A lightweight and privacy-preserving drone group authentication and group key update method

Abstract

The present application relates to the field of wireless communication network technology, and in particular to a lightweight and privacy-preserving drone group authentication and group key update method for ensuring the reliability of drone group services. The method comprises: after performing system initialization and entity registration in sequence, a drone joins, that is, the drone to be joined registers its identity through a ground base station and obtains its own public-private key pair and some related parameters, and then initiates a drone group authentication request to the head drone; then, cross-drone group authentication is performed, the cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on it; finally, the drone group key is updated, and the head drone sends a key update message to the drone group members of the group. The present application is based on the Elgamal cryptographic primitive, which can ensure the lightweight and privacy protection in the drone group authentication process, while realizing group key update and ensuring its forward and backward security.

Description

Technical Field

[0001] The present application relates to the field of computer information security technology, and in particular to a lightweight and privacy-preserving drone group authentication and group key update method. Background Art

[0002] Drones, or unmanned aerial vehicles, have evolved from specialized tools into valuable assets across various industries, driving the development of the low-altitude economy. This has further fueled the widespread application of drones in areas such as aerial photography, precision agriculture, infrastructure inspection, disaster response, and logistics. Furthermore, advances in artificial intelligence, 5G connectivity, and swarm intelligence are enhancing drone capabilities, enabling autonomous operation, large-scale collaboration, and integration with smart city infrastructure.

[0003] In low-altitude economic networks, drones typically operate in swarms. A swarm typically consists of multiple drone groups, each with a leader drone and multiple other drones. The leader drone manages the group and coordinates mission execution. Secure communication within the swarm is achieved through session keys. Ground base stations manage multiple drone groups, communicating with the leader drone to issue tasks and collect results. This hierarchical architecture improves collaborative efficiency and mission execution.

[0004] Drone swarms are dynamic due to changing service demands or connection interruptions. For example, a leader drone may need to request a ground base station to deploy a new drone or request inter-cluster drones from other clusters to join in order to maintain service reliability. These drones must be authenticated while ensuring the security of the cluster session key. This raises three key issues: 1) When multiple drones join simultaneously, authenticating each one individually will result in excessive communication overhead, necessitating a batch authentication mechanism that effectively reduces the communication burden. 2) Cross-group drones must collaborate multiple times across drone groups. To prevent flight trajectories from being inferred, their identity authentication information must be unlinkable. Designing an authentication mechanism that balances efficiency and privacy is crucial. 3) When new members join or old members leave, the session key must be updated to ensure forward and backward confidentiality. Therefore, a secure and efficient key update mechanism is necessary. Summary of the Invention

[0005] This application provides a lightweight and privacy-preserving drone group authentication and group key update method based on the Elgamal cryptographic primitive, which can ensure the lightweight and privacy protection of the drone group authentication process, while realizing the group key update and ensuring its forward and backward security.

[0006] To solve the above technical problems, an embodiment of the present application provides a lightweight and privacy-protected drone group authentication and group key update method, comprising the following steps: Step 1: The ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters; Step 2: The head drone and drone group members register their identities through the ground base station and obtain their own public-private key pairs and related parameters; Step 3: The drone to be joined registers its identity through the ground base station and obtains its own public-private key pairs and related parameters, and then the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication for the drone to be joined together with the drone group members; Step 4: The cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on the cross-group authentication drone; Step 5: The head drone sends a key update message to the drone group members of this group, and then the drone group members collaborate to update the group key.

[0007] In some exemplary embodiments, step 1 is a process of system initialization; the system initialization includes: first, Select security parameters for each ground base station , hash function , cross-drone swarm communication token , with large prime numbers The cyclic group of integers of order and the cyclic group of integers Generators of ; Then, the ground base station Choose your own private key And calculate your own public key ;at last, Ground base stations publish public parameters .

[0008] In some exemplary embodiments, step two is a process of entity registration; the entity registration includes: based on the public parameters published in step one, the head drone and drone group members complete identity registration.

[0009] In some exemplary embodiments, the identity registration process includes: first, the head drone Send your real identity and registration request To ground base station ; Then, the ground base station For the head drone Select the drone group key, random number, and drone group join token ; Next, for the first drone Calculate the private key , public key and Kana ; Then, the ground base station Send pseudonym, drone group key, private key, public key, cross-drone group communication token, drone group join token Head drone ; Then, the drone crew members Send your real identity and registration request To ground base station ; Then, the ground base station For drone crew members Choose a random number and private key , and calculate the public key and Kana ; Finally, the ground base station Send pseudonym, drone group key, private key and public key To drone crew members , while giving the drone crew members pseudonyms Store in your own database.

[0010] In some exemplary embodiments, step three is the process of a drone joining a drone group; the drone joining the drone group includes: first, the ground base station for The relevant parameters of the drones to be added are generated; k For example, a ground base station To be added to the drone k Choose a private key and random number , and calculate the public key and Kana ; Then, the ground base station Add the pseudonym, drone group, hash value of the token, private key, public key, and the first drone to be added to the drone group Public key, the drone to be added to the drone group pseudonym Send to the drone to be added k ; Next, wait for the drone to be added k After receiving the message, select a random number , and calculate , and ; Then, wait for the drone to be added k Calculate the signature and send Head drone ; Then, the first drone Received from After the request of the drones to be added, the aggregate signature is calculated and aggregate messages ; Then, the head drone Select random number Timestamp , and for the group Calculate the relevant parameters based on the UAV team members; For example, the head drone calculate , , ;Finally, the head drone send To drone crew members ; UAV team members After receiving the message, determine the timestamp Is it fresh? If not, the drone crew Do not process the message; if it is fresh, verify it Is it established? If not, the drone team members Head-on drone Send authentication failure message If established, drone crew members Calculate and verify Is it established? If not, the drone team members Head-on drone Send authentication failure message If established, drone crew members Calculation verification results ,sign as well as .

[0011] In some exemplary embodiments, the drone send To drone crew members Later, it also includes: drone crew members send Head drone ; UAV Received from After receiving a message from a drone team member, if the message is , then the drone Send an authentication failure message to the drone group to be joined Otherwise, the head drone calculate and verify and Is it true? If not, the head drone Send an authentication failure message to the drone group to be joined If established, the head drone Calculate aggregate signature and aggregate public key and verify Is it true? If so, complete the Otherwise, the first drone Send an authentication failure message to the drone group to be joined .

[0012] In some exemplary embodiments, when a drone needs to join another drone group, cross-drone group authentication is required; Step 4 is the cross-drone group authentication process; the cross-drone group authentication includes: first, the head drone Select Timestamp and calculate ; Then, the head drone send Give the drone to be added to the drone group n ,in, It is a pseudonym for a cross-group certified drone; head drone n After receiving the message, determine the timestamp Is it fresh? If not, head drone n Do not process the message; if it is fresh, the drone n verify Is it established? If so, the cross-drone group authentication is completed; if not, the head drone n Head-on drone Send authentication failure message .

[0013] In some exemplary embodiments, when a drone exits or joins the drone group, the group key needs to be updated; Step 5 is the process of updating the drone group key, which includes: first, the head drone Select a new group key , timestamp and a polynomial ; Then, the head drone calculate , , and ; Then, the first drone send Give UAV team members within the group; After the drone group members in the group receive the message, they judge the timestamp Is it fresh? If not, the drone team members do not process the message; if fresh, the drone team members For example, the calculation and , and send To other drone group members; after receiving the message, other drone group members calculate and ;Finally, each drone team member verifies Is it true? If so, the group key is updated. If not, the drone group members send the key to the head drone. Send a message that a key update failed .

[0014] The technical solution provided by this application has at least the following advantages:

[0015] The present application provides a lightweight and privacy-preserving drone group authentication and group key update method, comprising the following steps: Step 1: The ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters; Step 2: The head drone and drone group members register their identities through the ground base station and obtain their own public-private key pairs and related parameters; Step 3: The drone to be joined registers its identity through the ground base station and obtains its own public-private key pairs and related parameters, and then the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication of the drone to be joined together with the drone group members; Step 4: The cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on the cross-group authentication drone; Step 5: The head drone sends a key update message to the drone group members of the group, and then the drone group members collaborate to update the group key.

[0016] To achieve rapid drone authentication and reduce communication overhead, this application designs a message aggregation mechanism based on Elgamal key primitives. Furthermore, to achieve cross-group drone authentication and privacy protection, this application designs a cross-group authentication mechanism based on single sign-on. To achieve forward and backward security of group keys, this application designs a group key update mechanism based on secret sharing. The lightweight and privacy-preserving drone group authentication and group key update method provided by this application achieves lightweight and privacy-preserving drone group authentication and group key update, ensuring the reliability of drone group services. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] One or more embodiments are exemplarily described by the pictures in the corresponding drawings. These exemplifications do not constitute limitations on the embodiments. Unless otherwise stated, the pictures in the drawings do not constitute proportional limitations.

[0018] Figure 1 A flowchart of a lightweight and privacy-preserving drone group authentication and group key update method provided in one embodiment of the present application.

[0019] Figure 2 This is a flowchart of the drone joining authentication in the method provided in one embodiment of the present application.

[0020] Figure 3 This is a flowchart of the drone group key update method provided in one embodiment of the present application. DETAILED DESCRIPTION

[0021] As can be seen from the background technology, there are many problems with the existing drone group authentication and key update process. For example, when multiple drones join at the same time, authenticating them one by one will lead to excessive communication overhead and forward and backward confidentiality issues.

[0022] In order to solve the above technical problems, the embodiment of the present application provides a lightweight and privacy-protected drone group authentication and group key update method, including the following steps: Step 1, the ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters; Step 2, the head drone and drone group members register their identities through the ground base station and obtain their own public-private key pairs and related parameters; Step 3, the drone to be joined registers its identity through the ground base station and obtains its own public-private key pairs and related parameters, and then the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication for the drone to be joined together with the drone group members; Step 4, the cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on the cross-group authentication drone; Step 5, the head drone sends a key update message to the drone group members of the group, and then the drone group members collaborate to update the group key. The present application provides a lightweight and privacy-protected drone group authentication and group key update method, which realizes lightweight and privacy-protected drone group authentication and group key update, and ensures the reliability of drone group services.

[0023] The following detailed description of the various embodiments of the present application is provided in conjunction with the accompanying drawings. However, those skilled in the art will appreciate that many technical details are provided in the various embodiments of the present application to facilitate a better understanding of the present application. However, even without these technical details and the various variations and modifications based on the following embodiments, the technical solutions claimed in the present application can still be implemented.

[0024] The present invention provides a lightweight and privacy-preserving drone group authentication and group key update method, including the following steps:

[0025] Step 1: The ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters.

[0026] Step 2: The leader drone and drone group members register their identities through the ground base station and obtain their own public and private key pairs and related parameters.

[0027] Step 3: The drone to be joined registers its identity through the ground base station and obtains its own public and private key pair and related parameters. Then the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication for the drone to be joined together with the drone group members.

[0028] Step 4: Cross-group authentication: The UAV initiates a cross-UAV group authentication request, and the head UAV of the target UAV group performs cross-UAV group authentication on the cross-group authentication UAV.

[0029] Step 5: The head drone sends a key update message to the drone group members of the group, and then the drone group members collaborate to update the group key.

[0030] Figure 1 This is a flowchart of drone group authentication and group key update in an embodiment of the present application. Specifically, this method includes five steps, as follows:

[0031] Step S1, system initialization.

[0032] first, Select security parameters for each ground base station , hash function , cross-drone swarm communication token , with large prime numbers The cyclic group of integers of order and the cyclic group of integers Generators of ; Then, the ground base station Choose your own private key And calculate your own public key ;at last, Ground base stations publish public parameters .

[0033] Step S2: Entity registration.

[0034] Based on the public parameters published in step S1, the lead drone and the drone group members complete the identity registration. Send your real identity and registration request To ground base station ; Then, the ground base station For the head drone Select the drone group key, random number, and drone group join token ; Next, for the first drone Calculate the private key , public key and Kana ; Then, the ground base station Send pseudonym, drone group key, private key, public key, cross-drone group communication token, drone group join token Head drone ; Then, the drone crew members Send your real identity and registration request To ground base station ; Then, the ground base station For drone crew members Choose a random number and private key , and calculate the public key and Kana ; Finally, the ground base station Send pseudonym, drone group key, private key and public key To drone crew members , while giving the drone crew members pseudonyms Store in your own database.

[0035] Step S3: UAV joining. The drone to be joined registers its identity through the ground base station and obtains its own public-private key pair and some related parameters. It then initiates a drone group authentication request to the leader drone. After receiving the request, the leader drone completes group authentication for the drone to be joined together with the drone group members.

[0036] Step S4: Cross-drone group authentication: When a drone needs to join another drone group, cross-drone group authentication is required.

[0037] First, the head drone Select Timestamp and calculate ; Then, the head drone send Give the drone to be added to the drone group n ,in, It is a pseudonym for a cross-group certified drone; head drone n After receiving the message, determine the timestamp Is it fresh? If not, head drone n Do not process this message and do not send it to the drone. Send authentication failure message to prevent denial of service attack; if fresh, head drone n verify Is it established? If so, the cross-drone group authentication is completed; if not, the head drone n Head-on drone Send authentication failure message .

[0038] Step S5: UAV group key update. The leader UAV sends a key update message to all UAV group members in the group, and then the UAV group members collaborate to update the group key.

[0039] Figure 2 This is a flow chart of drone authentication in the method provided in the embodiment of this application. Figure 2 As shown, this is step S3 mainly implemented in this application, and its specific steps are as follows:

[0040] First, the ground base station for The relevant parameters of the drones to be added are generated; k For example, a ground base station To be added to the drone k Choose a private key and random number , and calculate the public key and Kana ; Then, the ground base station Add the pseudonym, drone group, hash value of the token, private key, public key, and the first drone to be added to the drone group Public key, the drone to be added to the drone group pseudonym Send to the drone to be added k ; Next, wait for the drone to be added k After receiving the message, select a random number , and calculate , and .

[0041] Then, wait for the drone to be added k Calculate the signature and send Head drone ; Then, the first drone Received from After the request of the drones to be added, the aggregate signature is calculated and aggregate messages ; Then, the head drone Select random number Timestamp , and for the group Calculate the relevant parameters based on the UAV team members; For example, the head drone calculate , , .

[0042] Finally, the head drone send To drone crew members ; UAV team members After receiving the message, determine the timestamp Is it fresh? If not, the drone crew Do not process this message and do not send it to the drone. j Send authentication failure message to prevent denial of service attack; if fresh, verify Is it established? If not, the drone team members Head-on drone Send authentication failure message If established, drone crew members Calculate and verify Is it established? If not, the drone team members Head-on drone Send authentication failure message If established, drone crew members Calculation verification results ,sign as well as .

[0043] Finally, the drone crew send Head drone ; UAV Received from After receiving a message from a drone team member, if the message is , then the drone Send an authentication failure message to the drone group to be joined Otherwise, the head drone calculate and verify and Is it true? If not, the head drone Send an authentication failure message to the drone group to be joined If established, the head drone Calculate aggregate signature and aggregate public key and verify Is it true? If so, complete the Otherwise, the first drone Send an authentication failure message to the drone group to be joined .

[0044] Figure 3 This is a flowchart of the drone group key update method provided in the embodiment of the present application, such as Figure 3 As shown, this is step S5 mainly implemented in this application, and its specific steps are as follows:

[0045] When a drone leaves or joins a drone group, the group key needs to be updated. First, the head drone Select a new group key , timestamp and a polynomial ; Then, the head drone calculate , , and ; Then, the first drone send Give The drone team members in the group.

[0046] Then, After the drone group members in the group receive the message, they judge the timestamp Is it fresh? If not, the drone team members will not process the message and will not report it to the head drone. Send authentication failure message to prevent denial of service attack; if fresh, send it as drone group member For example, the calculation and , and send To other drone group members; after receiving the message, other drone group members calculate and ;Finally, each drone team member verifies Is it true? If so, the group key is updated. If not, the drone group members send the key to the head drone. Send a message that a key update failed .

[0047] Based on the above technical solution, the embodiment of the present application provides a lightweight and privacy-protected drone group authentication and group key update method, including the following steps: Step 1, the ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters; Step 2, the head drone and drone group members register their identities through the ground base station, and obtain their own public-private key pairs and related parameters; Step 3, the drone to be joined registers its identity through the ground base station and obtains its own public-private key pairs and related parameters, and then the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication for the drone to be joined together with the drone group members; Step 4, the cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on the cross-group authentication drone; Step 5, the head drone sends a key update message to the drone group members of this group, and then the drone group members collaborate to update the group key.

[0048] To achieve rapid drone authentication and reduce communication overhead, this application designs a message aggregation mechanism based on Elgamal key primitives. Furthermore, to achieve cross-group drone authentication and privacy protection, this application designs a cross-group authentication mechanism based on single sign-on. To achieve forward and backward security of group keys, this application designs a group key update mechanism based on secret sharing. The lightweight and privacy-preserving drone group authentication and group key update method provided by this application achieves lightweight and privacy-preserving drone group authentication and group key update, ensuring the reliability of drone group services.

[0049] Those skilled in the art will appreciate that the above-described embodiments are specific examples for implementing the present application, and that in actual applications, various changes in form and detail may be made thereto without departing from the spirit and scope of the present application. Any person skilled in the art may make changes and modifications without departing from the spirit and scope of the present application. Therefore, the scope of protection of the present application shall be subject to the scope defined in the claims.

Claims

1. A lightweight and privacy-preserving drone group authentication and group key update method, characterized by: The following steps are involved: Step 1: The ground base station determines the parameters of the Elgamal cryptographic primitives required for the drone group authentication and group key update process, and publishes the public parameters; Step 2: The leader drone and drone group members register their identities through the ground base station and obtain their own public and private key pairs and related parameters; Step 3: The drone to be joined registers its identity through the ground base station and obtains its own public and private key pair and related parameters. Then, the drone to be joined initiates a drone group authentication request to the head drone. After receiving the request, the head drone completes the group authentication for the drone to be joined together with the drone group members. Step 4: The cross-group authentication drone initiates a cross-drone group authentication request, and the head drone of the target drone group performs cross-drone group authentication on the cross-group authentication drone; Step 5: The leader drone sends a key update message to the drone group members in the group, and then the drone group members collaborate to update the group key; Step 1 is the process of system initialization; The system initialization includes: first, Ground base stations select hash functions , cross-drone group communication token , with large prime numbers The cyclic group of integers of order and the cyclic group of integers Generators of ; Then, the ground base station i Choose your own private key And calculate your own public key ; at last, Ground base stations publish public parameters ; Step 2 is the entity registration process; the entity registration includes: Based on the public parameters published in step 1, the lead drone and drone group members complete identity registration; The identity registration process includes: First, the head drone j Send your real identity and registration request To ground base station i ; Then, the ground base station i For the head drone j Select the drone group key, random number, and drone group join token ; Next, for the first drone j Calculate the private key , public key and Kana ; Next, the ground base station i Send pseudonym, drone group key, private key, public key, cross-drone group communication token, drone group join token Head drone j ; Then, the drone crew members l Send your real identity and registration request To ground base station i ; Then, the ground base station i For drone crew members l Choose a random number and private key , and calculate the public key and Kana ; Finally, the ground base station i Send pseudonym, drone group key, private key and public key To drone crew members l , while giving the drone crew members pseudonyms Store in your own database.

2. The lightweight and privacy-preserving drone group authentication and group key update method according to claim 1, characterized in that: Step 3 is the process of a drone joining a drone group. The drone joining a drone group includes: First, the ground base station i for The UAVs to be added generate relevant parameters; for UAV k to be added, the ground base station i Select the private key and random number for the drone k to join , and calculate the public key and Kana ; Then, the ground base station i Add the pseudonym, drone group, hash value of the token, private key, public key, and the first drone to be added to the drone group j Public key, the drone to be added to the drone group j pseudonym Send to the drone to be added k ; Next, wait for the drone to be added k After receiving the message, select a random number , and calculate , and ; Then, wait for the drone to be added k Calculate the signature and send Head drone j ; Next, the first drone j Received from After the request of the drones to be added, the aggregate signature is calculated and aggregate messages ; Then, the head drone j Select random number and timestamp , and for the group Calculate relevant parameters for each drone group member; l , head drone j calculate , , ; Finally, the head drone j send To drone crew members l ; UAV team members l After receiving the message, determine the timestamp Is it fresh? If not, the drone crew l Do not process the message; if it is fresh, verify it Is it established? If not, the drone team members l Head-on drone j Send authentication failure message {message auth }; If established, drone team members l calculate and verify Is it established? If not, the drone team members l Head-on drone j Send authentication failure message {message auth }; If established, drone team members l Calculation verification results ,sign as well as .

3. The lightweight and privacy-preserving drone group authentication and group key update method according to claim 1, characterized in that: When a drone needs to join another drone group, cross-drone group authentication is required; Step 4 is the cross-drone group authentication process; the cross-drone group authentication includes: First, the head drone j Select Timestamp and calculate ; Then, the head drone j send Give the drone to be added to the drone group n ,in, It is a pseudonym for a cross-group certified drone; head drone n After receiving the message, determine the timestamp Is it fresh? If not, head drone n Do not process the message; if it is fresh, the drone n verify Is it established? If so, the cross-drone group authentication is completed; if not, the head drone n Head-on drone j Send authentication failure message {message auth }.

Images