one or more processors; a storage device, configured to store one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the method as described above.

[0019] According to one aspect of the present application, a computer-readable medium is provided, on which a computer program or instruction is stored, and when the program or instruction is executed by a processor, the method as described above is implemented.

[0020] Through the above-mentioned embodiments provided by the present application, the present application captures the motion trajectory of the target space mobile device, uses a preset decoding algorithm to identify and decode the key information embedded in the trajectory to obtain the key to be verified, and compares it with the pre-stored identity key to implement identity authentication. The present application does not need to rely on network connection or hardware device support, is not easily cracked, and has good anti-interference ability and security performance. Description of the Drawings

[0021] It should be understood that the above general description and the following detailed description are merely exemplary and do not limit this application.

[0022] In order to more clearly illustrate the technical solutions in the embodiments of this application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of this application. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without exceeding the scope of protection required by this application.

[0023] Figure 1 It is a flowchart of the method for authenticating the identity of a space mobile device provided in an embodiment of this application; Figure 2 It is a flowchart of generating an identity key provided in an embodiment of this application; Figure 3 It is one of the flowcharts of obtaining the motion trajectory of a target space mobile device provided in an embodiment of this application; Figure 4 It is another flowchart of obtaining the motion trajectory of a target space mobile device provided in an embodiment of this application; Figure 5 It is a flowchart of matching the key to be verified with the identity key pre-stored in the key library and obtaining the identity authentication result of the target space mobile device according to the matching result provided in an embodiment of this application; Figure 6 It is a block diagram of the device for authenticating the identity of a space mobile device provided in an embodiment of this application; Figure 7 It is a schematic structural diagram of an electronic device provided in an embodiment of this application. Detailed Description of the Embodiments

[0024] The following will clearly and completely describe the technical solutions in the embodiments of this application with reference to the drawings in the embodiments of this application. Obviously, the described embodiments are some, but not all, of the embodiments of this application. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of this application.

[0025] In addition, the described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, numerous specific details are provided to give a thorough understanding of the embodiments of the present application. However, those skilled in the art will realize that the technical solutions of the present application can be practiced without one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, well-known methods, devices, implementations, or operations are not shown or described in detail to avoid obscuring aspects of the present application.

[0026] The block diagrams shown in the drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0027] The flowcharts shown in the drawings are only exemplary illustrations, not necessarily including all contents and operations / steps, nor necessarily executed in the described order. For example, some operations / steps can be decomposed, while some operations / steps can be combined or partially combined, so the actual execution order may change according to the actual situation.

[0028] Specific implementation manners can refer to the following embodiments.

[0029] Figure 1 It is a flowchart of the method for authenticating the identity of a space mobile device provided for the embodiments of the present application. As Figure 1 shown, the method includes step S110 - step S130.

[0030] In step S110, obtain the motion trajectory of the target space mobile device.

[0031] It should be noted that the moving area of the target space mobile device referred to in the present application includes low altitude, high altitude, space, and ocean. Naturally, the target space mobile device includes any device that can move in low altitude, high altitude, space, and ocean. According to the exemplary embodiments, the target space mobile device can be one of a drone, an electric vertical takeoff and landing aircraft (eVTOL), a high-altitude drone, a space shuttle, an orbital satellite, an unmanned surface vehicle (USV), an unmanned submarine, and any aircraft and surface or underwater vehicle that can achieve unmanned driving.

[0032] In the process of obtaining the motion trajectory, in order to reduce the dependence on network connection, in some embodiments of the present application, image and computer vision technologies are adopted to obtain the motion trajectory. The present application is particularly applicable to environments without network or with weak network coverage.

[0033] For ease of acquisition, in some embodiments, the acquired motion trajectory is the motion trajectory of the target space mobile device within a specified spatial range or a specified time range.

[0034] According to an example embodiment, the motion trajectory of the target space mobile device after reaching the preset space coordinates is obtained. According to another example embodiment, the motion trajectory of the target space mobile device after a preset time is obtained. The preset time may be a preset time for starting the identity authentication of the space mobile device, such as the Nth timestamp of the take-off or landing phase.

[0035] It should be emphasized that the motion trajectory in this application is the core of identity authentication. The motion trajectory is embedded with unique key encoding information, thereby ensuring the security and reliability of identity authentication.

[0036] In step S120, the motion trajectory is decoded using a preset decoding algorithm to obtain a key to be verified.

[0037] According to the example embodiment, after the motion trajectory of the mobile device in the target space is obtained, the motion features are extracted from the motion trajectory through a preset decoding algorithm, and the key code embedded therein is restored based on the motion features.

[0038] In step S130, the key to be verified is matched with the identity key pre-stored in the key library, and the identity authentication result of the target space mobile device is obtained according to the matching result.

[0039] If the match is successful, it proves that the identity authentication is successful, and the target space mobile device can continue to perform subsequent operations; if the match is unsuccessful, it proves that the identity authentication fails, and the system can trigger a security mechanism to avoid potential identity fraud.

[0040] This application captures the motion trajectory of the mobile device in the target space, uses a preset decoding algorithm to identify and decode the key information embedded in the trajectory, obtains the key to be verified, and compares it with the pre-stored identity key to achieve identity authentication. This application is suitable for scenarios where the network is unreachable or in a low-signal environment, and can run independently without external network support. It is especially suitable for fields with high requirements for identity authentication, such as drone security and material distribution. It can verify the identity in real time during the take-off and landing of the drone and the flight, ensure the safety of the flight mission, and prevent unauthorized operations and security risks.

[0041] According to some embodiments, the key to be verified is embedded into the motion trajectory based on a key encoding generation algorithm, and the preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm.

[0042] It should be noted that, for the purpose of implementing authentication, the movement trajectory referred to in this application is not any trajectory of the target space mobile device during movement, but a preset movement trajectory executed by the target space mobile device, and this trajectory is highly correlated with the key to be verified.

[0043] The key encoding generation algorithm is used to encrypt and generate the key to be verified according to the parameters of the preset movement trajectory. It should be emphasized that each key encoding generated by encrypting according to the parameters of the preset movement trajectory has high uniqueness, high entropy and unpredictability, preventing the trajectory from being maliciously forged or reused.

[0044] According to the exemplary embodiment, the parameters of the movement trajectory include dynamic movement characteristics such as time stamps, movement speeds, and spatial coordinates.

[0045] On this basis, it can be understood that the decoding process is actually the key reconstruction process. The preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm. By inputting the obtained movement trajectory into the encryption process with the same parameter processing logic as the key encoding generation algorithm, the "decoding" of the movement trajectory can be completed to obtain the key to be verified.

[0046] According to some embodiments, referring to Figure 2 , before step S110, based on the above embodiments, before executing step 110, it is necessary to set the preset movement trajectory executed by the space mobile device during identity authentication, and at the same time generate a corresponding identity key according to the preset movement trajectory for matching use. It includes steps S210 - S240.

[0047] In step S210, a uniquely corresponding authentication movement trajectory is set for the space mobile device that meets the preset conditions.

[0048] Among them, the authentication movement trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions.

[0049] For the space mobile device that needs to perform identity authentication using the space mobile device identity authentication method provided in this application, a uniquely corresponding authentication movement trajectory needs to be preset for each space mobile device. Among them, the set authentication movement trajectory needs to have randomness and obvious time - space regularity, and have unique path and speed characteristics.

[0050] The design of the authentication movement trajectory is flexible, and parameters such as path shape and speed can be adjusted according to the actual application scenario to improve the security and complexity of verification.

[0051] It should be emphasized that if there are multiple spatial movement devices as described above, steps S210 - S240 need to be executed for each spatial movement device, but the execution timing does not necessarily have to be exactly the same. For example, steps S210 - S240 can be executed for a certain spatial movement device before it starts to move.

[0052] Taking the target spatial movement device as a drone as an example to illustrate this step, but this does not represent a limitation to this application.

[0053] Before the drone takes off, set its authentication movement trajectory. On this basis, during the setting process of the authentication movement trajectory, according to the exemplary embodiment, the generation of the flight trajectory can be expressed as the following mathematical model: ; Where, represents the three - dimensional space trajectory of the drone at moment; respectively represent the changes of the coordinates of the trajectory on the three axes with time.

[0054] On this basis, the path constraint can adopt the following mathematical model: ; Where, is the path planning function, which constrains with respect to the control parameter and to determine the basic shape and dynamic response of the trajectory, ensuring that the flight path of the drone not only meets the safety and environmental requirements but also can achieve the predetermined trajectory shape and motion characteristics.

[0055] It needs to be explained that the control parameter p plays a crucial role in the generation of the trajectory. Specifically, p is a set of parameters used to regulate flight characteristics, such as flight speed, turning radius, acceleration, etc. It directly determines the geometric shape and dynamic behavior of the trajectory.

[0056] Furthermore, the speed control can adopt the following mathematical model: ; Where, is the flight speed of the drone at time , and the speed adjustment function ensures that the dynamic change of the trajectory is closely related to the key encoding .

[0057] It should be emphasized that the trajectory execution of the drone strictly follows the time synchronization mechanism to ensure that each spatial point in the trajectory is associated with the time parameter : .

[0058] In step S220, motion trajectory parameters and the spatial coordinates at the authentication moment are extracted according to the motion trajectory.

[0059] According to some embodiments, the motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length, and / or speed information.

[0060] The spatial coordinates at the authentication moment are the real-time position of the spatial mobile device during authentication.

[0061] Analyze the motion trajectory and calculate the corresponding motion trajectory parameters and the spatial coordinates at the authentication moment.

[0062] In step S230, according to the motion trajectory parameters, the spatial coordinates at the authentication moment, and the current timestamp, an identity key corresponding to the authenticated motion trajectory is obtained by using a key encoding generation algorithm.

[0063] The generation process of the identity key needs to consider multi-dimensional parameters, such as time, space, moving speed, direction, and path, etc. Through the key encoding generation algorithm, encryption processing is performed to form a key encoding with high entropy and unpredictability.

[0064] According to the exemplary embodiments, the following mathematical model can be adopted to generate the identity key by using the key encoding generation algorithm: ; where is the generated identity key encoding; is the timestamp to ensure the timeliness of the key encoding and prevent replay attacks; is the spatial coordinate (such as longitude and latitude, GPS coordinate, etc.) used to describe the spatial coordinates at the authentication moment; is the motion trajectory parameter, including the curvature, heading angle, path length of the trajectory, and the speed information of flying on the trajectory, etc., to ensure the uniqueness and complexity of the trajectory. The speed information of flying includes linear velocity and angular velocity to enhance the dynamic characteristics of the trajectory. Finally, these information are fused and encrypted through the key encoding function to obtain the identity key.

[0065] In some embodiments, the key encoding function can adopt encryption methods such as hash function (SHA-256), symmetric encryption (AES), and asymmetric encryption (RSA, ECC), etc., to improve the security and anti-attack ability of the key.

[0066] In step S240, store the identity key into the key library.

[0067] Through the comprehensive encryption processing of the above parameters, the combination of the generation of the movement trajectory and the key encoding has a high degree of concealment and uniqueness, is difficult to forge, and can effectively resist trajectory forgery and replay attacks. The generated identity key is issued to the authentication end and stored in the key library therein.

[0068] Based on the above embodiments, the key encoding generation algorithm is denoted as In the case of ; Among them, is the decoding function, is the key to be verified. In the key reconstruction stage, the system needs to adopt the parameter processing logic that is exactly the same as the encryption function , and input the timestamp , spatial coordinates and flight trajectory parameters extracted from the obtained movement trajectory into the encryption process again, so as to recalculate the key encoding .

[0069] It should be particularly noted that for the case of using a one-way hash function (such as SHA-256), the decoding function does not recover the original data through the traditional decryption process, but generates a hash value that is exactly the same as the original key through repeated calculations with the same parameters.

[0070] According to some embodiments, before step S110, step S100 is further included.

[0071] In step S100, an authentication request is triggered to enable the target space mobile device to execute the authentication movement trajectory; Among them, the authentication request includes at least one of an authentication request actively sent by the target space mobile device, an authentication request actively sent by the authentication end, an authentication request triggered when the target space mobile device reaches a preset space position, and an authentication request triggered when reaching a preset moment.

[0072] In order to save computing resources, the authentication end (such as a base station) does not authenticate each passing target space mobile device, but only executes the authentication process of steps S110 - S130 after the authentication request is triggered.

[0073] The triggering conditions of the authentication request include: triggered after the target space mobile device actively sends an authentication request, triggered after the authentication end actively sends an authentication request, triggered when the target space mobile device reaches a preset space position, triggered when reaching a preset moment, etc.

[0074] According to some embodiments, referring toFigure 3 In step S110, the motion trajectory of the target spatial mobile device is obtained, which can be specifically implemented through steps S310 to S350.

[0075] In step S310, an image acquisition device is used to acquire multiple pieces of image data of the target spatial mobile device.

[0076] The image acquisition device can be a camera or other devices that can collect images.

[0077] Receive the image data captured by the image acquisition device before authentication, and calculate the spatial motion trajectory of the target spatial mobile device through the position change information in the image and in combination with the time synchronization information.

[0078] Assume that the image data captured by the image acquisition device is , where is the spatial coordinate in the image, and is the time coordinate.

[0079] In step S320, extract the feature points of each piece of image data among the multiple pieces of image data, and determine the position coordinates of the feature points.

[0080] Through an image feature extraction algorithm, such as SIFT (Scale-invariant feature transform), SURF (Speed Up Robust Features), or optical flow method, extract the feature points from consecutive image frames, and track the position changes of these feature points at different time points to obtain the position coordinates of these feature points at different time points.

[0081] It should be noted that the feature points usually include the prominent parts or features of the target spatial mobile device. By tracking these feature points, the relative position change of the target spatial mobile device can be estimated.

[0082] In a specific embodiment, the target spatial mobile device is a drone, and the feature points include the corner points and light spots of the fuselage.

[0083] In step S330, according to the change of the position coordinates, obtain the speed information of the corresponding feature points.

[0084] Assume that at times and , the coordinates of the feature points at the corresponding positions in the image are and respectively. Then, the speed of the target spatial mobile device on the image plane can be calculated, that is, the speed of each feature point of the target spatial mobile device at the current moment: ; Among them, is the speed of the target space mobile device on the image plane, with the unit of pixel / second.

[0085] In step S340, according to the position coordinates of each feature point and the internal parameters of the image acquisition device, the three-dimensional space coordinates of each feature point are calculated.

[0086] According to the change in the position of the feature points in consecutive image frames and the known internal parameters of the image acquisition device (such as focal length, viewing angle, etc.), the coordinates of the feature points in the two-dimensional image are converted into three-dimensional space coordinates , that is, the real space position of each feature point is calculated, and the real space position of the target space mobile device can be obtained.

[0087] According to the exemplary embodiment, in the process of converting the coordinates of the feature points in the two-dimensional image into three-dimensional space coordinates, it can be implemented by, for example, triangulation or stereo vision algorithms.

[0088] Assume that the coordinates of the feature points in the image are , then through the projection matrix of the image acquisition device, the three-dimensional space coordinates are calculated: ; Among them, is the projection matrix, is the space coordinates of the target space mobile device in the world coordinate system, represents the transpose matrix.

[0089] In step S350, according to the three-dimensional space coordinates and speed information of the feature points, the motion trajectory of the target space mobile device is obtained.

[0090] According to the position and speed information of the feature points extracted from the image, the motion trajectory of the target space mobile device in the three-dimensional space can be calculated. The trajectory of the target space mobile device can be represented as a set of continuous space points: ; Among them, is the three-dimensional space trajectory of the target space mobile device at time , are respectively the positions of the target space mobile device on the axis.

[0091] Finally, through the position data at consecutive time points, the complete flight trajectory of the drone from takeoff to landing can be obtained, which serves as the basis for subsequent decoding and authentication.

[0092] According to some embodiments, referring toFigure 4 In step S110, the motion trajectory of the target space mobile device is obtained, which can be specifically implemented through steps S410 - S450.

[0093] In step S410, multiple sets of image data samples are obtained when multiple space mobile devices execute their uniquely corresponding authentication motion trajectories.

[0094] The multiple sets of image data samples can be obtained by using an image device, or existing data can be directly used to train the model. This application places no restrictions on this.

[0095] In step S420, the multiple sets of image data samples are labeled with motion trajectories.

[0096] The labeled content is a set of three-dimensional coordinates of the motion trajectory points of the space mobile device corresponding to the image data sample.

[0097] In step S430, a motion trajectory extraction model is trained using the multiple sets of image data samples labeled with motion trajectories.

[0098] This application places no specific restrictions on the base model and training algorithm of the motion trajectory extraction model, which can be selected according to the actual situation.

[0099] In step S440, multiple image data of the target space mobile device are obtained using an image acquisition device.

[0100] The acquisition method is similar to step S310, and this application will not elaborate here.

[0101] In step S450, the multiple image data are input into the motion trajectory extraction model, and the motion trajectory of the target space mobile device is output.

[0102] This embodiment uses a machine learning model to identify and extract spatio-temporal trajectories, improving the accuracy and robustness of the decoding process.

[0103] According to some embodiments, in step S100, an identity authentication request is triggered to cause the target space mobile device to execute an authentication motion trajectory, which can be specifically implemented through step S101.

[0104] In step S101, an identity authentication request is triggered to cause the target space mobile device to control the target space mobile device to reach the corresponding trajectory points in sequence according to the speed and position specified in the authentication motion trajectory based on its trajectory planning model.

[0105] Through the trajectory planning model of the target space mobile device, the target space mobile device can accurately execute the pre-set authentication motion trajectory that is highly related to the key to be verified, thus presenting as the motion trajectory that needs to be obtained in step 110. This trajectory not only has uniqueness but also can effectively resist forgery or replay attacks, providing a solid foundation for subsequent identity verification.

[0106] For the specific content of the trajectory planning model, reference can be made to the above-mentioned embodiments, and details are not described herein in the present application.

[0107] According to some embodiments, after step S230, steps S231 - S232 are further included.

[0108] In step S231, the identity key is further encrypted using a preset encryption algorithm.

[0109] In step S232, the identity key is updated using the result of the further encryption.

[0110] To further improve the security performance, a preset encryption algorithm is adopted to further encrypt the identity key corresponding to the authentication motion trajectory obtained by the key coding generation algorithm, and the result of the further encryption is used as the identity key.

[0111] Naturally, during the decoding process, after calculating using a preset decoding algorithm with the same parameter processing logic as the key coding generation algorithm, it is also necessary to calculate using a second decryption algorithm with the same parameter processing logic as the corresponding preset encryption algorithm to obtain the key to be verified.

[0112] According to some embodiments, referring to Figure 5 , in step S130, the key to be verified is matched with the identity key pre-stored in the key library, and the identity verification result of the target space mobile device is obtained according to the matching result, which can be specifically implemented through steps S510 - S530.

[0113] In step S510, the key to be verified is matched with the identity key pre-stored in the key library.

[0114] That is to say, the key to be verified recovered by decoding is compared with the identity key pre-stored in the key library.

[0115] In step S520, when the matching result is a successful match, the identity verification result of the target space mobile device is verified to pass.

[0116] If there is an identity key in the key library that is the same as the key to be verified, that is, the match is successful, it proves that the identity verification of the target space mobile device passes.

[0117] In step S530, when the matching result is unsuccessful, the authentication result of the target space mobile device fails the verification.

[0118] If there is no identity key in the key library that is the same as the key to be verified, that is, the matching is unsuccessful, it proves that the authentication of the target space mobile device fails.

[0119] According to some embodiments, after step S130, steps S131 to S132 are further included.

[0120] In step S131, when the authentication result of the target space mobile device passes the verification, the target space mobile device is allowed to continue to execute the task.

[0121] In step S132, when the authentication result of the target space mobile device fails the verification, a security mechanism is triggered.

[0122] The device embodiments of the present application are described below, which can be used to execute the method embodiments of the present application. For details not disclosed in the device embodiments of the present application, reference can be made to the method embodiments of the present application.

[0123] Figure 6 The block diagram of a space mobile device authentication device according to an exemplary embodiment is shown.

[0124] Figure 6 The device shown can execute the space mobile device authentication method according to the foregoing embodiments of the present application.

[0125] As Figure 6 shown, the space mobile device authentication device may include: See Figure 6 Referring to the foregoing description, the trajectory acquisition module 610 is configured to acquire the motion trajectory of the target space mobile device.

[0126] The trajectory decoding module 620 is configured to decode the motion trajectory by using a preset decoding algorithm to obtain the key to be verified.

[0127] The key verification module 630 is configured to match the key to be verified with the identity key pre-stored in the key library, and obtain the authentication result of the target space mobile device according to the matching result.

[0128] The device executes functions similar to those of the method provided above. Other functions can be seen in the foregoing description and will not be elaborated here.

[0129] Figure 7 An electronic device according to an exemplary embodiment of the present application is shown. The following refers to Figure 7 to describe the electronic device 700 according to this embodiment of the present application.Figure 7 The displayed electronic device 700 is merely an example and should not impose any limitation on the functions and scope of use of the embodiments of the present application.

[0130] As Figure 7 shown, the electronic device 700 is presented in the form of a general-purpose computing device. The components of the electronic device 700 may include, but are not limited to: at least one processing unit 710, at least one storage unit 720, a bus 730 connecting different system components (including the storage unit 720 and the processing unit 710), a display unit 740, etc.

[0131] Among them, the storage unit stores program code, and the program code can be executed by the processing unit 710, so that the processing unit 710 executes the methods according to various exemplary embodiments of the present application described in this specification. For example, the processing unit 710 can execute the methods as described above.

[0132] The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 7201 and / or a cache storage unit 7202, and may further include a read-only storage unit (ROM) 7203.

[0133] The storage unit 720 may further include a program / utilities 7204 having a set (at least one) of program modules 7205. Such program modules 7205 include, but are not limited to: an operating system, one or more application programs, other program modules, and program data. Each or some combination of these examples may include the implementation of a network environment.

[0134] The bus 730 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus structures.

[0135] The electronic device 700 can also communicate with one or more external devices 300 (such as a keyboard, a pointing device, a Bluetooth device, etc.), and can also communicate with one or more devices that enable a user to interact with the electronic device 700, and / or communicate with any device that enables the electronic device 700 to communicate with one or more other computing devices (such as a router, a modem, etc.). Such communication can be carried out through the input / output (I / O) interface 750. Moreover, the electronic device 700 can also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) through the network adapter 760. The network adapter 760 can communicate with other modules of the electronic device 700 through the bus 730. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in combination with the electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0136] Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described herein can be implemented by software, or can be implemented by the way of software combined with necessary hardware. The technical solution according to the embodiments of the present application can be embodied in the form of a software product, and the software product can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, or a network device, etc.) to execute the above method according to the embodiments of the present application.

[0137] The software product can adopt any combination of one or more readable media. The readable media can be a readable signal medium or a readable storage medium. The readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples (a non-exhaustive list) of the readable storage medium include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0138] A computer-readable storage medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries readable program code. Such a propagated data signal may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable storage medium may also be any readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0139] The program code for performing the operations of this application may be written in any combination of one or more programming languages. The programming languages include object-oriented programming languages such as Java, C++, etc., and also include conventional procedural programming languages such as the "C" language or similar programming languages. The program code may be executed entirely on the user's computing device, partially on the user's device, executed as a stand-alone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user's computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or, it may be connected to an external computing device (e.g., by using an Internet service provider to connect through the Internet).

[0140] The above computer-readable medium carries one or more programs, and when the one or more programs are executed by a device, the computer-readable medium realizes the foregoing functions.

[0141] Those skilled in the art can understand that the above-mentioned modules can be distributed in the device according to the description of the embodiments, or can be correspondingly changed and distributed in one or more devices that are only different from this embodiment. The modules of the above embodiments can be combined into one module, or further split into multiple sub-modules.

[0142] Through the description of the above embodiments, those skilled in the art can easily understand that the exemplary embodiments described herein can be implemented by software, or can be implemented by the way of software combined with necessary hardware. Therefore, the technical solution according to the embodiments of this application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the embodiments of this application.

[0143] The exemplary embodiments of the present application have been specifically shown and described above. It should be understood that the present application is not limited to the detailed structures, arrangements or implementation methods described herein; on the contrary, the present application is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.

Claims

1. A spatial mobile device identity authentication method, characterized in that: include: Obtain the motion trajectory of the mobile device in the target space; Decoding the motion trajectory using a preset decoding algorithm to obtain a key to be verified; The key to be verified is matched with the identity key pre-stored in the key library, and the identity authentication result of the target space mobile device is obtained according to the matching result.

2. The method according to claim 1, characterized in that The key to be verified is embedded in the motion trajectory based on a key encoding generation algorithm, and the preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm.

3. The method according to claim 1, characterized in that Before obtaining the motion trajectory of the mobile device in the target space, the method further includes: Setting a unique corresponding authentication motion trajectory for a spatial mobile device that meets preset conditions, wherein the authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions; Extracting motion trajectory parameters and authentication time spatial coordinates according to the motion trajectory; According to the motion trajectory parameters, the spatial coordinates at the authentication time and the current timestamp, the identity key corresponding to the authentication motion trajectory is obtained by using a key coding generation algorithm; The identity key is stored in the key store.

4. The method according to claim 3, characterized in that Before obtaining the motion trajectory of the mobile device in the target space, the method further includes: triggering an identity authentication request so that the target space mobile device executes the authentication motion trajectory; Among them, the identity authentication request includes at least one of an identity authentication request actively sent by the target space mobile device, an identity authentication request actively sent by the identity authentication terminal, an identity authentication request triggered by the target space mobile device reaching a preset spatial position, and an identity authentication request triggered at a preset time.

5. The method according to claim 1, characterized in that: The step of obtaining the motion trajectory of the mobile device in the target space includes: Using an image acquisition device, acquiring multiple image data of the target space mobile device; Extracting feature points of each image data from the plurality of image data, and determining position coordinates of the feature points; According to the change of the position coordinates, obtaining the speed information of the corresponding feature point; Calculate the three-dimensional space coordinates of each feature point according to the position coordinates of each feature point and the internal parameters of the image acquisition device; The motion trajectory of the mobile device in the target space is obtained according to the three-dimensional space coordinates of the feature points and the speed information.

6. The method according to claim 1, characterized in that The step of obtaining the motion trajectory of the mobile device in the target space includes: Acquire multiple sets of image data samples when multiple spatial mobile devices execute their unique corresponding authentication motion trajectories; Performing motion trajectory marking on the multiple groups of image data samples; Using the plurality of sets of image data samples labeled with motion trajectories, training a motion trajectory extraction model; Using an image acquisition device, acquiring multiple image data of the target space mobile device; The plurality of image data are input into the motion trajectory extraction model, and the motion trajectory of the mobile device in the target space is output.

7. The method according to claim 3, characterized in that The motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length and / or speed information.

8. The method according to claim 4, characterized in that The triggering of the identity authentication request so that the target space mobile device executes the authentication motion trajectory includes: An identity authentication request is triggered so that the target space mobile device, based on its trajectory planning model, controls the target space mobile device to reach corresponding trajectory points in sequence according to the speed and position specified in the authentication motion trajectory.

9. The method according to claim 3, characterized in that: After obtaining the identity key corresponding to the authentication motion trajectory by using a key coding generation algorithm according to the motion trajectory parameters, the authentication time spatial coordinates and the current timestamp, the method further includes: Further encrypting the identity key using a preset encryption algorithm; The identity key is updated using the result of the further encryption.

10. The method according to claim 1, characterized in that The step of matching the key to be verified with an identity key pre-stored in a key library, and obtaining an identity authentication result of the target space mobile device according to the matching result, includes: Matching the key to be verified with the identity key pre-stored in the key library; When the matching result is a successful match, the identity authentication result of the target space mobile device is a verification pass; When the matching result is an unsuccessful match, the identity authentication result of the target space mobile device is a verification failure.

11. The method according to claim 10, characterized in that After matching the key to be verified with the identity key pre-stored in the key library and obtaining the identity authentication result of the target space mobile device according to the matching result, the method further includes: When the identity authentication result of the target space mobile device is verified to be passed, allowing the target space mobile device to continue to perform the task; When the identity authentication result of the target space mobile device is verification failure, a security mechanism is triggered.

12. A spatial mobile device identity authentication device, characterized in that: include: A trajectory acquisition module, used to acquire the motion trajectory of the mobile device in the target space; A trajectory decoding module, used to decode the motion trajectory using a preset decoding algorithm to obtain a key to be verified; The key verification module is used to match the key to be verified with the identity key pre-stored in the key library, and obtain the identity verification result of the target space mobile device according to the matching result.

13. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 11.

14. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instruction is executed by a processor, the method according to any one of claims 1 to 11 is implemented.

Images