A Multi-Service Communication Method and System for Unmanned Aerial Vehicles Based on Virtual Identity Mapping

Abstract

This invention proposes a multi-service communication method and system for unmanned aerial vehicles (UAVs) based on virtual identity mapping, belonging to the field of UAV communication technology. This method uses a virtual IP mapping mechanism based on service types to associate one or more virtual network identities bound to service levels for each UAV. Different services, such as control flow and data flow, are carried in logically independent virtual channels, thereby ensuring high bandwidth and high reliability of multi-link aggregation while guaranteeing the absolute priority and transmission reliability of critical flight control commands. This invention greatly simplifies the deployment and refined management of UAV swarms by deploying an automatic learning and derivation mechanism for virtual identities on the server side, enhancing the system's scalability. Furthermore, in this invention, UAVs are not directly exposed to the public network, but only provide limited services through designated virtual IPs and ports, effectively improving system security.

Description

Technical Field

[0001] This invention relates to the field of unmanned aerial vehicle (UAV) wide area network (WAN) communication and software-defined networking (SD-WAN) technology. Specifically, it relates to a communication system and method that achieves multi-service traffic isolation and service layering through virtual network identity mapping in a multi-link aggregation network environment. Background Technology

[0002] The application of drones in fields such as inspection, logistics, and surveying is becoming increasingly widespread, and their requirements for the reliability, bandwidth, and real-time performance of long-distance communication are also increasing. Traditional single-link communication (such as a single 4G / 5G network) often suffers from communication interruptions or quality degradation due to signal blockage, network congestion, or base station switching, which seriously affects flight safety and mission efficiency.

[0003] To address this issue, multi-link aggregation technology has emerged, which provides higher bandwidth and stronger reliability by bundling multiple heterogeneous physical links (such as 4G, 5G, and satellite). However, existing drone multi-link aggregation solutions generally suffer from the following drawbacks:

[0004] 1) Indiscriminate Mixed Transmission: Existing aggregation solutions typically mix all service data streams (such as high-priority flight control commands and low-priority video backhaul) in the same logical tunnel for indiscriminate transmission. When high-volume services such as video streams suddenly occur, they can easily preempt bandwidth, causing increased latency or even packet loss for critical flight control commands, creating serious security risks. Port-based QoS (Quality of Service) policies are complex to configure and have limited effectiveness during network jitter. In complex network environments with multi-link aggregation, existing port-based QoS policies are difficult to implement or may fail because IP addresses and ports may be hidden or changed after tunnel encapsulation.

[0005] 2) Complex Reverse Access and Management: The process of ground command centers actively accessing or managing drones is complex and insecure. Traditional port forwarding solutions require configuring independent ports for each service of each drone in the cloud, resulting in chaotic management and failing to achieve logical isolation of business operations.

[0006] 3) Poor deployment and scalability: Each time a drone or a new service is added, the cloud server needs to be configured in a complicated way, resulting in low system scalability and deployment efficiency.

[0007] Therefore, there is an urgent need in this field for a new drone communication solution that can not only provide high reliability through multi-link aggregation, but also achieve strong isolation between different services from an architectural perspective, and simplify remote access and management of drone swarms. Summary of the Invention

[0008] To overcome the aforementioned shortcomings of existing technologies, this invention provides a method and system for multi-service communication of unmanned aerial vehicles (UAVs) based on virtual identity mapping. This method associates one or more virtual network identities (such as virtual IPs) bound to service levels with the UAV, achieving complete logical isolation between different services such as control flow and data flow. This ensures high bandwidth and high reliability of multi-link aggregation while guaranteeing the absolute priority and transmission reliability of critical flight control commands, and greatly simplifies the deployment and refined management of UAV swarms.

[0009] The technical solution adopted by the present invention to achieve the above objectives is as follows:

[0010] The first aspect of this invention provides a multi-service communication method for unmanned aerial vehicles (UAVs) based on virtual identity mapping. This method involves the collaborative operation of a cloud aggregation server and a multi-link aggregation gateway mounted on the UAV, comprising:

[0011] S1, the drone connects to the public network and private network through its onboard external multi-link aggregation gateway to achieve connectivity of each physical link;

[0012] S2, the multi-link aggregation gateway and aggregation server build a logical aggregation tunnel for multiple physical links through a multipath transmission protocol;

[0013] S3, the multi-link aggregation gateway performs IP address masquerading on the uplink data packets sent by the drone; on this basis, the aggregation server performs dynamic IP learning, associates a set of virtual IPs with the drone and binds them to the service type as the drone's virtual network identity, and associates this set of virtual IPs with the established logical aggregation tunnel;

[0014] S4, the multi-link aggregation gateway and the aggregation server communicate through the virtual IP in the logical aggregation tunnel.

[0015] In a preferred embodiment, the multipath transport protocol includes a multipath QUIC protocol, preferably an XQUIC protocol.

[0016] In a preferred embodiment, in step S3, the drone virtual network identity is established based on the following method:

[0017] S3.1, the drone sends uplink data packets. The multi-link aggregation gateway disguises the source IP address of the uplink data packet as the first virtual IP corresponding to the service to which the data packet belongs through the preset address translation rules and sends it to the aggregation server through the logical aggregation tunnel. The address translation rules define the bidirectional mapping relationship between each port of the drone's real IP address and the virtual IP corresponding to each port that is associated with the service type.

[0018] S3.2, the aggregation server resolves the first virtual IP from the logical aggregation tunnel and associates the first virtual IP with the logical aggregation tunnel from which it originated;

[0019] S3.3, Based on the first virtual IP, the aggregation server uses a preset virtual identity automatic derivation algorithm to associate additional virtual IPs with the unassociated service types of the drone, and associates the additional virtual IPs with the logical aggregation tunnel.

[0020] In a preferred embodiment, the configuration script of the multi-link aggregation gateway pre-assigns corresponding virtual IPs for different service types. Each virtual IP is associated with another virtual IP through the virtual identity automatic derivation algorithm. The virtual identity automatic derivation algorithm is a preset mapping rule, including odd-even pairing, fixed offset, table lookup allocation, or hash-based calculation, etc.

[0021] In a preferred embodiment, in step S4, during downlink communication, after the aggregation server receives the data packet destined for the target virtual IP, it forwards it to the multi-link aggregation gateway carried by the UAV through the logical aggregation tunnel associated with the target virtual IP; the multi-link aggregation gateway converts the target address of the data packet from the target virtual IP to the real IP address and corresponding port of the UAV according to the preset address translation rules.

[0022] In a preferred embodiment, in step S4, during uplink communication, the drone sends a data packet. The multi-link aggregation gateway, based on the service type of the data packet, disguises the source IP address of the data packet as the corresponding virtual IP through address translation rules, and then sends it to the aggregation server through the logical aggregation tunnel associated with the virtual IP.

[0023] In a preferred embodiment, during uplink communication, after the uplink data packet arrives at the multi-link aggregation gateway, it is first checked by the exemption routing rules preset by the multi-link aggregation gateway. The content of the rules is: all traffic whose destination address is the public IP of the aggregation server (i.e., the traffic that maintains the communication of the logical aggregation tunnel itself) must be sent directly through the physical link and must not enter the logical aggregation tunnel; all other traffic that is not exempted is then subject to the policy routing rules preset by the multi-link aggregation gateway, that is, it is forcibly redirected to the logical aggregation tunnel and sent to the aggregation server.

[0024] A second aspect of the present invention provides a multi-service communication system for unmanned aerial vehicles (UAVs) based on virtual identity mapping, comprising a UAV, a multi-link aggregation gateway, and an aggregation server;

[0025] The drone connects to both the public network and the private network via its onboard multi-link aggregation gateway.

[0026] The multi-link aggregation gateway and the aggregation server construct a logical aggregation tunnel through a multi-path transmission protocol, and disguise the source IP address of the drone as the virtual IP corresponding to the business.

[0027] The aggregation server is used to register the virtual IP and associate a group of virtual IPs bound to the business type with the drone based on the virtual IP, and associate this group of virtual IPs with the logical aggregation tunnel;

[0028] All virtual IPs associated with the logical aggregation tunnel together constitute the virtual network of the drone. Based on the virtual IPs that serve as the identity identifier of the virtual network, the multi-link aggregation gateway and the aggregation server communicate with the drone's virtual network through the logical aggregation tunnel.

[0029] In a preferred embodiment, the multipath transport protocol includes a multipath QUIC protocol, preferably an XQUIC protocol.

[0030] In a preferred embodiment, the multi-link aggregation gateway disguises the drone's source IP address as a virtual IP corresponding to its business based on a preset address translation rule. The address translation rule defines a bidirectional mapping relationship between each port of the drone's real IP address and its corresponding virtual IP associated with the business type.

[0031] In a preferred embodiment, the aggregation server completes virtual IP registration and association binding in the following manner:

[0032] The aggregation server resolves the virtual IP disguised by the multi-link aggregation gateway from the logical aggregation tunnel and registers the virtual IP and associates it with the logical aggregation tunnel from which it originated.

[0033] Based on the virtual IP, the aggregation server uses a preset virtual identity automatic derivation algorithm to associate additional virtual IPs for other unrelated service types of the drone, and associates the additional virtual IPs with the logical aggregation tunnel.

[0034] In a preferred embodiment, the configuration script of the multi-link aggregation gateway pre-assigns corresponding virtual IPs for different service types. Each virtual IP is associated with another virtual IP through the virtual identity automatic derivation algorithm. The virtual identity automatic derivation algorithm is a preset mapping rule, including odd-even pairing, fixed offset, table lookup allocation, or hash-based calculation, etc.

[0035] The present invention has the following beneficial effects:

[0036] (1) Strong isolation and high reliability of business are achieved: By using a virtual IP mapping mechanism based on business type, the control flow and data flow are carried in a logically independent virtual channel, which completely avoids the impact of large-volume video on key flight control commands and ensures flight safety from the architecture.

[0037] (2) Provides a QoS architecture foundation: IP-based service layering provides a solid architectural foundation for implementing refined quality of service (QoS) policies (such as priority queues and bandwidth limits) on servers or gateways in the future.

[0038] (3) Simplified deployment and management: By deploying an automatic learning and derivation mechanism for virtual identities on the server side, the new drones were launched with 'zero configuration', which greatly simplified the launch process of the new drones and the refined management of remote services, and enhanced the scalability of the system.

[0039] (4) Enhanced security: Through NAT and on-demand service exposure, the drone is not directly exposed to the public network, but only provides limited services through designated virtual IP and ports, which effectively enhances the security of the system. Attached Figure Description

[0040] Figure 1 This is a diagram of the core architecture of the present invention.

[0041] Figure 2 This is a flowchart illustrating the overall technical framework of the system of this invention.

[0042] Figure 3 This is a flowchart of the server-side IP association logic.

[0043] Figure 4 Flowchart for starting the script on the client side. Detailed Implementation

[0044] The embodiments of the present invention will be described in further detail below with reference to the accompanying drawings and examples. The following examples are for illustrative purposes only and should not be construed as limiting the scope of the invention.

[0045] like Figure 1 As shown, this embodiment provides a multi-service communication system for unmanned aerial vehicles (UAVs) based on virtual identity mapping, which mainly consists of two parts: the UAV terminal and the ground terminal.

[0046] The drone terminal includes several drones and an external multi-link aggregation gateway directly connected to each drone. Each drone connects to both the public and private networks via its onboard multi-link aggregation gateway, enabling connectivity of all physical links.

[0047] The ground-based terminal is deployed in a secure, isolated internal network (hereinafter referred to as the "Ground Intranet"). The Ground Intranet contains at least two types of key equipment: an aggregation server and at least one ground service platform. The aggregation server and the multi-link aggregation gateway construct a logical aggregation tunnel for multiple physical links via a multipath transmission protocol.

[0048] The multi-link aggregation gateway converts the service type corresponding to each port of the UAV's source IP address to its corresponding virtual IP. The aggregation server, based on the virtual IP masqueraded by the multi-link aggregation gateway, associates a set of virtual IPs bound to the service type for each UAV, and associates these virtual IPs with the logical aggregation tunnel, together forming a virtual network dedicated to that UAV. The aggregation server is responsible for handling the logical aggregation tunnel connections and data forwarding for all UAVs, while the ground service platform is responsible for the specific service operations. Crucially, the aggregation server and all ground service platforms are interconnected on the ground intranet, with the aggregation server acting as the sole gateway between the ground intranet and all UAV virtual networks.

[0049] As a preferred embodiment of the present invention, the multipath transmission protocol includes the multipath QUIC protocol, preferably the XQUIC protocol.

[0050] As a preferred technical solution of the present invention, the multi-link aggregation gateway realizes the conversion between the service type corresponding to each port of the UAV source IP address and its corresponding virtual IP based on the preset address conversion rules. The address conversion rules define the bidirectional mapping relationship between each port of the UAV real IP address and its corresponding virtual IP associated with the service type.

[0051] As a preferred technical solution of the present invention, the aggregation server completes virtual IP registration and binding in the following manner:

[0052] The aggregation server resolves the virtual IP disguised by the multi-link aggregation gateway from the logical aggregation tunnel and registers the virtual IP and associates it with the logical aggregation tunnel from which it originated.

[0053] Based on the virtual IP, the aggregation server uses a preset virtual identity automatic derivation algorithm to associate additional virtual IPs for the other unassociated service types of the drone, and associates the additional virtual IPs with the logical aggregation tunnel.

[0054] As a supplement to the above technical solution, the configuration script of the multi-link aggregation gateway pre-assigns corresponding virtual IPs for different service types. Each virtual IP is associated with another virtual IP through an automatic virtual identity derivation algorithm. The automatic virtual identity derivation algorithm is a preset mapping rule, including odd-even pairing, fixed offset, table lookup allocation, or hash-based calculation, etc.

[0055] like Figure 2 The diagram shows a flowchart of a multi-service communication method for unmanned aerial vehicles (UAVs) based on virtual identity mapping. This method mainly includes three core stages: tunnel construction and virtual IP identity registration, downlink data communication, and uplink data communication. The following section provides a detailed explanation of each stage in conjunction with system components and network protocols.

[0056] Phase 1: Connection Establishment, Tunnel Construction, and Virtual IP Identity Registration

[0057] The goal of this phase is to establish a secure communication tunnel and assign each drone a fixed, business-isolated "network ID".

[0058] The first step involves multiple network communication modules mounted on the external multi-link aggregation gateway of the drone dialing up to the Internet, enabling each drone to access the public network and private network respectively through its own external multi-link aggregation gateway.

[0059] First, the external multi-link aggregation gateway mounted on the drone (in this embodiment, it is a hardware device implemented based on the BananaPi BPI-R4 development board) is powered on and started. This external multi-link aggregation gateway automatically initializes its multiple network communication modules (e.g., a public network 4G module and a private network 4G module). After initialization, the multiple network communication modules successfully connect to their respective networks (private network and several public networks). At this point, the aggregation gateway obtains multiple independent physical links that can be used to establish a logical aggregation tunnel in the next step.

[0060] The second step is to construct a logical aggregation tunnel between the external multi-link aggregation gateway and the aggregation server. This process is achieved through a multipath transport protocol running on both the multi-link aggregation gateway and the aggregation server, with the aim of binding multiple physical links into a single, logical, and reliable communication channel.

[0061] In a preferred embodiment of the present invention, the multipath transmission protocol may be a multipath QUIC protocol, namely MPQUIC protocol or a variant thereof (such as XQUIC protocol).

[0062] Once the logical aggregation tunnel is successfully established, it manifests as a virtual network interface (e.g., tun0) at the operating system level of the multi-link aggregation gateway. This shields upper-layer applications from the complexity of the underlying physical links and provides a unified data transmission and reception entry point for subsequent virtual IP identity mapping.

[0063] The third step involves the system completing the registration and binding of the drone's virtual network identity through a process that combines address masquerading driven by uplink data with dynamic learning by the aggregation server.

[0064] The process is triggered by the first uplink data packet sent by the drone. Specifically, this data packet (e.g., a heartbeat packet from the drone with a private IP of 192.168.1.111) is first captured by the policy routing rules of the external multi-link aggregation gateway and forcibly redirected to the virtual network interface (tun0) created in the previous step, which serves as the unified entry point for the logical aggregation tunnel.

[0065] Before data packets are transmitted through the virtual network interface of the logical aggregation tunnel, the external multi-link aggregation gateway executes its preset Source Network Address Translation (SNAT) rules. These rules define a bidirectional mapping between each port of the drone's real IP address and the corresponding virtual IP associated with the service type. These virtual IP addresses (e.g., the virtual IP 10.8.0.2 for control and 10.8.0.3 for monitoring) have been pre-assigned in the drone's configuration script. In this embodiment, for control-related services from the drone, the SNAT rule explicitly requires that its source IP address be disguised as the specified control virtual IP, i.e., 10.8.0.2. Therefore, when the drone sends its first uplink data packet, its source IP (192.168.1.111) is disguised as the virtual IP 10.8.0.2 by the SNAT rule. This address-masked data packet, while carrying the original information, also serves as signaling for virtual identity registration with the aggregation server.

[0066] Subsequently, the data packet with the spoofed source IP address was sent to the aggregation server through the logical aggregation tunnel. The aggregation server unpacked the packet from the logical aggregation tunnel and resolved its source IP to 10.8.0.2. The aggregation server then queried its internal global routing table and found that this IP was appearing for the first time. Therefore, it performed a binding operation: directly associating the primary virtual IP (10.8.0.2) with the logical aggregation tunnel from which it originated, and recording this mapping relationship in the global routing table. This binding action ensures that all future data sent to IP 10.8.0.2 will be accurately routed back to the drone through this logical aggregation tunnel.

[0067] After the primary virtual IP identity is bound, the aggregation server immediately executes an automatic virtual identity derivation algorithm. This algorithm generates one or more additional virtual IPs for the drone based on a pre-defined global IP allocation rule within the entire communication system. Each additional virtual IP is associated with a service type not associated with the drone. In this embodiment, the global IP allocation rule is 'odd-even pairing,' meaning an even-numbered IP is used to derive an adjacent odd-numbered IP (10.8.0.3) as the second virtual IP. As a supplement to the above scheme, the global IP allocation rule can also be a fixed offset (e.g., IP+100), table lookup allocation, or hash-based calculation, etc.

[0068] At this point, the identity binding is complete. The drone now possesses a fixed and unique dual IP identity in the communication system: 10.8.0.2 for high-priority control flow and 10.8.0.3 for video data stream. These two virtual IPs, together with the virtual IP (e.g., 10.8.0.1) preset by the cloud aggregation server's script, form a virtual local area network. Since the ground platform can access the aggregation server, which acts as a gateway, through the ground intranet, the ground platform can maintain stable and isolated communication with the remote drone through these two fixed virtual IP addresses, without needing to worry about any changes to the underlying physical link.

[0069] Phase Two: Downlink Data Processing Flow (Ground Platform → UAV)

[0070] This process is triggered when the control or monitoring platform in the ground network needs to actively send instructions or request data to the drone.

[0071] The first step is to aggregate the routing and tunnel forwarding on the server side.

[0072] The ground platform first generates a standard IP packet, the destination address of which is set to a business virtual IP address that the UAV has registered in the system. For example, the destination address of a flight control command is the control virtual IP 10.8.0.2:5001, and the destination address of a video streaming request is the monitoring virtual IP 10.8.0.3:8554.

[0073] Once the standard IP packet arrives at the aggregation server, the server queries its internal global routing table. Using this table, the aggregation server can accurately locate the logical aggregation tunnel associated with the target virtual IP, established in the previous stage. Subsequently, the aggregation server forwards the standard IP packet directly through this logical aggregation tunnel to the multi-link aggregation gateway carried by the target drone.

[0074] The second step is address translation and data restoration at the external multi-link aggregation gateway.

[0075] The multi-link aggregation gateway receives and reconstructs standard IP packets from the logical aggregation tunnel. At this point, the destination address of the packet is still a virtual IP (e.g., 10.8.0.2:5001). This packet triggers a pre-configured Target Network Address Translation (DNAT) rule on the multi-link aggregation gateway. This rule translates the destination virtual IP of the standard IP packet into the drone's real IP address and port. In this embodiment, the DNAT rule modifies the destination address from the virtual IP 10.8.0.2:5001 to the drone's real address 192.168.1.111:5001. Finally, the multi-link aggregation gateway delivers this correctly translated packet to the drone's network protocol stack for subsequent processing.

[0076] Phase 3: Uplink Data Processing Flow (Drone → Ground Platform)

[0077] This process is triggered when a drone needs to transmit status data, video, or other information back to a ground platform.

[0078] The first step is drone data forwarding.

[0079] The drone generates a standard uplink IP packet. According to the response mechanism of the network protocol stack, the destination address of the packet is the real IP and port of the ground platform on the ground intranet, while the source address is the real IP of the drone (such as 192.168.1.111).

[0080] The second step involves routing strategies and address masquerading on the external multi-link aggregation gateway.

[0081] After the uplink IP data packet arrives at the multi-link aggregation gateway, it will undergo a set of routing and address translation processes, which is one of the key aspects of this solution:

[0082] First, uplink IP packets undergo an exemption routing rule check. This rule has the highest priority and states that all traffic destined for the aggregation server's public IP address (i.e., traffic maintaining communication within the logical aggregation tunnel itself) must be sent directly through the physical link and must not enter the logical aggregation tunnel. This step is fundamental to avoiding routing loops and ensuring the stable existence of the logical aggregation tunnel.

[0083] For all traffic that is not exempted, the multi-link aggregation gateway applies a policy routing rule. This rule, based on characteristics such as the source IP address of the uplink IP packet (192.168.1.111), forcibly redirects it to the virtual network interface that serves as the entry point for the logical aggregation tunnel. This step ensures that all service data originating from the drone, regardless of its final destination, is guided into the logical aggregation tunnel for transmission.

[0084] Finally, before the uplink IP packets are sent into the logical aggregation tunnel for transmission, the multi-link aggregation gateway executes preset Source Network Address Translation (SNAT) rules. The gateway determines the service type by checking the original destination port or protocol type of the uplink IP packets and dynamically masquerades the source IP address from the real 192.168.1.111 to the corresponding virtual IP address. For example, if the data is a video stream destined for a monitoring platform, its source IP is masqueraded as the monitoring virtual IP 10.8.0.3; if it is a response to a control command, it is masqueraded as the control virtual IP 10.8.0.2.

[0085] The third step is logical aggregation tunnel transmission and aggregation server-side routing.

[0086] After being masqueraded, the IP packets are ultimately sent out through a logical aggregation tunnel. The aggregation server receives and reassembles data from multiple physical links, restoring the original data packet with a virtual IP (such as 10.8.0.3) as its source IP and the ground platform's IP as its destination IP. The aggregation server then routes this data packet within its local ground network, ultimately delivering it accurately to the target monitoring platform. From the monitoring platform's perspective, it always perceives itself as communicating with a fixed IP address 10.8.0.3, completely unaware of the complexity of the drone's underlying physical network and the internal address translation process.

[0087] Finally, it should be noted that the above embodiments are intended to illustrate the technical solutions of the present invention and do not constitute any limitation on the present invention. Those skilled in the art should fully understand that modifications to the technical solutions described in the foregoing embodiments or equivalent substitutions for any part or all of the technical features are entirely feasible. Such modifications or substitutions, as long as they do not depart from the scope of protection defined by the claims of the present invention, should be considered reasonable extensions of the present invention.

Claims

1.A method for multi-service communication of a UAV based on virtual identity mapping, characterized in that, The unmanned aerial vehicle is connected to the public network and the private network through the externally mounted multi-link aggregation gateway carried by the unmanned aerial vehicle to realize the connection of each physical link. The multi-link aggregation gateway and the aggregation server construct a logical aggregation tunnel for multiple physical links through a multi-path transmission protocol. The multi-link aggregation gateway performs IP address spoofing on the uplink data packet sent by the unmanned aerial vehicle. On this basis, the aggregation server performs dynamic IP learning, binds a group of virtual IPs to the unmanned aerial vehicle as the virtual network identity of the unmanned aerial vehicle, and associates the group of virtual IPs with the logical aggregation tunnel. The unmanned aerial vehicle sends an uplink data packet, and the multi-link aggregation gateway spoofs the source IP address of the uplink data packet into a first virtual IP corresponding to the business to which the data packet belongs through a preset address conversion rule and sends the data packet to the aggregation server through the logical aggregation tunnel. The aggregation server parses the first virtual IP from the logical aggregation tunnel and associates the first virtual IP with the logical aggregation tunnel from which the first virtual IP originates. Based on the first virtual IP, the aggregation server associates an additional virtual IP with the business type to which the unmanned aerial vehicle is not associated through a preset virtual identity automatic derivation algorithm, and associates the additional virtual IP with the logical aggregation tunnel. The multi-link aggregation gateway and the aggregation server communicate in the logical aggregation tunnel through the virtual IP. 2.The method of claim 1, wherein, The configuration script of the multi-link aggregation gateway pre-allocates virtual IPs corresponding to different business types, and each virtual IP is associated through the virtual identity automatic derivation algorithm. 3.The method of claim 1, wherein, In uplink communication, after the uplink data packet arrives at the multi-link aggregation gateway, it is first checked by the preset exemption routing rule of the multi-link aggregation gateway. 4.The method of claim 1, wherein, The multi-path transmission protocol includes a multi-path QUIC protocol. 5.A virtual identity mapping based multi-service communication system for unmanned aerial vehicles, characterized in that, The unmanned aerial vehicle, the multi-link aggregation gateway, and the aggregation server are included. The unmanned aerial vehicle is connected to the public network and the private network through the externally mounted multi-link aggregation gateway carried by the unmanned aerial vehicle to realize the connection of each physical link. The multi-link aggregation gateway and the aggregation server construct a logical aggregation tunnel for multiple physical links through a multi-path transmission protocol. The multi-link aggregation gateway and the aggregation server communicate in the logical aggregation tunnel through the virtual IP. The aggregation server is configured to implement the virtual IP registration and associate a set of virtual IPs bound to a service type with the unmanned aerial vehicle based on the virtual IP, and associate the set of virtual IPs with the logical aggregation tunnel; the aggregation server completes the virtual IP registration and association based on the following manner: the aggregation server parses the virtual IP disguised by the multi-link aggregation gateway from the logical aggregation tunnel and registers the virtual IP and associates it with the logical aggregation tunnel from which the virtual IP is derived; The aggregation server automatically derives additional virtual IPs for the unmanned aerial vehicle based on the virtual IP and a preset virtual identity automatic derivation algorithm for the remaining service types not associated with the unmanned aerial vehicle, and associates the additional virtual IPs with the logical aggregation tunnel; All virtual IPs associated with the logical aggregation tunnel collectively constitute a virtual network of the unmanned aerial vehicle, and the multi-link aggregation gateway and the aggregation server realize virtual network communication of the unmanned aerial vehicle through the logical aggregation tunnel based on the virtual IP as a virtual network identity. 6.The virtual identity mapping based multi-service communication system for UAVs according to claim 5, wherein, The multi-link aggregation gateway disguises the source IP address of the unmanned aerial vehicle as a virtual IP corresponding to the service based on a preset address conversion rule, and the address conversion rule defines a bidirectional mapping relationship between each port of the real IP address of the unmanned aerial vehicle and the respective corresponding virtual IP associated with the service type. 7.The virtual identity mapping based multi-service communication system for UAVs according to claim 5, wherein, The configuration script of the multi-link aggregation gateway pre-allocates respective corresponding virtual IPs for different service types, and each virtual IP is associated through the virtual identity automatic derivation algorithm, and the virtual identity automatic derivation algorithm is a preset mapping rule, including odd-even pairing, fixed offset, table lookup allocation, or hash calculation. 8.The virtual identity mapping based multi-service communication system for UAVs of claim 5, wherein, The multi-path transmission protocol includes a multi-path QUIC protocol.

Images