UAV Identity Identification Generation and Verification System Based on Quantum Security Technology

Abstract

The present invention relates to the authentication of unmanned aerial vehicles (UAVs), specifically to a UAV identity identification generation and verification system based on quantum security technology, a quantum random number generation unit, which is connected to an external quantum random number generator, rapidly extracts an effective quantum random number sequence, and monitors the quality of the generated quantum random numbers; an identity identification generation unit, which combines the quantum random number sequence with the physical characteristic information of the UAV and encrypts them to generate a UAV identity identification string code for verifying the identity of the UAV; an identity identification update and management unit, which is responsible for the management of the UAV identity identification string code and provides an external high-speed acquisition capability for the UAV identity identification string code; an identity identification verification unit, which uses an identity identification verification algorithm to verify the legitimacy of the received UAV identity identification string code to be verified and returns the corresponding verification result; the technical solution provided by the present invention can effectively overcome the defect of poor security in the generation and verification of UAV identity identification.

Description

Technical Field

[0001] The present invention relates to the authentication of unmanned aerial vehicles (UAVs), and particularly to a UAV identity identification generation and verification system based on quantum security technology. Background Art

[0002] With the wide application of UAV technology, the security verification of UAV identities has become crucial. Traditional identity identification generation and verification technologies, such as software and physical noise random number generation, digital certificate-based authentication, biometric-based identification, etc., have security risks when facing future technological threats such as quantum computing. Therefore, developing a UAV identity identification generation and verification system based on quantum security technology is of great significance for ensuring UAV communication security and preventing identity fraud.

[0003] Traditional UAV identity identifications are basically generated through specific character and number combinations. The character part has specific meanings or rules. Even if random numbers are used in the number part, the generation of random numbers generally simulates through software or physical noise. The randomness of these random numbers is difficult to cope with the continuous development of brute-force attacks and has the risk of being guessed. At the same time, most traditional UAV identity identification verifications combine the physical characteristics of UAVs to generate characteristic verification information to verify the authenticity of UAV identity identifications. However, the identity verification mechanism constructed by simply combining physical characteristics with traditional encryption technology has difficulty resisting the attacks of quantum computing technology and cannot meet the requirements of future information technology security. Summary of the Invention

[0004] In view of the above-mentioned drawbacks of the prior art, the present invention provides a UAV identity identification generation and verification system based on quantum security technology, which can effectively overcome the defect of poor security in the generation and verification of UAV identity identifications existing in the prior art.

[0005] To achieve the above object, the present invention is realized through the following technical solutions:

[0006] A UAV identity identification generation and verification system based on quantum security technology includes a quantum random number generation unit, an identity identification generation unit, an identity identification update and management unit, and an identity identification verification unit;

[0007] The quantum random number generation unit is connected to an external quantum random number generator, rapidly extracts an effective quantum random number sequence, and monitors the quality of the generated quantum random numbers;

[0008] The identity identification generation unit combines the quantum random number sequence with the physical characteristic information of the UAV, and after combination, encrypts to generate a UAV identity identification string code for verifying the UAV identity;

[0009] The identity identification update and management unit is responsible for the management of the UAV identity identification serial code and provides the ability to quickly obtain the UAV identity identification serial code externally.

[0010] The identity identification verification unit uses the identity identification verification algorithm to verify the legality of the received UAV identity identification serial code to be verified and returns the corresponding verification result. At the same time, it provides a verification audit mechanism to prevent information leakage caused by the returned information.

[0011] Preferably, the quantum random number generation unit includes a random number access module, a random number management module, and a random number integrity verification module.

[0012] The random number access module is connected to an external quantum random number generator and monitors the connection status to ensure that the acquisition link of the quantum random number sequence QRS is available.

[0013] The random number management module divides the quantum random number sequence QRS and stores it as a quantum random number subsequence QRSS, and manages the current usage of the quantum random number sequence QRS and the quantum random number subsequence QRSS by marking.

[0014] The random number integrity verification module performs integrity verification on the quantum random number subsequence QRSS, and determines the integrity of each quantum random number subsequence QRSS by comparing with the statistical information of the quantum random number sequence provided by the random number access module.

[0015] Preferably, the identity identification generation unit includes a physical feature extraction module, an identity identification calculation module, and an identity identification encryption and decryption module.

[0016] The physical feature extraction module extracts the UAV physical feature information and converts the UAV physical feature information into a physical feature string PCS through the hash-based post-quantum signature algorithm SPHINCS+.

[0017] The identity identification calculation module splices the physical feature string PCS and the quantum random number subsequence QRSS, and generates the UAV identity identification source string DIDSS through the hash-based post-quantum signature algorithm SPHINCS+.

[0018] The identity identification encryption and decryption module encrypts the UAV identity identification source string DIDSS through the post-quantum symmetric encryption algorithm CRYSTALS-Kyber to generate the UAV identity identification serial code DIDSN for verifying the UAV identity, and records the internal serial code number ISN corresponding to this serial code.

[0019] Preferably, the identity identification update and management unit includes an identity identification storage module, an identity identification update module, and an identity identification status detection module.

[0020] An identity identification storage module associates and stores the drone identity identification serial code DIDSN and the internal serial code number ISN, and simultaneously stores the corresponding valid duration VTL, and establishes a one-to-one correspondence relationship to quickly retrieve the drone identity identification serial code DIDSN through the internal serial code number ISN;

[0021] An identity identification update module updates the corresponding drone identity identification serial code DIDSN through the internal serial code number ISN, receives an update request, matches the original drone identity identification serial code RDIDSN corresponding to the internal serial code number RISN to be updated in the update request with the drone identity identification serial code DIDSN corresponding to the internal serial code number RISN to be updated, and when the two match, updates the drone identity identification serial code DIDSN corresponding to the internal serial code number RISN to be updated to the new drone identity identification serial code RUDIDSN;

[0022] An identity identification status detection module periodically detects the validity of the drone identity identification serial code DIDSN stored in the identity identification storage module, and marks the records with the expired valid duration VTL as invalid;

[0023] Among them, the update request includes the internal serial code number RISN to be updated, the original drone identity identification serial code RDIDSN corresponding to the internal serial code number RISN to be updated, and the new drone identity identification serial code RUDIDSN.

[0024] Preferably, the identity identification verification unit includes a verification audit module, an identity identification verification module, and a verification result output control module;

[0025] The verification audit module records all conversation requests requesting identity identification verification, calculates the average number of requests per second PRS of the conversation requests, and temporarily locks the conversation request when the average number of requests per second PRS is greater than the first preset threshold, and the locking duration is TLT. When the locking duration TLT ends, the request ability of the conversation request is automatically restored;

[0026] The identity identification verification module decrypts the drone identity identification serial code VDIDSN provided in the conversation request by using the identity identification encryption and decryption module to obtain the drone identity identification source string VDIDSS, and matches the drone identity identification source string DIDSS corresponding to the drone identity identification serial code DIDSN corresponding to the internal serial code number VISN provided in the conversation request with the drone identity identification source string VDIDSS. When the two match, the verification passes, otherwise the verification fails, and the verification result is recorded;

[0027] The verification result output control module records the conversation history of the conversation request initiator, calculates the request density RDI of requests involving a single unmanned aerial vehicle identity identification string code DIDSN in the conversation history, and when the request density RDI is greater than the second preset threshold, marks the conversation request initiator in the blacklist. At the same time, the verification results of the conversation requests initiated by the conversation request initiator are output in two types: randomly passed and not passed, so as to confuse and confound the conversation request initiators in the blacklist and maximize the prevention of aggressive conversation requests;

[0028] Among them, the conversation request includes an internal string code number VISN to be verified and an unmanned aerial vehicle identity identification string code VDIDSN to be verified.

[0029] Preferably, the verification result output control module records the conversation history of the conversation request initiator and calculates the request density RDI of requests involving a single unmanned aerial vehicle identity identification string code DIDSN in the conversation history, including:

[0030] The request density RDI of a single unmanned aerial vehicle identity identification string code DIDSN is calculated using the following formula:

[0031] RDI = (RFPU - RSPU) / RCT;

[0032] Among them, RFPU is the total number of verification failures for the unmanned aerial vehicle identity identification string code DIDSN per unit time, RSPU is the total number of verification passes for the unmanned aerial vehicle identity identification string code DIDSN per unit time, and RCT is the total number of conversation requests initiated by the conversation request initiator per unit time.

[0033] Compared with the prior art, the unmanned aerial vehicle identity identification generation and verification system based on quantum security technology provided by the present invention uses a quantum random number generator to generate a "truly random" quantum random number sequence as the acquisition source of the unmanned aerial vehicle identity identification. The quantum random number is used to solve the randomness problem in coding. The quantum random number sequence segmentation and transformation algorithm is combined with physical feature strings to generate an unmanned aerial vehicle identity identification source string that meets the specified length and requirements, and the anti-quantum symmetric encryption algorithm is used for encryption to generate the unmanned aerial vehicle identity identification string code, which is stored as the unmanned aerial vehicle identity identification in various media. At the same time, a security verification system for this unmanned aerial vehicle identity identification is provided, realizing the reliable generation and efficient verification of the unmanned aerial vehicle identity identification, and finally forming a secure and reliable unmanned aerial vehicle identity identification generation and verification system that can resist future technologies such as quantum computing threats, providing basic identity information security guarantee capabilities for the centralized management of unmanned aerial vehicles, and providing technical empowerment for the healthy and high-speed development of the low-altitude economy. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0035] Figure 1 It is a schematic diagram of the system of the present invention. Detailed implementation manners

[0036] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are some, but not all, of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts belong to the scope of protection of the present invention.

[0037] An unmanned aerial vehicle identity identification generation and verification system based on quantum security technology, as Figure 1 shown, includes a quantum random number generation unit, an identity identification generation unit, an identity identification update and management unit, and an identity identification verification unit;

[0038] The quantum random number generation unit is connected to an external quantum random number generator, extracts a valid quantum random number sequence at high speed, and monitors the quality of the generated quantum random numbers;

[0039] The identity identification generation unit, based on the quantum random number sequence, combines it with the physical characteristic information of the unmanned aerial vehicle and encrypts it to generate an unmanned aerial vehicle identity identification string code for verifying the identity of the unmanned aerial vehicle;

[0040] The identity identification update and management unit is responsible for the management of the unmanned aerial vehicle identity identification string code and provides an ability to obtain the unmanned aerial vehicle identity identification string code at high speed externally;

[0041] The identity identification verification unit uses an identity identification verification algorithm to verify the legality of the received unmanned aerial vehicle identity identification string code to be verified, returns the corresponding verification result, and at the same time provides a verification audit mechanism to prevent information leakage caused by the returned information.

[0042] ① The quantum random number generation unit includes a random number access module, a random number management module, and a random number integrity check module;

[0043] The random number access module is connected to an external quantum random number generator and monitors the connection status to ensure that the acquisition link of the quantum random number sequence QRS is available;

[0044] A random number management module divides the quantum random number sequence QRS and stores it as quantum random number subsequences QRSS, and manages the marking of the current usage status of the quantum random number sequence QRS and the quantum random number subsequences QRSS;

[0045] A random number integrity verification module verifies the integrity of the quantum random number subsequences QRSS, and determines the integrity of each quantum random number subsequence QRSS by comparing with the quantum random number sequence statistical information provided by the random number access module.

[0046] ② The identity identification generation unit includes a physical feature extraction module, an identity identification calculation module, and an identity identification encryption and decryption module;

[0047] The physical feature extraction module extracts the physical feature information of the UAV, and converts the physical feature information of the UAV into a physical feature string PCS through the hash-based quantum-resistant signature algorithm SPHINCS+;

[0048] The identity identification calculation module splices the physical feature string PCS and the random number subsequence QRSS, and generates a UAV identity identification source string DIDSS through the hash-based quantum-resistant signature algorithm SPHINCS+;

[0049] The identity identification encryption and decryption module encrypts the UAV identity identification source string DIDSS through the quantum-resistant symmetric encryption algorithm CRYSTALS-Kyber to generate a UAV identity identification string code DIDSN for verifying the UAV identity, and records the internal string code number ISN corresponding to the string code.

[0050] ③ The identity identification update and management unit includes an identity identification storage module, an identity identification update module, and an identity identification status detection module;

[0051] The identity identification storage module stores the UAV identity identification string code DIDSN and the internal string code number ISN in an associated manner, and at the same time stores the corresponding valid duration VTL, and establishes a one-to-one correspondence to quickly retrieve the UAV identity identification string code DIDSN through the internal string code number ISN;

[0052] The identity identification update module updates the corresponding UAV identity identification string code DIDSN through the internal string code number ISN, receives an update request, matches the original UAV identity identification string code RDIDSN corresponding to the internal string code number RISN to be updated in the update request with the UAV identity identification string code DIDSN corresponding to the internal string code number RISN to be updated, and when the two match, updates the UAV identity identification string code DIDSN corresponding to the internal string code number RISN to be updated to a new UAV identity identification string code RUDIDSN;

[0053] An identity identification status detection module periodically detects the validity of the UAV identity identification string code DIDSN stored in the identity identification storage module, and marks the records with the expired valid duration VTL as invalid;

[0054] Among them, the update request includes the internal string code number RISN to be updated, the original UAV identity identification string code RDIDSN corresponding to the internal string code number RISN to be updated, and the new UAV identity identification string code RUDIDSN.

[0055] ④ The identity identification verification unit includes a verification audit module, an identity identification verification module, and a verification result output control module;

[0056] The verification audit module records all conversation requests for identity identification verification, calculates the average number of requests per second PRS of the conversation requests. When the average number of requests per second PRS is greater than the first preset threshold, the conversation request is temporarily locked for a lock duration of TLT. When the lock duration TLT ends, the request ability of the conversation request is automatically restored;

[0057] The identity identification verification module decrypts the UAV identity identification string code VDIDSN provided by the conversation request by using the identity identification encryption and decryption module to obtain the UAV identity identification source string VDIDSS. It matches the UAV identity identification source string DIDSS corresponding to the UAV identity identification string code DIDSN corresponding to the internal string code number VISN to be verified provided by the conversation request with the UAV identity identification source string VDIDSS. When the two match, the verification passes; otherwise, the verification fails, and the verification result is recorded;

[0058] The verification result output control module records the conversation history of the conversation request initiator, and calculates the request density RDI of the conversation history involving a single UAV identity identification string code DIDSN. When the request density RDI is greater than the second preset threshold, the conversation request initiator is marked in the blacklist. At the same time, the verification results of the conversation requests initiated by the conversation request initiator are output as two types of results: randomly passed and not passed, so as to confuse the conversation request initiators in the blacklist and maximize the prevention of aggressive conversation requests;

[0059] Among them, the conversation request includes the internal string code number VISN to be verified and the UAV identity identification string code VDIDSN to be verified.

[0060] Specifically, the verification result output control module records the conversation history of the conversation request initiator, and calculates the request density RDI of the conversation history involving a single UAV identity identification string code DIDSN, including:

[0061] Calculate the request density RDI of the single UAV identity identification string code DIDSN using the following formula:

[0062] RDI = (RFPU - RSPU) / RCT;

[0063] Wherein, RFPU is the total number of verification failures for the UAV identity identification string code DIDSN per unit time, RSPU is the total number of successful verifications for the UAV identity identification string code DIDSN per unit time, and RCT is the total number of dialogue requests initiated by the dialogue request initiator per unit time.

[0064] In the technical solution of this application, the purpose of designing the verification and auditing module is to prevent some dialogue request initiators from continuously attempting to verify the UAV identity identification and using the brute-force method to guess the UAV identity identification. For example, if a verification failure result is returned, the dialogue request initiator can rule out one possibility, and thus it may be possible to guess the correct UAV identity identification through a large number of attempts. At the same time, a large number of dialogue requests for identity identification verification will also cause performance loss and seriously affect the response speed of normal dialogue requests.

[0065] The above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments or perform equivalent replacements for some of the technical features; and these modifications or replacements will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A UAV identity identification generation and verification system based on quantum security technology, characterized in that: It includes a quantum random number generation unit, an identity identification generation unit, an identity identification update and management unit, and an identity identification verification unit; The quantum random number generation unit is connected to an external quantum random number generator, rapidly extracts a valid quantum random number sequence, and monitors the quality of the generated quantum random numbers; The identity identification generation unit, based on the quantum random number sequence, combines it with the physical characteristic information of the unmanned aerial vehicle (UAV) and encrypts the combination to generate a UAV identity identification string code for verifying the identity of the UAV; The identity identification update and management unit is responsible for the management of the UAV identity identification string code and provides an ability to rapidly obtain the UAV identity identification string code externally; The identity identification verification unit uses an identity identification verification algorithm to verify the legitimacy of the received UAV identity identification string code to be verified and returns the corresponding verification result. At the same time, it provides a verification audit mechanism to prevent information leakage caused by the returned information; The identity identification generation unit includes a physical characteristic extraction module, an identity identification calculation module, and an identity identification encryption and decryption module; The physical characteristic extraction module extracts the physical characteristic information of the UAV and converts the physical characteristic information of the UAV into a physical characteristic string PCS through the hash-based quantum-resistant signature algorithm SPHINCS+; The identity identification calculation module splices the physical characteristic string PCS with a random number subsequence QRSS obtained by splitting the quantum random number sequence, and generates a UAV identity identification source string DIDSS through the SPHINCS+; The identity identification encryption and decryption module encrypts the DIDSS through the quantum-resistant symmetric encryption algorithm CRYSTALS-Kyber to generate a UAV identity identification string code DIDSN for verifying the identity of the UAV, and records the internal string code number ISN corresponding to the DIDSN; The identity identification verification unit includes an identity identification verification module and a verification result output control module; The identity identification verification module decrypts the UAV identity identification string code VDIDSN provided by the dialogue request using the identity identification encryption and decryption module to obtain a UAV identity identification source string VDIDSS to be verified, and matches the UAV identity identification source string DIDSS corresponding to the UAV identity identification string code DIDSN corresponding to the internal string code number VISN to be verified provided by the dialogue request with the UAV identity identification source string VDIDSS to be verified. When the two match, the verification passes; otherwise, the verification fails, and the verification result is recorded; The verification result output control module calculates the request density RDI of requests involving a single UAV identity identification string code DIDSN in the dialogue history. When the request density RDI is greater than a second preset threshold, it marks the initiator of the dialogue request in the blacklist, and at the same time outputs two types of results, randomly passing and not passing, for the verification result of the dialogue request initiated by the initiator of the dialogue request; 2. The drone identity identification generation and verification system based on quantum security technology according to claim 1, characterized in that: The quantum random number generation unit includes a random number access module, a random number management module, and a random number integrity verification module; A random number access module is connected to an external quantum random number generator and monitors the connection status to ensure the availability of the acquisition link for the quantum random number sequence QRS. A random number management module divides the quantum random number sequence QRS and stores it as quantum random number subsequences QRSS, and manages the marking of the current usage of the quantum random number sequence QRS and the quantum random number subsequences QRSS. A random number integrity verification module verifies the integrity of the quantum random number subsequences QRSS. By comparing with the quantum random number sequence statistical information provided by the random number access module, the integrity of each quantum random number subsequence QRSS is determined.

3. The drone identity identification generation and verification system based on quantum security technology according to claim 1, characterized in that: The identity identification update and management unit includes an identity identification storage module, an identity identification update module, and an identity identification status detection module. The identity identification storage module stores the UAV identity identification string code DIDSN and the internal string code number ISN in an associated manner, and simultaneously stores the corresponding valid duration VTL, and establishes a one-to-one correspondence to quickly retrieve the UAV identity identification string code DIDSN through the internal string code number ISN. The identity identification update module updates the corresponding UAV identity identification string code DIDSN through the internal string code number ISN. It receives an update request, matches the original UAV identity identification string code RDIDSN corresponding to the internal string code number RISN to be updated in the update request with the UAV identity identification string code DIDSN corresponding to the internal string code number RISN to be updated. When the two match, it updates the UAV identity identification string code DIDSN corresponding to the internal string code number RISN to be updated to the new UAV identity identification string code RUDIDSN. The identity identification status detection module periodically detects the validity of the UAV identity identification string code DIDSN stored in the identity identification storage module, and marks the records with an expired valid duration VTL as invalid. Among them, the update request includes the internal string code number RISN to be updated, the original UAV identity identification string code RDIDSN corresponding to the internal string code number RISN to be updated, and the new UAV identity identification string code RUDIDSN.

4. The drone identity identification generation and verification system based on quantum security technology according to claim 3, characterized in that: The identity identification verification unit further includes a verification audit module. The verification audit module records all dialogue requests for identity identification verification, calculates the average number of requests per second PRS of the dialogue requests. When the average number of requests per second PRS is greater than the first preset threshold, it temporarily locks the dialogue request for a locking duration of TLT. When the locking duration TLT ends, it automatically restores the request ability of the dialogue request. The verification result output control module records the dialogue history of the dialogue request initiator and confuses the dialogue request initiators in the blacklist to maximally prevent aggressive dialogue requests. Among them, the dialogue request includes the internal string code number VISN to be verified and the UAV identity identification string code VDIDSN to be verified.

5. The UAV identity identification generation and verification system based on quantum security technology according to claim 1, characterized in that: The verification result output control module records the dialogue history of the dialogue request initiator and calculates the request density RDI of the dialogue history involving a single UAV identity identification string code DIDSN, including: The request density RDI of the identity identification string code DIDSN of a single drone is calculated using the following formula: RDI = (RFPU - RSPU) / RCT; where RFPU is the total number of verification failures for the drone identity identification string code DIDSN per unit time, RSPU is the total number of successful verifications for the drone identity identification string code DIDSN per unit time, and RCT is the total number of dialogue requests initiated by the dialogue request initiator per unit time.

Images