Space mobile device identity authentication method, device, electronic device and storage medium

Abstract

The present application provides a method, device, electronic device and storage medium for identifying identity of a space mobile device, and relates to the field of information security technology. A method for identifying identity of a space mobile device, comprising: obtaining the motion trajectory of a target space mobile device; decoding the motion trajectory using a preset decoding algorithm to obtain a key to be verified; matching the key to be verified with an identity key pre-stored in a key library, and obtaining an authentication result of the target space mobile device based on the matching result. According to the technical solution of the embodiment of the present application, by capturing the motion trajectory of the target space mobile device, using a preset decoding algorithm to identify and decode the key information embedded in the trajectory, the key to be verified is obtained, and it is compared with the pre-stored identity key to achieve identity authentication. The present application does not need to rely on network connection or hardware device support, is not easy to be cracked, and has good anti-interference ability and security performance.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and specifically to a spatial mobile device identity authentication method, device, electronic device and computer-readable storage medium. Background Art

[0002] With the rapid development of drone technology and its widespread application in security, logistics, and other fields, identity verification has become a critical step in ensuring mission security and device legitimacy. In these application scenarios, drones often require identity verification at the start of a mission or during landing to confirm that they are authorized devices and prevent unauthorized devices from accessing or executing missions.

[0003] However, existing drone authentication technologies mostly rely on remote network connections, cloud-based server authentication, and traditional cryptographic methods (such as digital certificates and password authentication). These technologies perform well in stable networks with good signal coverage, but face numerous challenges in densely populated areas, remote regions, or high-interference environments.

[0004] With the booming low-altitude economy, especially with the increasing number of applications such as low-altitude logistics and delivery, emergency rescue, and security patrols, insufficient network infrastructure has become a bottleneck restricting the development of drone authentication technology. In areas where supporting infrastructure such as low-altitude base stations are not yet fully constructed and network coverage is patchy, traditional network-dependent authentication methods are susceptible to network fluctuations, delays, and even disconnections. Furthermore, network dependence introduces security risks such as the potential for tampering and forgery of authentication information, further weakening the reliability of authentication. Summary of the Invention

[0005] Based on this, the present application provides a space mobile device identity authentication method, device, electronic device and computer-readable storage medium to achieve aircraft identity authentication with low network dependence and high security.

[0006] According to one aspect of the present application, a method for authenticating a spatial mobile device is proposed, comprising: obtaining a motion trajectory of a target spatial mobile device; decoding the motion trajectory using a preset decoding algorithm to obtain a key to be verified; matching the key to be verified with an identity key pre-stored in a key library, and obtaining an authentication result of the target spatial mobile device based on the matching result.

[0007] According to some embodiments, the key to be verified is embedded in the motion trajectory based on a key encoding generation algorithm, and the preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm.

[0008] According to some embodiments, before obtaining the motion trajectory of the target space mobile device, it also includes: setting a unique corresponding authentication motion trajectory for the space mobile device that meets preset conditions, wherein the authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions; extracting motion trajectory parameters and authentication time spatial coordinates according to the motion trajectory; using a key coding generation algorithm to obtain an identity key corresponding to the authentication motion trajectory according to the motion trajectory parameters, authentication time spatial coordinates and current timestamp; and storing the identity key in a key library.

[0009] According to some embodiments, before obtaining the motion trajectory of the target space mobile device, it also includes: triggering an authentication request so that the target space mobile device executes an authentication motion trajectory; wherein the authentication request includes at least one of an authentication request actively sent by the target space mobile device, an authentication request actively sent by the authentication end, an authentication request triggered when the target space mobile device reaches a preset spatial position, and an authentication request triggered when the target space mobile device reaches a preset time.

[0010] According to some embodiments, obtaining the motion trajectory of the mobile device in the target space includes: using an image acquisition device to obtain multiple image data of the mobile device in the target space; extracting feature points of each image data in the multiple image data, and determining the position coordinates of the feature points; obtaining speed information of the corresponding feature points based on changes in the position coordinates; calculating the three-dimensional space coordinates of each feature point based on the position coordinates of each feature point and internal parameters of the image acquisition device; and obtaining the motion trajectory of the mobile device in the target space based on the three-dimensional space coordinates and speed information of the feature points.

[0011] According to some embodiments, obtaining the motion trajectory of a target space mobile device includes: obtaining multiple sets of image data samples when multiple space mobile devices execute their uniquely corresponding certified motion trajectories; annotating the motion trajectories of the multiple sets of image data samples; training a motion trajectory extraction model using the multiple sets of image data samples annotated with the motion trajectories; obtaining multiple image data of the target space mobile device using an image acquisition device; inputting the multiple image data into the motion trajectory extraction model, and outputting the motion trajectory of the target space mobile device.

[0012] According to some embodiments, the motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length and / or speed information.

[0013] According to some embodiments, triggering an authentication request so that the target space mobile device executes an authentication motion trajectory includes: triggering an authentication request so that the target space mobile device controls the target space mobile device to reach corresponding trajectory points in sequence according to the speed and position specified in the authentication motion trajectory based on its trajectory planning model.

[0014] According to some embodiments, after obtaining the identity key corresponding to the authentication motion trajectory using a key coding generation algorithm based on the motion trajectory parameters, the spatial coordinates at the authentication time, and the current timestamp, it also includes: further encrypting the identity key using a preset encryption algorithm; and updating the identity key using the result of the further encryption.

[0015] According to some embodiments, the key to be verified is matched with the identity key pre-stored in the key library, and the authentication result of the target space mobile device is obtained based on the matching result, including: matching the key to be verified with the identity key pre-stored in the key library; when the matching result is a successful match, the authentication result of the target space mobile device is a passed verification; when the matching result is an unsuccessful match, the authentication result of the target space mobile device is a failed verification.

[0016] According to some embodiments, after matching the key to be verified with the identity key pre-stored in the key library and obtaining the identity authentication result of the target space mobile device based on the matching result, it also includes: if the identity authentication result of the target space mobile device is verification passed, allowing the target space mobile device to continue to perform the task; if the identity authentication result of the target space mobile device is verification failed, triggering the security mechanism.

[0017] According to one aspect of the present application, a spatial mobile device identity authentication device includes: a trajectory acquisition module for acquiring the motion trajectory of a target spatial mobile device; a trajectory decoding module for decoding the motion trajectory using a preset decoding algorithm to obtain a key to be verified; a key verification module for matching the key to be verified with an identity key pre-stored in a key library, and obtaining an identity authentication result of the target spatial mobile device based on the matching result.

[0018] According to one aspect of the present application, an electronic device is proposed, which includes: one or more processors; a storage device for storing one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the method as described above.

[0019] According to one aspect of the present application, a computer-readable medium is provided, on which a computer program or instruction is stored. When the program or instruction is executed by a processor, the method described above is implemented.

[0020] Through the above-mentioned embodiments provided by this application, this application captures the motion trajectory of the mobile device in the target space, uses a preset decoding algorithm to identify and decode the key information embedded in the trajectory, obtains the key to be verified, and compares it with the pre-stored identity key to achieve identity authentication. This application does not need to rely on network connection or hardware device support, is not easy to be cracked, and has good anti-interference ability and security performance. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] It should be understood that the foregoing general description and the following detailed description are merely illustrative and are not restrictive of the present application.

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without exceeding the scope of protection required by this application.

[0023] Figure 1 A flowchart of a method for authenticating a spatial mobile device provided in an embodiment of the present application;

[0024] Figure 2 A flowchart for generating an identity key provided in an embodiment of the present application;

[0025] Figure 3 One of the flow charts for obtaining the motion trajectory of a mobile device in a target space provided in an embodiment of the present application;

[0026] Figure 4 The second flowchart of obtaining the motion trajectory of a mobile device in a target space provided in an embodiment of the present application;

[0027] Figure 5 A flowchart of matching a key to be verified with an identity key pre-stored in a key library and obtaining an identity authentication result of a target space mobile device based on the matching result is provided in an embodiment of the present application;

[0028] Figure 6 A block diagram of a spatial mobile device identity authentication device provided in an embodiment of the present application;

[0029] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0030] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0031] In addition, described feature, structure or characteristic can be combined in one or more embodiments in any suitable manner.In the following description, many specific details are provided so as to provide a full understanding of the embodiments of the present application. However, it will be appreciated by those skilled in the art that the technical scheme of the present application can be put into practice without one or more of the specific details, or other methods, components, devices, steps etc. can be adopted. In other cases, known methods, devices, implementations or operations are not shown or described in detail to avoid blurring the various aspects of the application.

[0032] The block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically separate entities. That is, these functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0033] The flowcharts shown in the accompanying drawings are for illustrative purposes only and do not necessarily include all contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may be decomposed, while others may be combined or partially combined. Therefore, the actual execution order may vary depending on the actual situation.

[0034] For specific implementation methods, please refer to the following embodiments.

[0035] Figure 1 This is a flow chart of the space mobile device identity authentication method provided in the embodiment of the present application. Figure 1 As shown, the method includes steps S110 to S130.

[0036] In step S110 , the motion trajectory of the mobile device in the target space is obtained.

[0037] It should be noted that the mobile target space device referred to in this application includes low altitude, high altitude, space, and ocean. Naturally, the mobile target space device includes any device capable of moving at low altitude, high altitude, space, or ocean. According to example embodiments, the mobile target space device may be a drone, an electric vertical take-off and landing vehicle (eVTOL), a high-altitude drone, a space shuttle, an orbiting satellite, an unmanned surface vehicle (USV), an unmanned submarine, or any other unmanned aircraft, surface, or underwater vehicle.

[0038] In order to reduce the dependence on network connection during the process of obtaining motion trajectory, the present application adopts image and computer vision technology to obtain motion trajectory in some embodiments. The present application is particularly suitable for environments with no network or weak network coverage.

[0039] For ease of acquisition, in some embodiments, the acquired motion trajectory is the motion trajectory of the target space mobile device within a specified spatial range or a specified time range.

[0040] According to an example embodiment, the motion trajectory of the target mobile device in space is obtained after reaching a preset spatial coordinate. According to another example embodiment, the motion trajectory of the target mobile device in space is obtained after a preset time. The preset time may be a preset time for initiating identity verification of the mobile device in space, such as the Nth timestamp of the takeoff or landing phase.

[0041] It is important to emphasize that the motion trajectory in this application is the core of identity verification. The motion trajectory is embedded with unique key encoding information, thus ensuring the security and reliability of identity verification.

[0042] In step S120 , the motion trajectory is decoded using a preset decoding algorithm to obtain a key to be verified.

[0043] According to an example embodiment, after obtaining the motion trajectory of the mobile device in the target space, a preset decoding algorithm is used to extract motion features from the motion trajectory, and the key code embedded therein is recovered based on the motion features.

[0044] In step S130, the key to be verified is matched with the identity key pre-stored in the key library, and the identity authentication result of the target space mobile device is obtained according to the matching result.

[0045] If the match is successful, it proves that the identity authentication is successful, and the target space mobile device can continue to perform subsequent operations; if the match is unsuccessful, it proves that the identity authentication fails, and the system can trigger a security mechanism to avoid potential identity fraud.

[0046] This application captures the motion trajectory of a mobile device in the target space, uses a preset decoding algorithm to identify and decode the key information embedded in the trajectory, obtains the key to be verified, and compares it with the pre-stored identity key to achieve identity authentication. This application is suitable for scenarios where the network is unreachable or in a low-signal environment, and can run independently without external network support. It is especially suitable for fields with high requirements for identity authentication, such as drone security and material distribution. It can verify the identity in real time during the drone's take-off and landing and flight, ensure the safety of the flight mission, and prevent unauthorized operations and security risks.

[0047] According to some embodiments, the key to be verified is embedded in the motion trajectory based on a key encoding generation algorithm, and the preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm.

[0048] It should be pointed out that in order to achieve the purpose of identity authentication, the motion trajectory referred to in this application is not an arbitrary trajectory of the target space mobile device during movement, but a preset motion trajectory executed by the target space mobile device, which is highly correlated with the key to be verified.

[0049] The key code generation algorithm is used to encrypt and generate a key to be verified based on the parameters of the preset motion trajectory. It is important to emphasize that each key code generated based on the parameters of the preset motion trajectory is highly unique, high-entropy, and unpredictable, preventing the trajectory from being maliciously forged or reused.

[0050] According to an example embodiment, the parameters of the motion trajectory include dynamic motion features such as timestamp, motion speed, and spatial coordinates.

[0051] On this basis, it can be understood that the decoding process is actually a key reconstruction process. The preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm. The acquired motion trajectory is input into the encryption process with the same parameter processing logic as the key encoding generation algorithm to complete the "decoding" of the motion trajectory and obtain the key to be verified.

[0052] According to some embodiments, reference Figure 2 Before step S110, based on the above embodiment, before executing step 110, it is necessary to set a preset motion trajectory for the spatial mobile device during identity authentication, and generate a corresponding identity key based on the preset motion trajectory for matching. This includes steps S210 to S240.

[0053] In step S210, a unique corresponding authentication motion trajectory is set for the spatial mobile device that meets the preset conditions.

[0054] The authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions.

[0055] For mobile devices that require authentication using the mobile device authentication method provided in this application, a unique authentication motion trajectory must be preset for each mobile device. The authentication motion trajectory must exhibit randomness, significant temporal-spatial regularity, and possess unique path and speed characteristics.

[0056] The design of the authentication motion trajectory is flexible, and parameters such as path shape and speed can be adjusted according to the actual application scenario to improve the security and complexity of verification.

[0057] It should be emphasized that if there are multiple spatial mobile devices as mentioned above, steps S210-S240 need to be executed for each spatial mobile device, but the execution timing is not necessarily completely consistent. For example, steps S210-S240 can be executed for a spatial mobile device before the spatial mobile device starts moving.

[0058] This step is described using the target space mobile device as a drone as an example, but this does not represent a limitation to this application.

[0059] Before the drone takes off, its certified motion trajectory is set. Based on this, during the process of setting the certified motion trajectory, according to an exemplary embodiment, the generation of the flight trajectory can be expressed as the following mathematical model:

[0060] ;

[0061] in, Indicates that the drone is The three-dimensional spatial trajectory of the moment; Respectively represent the trajectory in The coordinates on the three axes change with time.

[0062] On this basis, the path constraint can adopt the following mathematical model: ;

[0063] in, is the path planning function, based on the control parameters right and Constraints are imposed to determine the basic shape and dynamic response of the trajectory to ensure the flight path of the drone It not only meets safety and environmental requirements, but also achieves predetermined trajectory shapes and motion characteristics.

[0064] It's important to explain that the control parameters p play a crucial role in trajectory generation. Specifically, p is a set of parameters used to control flight characteristics, such as flight speed, turn radius, and acceleration. It directly determines the trajectory geometry and dynamic behavior.

[0065] Furthermore, the speed control can adopt the following mathematical model:

[0066] ;

[0067] in, For drones in time The flight speed is adjusted by the speed adjustment function Ensuring dynamic changes in trajectory and key encoding Closely related.

[0068] It should be emphasized that the trajectory execution of the UAV strictly follows the time synchronization mechanism to ensure that each spatial point in the trajectory is consistent with the time parameter Related:

[0069] .

[0070] In step S220, motion trajectory parameters and authentication time spatial coordinates are extracted according to the motion trajectory.

[0071] According to some embodiments, the motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length and / or speed information.

[0072] The spatial coordinates at the time of authentication are the real-time position of the spatial mobile device at the time of authentication.

[0073] Analyze the motion trajectory and calculate the corresponding motion trajectory parameters and spatial coordinates at the authentication time.

[0074] In step S230, the identity key corresponding to the authentication motion trajectory is obtained using a key coding generation algorithm according to the motion trajectory parameters, the spatial coordinates at the authentication time, and the current timestamp.

[0075] The generation process of the identity key needs to consider multi-dimensional parameters, such as time, space, movement speed, direction and path, and is encrypted through a key coding generation algorithm to form a key code with high entropy and unpredictability.

[0076] According to an example embodiment, the key encoding generation algorithm may be used to generate the identity key using the following mathematical model:

[0077] ;

[0078] in, Encode the generated identity key; Timestamp to ensure the timeliness of key encoding and prevent replay attacks; It is the spatial coordinate (such as longitude and latitude, GPS coordinates, etc.), used to describe the spatial coordinate at the time of authentication; The motion trajectory parameters include the curvature, heading angle, path length, and speed information of the trajectory, etc., to ensure the uniqueness and complexity of the trajectory. The speed information of the flight includes linear velocity and angular velocity to enhance the dynamic characteristics of the trajectory. Finally, this information is encoded by the key function Perform fusion encryption to obtain the identity key.

[0079] In some embodiments, the key encoding function may use encryption methods such as hash function (SHA-256), symmetric encryption (AES), asymmetric encryption (RSA, ECC), etc. to enhance the security and anti-attack capability of the key.

[0080] In step S240 , the identity key is stored in the key store.

[0081] Through the combined encryption of these parameters, the combination of trajectory generation and key encoding is highly concealed and unique, making it difficult to forge and effectively defending against trajectory forgery and replay attacks. The generated identity key is distributed to the authentication client and stored in its key library.

[0082] Based on the above embodiment, the key code generation algorithm is recorded as In the case of , the corresponding preset decoding algorithm is:

[0083] ;

[0084] in, is the decoding function, Is the key to be verified. In the key reconstruction phase, the system needs to use the encryption function Completely consistent parameter processing logic, the timestamp extracted from the acquired motion trajectory , spatial coordinates And flight trajectory parameters Input it into the encryption process again to recalculate the key code .

[0085] It should be noted that when using a one-way hash function (such as SHA-256), the decoding function Instead of recovering the original data through the traditional decryption process, a hash value that is exactly the same as the original key is generated through repeated calculations of the same parameters.

[0086] According to some embodiments, before step S110 , step S100 is further included.

[0087] In step S100, an identity authentication request is triggered so that the target space mobile device executes an authentication motion trajectory;

[0088] Among them, the identity authentication request includes at least one of an identity authentication request actively sent by the target space mobile device, an identity authentication request actively sent by the identity authentication terminal, an identity authentication request triggered by the target space mobile device reaching a preset spatial position, and an identity authentication request triggered at a preset time.

[0089] In order to save computing resources, the authentication end (eg, base station) does not authenticate each target space mobile device passing through, but only executes the authentication process of steps S110-S130 after triggering an authentication request.

[0090] The triggering conditions for the authentication request include: triggered after the target space mobile device actively sends an authentication request, triggered after the authentication end actively sends an authentication request, triggered after the target space mobile device reaches a preset spatial location, triggered when it reaches a preset time, etc.

[0091] According to some embodiments, reference Figure 3 In step S110, the motion trajectory of the mobile device in the target space is obtained, which can be specifically achieved through steps S310 to S350.

[0092] In step S310, an image acquisition device is used to acquire multiple image data of the mobile device in the target space.

[0093] The image acquisition device can be a camera or other device that can capture images.

[0094] The image data taken by the image acquisition device before authentication is received, and the spatial motion trajectory of the mobile device in the target space is calculated through the position change information in the image combined with the time synchronization information.

[0095] Assume that the image data captured by the image acquisition device is ,in is the spatial coordinate in the image, is the time coordinate.

[0096] In step S320 , feature points of each image data in the plurality of image data are extracted, and the position coordinates of the feature points are determined.

[0097] Through image feature extraction algorithms such as SIFT (Scale-invariant feature transform), SURF (Speed Up Robust Features, an accelerated version of SIFT), or optical flow, feature points are extracted from continuous image frames, and the position changes of these feature points at different time points are tracked to obtain the position coordinates of these feature points at different time points.

[0098] It should be noted that the characteristic points generally include significant parts or features of the mobile device in the target space. By tracking these characteristic points, the relative position change of the mobile device in the target space can be estimated.

[0099] In a specific embodiment, the target space mobile device is a drone, and the feature points include corner points and light spots of the drone body.

[0100] In step S330 , the velocity information of the corresponding feature point is obtained according to the change of the position coordinates.

[0101] Assume that at time and , the coordinates of the feature points at the corresponding positions in the image are and , we can calculate the speed of the target space mobile device on the image plane, that is, the speed of each feature point of the target space mobile device at the current moment:

[0102] ;

[0103] in, is the speed of the target-space mobile device on the image plane, in pixels / second.

[0104] In step S340 , the three-dimensional space coordinates of each feature point are calculated based on the position coordinates of each feature point and the internal parameters of the image acquisition device.

[0105] According to the position change of feature points in continuous image frames and the known internal parameters of the image acquisition device (such as focal length, viewing angle, etc.), the coordinates of the feature points in the two-dimensional image are converted to Convert to three-dimensional space coordinates , that is, by calculating the real space position of each feature point, the real space position of the mobile device in the target space can be obtained.

[0106] According to an example embodiment, the conversion of feature point coordinates in a two-dimensional image into three-dimensional space coordinates may be implemented by using, for example, a triangulation method or a stereo vision algorithm.

[0107] Assume that the coordinates of the feature points in the image are , then obtain the projection matrix of the device through the image Calculate the three-dimensional space coordinates:

[0108] ;

[0109] in, is the projection matrix, is the spatial coordinate of the target space mobile device in the world coordinate system, Represents the transposed matrix.

[0110] In step S350, the motion trajectory of the mobile device in the target space is obtained according to the three-dimensional spatial coordinates and velocity information of the feature points.

[0111] Based on the position and velocity information of the feature points extracted from the image, the motion trajectory of the target space mobile device in three-dimensional space can be calculated. The trajectory of the target space mobile device can be represented as a continuous set of spatial points:

[0112] ;

[0113] in, Move the device to the target space in time The three-dimensional space trajectory of The target space mobile devices are Position on the axis.

[0114] Through the position data at continuous time points, the complete flight trajectory of the drone from takeoff to landing can be finally obtained, which serves as the basis for subsequent decoding and authentication.

[0115] According to some embodiments, reference Figure 4 In step S110, the motion trajectory of the mobile device in the target space is obtained, which can be specifically achieved through steps S410 to S450.

[0116] In step S410, multiple groups of image data samples are obtained when multiple spatial mobile devices execute their uniquely corresponding authentication motion trajectories.

[0117] Multiple sets of image data samples can be obtained using imaging equipment, or the model can be trained directly using existing data. This application does not impose any restrictions on this.

[0118] In step S420 , motion trajectory annotation is performed on multiple groups of image data samples.

[0119] The annotation content is the three-dimensional coordinate set of the motion trajectory points of the spatial mobile device corresponding to the image data sample.

[0120] In step S430, a motion trajectory extraction model is trained using multiple sets of image data samples labeled with motion trajectories.

[0121] This application does not impose any specific restrictions on the base model and training algorithm of the motion trajectory extraction model, and they can be selected according to actual conditions.

[0122] In step S440, an image acquisition device is used to acquire multiple image data of the mobile device in the target space.

[0123] The acquisition method is similar to step S310 and will not be elaborated here.

[0124] In step S450 , a plurality of image data are input into a motion trajectory extraction model, and a motion trajectory of the mobile device in the target space is output.

[0125] This embodiment uses a machine learning model to identify and extract information from spatiotemporal trajectories, thereby improving the accuracy and robustness of the decoding process.

[0126] According to some embodiments, in step S100, an identity authentication request is triggered so that the target space mobile device executes an authentication motion trajectory, which can be specifically achieved through step S101.

[0127] In step S101, an identity authentication request is triggered so that the target space mobile device is controlled to reach corresponding trajectory points in sequence according to the speed and position specified in the authentication motion trajectory based on its trajectory planning model.

[0128] By using the trajectory planning model for the target space mobile device, the target space mobile device can accurately execute a pre-set authentication motion trajectory that is highly correlated with the key to be verified, thereby representing the motion trajectory required to be obtained in step 110. This trajectory is not only unique but also effectively resists forgery or replay attacks, providing a solid foundation for subsequent identity verification.

[0129] The specific content of the trajectory planning model can be referred to the above embodiment, and this application will not go into details here.

[0130] According to some embodiments, step S231 - step S232 are further included after step S230.

[0131] In step S231, the identity key is further encrypted using a preset encryption algorithm.

[0132] In step S232, the identity key is updated using the result of the further encryption.

[0133] In order to further improve the security performance, a preset encryption algorithm is used to further encrypt the identity key corresponding to the authentication motion trajectory obtained by the key coding generation algorithm, and the further encrypted result is used as the identity key.

[0134] Naturally, during the decoding process, after calculating using the preset decoding algorithm with the same parameter processing logic as the key encoding generation algorithm, it is also necessary to use the second decryption algorithm with the same parameter processing logic as the corresponding preset encryption algorithm to obtain the key to be verified.

[0135] According to some embodiments, reference Figure 5 In step S130, the key to be verified is matched with the identity key pre-stored in the key library, and the identity authentication result of the target space mobile device is obtained according to the matching result, which can be specifically achieved through steps S510-step S530.

[0136] In step S510, the key to be verified is matched with the identity key pre-stored in the key library.

[0137] That is, the key to be verified recovered by decoding is compared with the identity key pre-stored in the key library.

[0138] In step S520, when the matching result is a successful match, the identity authentication result of the target space mobile device is a verification pass.

[0139] If there is an identity key in the key store that is the same as the key to be verified, the match is successful, proving that the target space mobile device identity authentication is successful.

[0140] In step S530, when the matching result is unsuccessful, the identity authentication result of the target space mobile device is verification failure.

[0141] If there is no identity key in the key library that is identical to the key to be verified, the match is unsuccessful, proving that the target space mobile device identity authentication fails.

[0142] According to some embodiments, after step S130, steps S131 and S132 are further included.

[0143] In step S131, when the identity authentication result of the target space mobile device is verification passed, the target space mobile device is allowed to continue to execute the task.

[0144] In step S132, when the identity authentication result of the target space mobile device is verification failure, the security mechanism is triggered.

[0145] The following describes an apparatus embodiment of the present application, which can be used to perform the method embodiment of the present application. For details not disclosed in the apparatus embodiment of the present application, reference can be made to the method embodiment of the present application.

[0146] Figure 6 A block diagram of a spatial mobile device identity authentication apparatus according to an exemplary embodiment is shown.

[0147] Figure 6 The device shown can execute the aforementioned spatial mobile device identity authentication method according to the embodiment of the present application.

[0148] like Figure 6 As shown, the spatial mobile device identity authentication device may include:

[0149] See also Figure 6 With reference to the above description, the trajectory acquisition module 610 is used to acquire the motion trajectory of the mobile device in the target space.

[0150] The trajectory decoding module 620 is used to decode the motion trajectory using a preset decoding algorithm to obtain a key to be verified.

[0151] The key verification module 630 is used to match the key to be verified with the identity key pre-stored in the key library, and obtain the identity authentication result of the target space mobile device according to the matching result.

[0152] The device performs functions similar to the method provided above. For other functions, please refer to the previous description and will not be repeated here.

[0153] Figure 7 An electronic device according to an exemplary embodiment of the present application is shown. Figure 7 hereinafter, an electronic device 700 according to this embodiment of the present application is described. Figure 7 The electronic device 700 shown is merely an example and should not limit the functions and scope of use of the embodiments of the present application.

[0154] like Figure 7 As shown, electronic device 700 is implemented as a general-purpose computing device. Components of electronic device 700 may include, but are not limited to, at least one processing unit 710, at least one storage unit 720, a bus 730 connecting various system components (including storage unit 720 and processing unit 710), and a display unit 740.

[0155] The storage unit stores program codes, which can be executed by the processing unit 710, so that the processing unit 710 performs the methods described in this specification according to various exemplary embodiments of the present application. For example, the processing unit 710 can perform the method described above.

[0156] The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access memory unit (RAM) 7201 and / or a cache memory unit 7202 , and may further include a read-only memory unit (ROM) 7203 .

[0157] The storage unit 720 may also include a program / utility 7204 having a set (at least one) of program modules 7205, such program modules 7205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0158] Bus 730 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0159] The electronic device 700 can also communicate with one or more external devices 300 (e.g., a keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with the electronic device 700, and / or any device that enables the electronic device 700 to communicate with one or more other computing devices (e.g., a router, modem, etc.). This communication can occur via an input / output (I / O) interface 750. Furthermore, the electronic device 700 can communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) via a network adapter 760. The network adapter 760 can communicate with other modules of the electronic device 700 via the bus 730. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with the electronic device 700, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0160] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. The technical solution according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, or a network device, etc.) to execute the above-mentioned method according to the embodiments of the present application.

[0161] The software product may utilize any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or component, or any combination thereof. More specific examples (a non-exhaustive list) of readable storage media include: an electrical connection having one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0162] Computer-readable storage media may include a data signal propagated in baseband or as part of a carrier wave, which carries readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. The readable storage medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on the readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0163] The program code used to perform the operations of the present application can be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, and conventional procedural programming languages such as "C" or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, as a stand-alone software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0164] The computer-readable medium carries one or more programs. When the one or more programs are executed by the device, the computer-readable medium implements the aforementioned functions.

[0165] Those skilled in the art will appreciate that the modules described above can be distributed in the device according to the description of the embodiment, or can be modified accordingly to be used in one or more devices that are different from the embodiment. The modules of the above embodiment can be combined into one module or further divided into multiple submodules.

[0166] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the embodiments of the present application.

[0167] While the exemplary embodiments of the present application have been specifically illustrated and described above, it should be understood that the present application is not limited to the detailed structures, configurations, or implementations described herein; rather, the present application is intended to encompass various modifications and equivalent configurations within the spirit and scope of the appended claims.

Claims

1. A method for identifying the identity of a space mobile device, characterized in that: include: Setting a unique corresponding authentication motion trajectory for a spatial mobile device that meets preset conditions, wherein the authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions; Extracting motion trajectory parameters and spatial coordinates at the time of authentication according to the motion trajectory, wherein the spatial coordinates at the time of authentication are the real-time position of the spatial mobile device at the time of authentication; Obtaining an identity key corresponding to the authentication motion trajectory using a key encoding generation algorithm based on the motion trajectory parameters, the authentication time spatial coordinates, and the current timestamp; Storing the identity key in a key store; Use image and computer vision technology to obtain the motion trajectory of mobile devices in the target space; Decoding the timestamp, spatial coordinates, and motion trajectory parameters extracted from the motion trajectory using a preset decoding algorithm to obtain a key to be verified; The key to be verified is matched with the identity key pre-stored in the key library, and the identity authentication result of the target space mobile device is obtained according to the matching result.

2. The method according to claim 1, characterized in that The key to be verified is embedded in the motion trajectory based on a key encoding generation algorithm, and the preset decoding algorithm has the same parameter processing logic as the key encoding generation algorithm.

3. The method according to claim 1, characterized in that Before obtaining the motion trajectory of the mobile device in the target space, the method further includes: triggering an identity authentication request so that the target space mobile device executes the authentication motion trajectory; Among them, the identity authentication request includes at least one of an identity authentication request actively sent by the target space mobile device, an identity authentication request actively sent by the identity authentication terminal, an identity authentication request triggered when the target space mobile device reaches a preset spatial position, and an identity authentication request triggered when reaching a preset time.

4. The method according to claim 1, wherein The method of using image and computer vision technology to obtain the motion trajectory of the mobile device in the target space includes: Using an image acquisition device, acquiring multiple image data of the mobile device in the target space; Extracting feature points of each image data from the plurality of image data, and determining position coordinates of the feature points; Obtaining velocity information of corresponding feature points according to the change of the position coordinates; Calculating the three-dimensional space coordinates of each feature point according to the position coordinates of each feature point and the internal parameters of the image acquisition device; The motion trajectory of the mobile device in the target space is obtained according to the three-dimensional spatial coordinates of the feature points and the speed information.

5. The method according to claim 1, wherein The method of using image and computer vision technology to obtain the motion trajectory of the mobile device in the target space includes: Acquire multiple sets of image data samples when multiple spatial mobile devices execute their uniquely corresponding authentication motion trajectories; performing motion trajectory annotation on the multiple groups of image data samples; Using the multiple groups of image data samples marked with motion trajectories, training a motion trajectory extraction model; Using an image acquisition device, acquiring multiple image data of the mobile device in the target space; The plurality of image data are input into the motion trajectory extraction model, and the motion trajectory of the mobile device in the target space is output.

6. The method according to claim 1, characterized in that The motion trajectory parameters include trajectory curvature, trajectory heading angle, trajectory path length and / or speed information.

7. The method according to claim 3, characterized in that The triggering of the identity authentication request so that the target space mobile device executes the authentication motion trajectory includes: An identity authentication request is triggered so that the target space mobile device is controlled to reach corresponding trajectory points in sequence according to the speed and position specified in the authentication motion trajectory based on its trajectory planning model.

8. The method according to claim 1, characterized in that After obtaining the identity key corresponding to the authentication motion trajectory using a key coding generation algorithm according to the motion trajectory parameters, the authentication time spatial coordinates, and the current timestamp, the method further includes: Further encrypting the identity key using a preset encryption algorithm; The identity key is updated using the result of the further encryption.

9. The method according to claim 1, characterized in that The step of matching the key to be verified with an identity key pre-stored in a key library and obtaining an identity authentication result of the target space mobile device according to the matching result includes: Matching the key to be verified with the identity key pre-stored in the key library; If the matching result is a successful match, the identity authentication result of the target space mobile device is a passed verification; When the matching result is an unsuccessful match, the identity authentication result of the target space mobile device is a verification failure.

10. The method according to claim 9, characterized in that After matching the key to be verified with the identity key pre-stored in the key library and obtaining the identity authentication result of the target space mobile device according to the matching result, the method further includes: If the identity authentication result of the target space mobile device is verified to be passed, allowing the target space mobile device to continue to perform the task; When the identity authentication result of the target space mobile device is failure to authenticate, a security mechanism is triggered.

11. A space mobile device identity authentication device, characterized in that: include: A setting module, configured to set a unique corresponding authentication motion trajectory for a spatial mobile device that meets preset conditions, wherein the authentication motion trajectory includes trajectory points arranged in sequence and their corresponding speeds and relative positions; an extraction module, configured to extract motion trajectory parameters and spatial coordinates at the authentication time according to the motion trajectory, wherein the spatial coordinates at the authentication time are the real-time position of the spatial mobile device at the time of authentication; A trajectory encoding module, configured to obtain an identity key corresponding to the authentication motion trajectory using a key encoding generation algorithm based on the motion trajectory parameters, the spatial coordinates at the authentication time, and the current timestamp; A key storage module, configured to store the identity key in a key library; A trajectory acquisition module is used to acquire the motion trajectory of the mobile device in the target space using image and computer vision technology; A trajectory decoding module, configured to decode the timestamp, spatial coordinates, and motion trajectory parameters extracted from the motion trajectory using a preset decoding algorithm to obtain a key to be verified; The key verification module is used to match the key to be verified with the identity key pre-stored in the key library, and obtain the identity authentication result of the target space mobile device according to the matching result.

12. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 10.

13. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instructions are executed by a processor, the method according to any one of claims 1 to 10 is implemented.

Images