Low-altitude unmanned aerial vehicle flight information recording and networking reporting method

Abstract

The invention provides a low-altitude unmanned aerial vehicle flight information recording and networking reporting method, which comprises the following steps of: before an unmanned aerial vehicle leaves a factory, writing basic information of the unmanned aerial vehicle into a flight information recording device, and activating a binding relationship between the flight information recording device and an unmanned aerial vehicle flight control system; a unique corresponding relation is formed between the flight information recording device and the unmanned aerial vehicle; in the operation process of the unmanned aerial vehicle, flight information of the unmanned aerial vehicle is collected in real time through a flight information recording device, and the collected flight information is safely stored in a special SIM card of the unmanned aerial vehicle; the flight information recording device reports the collected flight information to the trusted digital identity management and control platform through networking; and after the truth and integrity of the flight information are verified through the trusted digital identity management and control platform, the flight information is synchronized to an air traffic management platform specified by the country. The invention aims to provide a safe, reliable and uniform unmanned aerial vehicle flight information recording, storing and reporting scheme, and a credible data source is provided for air traffic management.

Description

Technical Field

[0001] The present invention relates to the technical field of low-altitude unmanned aerial vehicles, and particularly relates to a method for recording and networking and reporting flight information of low-altitude unmanned aerial vehicles. Background Art

[0002] With the rapid development and wide application of low-altitude unmanned aerial vehicle technology, unmanned aerial vehicles have shown great potential and value in multiple fields such as civil, commercial, logistics, agriculture, and inspection. During the flight of an unmanned aerial vehicle, a large amount of flight trajectory information can be collected in real time, and this information is crucial for realizing the dynamic supervision, safety audit, and air traffic management of unmanned aerial vehicles.

[0003] Currently, the methods for collecting and transmitting flight information of low-altitude unmanned aerial vehicles mainly rely on the flight control system of the unmanned aerial vehicle. The flight control system is the core control component of the unmanned aerial vehicle, responsible for the flight attitude control, navigation and positioning of the unmanned aerial vehicle, as well as the collection and processing of flight information. During the flight, the flight control system collects the flight trajectory information of the unmanned aerial vehicle in real time through built-in sensors and algorithms, such as key data such as position, speed, altitude, and heading.

[0004] However, in the prior art, the transmission path of this flight information is usually to transmit the information from the flight control system to the remote controller or the ground station through a data link, and then the remote controller or the ground station uploads the information to the cloud platform of the unmanned aerial vehicle manufacturer. This transmission method has multiple intermediate links, increasing the delay and uncertainty of information transmission, and at the same time may also introduce the risk of data loss or tampering.

[0005] More critically, when different unmanned aerial vehicle manufacturers collect and transmit unmanned aerial vehicle flight information, the adopted schemes and data formats are different. This lack of unity makes it difficult for unmanned aerial vehicle flight information to be a reliable data source for air traffic management. Due to the inconsistency of data formats, it is difficult to integrate and analyze the unmanned aerial vehicle flight information from different manufacturers, thus unable to accurately grasp the real-time situation of air traffic, bringing great inconvenience to air traffic management.

[0006] In addition, since unmanned aerial vehicle flight information is a value-added service provided by unmanned aerial vehicle manufacturers to their end users, manufacturers may have certain interests in the data collection and transmission process, which further affects the objectivity and credibility of flight information.

[0007] In summary, the existing low-altitude unmanned aerial vehicle flight information collection and transmission technologies have problems such as complex transmission paths, inconsistent data formats, and low information credibility, and there is an urgent need for a new technical solution to solve these problems to achieve real-time, accurate, and unified collection and transmission of unmanned aerial vehicle flight information, providing reliable data support for air traffic management. Summary of the Invention

[0008] In view of the deficiencies of the prior art, the present invention provides a method for recording and networking and reporting flight information of low-altitude unmanned aerial vehicles. This method uses a flight information recording device of the unmanned aerial vehicle to securely store the flight information, and network and report it to a trusted digital identity management platform, and verify the legality of the data to ensure the authenticity, integrity and non-repudiation of the flight information synchronized to the national traffic management platform, providing a trusted data source for air traffic management.

[0009] The present invention achieves the above object through the following technical solutions:

[0010] A method for recording and networking and reporting flight information of low-altitude unmanned aerial vehicles, comprising the following steps:

[0011] In the production and assembly stage of the unmanned aerial vehicle, the flight information recording device is integrated into the cabin of the unmanned aerial vehicle or mounted on the fuselage of the unmanned aerial vehicle, and integrated with the flight control system of the unmanned aerial vehicle;

[0012] Before the unmanned aerial vehicle leaves the factory, the basic information of the unmanned aerial vehicle is written into the flight information recording device, and the binding relationship between the flight information recording device and the flight control system of the unmanned aerial vehicle is activated, so that the flight information recording device forms a unique corresponding relationship with a specific unmanned aerial vehicle;

[0013] During the operation of the unmanned aerial vehicle, the flight information recording device collects the flight information of the unmanned aerial vehicle in real time, and securely stores the collected flight information into the dedicated SIM card of the unmanned aerial vehicle;

[0014] The flight information recording device reports the collected flight information to the trusted digital identity control platform through the network;

[0015] After verifying the authenticity and integrity of the flight information through the trusted digital identity control platform, the flight information is synchronized to the national designated air traffic management platform.

[0016] According to the method for recording and networking and reporting flight information of low-altitude unmanned aerial vehicles provided by the present invention, the steps of activating the binding relationship include:

[0017] After the flight information recording device leaves the factory, register the information of the flight information recording device in the trusted digital identity control platform, and create an activation binding task for the flight information recording device;

[0018] When the flight information recording device is powered on and started for the first time, it automatically accesses the trusted digital identity control platform to query whether there is an activation binding task corresponding to the flight information recording device;

[0019] If there is an activation binding task, according to the preset binding process, perform the activation operation to bind the flight information recording device to the flight control system of the unmanned aerial vehicle to form a unique corresponding relationship.

[0020] A method for recording and networking reporting of low-altitude UAV flight information provided by the present invention further includes a step of verifying the binding relationship between the flight information recording device and the UAV flight control system, specifically:

[0021] After the UAV is powered on, the flight information recording device starts normally and initializes the communication connection with the flight control system.

[0022] The flight information recording device uses symmetric cryptography technology to verify the binding relationship with the flight control system to confirm whether the binding relationship between the flight information recording device and the flight control system remains consistent and unchanged.

[0023] If the verification result shows that the binding relationship has changed, the flight information recording device immediately records abnormal reporting information.

[0024] At the same time, the flight information recording device closes the flight information networking reporting function to prevent incorrect reporting or leakage of flight information caused by abnormal binding relationships.

[0025] A method for recording and networking reporting of low-altitude UAV flight information provided by the present invention, the steps of flight information networking reporting include:

[0026] When the number of flight information acquisitions reaches a preset configured quantity, the dedicated UAV SIM card calculates the collected flight data set based on asymmetric cryptography technology to generate a corresponding signature value.

[0027] The flight data set containing the signature value is encrypted as a data packet through the mobile communication module in the flight information recording device and sent to the trusted digital identity management platform through the mobile communication network.

[0028] After receiving the data packet, the trusted digital identity management platform verifies the signature value using the public key corresponding to the dedicated UAV SIM card to verify the authenticity and integrity of the flight data set.

[0029] After the verification passes, the trusted digital identity management platform synchronizes the flight data set to the air traffic management platform.

[0030] A method for recording and networking reporting of low-altitude UAV flight information provided by the present invention, the flight information recording device includes:

[0031] A management module for implementing the dynamic activation binding function, the dynamic verification function of the binding relationship, and the functions of flight information acquisition, secure storage, and networking reporting with the UAV flight control system.

[0032] A mobile communication module for implementing the networking reporting of flight information.

[0033] A special SIM card for drones, which is used to securely store flight information and has functions such as issuing a trusted digital identity, activating and binding, verifying the binding relationship, end-to-end two-way authentication, securely storing flight information, remotely configuring and managing the operator Profile, and trusted computing;

[0034] A flight information collection module, which is used to collect the flight information of the drone in real time;

[0035] Among them, the management module communicates with the drone flight control system to realize the dynamic activation and binding of the flight information recording device and the drone flight control system, and regularly collects flight information during the operation of the drone, securely stores the collected flight information in the special SIM card for drones, and then reports the flight information to the trusted digital identity control platform through the mobile communication module.

[0036] According to a method for recording and reporting flight information of a low-altitude drone provided by the present invention, the process of collecting, securely storing, and reporting flight information includes:

[0037] The management module regularly collects the flight information of the drone from the flight information collection module;

[0038] After each collection of flight information, it is temporarily cached in the management module, and then a certain number of times of data are cyclically collected and configured;

[0039] The management module calls the data signature interface of the special SIM card for drones to calculate the HASH value of the data cached this time and stores it in the data area of the special SIM card for drones;

[0040] The management module calls the mobile communication module to upload the data and HASH value collected this time to the trusted digital identity management platform.

[0041] According to a method for recording and reporting flight information of a low-altitude drone provided by the present invention, before the management module sends the timestamp and HMAC to the special SIM card for drones, it also includes the step of verifying the validity of the timestamp, specifically:

[0042] The management module checks whether the timestamp is within the preset valid time range to ensure the timeliness and accuracy of the timestamp; if the timestamp is valid, the management module sends the timestamp and HMAC to the special SIM card for drones, and the special SIM card then calculates the HMAC for the received timestamp and random number using the bound authentication key and performs a consistency check with the HMAC sent by the management module; if the timestamp is invalid, the management module determines that there is an abnormality in the process of verifying the current binding relationship and outputs the corresponding abnormality prompt information.

[0043] A method for recording flight information of a low-altitude unmanned aerial vehicle and reporting it via network according to the present invention, when performing dynamic activation and binding relationship, specifically includes:

[0044] The management module communicates with the unmanned aerial vehicle flight control system, enables the flight control system to generate a pair of temporary public and private key pairs, and obtains the temporary public key;

[0045] The management module sends the temporary public key to the dedicated SIM card of the unmanned aerial vehicle. The dedicated SIM card of the unmanned aerial vehicle generates a random symmetric key, that is, the binding authentication key, and encrypts it using the temporary public key of the flight control system to generate the encrypted binding authentication key ciphertext;

[0046] The management module calculates a verification value for the encrypted binding authentication key ciphertext through a preset verification algorithm, and sends the verification value and the encrypted binding authentication key ciphertext to the flight control system together;

[0047] After receiving the encrypted binding authentication key ciphertext and the verification value, the flight control system recalculates the verification value for the encrypted binding authentication key ciphertext using the same verification algorithm, and compares it with the received verification value; if the comparison is consistent, the flight control system continues to decrypt the encrypted binding authentication key ciphertext using the temporary private key; if the comparison is inconsistent, the flight control system determines that the encrypted binding authentication key ciphertext may have been tampered with during transmission, outputs the corresponding error prompt message, and aborts the current activation and binding process at the same time.

[0048] A method for recording flight information of a low-altitude unmanned aerial vehicle and reporting it via network according to the present invention, a trusted digital identity management platform, includes:

[0049] A trusted digital identity issuing module, configured to generate and issue a uniquely corresponding digital certificate to the flight information recording device, and this digital certificate is used to achieve a one-to-one binding between the flight information recording device and the unmanned aerial vehicle flight control system, ensuring the uniqueness and traceability of the identity;

[0050] An end-to-end secure access authentication module, set to perform an end-to-end two-way authentication process with the flight information recording device after each power-on startup of the flight information recording device, and ensure the legitimacy of the flight information recording device and prevent unauthorized device access by verifying the validity of the digital certificate and other security credentials;

[0051] An operator Profile remote configuration management module, used to remotely configure and manage the operator-specific parameters and settings of the flight information recording device;

[0052] A flight information collection and synchronization module, configured to receive the flight information data packet uploaded from the flight information recording device, verify the authenticity and integrity of the data through a built-in verification mechanism, and after the verification passes, synchronize the flight information to the national designated air traffic management platform according to the specified format and protocol.

[0053] A method for recording flight information of a low-altitude unmanned aerial vehicle and reporting it via networking according to the present invention includes the following steps when performing Profile remote configuration management:

[0054] On the trusted digital identity control platform side, create at least one or more types of Profile management tasks including one or more of download and installation, activation, inactivation, and deletion of Profiles as needed;

[0055] The flight information recording device regularly accesses the trusted digital identity control platform at preset time intervals to detect whether there is a matching Profile management task;

[0056] When the flight information recording device detects a matching Profile management task and the task is a Profile download and installation task, parse the activation code in the task instruction and extract the address of the Profile download and installation server and the unique download voucher code from the activation code;

[0057] The flight information recording device accesses the specified Profile download and installation server according to the extracted server address and uploads the unique download voucher code to request the corresponding Profile installation package;

[0058] After receiving the Profile installation package, the flight information recording device parses the Profile installation package and installs it according to the parsing result;

[0059] After the installation is completed, the flight information recording device uploads the result information of the Profile download and installation to the trusted digital identity control platform so that the trusted digital identity control platform can change the status of the corresponding Profile management task according to the result information.

[0060] Thus, it can be seen that compared with the prior art, the present invention integrates a dedicated SIM card for the unmanned aerial vehicle as a trusted carrier, collects, stores, and uploads the flight information of the unmanned aerial vehicle in real time, ensuring the authenticity, integrity, and non-repudiation of the flight information, and having the following beneficial effects:

[0061] In the production and assembly stage of the unmanned aerial vehicle, the present invention realizes the one-to-one binding of the flight information recording device and the flight control system by issuing digital certificates. This binding mechanism ensures the uniqueness and irreplaceability of the flight information recording device, effectively preventing the device from being disassembled and used for other unmanned aerial vehicles, thereby ensuring the accuracy and traceability of the flight information.

[0062] In the present invention, a flight information recording device collects flight trajectory information in real time during the operation of a drone and securely stores this information in a dedicated SIM card of the drone. This storage method ensures the authenticity, integrity, and non-repudiation of flight information, provides a reliable data source for air traffic management and auditing, and helps air traffic management departments accurately grasp the flight status of drones, improving the safety and efficiency of air traffic.

[0063] In the present invention, the dedicated SIM card of the drone signs the real-time collected flight trajectory information and reports it to the platform side through the network, which not only ensures the real-time nature of flight information but also guarantees the authenticity and integrity of the information through digital signature technology. This provides reliable data support for air traffic management and helps to detect and handle air traffic violations in a timely manner.

[0064] The dedicated SIM card of the drone integrated in the flight information recording device conforms to the standard eUICC function defined by GSMA and meets the security application requirements of the dedicated SIM card for drones. It has multiple functions such as trusted digital identity issuance, activation and binding, verification of binding relationships, end-to-end two-way authentication, secure storage of flight information, remote configuration management of operator Profiles, and trusted computing. These functions together enhance the security of the dedicated SIM card of the drone and provide strong guarantees for the collection and transmission of flight information.

[0065] In the present invention, a trusted digital identity control platform is used in conjunction with the flight information recording device to implement functions such as the issuance and management of trusted digital identities, end-to-end secure access authentication, remote configuration management of operator Profiles, and flight information collection and synchronization. This comprehensive control mechanism ensures the secure access and authentication of the flight information recording device and the drone flight control system, improving the security and reliability of the entire system.

[0066] In summary, the safe and trusted method for recording and reporting flight information of low-altitude drones proposed in the present invention has significant beneficial effects. It not only ensures the authenticity, integrity, and non-repudiation of flight information but also enhances the security of the dedicated SIM card of the drone and the overall security of the system, provides reliable data support for air traffic management, and helps to promote the development and application of drone technology.

[0067] The following further elaborates on the present invention in detail in conjunction with the accompanying drawings and specific embodiments. Description of the Drawings

[0068] Figure 1 is a flowchart of an embodiment of a method for recording and reporting flight information of a low-altitude drone according to the present invention.

[0069] Figure 2It is a schematic diagram of the principle of a flight information recording device and a trusted digital identity control platform in an embodiment of a method for recording and networking and reporting flight information of a low-altitude unmanned aerial vehicle according to the present invention.

[0070] Figure 3 It is a schematic diagram of the process principle regarding an embodiment of a method for recording and networking and reporting flight information of a low-altitude unmanned aerial vehicle according to the present invention. Detailed implementation manners

[0071] To make the objectives, technical solutions and advantages of the present invention clearer, the technical solutions in the present invention will be clearly and completely described below with reference to the accompanying drawings in the present invention. Apparently, the described embodiments are some but not all of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art without making creative efforts based on the embodiments in the present invention belong to the scope of protection of the present invention.

[0072] Reference to "embodiment" herein means that a specific feature, structure or characteristic described in connection with the embodiment can be included in at least one embodiment of the present application. The phrase appears in various places in the specification and does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art will explicitly and implicitly understand that the embodiments described herein can be combined with other embodiments.

[0073] Refer to Figures 1 to 3 , this embodiment provides a method for recording and networking and reporting flight information of a low-altitude unmanned aerial vehicle, and the method includes the following steps:

[0074] Step S1, during the production and assembly stage of the unmanned aerial vehicle, integrate the flight information recording device into the unmanned aerial vehicle cabin or mount it on the unmanned aerial vehicle body, and integrate it with the unmanned aerial vehicle flight control system;

[0075] Step S2, before the unmanned aerial vehicle leaves the factory, write the basic information of the unmanned aerial vehicle into the flight information recording device, and activate the binding relationship between the flight information recording device and the unmanned aerial vehicle flight control system, so that the flight information recording device forms a unique corresponding relationship with a specific unmanned aerial vehicle;

[0076] Step S3, during the operation of the unmanned aerial vehicle, collect the flight information of the unmanned aerial vehicle in real time through the flight information recording device, and securely store the collected flight information in the dedicated SIM card of the unmanned aerial vehicle;

[0077] Step S4, the flight information recording device reports the collected flight information to the trusted digital identity control platform through the network;

[0078] Step S5, after verifying the authenticity and integrity of the flight information through the trusted digital identity control platform, synchronize the flight information to the national designated air traffic management platform.

[0079] In this embodiment, the steps of activating the binding relationship include:

[0080] After the flight information recording device leaves the factory, register the information of the flight information recording device on the trusted digital identity management platform, and create an activation binding task for the flight information recording device;

[0081] After the flight information recording device is powered on and started for the first time, it automatically accesses the trusted digital identity management platform to query whether there is an activation binding task corresponding to the flight information recording device;

[0082] If there is an activation binding task, according to the preset binding process, perform the activation operation to bind the flight information recording device to the UAV flight control system to form a unique corresponding relationship.

[0083] In this embodiment, it also includes the step of verifying the binding relationship between the flight information recording device and the UAV flight control system, specifically:

[0084] After the UAV is powered on, the flight information recording device starts normally and initializes the communication connection with the flight control system;

[0085] The flight information recording device uses symmetric cryptography technology to verify the binding relationship with the flight control system to confirm whether the binding relationship between the flight information recording device and the flight control system remains consistent and has not changed;

[0086] If the verification result shows that the binding relationship has changed, the flight information recording device immediately records the abnormal reporting information;

[0087] At the same time, the flight information recording device closes the flight information online reporting function to prevent incorrect reporting or leakage of flight information caused by abnormal binding relationships.

[0088] In this embodiment, the steps of flight information online reporting include:

[0089] When the number of flight information acquisitions reaches the preset configured quantity, the dedicated UAV SIM card calculates the collected flight data set based on asymmetric cryptography technology to generate a corresponding signature value;

[0090] Encrypt the flight data set containing the signature value as a data packet through the mobile communication module in the flight information recording device and send it to the trusted digital identity management platform through the mobile communication network;

[0091] After receiving the data packet, the trusted digital identity management platform verifies the signature value using the public key corresponding to the dedicated UAV SIM card to verify the authenticity and integrity of the flight data set;

[0092] After the verification is passed, the trusted digital identity control platform synchronizes the flight data contract to the air traffic management platform.

[0093] In specific applications, this embodiment realizes the functions of recording and networking reporting of UAV flight information through the flight information recording device and the trusted digital identity control platform. The business process of recording and networking reporting of UAV flight information includes:

[0094] (1) Activate the binding relationship: After the flight information recording device leaves the factory, register the information of the flight information recording device in the trusted digital identity control platform and create an activation binding task. When the flight information recording device is powered on for the first time, it automatically accesses the trusted digital identity control platform. If there is an activation binding task, the binding relationship between the flight information recording device and the flight control system will be activated;

[0095] (2) Verify the binding relationship: When the UAV is powered on, the flight information recording device starts normally. First, use symmetric cryptography technology to verify whether the binding relationship with the flight control system has changed. If the binding relationship changes, the flight information recording device records abnormal reporting information and closes the flight information networking reporting function;

[0096] (3) End-to-end secure access: After verifying the binding relationship, the flight information recording device automatically requests the trusted digital identity control platform to establish an HTTPS / MQTTS connection, and performs end-to-end two-way authentication based on asymmetric cryptography technology. After the two-way authentication is passed, it detects whether there is abnormal reporting information. If so, the abnormal information will be reported to the trusted digital identity control platform;

[0097] (4) Flight information collection: The flight information recording device includes a flight information collection module. After the secure access authentication is passed, it will automatically collect the flight information of the UAV. The flight information includes but is not limited to position, time, speed, track angle, etc.;

[0098] (5) Flight information storage: After the flight information is collected, the data is stored in the dedicated SIM card of the UAV in the flight information recording device to ensure the authenticity, integrity and non-repudiation of the data;

[0099] (6) Flight information networking reporting: After the number of flight information collections reaches the configured quantity (for example, configured as 10 times), the collected data is used as a data packet. The dedicated SIM card of the UAV calculates the signature value based on asymmetric cryptography technology, and then uploads it to the trusted digital identity control platform through the mobile communication module in the flight information recording device. The trusted digital identity control platform verifies the authenticity and integrity of the data, and then the trusted digital identity control platform synchronizes the flight information to the air traffic management platform.

[0100] Specifically, the flight information recording device of this embodiment includes:

[0101] A management module, which is used to implement the dynamic activation binding function with the UAV flight control system, the dynamic verification function of the binding relationship, and the functions of flight information collection, secure storage, and network reporting.

[0102] A mobile communication module, which is used to implement the network reporting of flight information.

[0103] A UAV-specific SIM card, which is used to securely store flight information and has functions such as trusted digital identity issuance, activation binding, verification of the binding relationship, end-to-end two-way authentication, secure storage of flight information, remote configuration management of operator Profile, and trusted computing.

[0104] A flight information collection module, which is used to collect the flight information of the UAV in real time.

[0105] Among them, the management module communicates with the UAV flight control system to realize the dynamic activation binding of the flight information recording device and the UAV flight control system, and regularly collects flight information during the operation of the UAV, securely stores the collected flight information in the UAV-specific SIM card, and then reports the flight information to the trusted digital identity management platform through the mobile communication module.

[0106] In this embodiment, the process of flight information collection, secure storage, and network reporting includes:

[0107] The management module regularly collects the flight information of the UAV from the flight information collection module;

[0108] After each collection of flight information, it is temporarily cached in the management module, and then data is collected and configured in a loop for a certain number of times;

[0109] The management module calls the data signature interface of the UAV-specific SIM card to calculate the HASH value of the data cached this time and stores it in the data area of the UAV-specific SIM card;

[0110] The management module calls the mobile communication module to upload the data and HASH value collected this time to the trusted digital identity management platform.

[0111] Before the management module sends the timestamp and HMAC to the UAV-specific SIM card, it also includes the step of validating the validity of the timestamp, specifically:

[0112] The management module checks whether the timestamp is within the preset valid time range to ensure the timeliness and accuracy of the timestamp. If the timestamp is valid, the management module sends the timestamp and HMAC to the dedicated drone SIM card. The dedicated drone SIM card then calculates the HMAC for the received timestamp and random number using the bound authentication key and performs a consistency check with the HMAC sent by the management module. If the timestamp is invalid, the management module determines that there is an abnormality in the current process of verifying the binding relationship and outputs the corresponding error prompt message.

[0113] When dynamically activating the binding relationship, it specifically includes:

[0114] The management module communicates with the drone flight control system to enable the flight control system to generate a pair of temporary public and private key pairs and obtain the temporary public key.

[0115] The management module sends the temporary public key to the dedicated drone SIM card. The dedicated drone SIM card generates a random symmetric key, i.e., the bound authentication key, and encrypts it using the temporary public key of the flight control system to generate the bound authentication key ciphertext.

[0116] The management module calculates a verification value for the bound authentication key ciphertext through a preset verification algorithm and sends the verification value and the bound authentication key ciphertext to the flight control system together.

[0117] After receiving the bound authentication key ciphertext and the verification value, the flight control system recalculates the verification value for the bound authentication key ciphertext using the same verification algorithm and compares it with the received verification value. If the comparison is consistent, the flight control system continues to decrypt the bound authentication key ciphertext using the temporary private key. If the comparison is inconsistent, the flight control system determines that the bound authentication key ciphertext may have been tampered with during transmission, outputs the corresponding error prompt message, and aborts the current activation binding process.

[0118] In a specific application, the management module is the main control module of the flight information recording device, which mainly realizes three functions: First, it realizes the dynamic activation binding function between the flight information recording device and the flight control system; Second, it realizes the dynamic verification function of the binding relationship between the flight information recording device and the flight control system; Third, it realizes the functions of flight information collection, secure storage, and network reporting. The implementation solutions are as follows:

[0119] (1) Activation and Binding Scheme: The dynamic activation and binding process between the flight information recording device and the flight control system: First step: The management module communicates with the UAV flight control system to let the flight control system generate a pair of temporary public and private key pairs and obtain the temporary public key. Second step: The management module sends the temporary public key to the UAV dedicated SIM card. The UAV dedicated SIM card generates a random symmetric key, i.e., the binding authentication key, and encrypts it using the temporary public key of the flight control system to generate the ciphertext of the binding authentication key. Third step: The management module sends the ciphertext of the binding authentication key to the flight control system. The flight control system decrypts it using the temporary private key to obtain the plaintext of the binding authentication key and stores it in the flight control system.

[0120] (2) Verification of Binding Relationship Scheme: After the flight information recording device is powered on each time, it automatically detects whether the activation and binding relationship is established. If it is activated, the binding relationship is verified. The verification of the binding relationship scheme is as follows: First step, the management module obtains an 8-byte random number from the UAV dedicated SIM card. Second step, the management module sends the random number to the flight control system, which generates a timestamp and calculates the HMAC of the timestamp and the random number using the binding authentication key. Third step, the management module sends the timestamp and the HMAC to the UAV dedicated SIM card. The UAV dedicated SIM card calculates the HMAC of the timestamp and the random number using the binding authentication key and verifies the consistency of the HMAC. If they are consistent, it means that the binding relationship between the flight information recording device and the flight control system has not changed. Otherwise, it means that the binding relationship has changed.

[0121] Flight Information Collection, Secure Storage and Network Reporting Scheme: After the flight information recording device is powered on and the binding relationship is verified to be unchanged, it starts to collect and securely store flight information at regular intervals. The flight information collection and secure storage scheme is as follows: First, the management module regularly collects the flight information of the UAV from the flight information collection module. The flight information includes, but is not limited to, position, time, speed, track angle, etc. Second, after each collection of flight information, it is temporarily cached in the memory of the management module, and then data is collected and cycled for a certain number of times (such as configured as 10 times). Third, the management module calls the data signature interface of the UAV dedicated SIM card to calculate the HASH value of the cached data this time and stores it in the data area of the UAV dedicated SIM card. Fourth, the management module calls the mobile communication module to upload the data and the HASH value collected this time to the trusted digital identity management platform.

[0122] Specifically, the trusted digital identity control platform of this embodiment includes:

[0123] A trusted digital identity issuance module, configured to generate and issue a unique corresponding digital certificate to the flight information recording device. This digital certificate is used to realize the one-to-one binding between the flight information recording device and the UAV flight control system, ensuring the uniqueness and traceability of the identity.

[0124] The end-to-end secure access authentication module is configured to perform an end-to-end two-way authentication process with the flight information recording device each time the flight information recording device is powered on and started. By verifying the validity of digital certificates and other security credentials, the legality of the flight information recording device is ensured, and unauthorized device access is prevented.

[0125] The operator Profile remote configuration and management module is used to remotely configure and manage the operator-specific parameters and settings of the flight information recording device.

[0126] The flight information collection and synchronization module is configured to receive the flight information data packets uploaded from the flight information recording device, verify the authenticity and integrity of the data through the built-in verification mechanism, and after the verification passes, synchronize the flight information to the national designated air traffic management platform according to the specified format and protocol.

[0127] When performing Profile remote configuration and management, the following steps are included:

[0128] On the trusted digital identity control platform side, create at least one or more types of Profile management tasks including at least one of download and installation, activation, inactivation, and deletion of the Profile as needed;

[0129] The flight information recording device periodically accesses the trusted digital identity control platform at preset time intervals to detect whether there is a matching Profile management task;

[0130] When the flight information recording device detects a matching Profile management task and the task is a Profile download and installation task, parse the activation code in the task instruction, and extract the address of the Profile download and installation server and the unique download certificate code from the activation code;

[0131] The flight information recording device accesses the specified Profile download and installation server according to the extracted server address and uploads the unique download certificate code to request the corresponding Profile installation package;

[0132] After receiving the Profile installation package, the flight information recording device parses the Profile installation package and installs it according to the parsing result;

[0133] After the installation is completed, the flight information recording device uploads the result information of the Profile download and installation to the trusted digital identity control platform so that the trusted digital identity control platform can change the status of the corresponding Profile management task according to the result information.

[0134] In specific applications, the trusted digital identity management platform is a system platform, usually serving as a pre-system for the national / local air traffic management platform. Its core function is flight information collection and synchronization, and its main functions include: issuing trusted digital identities; providing end-to-end secure access authentication; and remotely managing operator profiles.

[0135] (1) Trusted digital identity issuance solution: After the binding relationship between the flight information recording device and the flight control system is activated, the UAV digital identity certificate is written into the dedicated SIM card of the flight information recording device for UAVs. The solution process includes: First, create a trusted digital identity issuance task at the platform end to generate a digital certificate identifying the UAV's identity. The UAV digital identity certificate contains the unique serial number of the UAV flight control system, the unique product identification code, and the EID information of the dedicated SIM card for UAVs. Second, when the flight information recording device requests the trusted digital identity management platform again, it will obtain the digital certificate. Third, the flight information recording device will verify the legitimacy of the digital certificate. If it is legitimate, the digital certificate will be installed into the dedicated SIM card for UAVs.

[0136] (2) End-to-end secure access authentication solution: After each power-on, the flight information recording device will request the trusted digital identity management platform for end-to-end secure access authentication. The solution process includes: First, the flight information recording device obtains the digital certificate chain identifying its digital identity from the dedicated SIM card for UAVs. The certificate chain includes, but is not limited to, the root certificate of the issuing agency and the UAV digital identity certificate. Second, the flight information recording device calls the end-to-end two-way authentication interface of the trusted digital identity management platform and uploads the UAV digital certificate to the platform. Third, the trusted digital identity management platform verifies the legitimacy of the digital identity certificate chain to determine the legitimacy of the UAV. If it is legitimate, it will receive the flight information data uploaded by the flight information recording device; otherwise, it will discard and not process it.

[0137] (3) Operator Profile Remote Configuration Management Solution: The flight information recording device supports the remote configuration management of the Operator Profile. The remote configuration management instructions and interfaces comply with the SGP.22 and SGP.32 technical specifications defined by the international standards organization GSMA. The process of the Operator Profile remote configuration management solution includes: First, create a Profile management task at the trusted digital identity control platform end as needed. The tasks include, but are not limited to, downloading and installing, activating, invalidating, and deleting the Profile. Second, the flight information recording device regularly accesses the platform. If it detects a matching task, it obtains and executes it from the platform end. Third, if the obtained task is a Profile download and installation task, the flight information recording device parses the activation code in the task instruction, and obtains the Profile download and installation server address and the unique download voucher code from the activation code. Fourth, the flight information recording device accesses the specified server address and uploads the unique download voucher code to request the Profile installation package. Fifth, the flight information recording device parses and installs the Profile installation package. Fifth, the flight information recording device uploads the Profile download and installation result to the trusted digital identity control platform, and the platform changes the task status.

[0138] Specifically, the dedicated SIM card for drones in this embodiment is a SIM card with drone security applications. Its product form can be a Plug IN form SIM card or a chip form eSIM card. Among them, the dedicated SIM card for drones has the eUICC function defined by the GSMA standard, and also has the above functions such as trusted digital identity issuance, activation and binding, verification of the binding relationship, end-to-end two-way authentication, secure storage of flight information, remote configuration management of the Operator Profile, and trusted computing.

[0139] In summary, in this embodiment, by integrating the dedicated SIM card for drones as a trusted carrier, the flight information of the drone is collected, stored, and uploaded in real time, ensuring the authenticity, integrity, and non-repudiation of the flight information.

[0140] Furthermore, in the drone production and assembly stage of this embodiment, through the method of issuing digital certificates, the one-to-one binding between the flight information recording device and the flight control system is realized. This binding mechanism ensures the uniqueness and irreplaceability of the flight information recording device, effectively preventing the device from being disassembled and used for other drones, thus ensuring the accuracy and traceability of the flight information.

[0141] Furthermore, in this embodiment, the flight information recording device collects flight trajectory information in real time during the operation of the UAV and securely stores this information in the dedicated SIM card of the UAV. This storage method ensures the authenticity, integrity, and non-repudiation of the flight information, provides a reliable data source for air traffic management and auditing, and helps the air traffic management department accurately grasp the flight status of the UAV, improving the safety and efficiency of air traffic.

[0142] Furthermore, in this embodiment, the dedicated SIM card of the UAV signs the real-time collected flight trajectory information and reports it to the platform side through the network, which not only ensures the real-time nature of the flight information but also guarantees the authenticity and integrity of the information through digital signature technology. This provides credible data support for air traffic management and helps to detect and handle air traffic violations in a timely manner.

[0143] Furthermore, the dedicated SIM card of the UAV integrated in the flight information recording device in this embodiment conforms to the standard eUICC function defined by GSMA and meets the security application requirements of the dedicated SIM card of the UAV. It has multiple functions such as trusted digital identity issuance, activation binding, verification of binding relationship, end-to-end two-way authentication, secure storage of flight information, remote configuration management of operator Profile, and trusted computing. These functions together enhance the security of the dedicated SIM card of the UAV and provide strong guarantee for the collection and transmission of flight information.

[0144] Furthermore, in this embodiment, the trusted digital identity control platform is used in conjunction with the flight information recording device to realize functions such as the issuance management of trusted digital identity, end-to-end secure access authentication, remote configuration management of operator Profile, and collection and synchronization of flight information. This comprehensive control mechanism ensures the secure access and authentication of the flight information recording device and the UAV flight control system, improving the security and reliability of the entire system.

[0145] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as within the scope described in this specification.

[0146] The above embodiments are only the preferred embodiments of the present invention and cannot be used to limit the scope of protection of the present invention. Any non-substantive changes and substitutions made by those skilled in the art based on the present invention fall within the scope of protection required by the present invention.

Claims

1. A method for recording and reporting low-altitude UAV flight information online, characterized in that: The following steps are involved: During the UAV production and assembly phase, the flight information recording device is integrated into the UAV cabin or mounted on the UAV fuselage and integrated with the UAV flight control system; Before the drone leaves the factory, the basic information of the drone is written into the flight information recording device, and the binding relationship between the flight information recording device and the drone flight control system is activated, so that the flight information recording device forms a unique corresponding relationship with the specific drone; During the operation of the drone, the flight information of the drone is collected in real time through the flight information recording device, and the collected flight information is safely stored in the drone-specific SIM card; The flight information recording device reports the collected flight information to the trusted digital identity management and control platform through the Internet; After verifying the authenticity and integrity of the flight information through a trusted digital identity management and control platform, the flight information will be synchronized to the national designated air traffic management platform.

2. The method according to claim 1, characterized in that The steps to activate a binding relationship include: After the flight information recorder leaves the factory, register the flight information recorder information on the trusted digital identity management and control platform, and create an activation binding task for the flight information recorder; When the flight information recording device is powered on for the first time, it automatically accesses the trusted digital identity management and control platform to query whether there is an activation binding task corresponding to the flight information recording device; If there is an activation binding task, the activation operation is performed according to the preset binding process to bind the flight information recording device to the drone flight control system to form a unique corresponding relationship.

3. The method according to claim 1, characterized in that The step of verifying the binding relationship between the flight information recording device and the UAV flight control system is also included, specifically: After the drone is powered on, the flight information recording device starts normally and initializes the communication connection with the flight control system; The flight information recorder uses symmetric encryption technology to verify the binding relationship with the flight control system to confirm whether the binding relationship between the flight information recorder and the flight control system remains consistent and has not changed; If the verification result shows that the binding relationship has changed, the flight information recording device will immediately record the abnormal reporting information; At the same time, the flight information recording device turns off the flight information network reporting function to prevent incorrect reporting or leakage of flight information due to abnormal binding relationship.

4. The method according to claim 1, characterized in that: The steps for reporting flight information online include: When the number of flight information collections reaches the preset configuration number, the drone-specific SIM card calculates the collected flight data set based on asymmetric cryptography technology and generates a corresponding signature value; The flight data set including the signature value is encrypted as a data packet through a mobile communication module in the flight information recording device, and sent to the trusted digital identity management and control platform through a mobile communication network; After receiving the data packet, the trusted digital identity management and control platform verifies the signature value using the public key corresponding to the drone-specific SIM card to verify the authenticity and integrity of the flight data set; After verification, the trusted digital identity management and control platform synchronizes the flight data set to the air traffic management platform.

5. The method according to claim 1, characterized in that: The flight information recording device includes: Management module, used to realize the dynamic activation binding function with the UAV flight control system, the dynamic verification function of the binding relationship, and the flight information collection, secure storage and online reporting functions; Mobile communication module, used to realize online reporting of flight information; The drone-specific SIM card is used to securely store flight information and has the functions of issuing trusted digital identities, activating binding, verifying binding relationships, end-to-end two-way authentication, secure storage of flight information, remote configuration management of operator profiles, and trusted computing. Flight information collection module, used to collect UAV flight information in real time; Among them, the management module communicates with the UAV flight control system to realize the dynamic activation binding of the flight information recording device and the UAV flight control system, and collects flight information at regular intervals during the operation of the UAV, and stores the collected flight information securely in the UAV-specific SIM card, and then reports the flight information to the trusted digital identity management and control platform through the mobile communication module.

6. The method according to claim 5, characterized in that: The flight information collection, secure storage and online reporting process includes: The management module collects the flight information of the UAV from the flight information collection module at regular intervals; After each flight information is collected, it is temporarily cached in the management module, and then the data is collected cyclically for a certain number of times; The management module calls the data signature interface of the drone-specific SIM card, calculates the HASH value of the cached data, and stores it in the data area of ​​the drone-specific SIM card; The management module calls the mobile communication module to upload the collected data and HASH value to the trusted digital identity management platform.

7. The method according to claim 5, characterized in that: Before sending the timestamp and HMAC to the drone-specific SIM card, the management module also includes a step of verifying the validity of the timestamp, specifically: The management module checks whether the timestamp is within the preset valid time range to ensure the real-time and accuracy of the timestamp; If the timestamp is valid, the management module sends the timestamp and HMAC to the drone-specific SIM card, which then uses the bound authentication key to calculate the HMAC of the received timestamp and random number, and performs a consistency check with the HMAC sent by the management module; If the timestamp is invalid, the management module determines that there is an abnormality in the current process of verifying the binding relationship, and outputs corresponding abnormal prompt information.

8. The method according to claim 5, characterized in that: When dynamically activating a binding relationship, it specifically includes: The management module communicates with the UAV flight control system, allowing the flight control system to generate a temporary public-private key pair and obtain the temporary public key; The management module sends the temporary public key to the drone-specific SIM card, which generates a random symmetric key, i.e., the binding authentication key, and encrypts it with the temporary public key of the flight control system to generate a binding authentication key ciphertext; The management module calculates the binding authentication key ciphertext through a preset verification algorithm to generate a verification value, and sends the verification value together with the binding authentication key ciphertext to the flight control system; After receiving the binding authentication key ciphertext and check value, the flight control system uses the same check algorithm to recalculate the check value of the binding authentication key ciphertext and compares it with the received check value; if the comparison is consistent, the flight control system continues to use the temporary private key to decrypt the binding authentication key ciphertext; if the comparison is inconsistent, the flight control system determines that the binding authentication key ciphertext may have been tampered with during transmission, and outputs a corresponding error prompt message, while terminating the current activation binding process.

9. The method according to any one of claims 1 to 8, characterized in that: Trusted digital identity management and control platform, including: A trusted digital identity issuance module is configured to generate and issue a unique corresponding digital certificate to the flight information recording device, and the digital certificate is used to achieve a one-to-one binding between the flight information recording device and the UAV flight control system to ensure the uniqueness and traceability of the identity; An end-to-end secure access authentication module is configured to perform an end-to-end two-way authentication process with the flight information recorder each time it is powered on, thereby ensuring the legitimacy of the flight information recorder and preventing unauthorized device access by verifying the validity of the digital certificate and other security credentials; Operator Profile remote configuration management module, used to remotely configure and manage operator-specific parameters and settings of flight information recording devices; The flight information collection and synchronization module is configured to receive flight information data packets uploaded from the flight information recording device, verify the authenticity and integrity of the data through a built-in verification mechanism, and after the verification is passed, synchronize the flight information to the national designated air traffic management platform in accordance with the prescribed format and protocol.

10. The method according to claim 9, characterized in that: When performing Profile remote configuration management, the following steps are included: On the trusted digital identity management and control platform, create profile management tasks that include at least one or more types of profile download and installation, activation, expiration, and deletion as needed; The flight information recording device periodically accesses the trusted digital identity management and control platform at preset time intervals to detect whether there is a profile management task that matches it; When the flight information recording device detects a profile management task that matches it, and the task is a profile download and installation task, it parses the activation code in the task instruction, and extracts the address of the profile download and installation server and the unique download voucher code from the activation code; The flight information recording device accesses the designated Profile download and installation server according to the extracted server address, and uploads the unique download voucher code to request the corresponding Profile installation package; After receiving the Profile installation package, the flight information recording device parses the Profile installation package and installs it according to the parsing result; After the installation is complete, the flight information recording device uploads the result information of the Profile download and installation to the trusted digital identity management and control platform so that the trusted digital identity management and control platform can change the status of the corresponding Profile management task based on the result information.

Images