Unmanned aerial vehicle communication security and low power consumption optimization system

Abstract

The invention discloses an unmanned aerial vehicle communication security and low power consumption optimization system. The system comprises an S-Box generation module, a time synchronization module, a hybrid encryption module, a digital signature module, a key management module, an identity authentication module, a round number selection module and a decentralized trust management module. The invention belongs to the field of data protection, and particularly relates to an unmanned aerial vehicle communication security and low-power consumption optimization system. According to the scheme, through dynamic S-Box generation and AES encryption optimization, the unpredictability of the encryption process is increased, and the encryption security is remarkably enhanced; based on self-adaptive AES round number and power consumption optimization, encryption strength is dynamically adjusted according to different environments, and the optimal performance and the lowest energy consumption under different conditions are ensured; the environmental adaptability of the unmanned aerial vehicle is enhanced based on hybrid encryption, so that the efficiency of an unmanned aerial vehicle communication system is improved; and the privacy and tamper-resistant capability of the unmanned aerial vehicle communication system for data storage are improved.

Description

Technical Field

[0001] The present invention relates to the field of data protection, and specifically to a drone communication security and low-power energy consumption optimization system. Background Art

[0002] Drone communication systems refer to the technologies and network architectures used to support data transmission and communication between drones, as well as between drones and ground stations and other equipment. These systems typically include wireless communication links, protocols, data encryption, and security mechanisms to ensure that drones can reliably and securely exchange information while performing their missions. However, typical drone communication systems lack appropriate dynamic encryption methods, leading to the risk of long-term key leakage and an inability to adapt to the changing operating environments of drones, resulting in high energy consumption and low communication efficiency. Typical drone communication systems also suffer from issues such as communication quality being severely affected by environmental fluctuations, slow authentication processes, and single points of failure. Summary of the Invention

[0003] In view of the above situation, in order to overcome the defects of the prior art, the present invention provides a UAV communication security and low power consumption optimization system. The general UAV communication system lacks a reasonable dynamic encryption method, which leads to the risk of long-term key leakage and cannot adapt to the changing working environment of the UAV, resulting in high energy consumption and low communication efficiency. This solution increases the unpredictability of the encryption process through dynamic S-Box generation and AES encryption optimization, significantly enhancing the security of encryption; based on adaptive AES rounds and power consumption optimization, the encryption strength is dynamically adjusted according to different environments to ensure the best performance and lowest energy consumption under different conditions; based on hybrid encryption, the environmental adaptability of the UAV is enhanced, thereby improving the efficiency of the UAV communication system; in view of the fact that the communication quality of the general UAV communication system is seriously affected by environmental changes, the authentication process is slow and there is a single point of failure, this solution dynamically adjusts the key according to environmental parameters, automatically optimizes the key management strategy under different flight altitudes and temperature conditions, thereby improving the security and efficiency in long-term operation; reduces the computational complexity of the identity authentication process through zero-knowledge proof technology, reduces power consumption, and is based on ECC The Diffie-Hellman protocol ensures efficient key exchange; decentralized authentication and data storage are achieved through blockchain technology, avoiding the risk of single point failure and improving the reliability and security of the drone communication system; during the authentication process, zero-knowledge proof is used to ensure the privacy of the drone's identity is not leaked, while at the same time improving the privacy and tamper-resistant capabilities of the drone communication system for data storage through a decentralized approach.

[0004] The technical solution adopted by the present invention is as follows: The present invention provides a UAV communication security and low-power energy consumption optimization system, including an S-Box generation module, a time synchronization module, a hybrid encryption module, a digital signature module, a key management module, an identity authentication module, a round selection module and a decentralized trust management module;

[0005] The S-Box generation module dynamically generates a unique S-Box for AES encryption based on system time and random numbers;

[0006] The time synchronization module synchronizes the system time through encryption signature;

[0007] The hybrid encryption module combines AES encryption with ECC encryption of the AES session key and performs signature verification on the encrypted data;

[0008] The digital signature module uses SHA-1 to perform hash calculation on the encrypted data and signs it with the ECC private key. The recipient verifies the integrity of the data using the ECC public key.

[0009] The key management module dynamically updates AES and ECC keys based on environmental conditions and performs key management at the same time;

[0010] The identity authentication module uses zero-knowledge proof and ECC Diffie-Hellman protocol to realize drone identity authentication and shared key calculation;

[0011] The round number selection module dynamically selects the number of rounds of AES encryption according to the communication environment and performs compressed block encryption;

[0012] The decentralized trust management module adopts blockchain and zero-knowledge proof technology for identity authentication and data storage to ensure decentralized trust management.

[0013] Furthermore, the S-Box generation module specifically includes the following contents:

[0014] Dynamic S-Box generation: The drone first generates a dynamic S-Box based on the system time TS and random number. 、 and Generate three time arrays KA, KB and KC, indicating: ; Based on the time array, generate a dynamic S-Box, expressed as: ;

[0015] ;

[0016] ;

[0017] ;

[0018] ;

[0019] Where ff(·) is a random number generator function; DS is a dynamic S-BoxDS; 、 and It is a flag array that controls the rules for dynamic S-Box generation; Matrix elements generated by the function Expressed as: ; XQ is the signal quality; BL is the drone battery level; f1(·), f2(·), and f3(·) are array generating functions; KA[·], KB[·], and KC[·] are element generating functions; i2 and j2 are matrix position indices; is a bitwise XOR operation; F is an auxiliary parameter;

[0020] Inverse dynamic S-Box; during decryption, the receiver uses the inverse dynamic S-Box, which is generated by swapping the row and column coordinates of each element in the dynamic S-Box; the receiver generates the inverse matrix DS based on the dynamic S-BoxDS -1 , which is completed by exchanging row and column coordinates, expressed as: ;in, It is the inverse dynamic S-Box; is the inverse dynamic S-Box generating function.

[0021] Furthermore, the time synchronization module uses a dynamic S-Box to encrypt system time and random numbers, which is expressed as: ; Use the private key to sign the encrypted data, expressed as: ; The receiver checks the difference between the received system time and the local time TR. If the time error is less than the threshold , then the communication is effective; among them, is the AES encryption function; is a cryptographic signature; is the encryption result of the system time; Signature is the signature result; is a signature function; It is the private key used for signing.

[0022] Furthermore, the hybrid encryption module encrypts data using a dynamically generated AES session key, which is expressed as: ; Use the ECC public key to encrypt the AES session key, expressed as: ;in, It is AES encrypted data; is the data to be encrypted; is the AES session key; is the ECC encrypted AES session key; Is the ECC public key encryption function.

[0023] Furthermore, the digital signature module is a hash value calculated by the drone using SHA-1, which is expressed as: ; Use the ECC private key to sign the hash value, expressed as: The receiver verifies the signature using the ECC public key, which is expressed as: ; AES encryption uses 6 rounds; where H is the data hash value; It is a private key signature; is the private key; It is public key authentication; is the verification result.

[0024] Furthermore, the key management module adopts a dynamic key update mechanism based on the environment; and evaluates the effect of privacy protection based on correlation coefficient and record connection; automatic key update is expressed as: ; where NAKey is the updated key; H(·) is the hash function; CTe is the current timestamp; Lt is the GPS coordinate; Ae is the flight altitude; Ss is the signal strength; Te is the flight temperature; PK is the session key before the update; dynamic ECC key update is expressed as: ; Each time a communication occurs, a new AES session key is dynamically generated based on the system time and a random number, expressed as: ; Calculate the correlation coefficient of adjacent data points , expressed as: ; Calculate the de-anonymization probability of the data, expressed as: If the correlation coefficient of adjacent data points after encryption is lower than the encryption correlation threshold or the de-anonymization probability is higher than the encryption anonymity threshold, obfuscated secondary encryption is performed, which is expressed as: ; ;in, is the updated ECC key; is the current payload; PPk is the ECC key before update; is the newly generated AES session key; is the covariance; s(·) is the data point standard deviation; x and y are two data points; RL is the de-anonymization probability; is the de-anonymized data; G is the data set; Pr(·) is the matching probability of the de-anonymized data; n is the total number of data points; and are the current and last perturbation factors respectively; r is a random number between 0 and 1; C is the encrypted data; M is the data to be encrypted; IV is the initialization vector; It is a splicing operation.

[0025] Furthermore, the identity authentication module uses zero-knowledge proof to implement identity authentication between drones; the drone generates a secret value s and calculates a public key, which is expressed as: ; The drone proves its identity to the ground station, expressed as: ; Ground station verification is expressed as: If the verification is successful, the authentication is successful; and the shared key is calculated using the ECCDiffie-Hellman protocol; it is expressed as: ; Adjust the key exchange frequency KEF based on the communication environment, expressed as: Lattice-based key exchange is used to provide quantum security. The drone generates a key matrix and calculates the public key, which is expressed as: P1=As+e. The key exchange process is: ; The receiver calculation is expressed as: Through the error recovery mechanism, both parties derive the same key. P1 is the public key generated by the drone. G is the base point. s is the drone's secret value, which is not transmitted to the ground station. p is the prime modulus. V is the value used by the drone to prove its identity to the ground station, which is generated by the drone. is a shared key; is the ECCDiffie-Hellman key exchange algorithm; Ss is the signal strength; De is the data volume; is the key generated by the sender; and are the newly generated private key and noise vector; is the shared key calculated by the receiver; T is the transposition operation; c is the challenge value generated in the zero-knowledge proof.

[0026] Furthermore, the round number selection module adopts adaptive AES key management; the adaptive AES round number selection is expressed as: ;Compressed block encryption is expressed as: ;Where, JN is the network congestion; It is a compression operation.

[0027] Furthermore, the decentralized trust management module provides decentralized identity authentication and data storage; blockchain + zero-knowledge proof is used for trust management; blockchain trust storage is represented as: ; ZKP certification is expressed as: SHA-3 is the SHA-3 cryptographic hash function. is the unique identifier of the drone; is the drone's public key.

[0028] The beneficial effects achieved by the present invention using the above scheme are as follows:

[0029] (1) In view of the lack of reasonable dynamic encryption methods in general UAV communication systems, which leads to the risk of long-term key leakage and the inability to adapt to the changing working environment of UAVs, resulting in high energy consumption and low communication efficiency, this scheme increases the unpredictability of the encryption process and significantly enhances the security of encryption through dynamic S-Box generation and AES encryption optimization; based on adaptive AES rounds and power consumption optimization, the encryption strength is dynamically adjusted according to different environments to ensure the best performance and lowest energy consumption under different conditions; based on hybrid encryption, the adaptability of UAVs to the environment is enhanced, thereby improving the efficiency of UAV communication systems.

[0030] (2) In view of the fact that the communication quality of general drone communication systems is seriously affected by environmental changes, the authentication process is slow, and there are single point failures, this solution dynamically adjusts the key according to environmental parameters and automatically optimizes the key management strategy under different flight altitudes and temperature conditions, thereby improving the security and efficiency in long-term operation; it reduces the computational complexity of the identity authentication process through zero-knowledge proof technology, reduces power consumption, and ensures efficient key exchange based on the ECC Diffie-Hellman protocol; it realizes decentralized identity authentication and data storage through blockchain technology, avoids the risk of single point failure, and improves the reliability and security of the drone communication system; in the authentication process, zero-knowledge proof is used to ensure that the privacy of the drone identity is not leaked, and at the same time, the privacy and anti-tampering capabilities of the drone communication system for data storage are improved through a decentralized approach. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A flow chart of a UAV communication security and low power consumption optimization system provided by the present invention.

[0032] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. DETAILED DESCRIPTION

[0033] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0034] In the description of the present invention, it should be understood that terms such as "upper", "lower", "front", "back", "left", "right", "top", "bottom", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction. Therefore, they should not be understood as limiting the present invention.

[0035] Example 1, see Figure 1 The present invention provides a UAV communication security and low-power energy consumption optimization system, which includes an S-Box generation module, a time synchronization module, a hybrid encryption module, a digital signature module, a key management module, an identity authentication module, a round selection module and a decentralized trust management module;

[0036] The S-Box generation module dynamically generates a unique S-Box for AES encryption based on the system time and random numbers; and sends the data to the time synchronization module;

[0037] The time synchronization module synchronizes the system time through the encryption signature; and sends the data to the hybrid encryption module;

[0038] The hybrid encryption module combines AES encryption with ECC encryption of the AES session key and performs signature verification on the encrypted data; and sends the data to the digital signature module;

[0039] The digital signature module uses SHA-1 to perform hash calculation on the encrypted data and signs it with the ECC private key. The receiver verifies the integrity of the data through the ECC public key and sends the data to the key management module.

[0040] The key management module dynamically updates the AES and ECC keys based on environmental conditions and performs key management at the same time; and sends data to the identity authentication module;

[0041] The identity authentication module uses zero-knowledge proof and ECC Diffie-Hellman protocol to realize drone identity authentication and shared key calculation; and sends the data to the round number selection module;

[0042] The round number selection module dynamically selects the number of rounds of AES encryption according to the communication environment, and performs compressed packet encryption; and sends the data to the decentralized trust management module;

[0043] The decentralized trust management module adopts blockchain and zero-knowledge proof technology for identity authentication and data storage to ensure decentralized trust management.

[0044] Example 2, see Figure 1This embodiment is based on the above embodiment, and the S-Box generation module specifically includes the following contents:

[0045] Dynamic S-Box generation: Using the system time TS and random numbers α, β and γ as seeds, a different S-Box is generated for AES encryption in each communication. A unique S-Box is generated for each communication, which increases the unpredictability of the encryption process and reduces the probability of successful guessing by attackers. Specifically: the drone first generates a unique S-Box based on the system time TS and random numbers 、 and Generate three time arrays KA, KB and KC, indicating: ; Based on the time array, generate a dynamic S-Box, expressed as: ;

[0046] ;

[0047] ;

[0048] ;

[0049] ;

[0050] Where ff(·) is a random number generator function; DS is a dynamic S-BoxDS; 、 and It is a flag array that controls the rules for dynamic S-Box generation; Matrix elements generated by the function Expressed as: ; XQ is the signal quality; BL is the drone battery level; f1(·), f2(·), and f3(·) are array generating functions; KA[·], KB[·], and KC[·] are element generating functions; i2 and j2 are matrix position indices; is a bitwise XOR operation; F is an auxiliary parameter;

[0051] Inverse dynamic S-Box; during decryption, the receiver uses the inverse dynamic S-Box, which is generated by swapping the row and column coordinates of each element in the dynamic S-Box; the receiver generates the inverse matrix DS based on the dynamic S-BoxDS -1 , which is completed by exchanging row and column coordinates, expressed as: ;in, It is the inverse dynamic S-Box; is the inverse dynamic S-Box generating function.

[0052] Example 3, see Figure 1This embodiment is based on the above embodiment. The time synchronization module is used to ensure the secure transmission of system time and random numbers. The drone uses encrypted signatures to ensure the confidentiality and integrity of data. When decrypting, the receiver needs to synchronize the system time to avoid data errors caused by time errors. Specifically, the system time and random numbers are encrypted using a dynamic S-Box, which is expressed as: ; Use the private key to sign the encrypted data, expressed as: ; The receiver checks the difference between the received system time and the local time TR. If the time error is less than the threshold , then the communication is effective; among them, is the AES encryption function; is a cryptographic signature; is the encryption result of the system time; Signature is the signature result; is a signature function; It is the private key used for signing.

[0053] Example 4, see Figure 1 This embodiment is based on the above embodiment. The hybrid encryption module uses AES to encrypt the drone communication data and uses ECC to encrypt the AES session key to ensure the security of the communication data. To ensure the integrity and source authenticity of the data, the sender signs the encrypted data, and the receiver verifies the integrity of the data through the signature. Specifically, the data is encrypted using a dynamically generated AES session key, which is expressed as: ; Use the ECC public key to encrypt the AES session key, expressed as: ;in, It is AES encrypted data; is the data to be encrypted; is the AES session key; is the ECC encrypted AES session key; Is the ECC public key encryption function.

[0054] By performing the above operations, the general UAV communication system lacks a reasonable dynamic encryption method, which leads to the risk of long-term key leakage and cannot adapt to the changing working environment of the UAV, resulting in high energy consumption and low communication efficiency. This solution increases the unpredictability of the encryption process and significantly enhances the security of encryption through dynamic S-Box generation and AES encryption optimization; based on adaptive AES rounds and power consumption optimization, the encryption strength is dynamically adjusted according to different environments to ensure the best performance and lowest energy consumption under different conditions; based on hybrid encryption, the UAV environmental adaptability is enhanced, thereby improving the efficiency of the UAV communication system.

[0055] Example 5, see Figure 1This embodiment is based on the above embodiment. The digital signature module is used to ensure the integrity and source authenticity of the data. The drone signs the encrypted data, and the recipient verifies the integrity of the data through the signature. Specifically, the drone uses SHA-1 to calculate the hash value of the data, which is expressed as: ; Use the ECC private key to sign the hash value, expressed as: The receiver verifies the signature using the ECC public key, which is expressed as: ;AES encryption uses 6 rounds to reduce power consumption; where H is the data hash value; It is a private key signature; is the private key; It is public key authentication; is the verification result.

[0056] Example 6, see Figure 1 This embodiment is based on the above embodiment. The key management module is used because the UAV system communicates in different environments. In order to improve the flexibility of key management and reduce the risk of key leakage, an environment-based dynamic key update mechanism is adopted to further enhance security by automatically updating the key. The privacy protection effect is evaluated based on the correlation coefficient and record connection. The automatic key update is expressed as: ; where NAKey is the updated key; H(·) is the hash function; CTe is the current timestamp; Lt is the GPS coordinate; Ae is the flight altitude; Ss is the signal strength; Te is the flight temperature; PK is the session key before the update; dynamic ECC key update is expressed as: ; Each time a communication occurs, a new AES session key is dynamically generated based on the system time and a random number, expressed as: ; Calculate the correlation coefficient of adjacent data points , expressed as: ; Calculate the de-anonymization probability of the data, expressed as: If the correlation coefficient of adjacent data points after encryption is lower than the encryption correlation threshold or the de-anonymization probability is higher than the encryption anonymity threshold, obfuscated secondary encryption is performed, which is expressed as: ; ;in, is the updated ECC key; is the current payload; PPk is the ECC key before update; is the newly generated AES session key; is the covariance; s(·) is the data point standard deviation; x and y are two data points; RL is the de-anonymization probability; is the de-anonymized data; G is the data set; Pr(·) is the matching probability of the de-anonymized data; n is the total number of data points; and are the current and last perturbation factors respectively; r is a random number between 0 and 1; C is the encrypted data; M is the data to be encrypted; IV is the initialization vector; It is a splicing operation.

[0057] Example 7, see Figure 1 This embodiment is based on the above embodiment. The identity authentication module uses zero-knowledge proof to implement identity authentication between drones, reducing drone energy consumption and improving identity authentication efficiency. The drone generates a secret value s and calculates a public key, which is expressed as: ; The drone proves its identity to the ground station, expressed as: ; Ground station verification is expressed as: If the verification is successful, the authentication is successful. The ECCDiffie-Hellman protocol is used to calculate the shared key to ensure data security. It is expressed as: ; Adjust the key exchange frequency KEF based on the communication environment, expressed as: Lattice-based key exchange is used to provide quantum security. The drone generates a key matrix and calculates the public key, which is expressed as: P1=As+e. The key exchange process is: ; The receiver calculation is expressed as: Through the error recovery mechanism, both parties derive the same key. P1 is the public key generated by the drone. G is the base point. s is the drone's secret value, which is not transmitted to the ground station. p is the prime modulus. V is the value used by the drone to prove its identity to the ground station, which is generated by the drone. is a shared key; is the ECCDiffie-Hellman key exchange algorithm; Ss is the signal strength; De is the data volume; is the key generated by the sender; and are the newly generated private key and noise vector; is the shared key calculated by the receiver; T is the transposition operation; c is the challenge value generated in the zero-knowledge proof.

[0058] Example 8, see Figure 1 This embodiment is based on the above embodiment. The round number selection module adopts adaptive AES key management to adjust the AES round number according to the communication environment to reduce computing power consumption, and reduces the data packet size based on compressed block encryption to improve bandwidth utilization. The adaptive AES round number selection is expressed as: ;Compressed block encryption is expressed as: ;Where, JN is the network congestion; It is a compression operation.

[0059] Example 9, see Figure 1This embodiment is based on the above embodiment. The decentralized trust management module provides decentralized identity authentication and data storage, avoiding single points of failure and enhancing the overall security of the system. It uses blockchain + zero-knowledge proof for trust management to avoid single points of failure. The blockchain trust storage is represented as: ; ZKP certification is expressed as: SHA-3 is the SHA-3 cryptographic hash function. is the unique identifier of the drone; is the drone's public key.

[0060] By performing the above operations, in order to address the problems of general drone communication systems, such as communication quality being severely affected by environmental changes, slow authentication process and single point failure, this solution dynamically adjusts keys according to environmental parameters and automatically optimizes key management strategies under different flight altitudes and temperature conditions, thereby improving security and efficiency in long-term operation. Zero-knowledge proof technology is used to reduce the computational complexity and power consumption of the identity authentication process, and efficient key exchange is ensured based on the ECC Diffie-Hellman protocol. Blockchain technology is used to achieve decentralized authentication and data storage, avoiding the risk of single point failure and improving the reliability and security of the drone communication system. During the authentication process, zero-knowledge proof is used to ensure the privacy of the drone's identity is not leaked, while at the same time, the privacy and tamper-resistant capabilities of the drone communication system for data storage are improved through a decentralized approach.

[0061] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus.

[0062] While the embodiments of the present invention have been shown and described, it will be apparent to those skilled in the art that various changes, modifications, substitutions, and alterations can be made to the embodiments without departing from the principles and spirit of the invention.

[0063] The present invention and its embodiments are described above. This description is not restrictive. The drawings show only one embodiment of the present invention, and the actual structure is not limited thereto. In short, if a person skilled in the art is inspired by this and, without departing from the purpose of the present invention, designs structures and embodiments similar to this technical solution without inventiveness, they shall fall within the scope of protection of the present invention.

Claims

1. A UAV communication security and low power consumption optimization system, characterized by: The system includes an S-Box generation module, a time synchronization module, a hybrid encryption module, a digital signature module, a key management module, an identity authentication module, a round selection module, and a decentralized trust management module; The S-Box generation module dynamically generates a unique S-Box for AES encryption based on system time and random numbers; The time synchronization module synchronizes the system time through encryption signature; The hybrid encryption module combines AES encryption with ECC encryption of the AES session key and performs signature verification on the encrypted data; The digital signature module uses SHA-1 to perform hash calculation on the encrypted data and signs it with the ECC private key. The recipient verifies the integrity of the data using the ECC public key. The key management module dynamically updates AES and ECC keys based on environmental conditions and performs key management at the same time; The identity authentication module uses zero-knowledge proof and ECC Diffie-Hellman protocol to realize drone identity authentication and shared key calculation; The round number selection module dynamically selects the number of rounds of AES encryption according to the communication environment and performs compressed block encryption; The decentralized trust management module uses blockchain and zero-knowledge proof technology for identity authentication and data storage to ensure decentralized trust management; The S-Box generation module content: Dynamic S-Box generation; the drone first generates S-Box according to the system time TS and random number 、 and Generate three time arrays KA, KB and KC, indicating: ; Based on the time array, generate a dynamic S-Box, expressed as: ; ； ； ； ； Where ff(·) is a random number generation function; DS stands for Dynamic S-BoxDS; 、 and It is a flag array that controls the rules for dynamic S-Box generation; Matrix elements generated by the function Expressed as: ; XQ is the signal quality; BL is the drone battery level; f1(·), f2(·), and f3(·) are array generating functions; KA[·], KB[·], and KC[·] are element generating functions; i2 and j2 are matrix position indices; is a bitwise exclusive OR operation; F is an auxiliary parameter.

2. The UAV communication security and low power consumption optimization system according to claim 1, characterized in that: The S-Box generation module specifically includes the following contents: Dynamic S-Box generation; Inverse dynamic S-Box; during decryption, the receiver uses the inverse dynamic S-Box, which is generated by swapping the row and column coordinates of each element in the dynamic S-Box; the receiver generates the inverse matrix DS based on the dynamic S-BoxDS -1 , which is completed by exchanging row and column coordinates, expressed as: ;in, It is the inverse dynamic S-Box; is the inverse dynamic S-Box generating function.

3. The UAV communication security and low power consumption optimization system according to claim 2 is characterized by: The time synchronization module uses a dynamic S-Box to encrypt system time and random numbers, which is expressed as: ; Use the private key to sign the encrypted data, expressed as: ; The receiver checks the difference between the received system time and the local time TR. If the time error is less than the threshold , then the communication is effective; among them, is the AES encryption function; is a cryptographic signature; is the encryption result of the system time; Signature is the signature result; is a signature function; It is the private key used for signing.

4. The UAV communication security and low power consumption optimization system according to claim 3 is characterized by: The hybrid encryption module uses a dynamically generated AES session key to encrypt data, which is expressed as: ; Use the ECC public key to encrypt the AES session key, expressed as: ;in, It is AES encrypted data; is the data to be encrypted; is the AES session key; is the ECC encrypted AES session key; Is the ECC public key encryption function.

5. The UAV communication security and low power consumption optimization system according to claim 4, characterized in that: The digital signature module is a hash value calculated by the drone using SHA-1, which is expressed as: ; Use the ECC private key to sign the hash value, expressed as: The receiver verifies the signature using the ECC public key, which is expressed as: ; AES encryption uses 6 rounds; where H is the data hash value; It is a private key signature; is the private key; It is public key authentication; is the verification result.

6. The UAV communication security and low power consumption optimization system according to claim 5, characterized in that: The key management module adopts a dynamic key update mechanism based on the environment and evaluates the effect of privacy protection based on correlation coefficient and record connection. The automatic key update is expressed as: ; where NAKey is the updated key; H(·) is the hash function; CTe is the current timestamp; Ln is the GPS coordinate; Ae is the flight altitude; Ss is the signal strength; Te is the flight temperature; PK is the session key before the update; dynamic ECC key update is expressed as: ; Each time a communication occurs, a new AES session key is dynamically generated based on the system time and a random number, expressed as: ; Calculate the correlation coefficient of adjacent data points , expressed as: ; Calculate the de-anonymization probability of the data, expressed as: If the correlation coefficient of adjacent data points after encryption is lower than the encryption correlation threshold or the de-anonymization probability is higher than the encryption anonymity threshold, obfuscated secondary encryption is performed, which is expressed as: ; ;in, is the updated ECC key; is the current payload; PPk is the ECC key before update; is the newly generated AES session key; is the covariance; s(·) is the data point standard deviation; x and y are two data points; RL is the de-anonymization probability; is the de-anonymized data; G is the data set; Pr(·) is the matching probability of the de-anonymized data; n is the total number of data points; and are the current and last perturbation factors respectively; r is a random number between 0 and 1; C is the encrypted data; M is the data to be encrypted; IV is the initialization vector; It is a splicing operation.

7. The UAV communication security and low power consumption optimization system according to claim 6, characterized in that: The identity authentication module uses zero-knowledge proof to implement identity authentication between drones; the drone generates a secret value s and calculates the public key, which is expressed as: ; The drone proves its identity to the ground station, expressed as: ; Ground station verification is expressed as: If the verification is successful, the authentication is successful; and the shared key is calculated using the ECCDiffie-Hellman protocol; it is expressed as: ; Adjust the key exchange frequency KEF based on the communication environment, expressed as: Lattice-based key exchange is used to provide quantum security. The drone generates a key matrix and calculates the public key, which is expressed as: P1=As+e. The key exchange process is: ; The receiver calculation is expressed as: ; Through the error recovery mechanism, both parties derive the same key. P1 is the public key generated by the drone; G is the base point; s is the drone's secret value, which is not transmitted to the ground station; p is the prime modulus; and V is the value generated by the drone to prove its identity to the ground station. is a shared key; is the ECCDiffie-Hellman key exchange algorithm; Ss is the signal strength; De is the data volume; is the key generated by the sender; and are the newly generated private key and noise vector; is the shared key calculated by the receiver; T is the transposition operation; c is the challenge value generated in the zero-knowledge proof.

8. The UAV communication security and low power consumption optimization system according to claim 7, characterized in that: The round number selection module adopts adaptive AES key management; adaptive AES round number selection is expressed as: ;Compressed block encryption is expressed as: ;Where, JN is the network congestion; It is a compression operation.

9. The UAV communication security and low power consumption optimization system according to claim 8, characterized in that: The decentralized trust management module provides decentralized identity authentication and data storage; it uses blockchain + zero-knowledge proof for trust management; blockchain trust storage is represented as: ; ZKP certification is expressed as: SHA-3 is the SHA-3 cryptographic hash function. is the unique identifier of the drone; is the drone's public key.

Images