Quantum encryption unmanned aerial vehicle dynamic protection system capable of storing and transferring energy and control method

Abstract

The invention relates to the technical field of unmanned aerial vehicles, in particular to a quantum encryption unmanned aerial vehicle dynamic protection system capable of storing and transmitting energy and a control method, and the method comprises the following steps: 1, generating an ith quantum key # imgabs0 #, binding a timestamp # imgabs2 # for binding # imgabs1 #, and constructing an unmanned aerial vehicle end and ground / mother machine end quantum key pool # imgabs3 #; generating a jth quantum key # imgabs4 #, binding the binding # imgabs5 # with a timestamp # imgabs6 #, constructing a rear quantum key pool # imgabs7 # of the unmanned aerial vehicle end and the ground / mother machine end, and maintaining the quantum key pool and the rear quantum key pool in parallel; according to the method and the device, the quantum key pool and the post quantum key pool are maintained in parallel, when a quantum key distribution link is blocked, the post quantum key can be automatically switched to, and communication interruption caused by failure of a single QKD channel is avoided; a hash authentication mechanism of the key and the timestamp is utilized to effectively prevent the key or the timestamp from being tampered or replayed in a transmission process on a wireless link; time offset tolerance judgment based on IEEE 1588 clock synchronization is adopted, and network delay and clock drift can be tolerated.

Description

Technical Field

[0001] The present invention relates to the technical field of unmanned aerial vehicles, and particularly to a quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy and a control method therefor. Background Art

[0002] The quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy is a new type of protection system that integrates multiple advanced technologies. It uses quantum encryption technology to provide highly secure encryption protection for the communication link of the unmanned aerial vehicle, ensuring the confidentiality and integrity of data transmission, preventing information from being stolen or tampered with. At the same time, the system has a dynamic protection function, which can monitor the surrounding environment of the unmanned aerial vehicle in real time, quickly identify and respond to potential threats, such as electromagnetic interference, cyber attacks, etc.; In addition, the system also integrates an integrated design of storing, computing, and transmitting energy, optimizing the energy management and data processing efficiency of the unmanned aerial vehicle, enabling the unmanned aerial vehicle to have stronger autonomy and stability during mission execution, and providing strong support for safe flight and data transmission in complex environments; In a complex electromagnetic and network confrontation environment, for the quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy, if only the quantum key is maintained, once the QKD link is blocked, the communication will be interrupted. There are risks of tampering and replay during the key transmission process. The wireless channel is easily intercepted and replayed by eavesdroppers with old key packets, or the key and its timestamp are tampered with. Moreover, network delay and clock drift lead to key desynchronization. During flight, the communication link is delayed or the clock of the unmanned aerial vehicle is inconsistent with the ground / mother aircraft clock, and legitimate keys may be misjudged as invalid. Therefore, in view of the above problems, a quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy and a control method therefor are proposed. Summary of the Invention

[0003] The purpose of the present invention is to provide a quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy and a control method therefor, so as to solve the problems that in a complex electromagnetic and network confrontation environment, for the quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy, if only the quantum key is maintained, once the QKD link is blocked, the communication will be interrupted. There are risks of tampering and replay during the key transmission process. The wireless channel is easily intercepted and replayed by eavesdroppers with old key packets, or the key and its timestamp are tampered with. Moreover, network delay and clock drift lead to key desynchronization. During flight, the communication link is delayed or the clock of the unmanned aerial vehicle is inconsistent with the ground / mother aircraft clock, and legitimate keys may be misjudged as invalid.

[0004] To achieve the above object, the present invention provides the following technical solutions: A quantum encryption unmanned aerial vehicle dynamic protection system capable of storing, computing, and transmitting energy and a control method therefor, including the following steps: Step 1: Generate the i-th quantum key and bind bind the timestamp , construct quantum key pools at the UAV side and the ground / master aircraft side ; Generate the j-th quantum key , and bind Bind the timestamp , construct the post-quantum key pools at the UAV side and the ground / master aircraft side , and maintain the quantum key pool and the post-quantum key pool in parallel; Step 2: Select the key to be used and its corresponding timestamp , and generate an authentication value:

[0005] where, represents the result of processing the concatenation of the key and the timestamp using the secure hash algorithm; Compare the generated authentication value with the expected authentication value pre-stored locally. Only when the comparison is consistent, confirm that the key is valid and load it, otherwise discard it; Step 3: Set the local system time , the expected key timestamp and the allowed time offset threshold of the timing synchronization mechanism. The judgment rule of the timing synchronization mechanism is:

[0006] Only when the above conditions are met, accept the corresponding key, otherwise consider the key invalid and trigger an exception handling process; Step 4: Set the current key usage serial number n and the sliding window width w, and calculate the corresponding key serial number Seq according to the received timestamp ; The judgment condition is:

[0007] Only when the key serial number is within the sliding window, allow continued use, otherwise reject it and record a security log.

[0008] As a further optimized content of the present invention, where: the following steps are further included: Step 5: During the communication between the UAV and the ground / master aircraft, when the usage times or the effective duration reach the preset threshold, trigger a key refresh operation, select a new K and TS from the key pool for replacement, and complete the synchronization authentication; if the continuous key refresh fails more than the preset number of times, automatically switch to the post-quantum key pool for backup communication to ensure that the communication is not interrupted; Step 6: Apply the keys authenticated and synchronized through the above steps to the data encryption and decryption of flight control instructions and protection policies; synchronously detect data integrity and timing consistency. If abnormal instruction data is detected, promptly trigger the security mode and execute the flight trajectory protection or autonomous return policy. Step 7: During the control process, in combination with the dynamic changes in the energy reception status, edge computing load status, and flight environment of the UAV, adjust the key management frequency and protection level in real time.

[0009] As a further optimized content of the present invention, wherein: in Step 1, the quantum key pool The quantum keys in it are generated by using the photon polarization encoding method, and the keys in the post-quantum key pool are generated by using the lattice-based public key algorithm; the time stamp , is a 64-bit Unix time stamp in Coordinated Universal Time format.

[0010] As a further optimized content of the present invention, wherein: in Step 2, the hash function is SHA-3-256; the key K to be verified and the corresponding time stamp TS are concatenated in binary and then input into the hash function, and the expected authentication value is pre-stored in the local key authentication table.

[0011] As a further optimized content of the present invention, wherein: in Step 3, the allowable time offset threshold ranges from 50 to 200 milliseconds; the deviation between the local system time and the expected key time stamp is obtained through the IEEE 1588 precise clock synchronization module.

[0012] As a further optimized content of the present invention, wherein: in Step S4, the width of the sliding window w is taken as 2; the calculation formula for the key sequence number Seq is:

[0013] In the formula, is the time stamp at the initial key generation, is the key generation time interval.

[0014] As a further optimized content of the present invention, wherein: in Step 5, the preset usage times threshold is N times, and the preset effective duration threshold is T minutes; when the number of consecutive key refresh failures exceeds the preset number M, automatically switch to the post-quantum key pool for backup communication.

[0015] As a further optimized content of the present invention, wherein: it includes: The quantum key generation module is used to generate the i-th quantum key at the UAV side and the ground / mother machine side, bind a timestamp to it, and construct a quantum key pool; The post-quantum key generation module is used to generate the j-th post-quantum key at the UAV side and the ground / mother machine side, bind a timestamp to it, construct a post-quantum key pool, and maintain it in parallel with the quantum key pool; The key authentication module is used to select the key to be used and its corresponding timestamp, and calculate the authentication value:

[0016] And compare it with the locally pre-stored expected authentication value. If it passes, load the key; if it fails, discard it; The time sequence synchronization module is used to set the local system time 、the expected key timestamp and the time offset threshold ,and judge ,accept the key when satisfied, and trigger exception handling when not satisfied; The replay detection module is used to set the current key usage serial number n and the sliding window width w, calculate the serial number Seq according to the received timestamp, and judge ,allow use when satisfied, otherwise reject and record the security log; The key refresh and switch module is used to trigger key refresh when the usage times or the effective duration reaches the preset threshold during the communication process, and automatically switch to the post-quantum key pool when the continuous refresh fails more than the preset number of times; The encryption and decryption module is used to apply the authenticated and synchronized key to the data encryption and decryption of the flight control instruction and the protection strategy, and detect the integrity and time sequence consistency of the decrypted data. When an anomaly is detected, trigger the security mode; The adaptive scheduling module is used to combine the energy reception status, the edge computing load status and the dynamic changes of the flight environment of the UAV, and adjust the key management frequency and the protection level in real time.

[0017] As a further optimized content of the present invention, wherein: a computer program is stored thereon, and characterized in that when the computer program is executed by a processor, it runs the steps in the method according to any one of claims 1-7.

[0018] Compared with the prior art, the beneficial effects of the present invention are: 1. In the present invention, by maintaining a quantum key pool and a post-quantum key pool in parallel, when the quantum key distribution link is blocked, it can automatically switch to the post-quantum key to avoid communication interruption caused by the failure of a single QKD channel; using the hash authentication mechanism of the key and the timestamp can effectively prevent the key or timestamp from being tampered with or replayed during transmission on the wireless link; adopting the time offset tolerance judgment based on IEEE 1588 clock synchronization can tolerate network delay and clock drift, ensuring that legitimate keys are not misjudged as invalid due to slight timing deviations; combined with the sliding window replay detection, old key packets outside the allowed sequence number range are directly discarded, thus eliminating the "jamming" of instructions caused by replay attacks and comprehensively improving the communication reliability and dynamic protection ability of the unmanned aerial vehicle in complex electromagnetic and network confrontation environments.

[0019] 2. In the present invention, the quantum key pool is maintained in parallel using photon polarization coding and post-quantum lattice-based algorithms, which not only resists eavesdropping and interference at the physical level but also guards against future quantum computing attacks at the algorithm level; binding a 64-bit Unix timestamp in UTC format and combining it with SHA-3-256 hash to achieve strong authentication of the key and its timestamp, which is tamper-proof and highly efficient for verification; cooperating with the IEEE1588 precise clock synchronization module and a time offset tolerance of 50 - 200 ms can effectively accommodate typical flight link delays and clock drifts, ensuring that legitimate keys are not misjudged as invalid due to minute timing errors; introducing sequence number verification with a sliding window width of 2 and time interval calculation can quickly identify and discard replayed or delayed keys, completely blocking replay attacks; 3. In the present invention, by presetting the usage times N, the refresh threshold of duration T minutes, and automatically switching after continuous refresh failures M times, seamless switching between key updates and standby links is achieved to avoid communication interruption; the modular design splits functions such as quantum / post-quantum key generation, authentication, timing synchronization, replay detection, refresh switching, encryption / decryption, and adaptive scheduling into independent units, facilitating system integration, maintenance, and upgrade; the software implementation can be deployed on a general-purpose embedded processor to achieve rapid iteration and remote upgrade, reducing the hardware customization cost and comprehensively improving the reliability, flexibility, and scalability of the unmanned aerial vehicle in complex electromagnetic and network confrontation environments. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 is a flowchart of the control method of a quantum encryption unmanned aerial vehicle dynamic protection system of the present invention; Figure 2 is a system block diagram of a quantum encryption unmanned aerial vehicle dynamic protection system of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0021] Please refer to Figure 1-2 , the present invention provides a technical solution: A quantum encryption UAV dynamic protection system and control method capable of storing, computing, and transmitting energy, comprising the following steps: Step 1: Generate the i-th quantum key , and bind Bind the timestamp , construct the quantum key pools at the UAV end and the ground / mother UAV end ; Generate the j-th quantum key , and bind Bind the timestamp , construct the post-quantum key pools at the UAV end and the ground / mother UAV end , maintain the quantum key pool and the post-quantum key pool in parallel, and maintain the quantum and post-quantum key pools in parallel to improve the reliable redundancy of the key link; Step 2: Select the key to be used and its corresponding timestamp , generate the authentication value:

[0022] Among them, represents the result of processing the concatenation of the key and the timestamp using the secure hash algorithm; Compare the generated authentication value with the expected authentication value pre-stored locally. Only when the comparison is consistent, confirm that the key is valid and load it, otherwise discard it. Hash authentication effectively prevents the key from being tampered with during transmission; Step 3: Set the local system time , the expected key timestamp and the allowed time offset threshold of the timing synchronization mechanism. The judgment rule of the timing synchronization mechanism is:

[0023] Only when the above conditions are met, accept the corresponding key, otherwise consider the key invalid and trigger the exception handling process. The timing synchronization filters out the abnormal keys caused by network delay or clock drift; Step 4: Set the current key usage serial number n and the sliding window width w, and calculate the corresponding key serial number Seq according to the received timestamp ; The judgment condition is:

[0024] Only when the key serial number is within the sliding window, allow continued use, otherwise reject it and record the security log. The sliding window mechanism effectively resists the key replay attack.

[0025] As a further technical solution of this scheme, it also includes the following steps: Step 5: During the communication between the drone and the ground / master aircraft, when the usage times or the effective duration reaches the preset threshold, trigger the key refresh operation, select new K and TS from the key pool for replacement, and complete the synchronization authentication; if the consecutive key refresh fails more than the preset number of times, automatically switch to the post-quantum key pool for backup communication to ensure uninterrupted communication; Step 6: Apply the keys authenticated and synchronized through the above steps to the data encryption and decryption of the flight control instructions and protection policies; synchronously detect the data integrity and timing consistency. If abnormal instruction data is detected, promptly trigger the security mode and execute the flight trajectory protection or autonomous return policy; Step 7: During the control process, in combination with the dynamic changes of the energy reception status, edge computing load status and flight environment of the drone, adjust the key management frequency and protection level in real time, automatically refresh and replace the keys to ensure timely key updates during long-term tasks, seamlessly switch to the backup link when the refresh fails to avoid communication interruption, and at the same time perform integrity detection after encrypting the flight control instructions, which can detect and isolate abnormal instructions in real time, and adaptively adjust the protection level to balance endurance and security; As a further implementation technical solution of this scheme, in Step 1, the quantum key pool The quantum keys in are generated by using the photon polarization encoding method, and the keys in the post-quantum key pool are generated by using the lattice-based public key algorithm; the time stamp is a 64-bit Unix time stamp in Coordinated Universal Time (UTC) format. The physical security of the quantum key is ensured through photon polarization encoding, the mathematical security against quantum computing is provided through the lattice-based algorithm, and the UTC 64-bit time stamp is uniformly used to facilitate accurate synchronization across nodes; 、 As a further implementation technical solution of this scheme, in Step 2, the hash function is SHA-3-256; the key K to be verified and the corresponding time stamp TS are concatenated in binary and then input into the hash function. The expected authentication value is pre-stored in the local key authentication table. The SHA-3-256 set above has high collision resistance and pre-image attack resistance capabilities, and at the same time, the pre-stored authentication table accelerates the verification process and reduces the runtime delay; As a further implementation technical solution of this scheme, in Step 3, the allowable time offset threshold ranges from 50 to 200 milliseconds; the local system time and the expected key timestamp and The deviation is obtained through the IEEE 1588 precise clock synchronization module, covering typical wireless link delay fluctuations with a tolerance of 50–200 ms. At the same time, IEEE 1588 synchronization provides sub-millisecond clock consistency, enhancing the accuracy of timing verification; As a further technical solution for the implementation of this solution, in step S4, the width of the sliding window w is taken as 2; the calculation formula for the key sequence number Seq is:

[0026] In the formula, is the timestamp for initial key generation, is the key generation time interval. The window with a width of 2 achieves a balance between security and fault tolerance, calculates the sequence number according to the time interval, simplifies the calculation and has traceability; As a further technical solution for the implementation of this solution, in step 5, the preset usage threshold is N times, and the preset valid duration threshold is T minutes; when the number of consecutive key refresh failures exceeds the preset number M, it automatically switches to the post-quantum key pool for backup communication. N, T, and M can be flexibly set according to task requirements. At the same time, the refresh failure threshold avoids frequent switching and reduces the unnecessary activation of backup links; As a further technical solution for the implementation of this solution, it includes: A quantum key generation module, used to generate the i-th quantum key at the UAV end and the ground / mother end, bind a timestamp to it, and construct a quantum key pool; A post-quantum key generation module, used to generate the j-th post-quantum key at the UAV end and the ground / mother end, bind a timestamp to it, construct a post-quantum key pool, and maintain it in parallel with the quantum key pool; A key authentication module, used to select the key to be used and its corresponding timestamp, and calculate the authentication value:

[0027] And compare it with the locally pre-stored expected authentication value. If it passes, the key is loaded; if it fails, it is discarded; A timing synchronization module, used to set the local system time 、the expected key timestamp and the time offset threshold , and judge , accept the key when satisfied, and trigger exception handling when not satisfied; A replay detection module, used to set the current key usage sequence number n and the sliding window width w, calculate the sequence number Seq according to the received timestamp, and judge , allow use when satisfied, otherwise reject and record the security log; The key refresh and switch module is used to trigger key refresh during communication when the usage times or the effective duration reaches a preset threshold, and automatically switch to the post-quantum key pool when the consecutive refresh failures exceed the preset number of times; The encryption and decryption module is used to apply the authenticated and synchronized key to the data encryption and decryption of flight control instructions and protection policies, and detect the integrity and timing consistency of the decrypted data. When an anomaly is detected, it triggers the security mode; The adaptive scheduling module is used to combine the energy reception status, edge computing load status and dynamic changes in the flight environment of the UAV to adjust the key management frequency and protection level in real time. The system adopts a modular design, which is easy for software and hardware decoupling development and upgrade. The responsibilities of each functional module are clear, convenient for maintenance and extension, and can be integrated into the existing UAV platform to reduce the integration difficulty; As a further implementation technical solution of this solution, it stores a computer program, and is characterized in that when the computer program is executed by a processor, it runs the steps in the method described in any one of claims 1-7. It is implemented by software, with flexible upgrade and iteration. At the same time, it can be deployed on a general embedded processor to reduce the cost of dedicated hardware.

[0028] In this article, specific examples are used to elaborate on the principle and implementation manner of the present invention. The description of the above examples is only used to help understand the method of the present invention and its core idea. The above is only the preferred implementation manner of the present invention. It should be noted that due to the limitation of literal expression, and objectively there are infinite specific structures. For those of ordinary skill in the art in this technical field, without departing from the principle of the present invention, several improvements, retouches or changes can also be made, or the above technical features can be combined in an appropriate manner; these improvements, retouches, changes or combinations, or directly applying the concept and technical solution of the invention to other occasions without improvement, shall all be regarded as the protection scope of the present invention.

Claims

1. A control method for a dynamic protection system of a quantum encryption unmanned aerial vehicle capable of storing, computing, and transmitting energy, characterized in that, It includes the following steps: Step 1: Generate the i-th quantum key and bind the bound timestamp to build a quantum key pool at the UAV side and the ground / mother machine side ; Generate the j-th quantum key , and for the bound bound timestamp , construct the post-quantum key pools at the UAV side and the ground / mother-ship side , and maintain the quantum key pool and the post-quantum key pool in parallel; Step 2: Select the key to be used and its corresponding timestamp , and generate an authentication value: ； Among them, represents the result of processing the concatenation of the key and the timestamp using the Secure Hash Algorithm; Compare the generated authentication value with the expected authentication value pre-stored locally. Only when the comparison is consistent, confirm that the key is valid and load it; otherwise, discard it. Step 3: Set the local system time , the expected key timestamp and the allowed time offset threshold of the timing synchronization mechanism, and the judgment rule of the timing synchronization mechanism is as follows: ； Only when the above conditions are met, accept the corresponding key; otherwise, consider the key invalid and trigger an exception handling process. Step 4: Set the current key usage sequence number n and the sliding window width w, and calculate the corresponding key sequence number Seq according to the received timestamp ​ The judgment condition is: ； Only when the key sequence number is within the sliding window, allow continued use; otherwise, reject it and record a security log.

2. The control method of a quantum encryption UAV dynamic protection system capable of storing, computing and transmitting energy according to claim 1, characterized in that: It also includes the following steps: Step 5: During the communication between the drone and the ground / master aircraft, when the usage times or the effective duration reaches the preset threshold, trigger a key refresh operation, select new K and TS from the key pool for replacement, and complete the synchronous authentication. If the continuous key refresh fails more than the preset number of times, automatically switch to the post-quantum key pool for backup communication to ensure uninterrupted communication. Step 6: Apply the key authenticated and synchronized through the above steps to the data encryption and decryption of flight control instructions and protection policies; synchronously detect the data integrity and timing consistency. If abnormal instruction data is detected, promptly trigger the security mode and execute the flight trajectory protection or autonomous return policy. Step 7: During the control process, in combination with the dynamic changes of the drone's energy reception status, edge computing load status, and flight environment, adjust the key management frequency and protection level in real time.

3. The control method of a quantum encryption UAV dynamic protection system capable of storing, computing and transmitting energy according to claim 1, characterized in that: In step 1, the quantum key pool The quantum key in is generated by photon polarization encoding. After that, the key in the quantum key pool is generated by a lattice-based public key algorithm; the timestamp , 、 is a 64-bit Unix timestamp in Coordinated Universal Time format.

4. The control method of a dynamic protection system for a quantum encryption unmanned aerial vehicle capable of storing, computing, and transmitting energy according to claim 1, characterized in that: In step 2, the hash function is SHA-3-256; the key K to be verified and the corresponding timestamp TS are binary concatenated and then input into the hash function, and the expected authentication value is pre-stored in the local key authentication table.

5. The control method of a quantum encryption UAV dynamic protection system capable of storing, computing, and transmitting energy according to claim 1, characterized in that: In step 3, the allowed time offset threshold ranges from 50 to 200 milliseconds; the local system time and the expected key timestamp The deviation is obtained through the IEEE 1588 Precision Clock Synchronization Module.

6. The control method of a quantum encryption UAV dynamic protection system capable of storing, computing and transmitting energy according to claim 1, characterized in that: In step S4, the width of the sliding window w is taken as 2; the calculation formula for the key sequence number Seq is: ； Wherein, is the timestamp for initial key generation, is the key generation time interval.

7. The control method of a quantum encryption UAV dynamic protection system capable of storing, computing and transmitting energy according to claim 2, characterized in that: In step 5, the preset usage times threshold is N times, and the preset effective duration threshold is T minutes. When the number of consecutive key refresh failures exceeds the preset number M, automatically switch to the post-quantum key pool for backup communication.

8. A dynamic protection system for a quantum encryption drone with energy storage, computing, and transmission capabilities according to any one of claims 1-7, characterized in that: It includes: A quantum key generation module, which is used to generate the i-th quantum key at the drone end and the ground / master aircraft end, bind a timestamp to it, and construct a quantum key pool. A post-quantum key generation module, which is used to generate the j-th post-quantum key at the drone end and the ground / master aircraft end, bind a timestamp to it, construct a post-quantum key pool, and maintain it in parallel with the quantum key pool. A key authentication module, which is used to select the key to be used and its corresponding timestamp, and calculate the authentication value: ； And compare it with the locally pre-stored expected authentication value. If it passes, load the key; if it fails, discard it. The timing synchronization module is used to set the local system time and the expected key timestamp and the time offset threshold , and judge . When the conditions are met, accept the key; when not met, trigger exception handling; The replay detection module is used to set the current key usage sequence number n and the sliding window width w, calculate the sequence number Seq based on the received timestamp, and judge , and allow usage when satisfied, otherwise reject and record the security log; A key refresh and switching module, which is used to trigger a key refresh during communication when the usage times or the effective duration reaches the preset threshold, and automatically switch to the post-quantum key pool when the continuous refresh fails more than the preset number of times. An encryption and decryption module, which is used to apply the key authenticated and synchronized to the data encryption and decryption of flight control instructions and protection policies, and detect the integrity and timing consistency of the decrypted data. When an anomaly is detected, trigger the security mode. An adaptive scheduling module, which is used to combine the dynamic changes of the drone's energy reception status, edge computing load status, and flight environment, and adjust the key management frequency and protection level in real time.

9. A quantum encryption UAV dynamic protection system capable of storing, computing and transmitting energy, on which a computer program is stored, characterized in that , when the computer program is executed by a processor, it runs the steps in the method according to any one of claims 1-7.

Images